last executing test programs: 4m55.044213537s ago: executing program 32 (id=472): openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mknod$loop(&(0x7f00000004c0)='./cgroup.cpu/cpuset.cpus\x00', 0x200, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0x3}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffff001}, 0x18) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, r1, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 3m58.58898314s ago: executing program 33 (id=732): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000000002118d96ece970011240df502de59b0400000037ce4f48f4ba66be06000000032a53a287869f4b91b45c019ed8441233a510854c56ece148144df517730e976617150f4a632f0136d78b3505fe317c57de53f7234d905b24d5d56a175900f87787dd02bd1588c7bedcf639b308acb54f716c8bb56424a9b0c66703dac0adee24110e2b69d3470ad1ca333623b1fc362eee02b22c69422a8acdd7f2d467bac019cac451f0b5e5c733e7b44adf4cd659"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000e60000000000000000f6f02b064d00000000000000000200007f3d5071"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x5, 0x4}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000fc000000000000000000", @ANYRES32=r1], 0x0, 0xa, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xdc5a4c547214467b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180100000000000000000000000000001812"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3b, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000050800"]) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 3m41.192204663s ago: executing program 0 (id=981): socket$nl_netfilter(0x10, 0x3, 0xc) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2801, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="757466383d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c726f6469722c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c73686f72746e616d653d77696e39352c696f636861727365743d757466382c646973636172642c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c6e6f636173652c73686f72746e616d653d77696e6e742c6e6f6e756d7461696c3d302c008cecc803abc0d6e523a56166e79428d9d45f8737ac6ecdf66d90baf6d6e90f4cee6110c1f125e92808e29c273e454e72ea6211a586c5805518e8940c5eb20aeba5fc4f3c1456917a3b86c7f3ae103c4a92db3fb7f6c9a848552c3901fb628e77a74a"], 0xfe, 0x39d, &(0x7f0000000bc0)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1200004, &(0x7f0000000100), 0x1, 0x599, &(0x7f0000000540)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) preadv(0xffffffffffffffff, &(0x7f0000000400)=[{0x0}, {&(0x7f0000003200)=""/4096, 0x1000}], 0x2, 0x6, 0x800) 3m40.639978028s ago: executing program 0 (id=987): unshare(0x2a020400) r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0xa0142, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000001c0)="390000fa461ad7e48489bffa56020013001118680907071200000f0000", 0x1d}], 0x1) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='}\\C\xb8\a') r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r2}, 0x10) socket(0x10, 0x80000, 0x20003) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f00000005c0)) 3m40.464908702s ago: executing program 0 (id=989): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019200)={0x11, 0x4, &(0x7f0000019200)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) io_setup(0x8f0, &(0x7f0000002400)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x2b, 0x81}]}, 0x10) mq_open(&(0x7f00000192c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\x7f\x05\x04\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96g\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xea,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\x15\x05\b/\rp\xa5\x00\xc2\x00\xa7\xaf\x1e\x03\xde\x12\xb0\x064\xb6O\x82(D\xc79\xc6\xfd\x81\xb4\xa3)7\xef\xf6\xcb\xf26\xbb#\xa7\xee5\xef\x16!\x83\xf7\x98\xc6g\"W_z:\xda\n\xe9\xa1\x92\xee\xad\xf0\x99\xf8\xf2\x0eu\xec>p\xbe\x9a\xca\x89B\xd4\x05\xeb.\r\xf1\xbd\xda\n\xc8\x94vI\x00\xb0\xd2\x82\x82\xd5\xa9\xaeO\xe9\xbb]\xc1\x89?\xfb,q#\x10 \xbe]\x1bbp\xbd\xf2\xb1\xc1\xca\xb1\xb2@\x9b\xbf\x13\xd4/\xca\x16\xa8', 0x800, 0x9, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xe4, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="a600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe3e) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) 3m40.056516825s ago: executing program 0 (id=990): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x80040c, &(0x7f0000000580)={[{@orlov}, {@norecovery}]}, 0x1, 0x5e8, &(0x7f0000001200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, 0xee01, &(0x7f0000000000)) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000080)=""/109, 0x6d) lseek(r1, 0x3, 0x1) fremovexattr(r0, &(0x7f0000000100)=@known='system.advise\x00') sendto$l2tp(r1, &(0x7f00000001c0)="d239aeab0ae0b2eceb2fc0fd102ae65b52e549cc80b57de70a0422bae0937141f50f3672d6fee76b8fc83cb185a196a21797dc001d15464401842edc4064327377cc75349fd15d6bc1669a4f0388e528bfbc7b479a01f28a1e3fd06f0e5b20f3e1", 0x61, 0x20040014, &(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, 0x10) getdents64(r1, 0x0, 0x0) 3m39.665934546s ago: executing program 0 (id=993): io_uring_setup(0x6c4b, &(0x7f00000002c0)={0x0, 0x7240, 0x1, 0x2, 0xed}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0009}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0, 0x0, 0x9}, 0x18) r1 = socket(0xa, 0x3, 0xff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) sendmmsg$unix(r1, &(0x7f0000004440)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001600)=[{&(0x7f0000000180)="31c92990f8448924061effca885344e1d27f0cf076e90c9029da492c396ca48d263b9946dcb510fd", 0x28}], 0x1, 0x0, 0x0, 0x95}}], 0x1, 0x40000a0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r3}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRESHEX=r3, @ANYRES32=r3, @ANYRES64=r3], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000080)='./file0\x00', 0xc0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000040)) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) syz_io_uring_setup(0x88f, &(0x7f00000010c0)={0x0, 0xc941, 0x0, 0x3, 0xbfdffffc}, &(0x7f0000000200), &(0x7f0000000280)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0x5}, 0x100, 0x10000, 0x8, 0x1, 0x9, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="02000000040000000700000002"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={r6, &(0x7f0000000240), 0x0}, 0x20) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7, 0xffffffffffffffff}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10) r10 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r10, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)='/', 0x1}], 0x1}}], 0x2, 0x0) close(r10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x4e22, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) 3m39.219931522s ago: executing program 0 (id=995): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000280)=0x40000000) 3m39.11608869s ago: executing program 34 (id=995): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000280)=0x40000000) 2m28.474104679s ago: executing program 3 (id=1700): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f00000001c0)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffd, @loopback, 0x6324}, 0x1c) sendto$inet6(r1, 0x0, 0x2, 0x0, 0x0, 0x0) 2m28.403746505s ago: executing program 3 (id=1701): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000280)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@bsdgroups}, {@jqfmt_vfsv0}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9e}}, {@acl}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r6}, 0x10) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000180)={0x8c30, 0x1, [{0xb}]}) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) renameat2(r7, &(0x7f0000000480)='./file0\x00', r7, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x26, 0x9, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000500), 0x8}, 0x109a31, 0x1, 0x400, 0x1, 0x8, 0x20005, 0x81, 0x0, 0x0, 0x0, 0x20000005}, 0xffffffffffffffff, 0x7fffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x0) recvmsg(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) close(r9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c"], 0x1c}}, 0x20040840) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, &(0x7f0000000000)={r12, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) 2m28.225236479s ago: executing program 3 (id=1704): r0 = syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410884, &(0x7f00000001c0)={[{@nouid32}, {@acl}]}, 0x1, 0x77c, &(0x7f0000001900)="$eJzs3ctrXFUYAPDvTpKmTWsTQdC6CggaKJ2YGlsFFxUXIlgo6Np2mExDzSRTMpPShIAWEVwoqLgQdNO1j7pz62Or/4ULsVRNixVBidzJ3HbaTNIknWSi8/vBTc65jznnm/s4Z+Ye7gTQtYbTP7mIQxHxfhIx2JifRERfPdUbcWJlvZtLi8V0SmJ5+ZXfkvo6N5YWi9G0TWp/I/NIRHz3dsTh3Opyq/MLU4VyuTTbyI/Wps+PVucXjpybLkyWJkszx8bGx48ef/r4sfbF+sePCweufvDiE1+e+Outh6+8930SJ+JAY1lzHO0yHMON96QvfQvv8EK7C+uwpNMVYEvSU7Nn5SyPQzEYPfUUAPB/9kZELAMAXSbR/gNAl8m+B7ixtFjMps5+I7Gzrj0fEXtX4s/ub64s6W3cs9tbvw86cCO5485IEhFDbSh/OCI+/fq1z9Mptuk+JEArb16KiDNDw6uv/8mqMQub9eQ6y/Y0/g/fNd/1D3bON2n/55lW/b/crf5PtOj/9Lc4d7finuf/vjYUso60//dc09i2m03xNwz1NHIP1Pt8fcnZc+VSem07GBEj0def5sfWKWPk+j/X756XvXq9//f3Sv/v9w9f/ywtP/3ftOYvvf13bjtRqBXuN+7MtUsRj/a2ij+5tf+TNfq/pzZYxkvPvvPJWsvS+NN4s2l1/NEYnbQ9li9HPN5y/98e0ZasOz5xtH44jGYHRQtf/fTxwFrlN/f/0yktP/sssBPS/T+wfvxDSfN4zermy/jh8uC3ay27d/ytj/89yav1dNaPuFio1WbHIvYkL6+ef/T2tlk+Wz+Nf+Sx1uf/esd/+pnwzAbj77366xfvHtxq/NsrjX9iU/t/84krN6d61ip/Y/t/vJ4aaczZyPVvoxW8n/cOAAAAAAAAAAAAAAAAAAAAAAAAADYqFxEHIsnlb6VzuXx+5Te8H4qBXLlSrR0+W5mbmYj6b2UPRV8ue9TlYNPzUMcaz8PP8kfvyj8VEQ9GxEf9+5LsOYoTHY4dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADL71/j9/9TP/Z2uHQCwbfZ2ugIAwI7T/gNA99H+A0D30f4DQPfR/gNA99H+AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsM1OnTyZTst/Li0W0/zEhfm5qcqFIxOl6lR+eq6YL1Zmz+cnK5XJcilfrEzf6/XKlcr58ZiZuzhaK1Vro9X5hdPTlbmZ2ulz04XJ0ulS345EBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACbU51fmCqUy6VZiS0klu9r82SXRNGGRE/jcNot9dnRRLI7qtHmRIcvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/Ef8GAAD//+GAI2c=") r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000200000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) fallocate(r3, 0x0, 0x0, 0x1001f3) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r4, &(0x7f0000004200)='t', 0x1) 2m28.002772557s ago: executing program 3 (id=1708): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) 2m27.792011704s ago: executing program 3 (id=1710): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) (async) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x11, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x600, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x4c, &(0x7f0000000400)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4a22, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, @in={0x2, 0x4e23, @loopback}]}, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000980)='kfree\x00', r6}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x50}, 0x85) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x50}, 0x85) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x880) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x880) inotify_init1(0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r8}, 0x10) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f00000001c0)='kfree\x00'}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f00000001c0)='kfree\x00'}, 0x18) 2m27.363801278s ago: executing program 3 (id=1719): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect(0x1, 0xa60, &(0x7f0000000780)={{0x12, 0x1, 0x310, 0x78, 0xdd, 0x95, 0xff, 0x19d2, 0x1111, 0x4d5a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa4e, 0x3, 0xf9, 0x3, 0x10, 0xee, [{{0x9, 0x4, 0x84, 0xb, 0x3, 0xff, 0xff, 0xff, 0x7, [@generic={0xd8, 0x30, "76c2000101de3eaa5c860036b5d84374a2e42d2b490cf3ee33e6042efe814001a92f958339ff98893d9f4fabb90aa20385b63c6e57188d0c012849fdefb6daa673ab83d308c32bd2ed889870656baf76f5722d7c4f4bc4175b3083e7591a500a74c31aab9afe843aea49d9a7435528bc8ecc7366304b374c13ee105f7b49c10b57d5d8637c02fd2d15688b539f24c9ce2c503eedb9c8b6763cb9c6e125635b3a0c48f21f75734481ac5399d71b075403816495ae4ee63d63739fd66329cffecf73794e4fe985e27561520bebd303615c7668407beb48"}], [{{0x9, 0x5, 0xa, 0x0, 0x200, 0x3, 0x7, 0x7, [@generic={0x8c, 0xc, "eb42c53f93c1229f6f6ad55e67f164580ca8f0a2c6b7677b0bd0250edf3091f4680b40867379ff9ca5c6e5a91cc7976b221368bbe5bd985cfcd567f701e5848f247b060ef08ffcb4bb0b3eaac30193371e4f4a9353ed92537969cb4baa0ea447b43e3d49ef67d70358bc9e4b76fc0086e67d0b5191a679ba8ba095b00307e542e5dbc330a5a6d340e802"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x4, 0x9, 0x1, [@generic={0x15, 0x11, "ef4b743ffb66f3abf6296239fcd5ba055f1040"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x400, 0x9, 0x40, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x87, 0x9, 0x6}, @generic={0x11, 0x25, "563d3e637d29a7e044a92a2947b2dc"}]}}]}}, {{0x9, 0x4, 0x2e, 0xfb, 0x5, 0x3, 0xcf, 0x2, 0x0, [@uac_as={[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xff, 0x3, 0x9, 0x7, "38596914"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x9, 0x7, 0x5, "9d4f"}]}], [{{0x9, 0x5, 0x9, 0x3, 0x3ff, 0xb, 0x1, 0x0, [@generic={0xcc, 0x0, "48aa59f725718871810feb37d334769a4ebc86682aefce3ea419c3f7fe9c7d11d7f0555a76e8867d8406a6a4c3e3bf0efc009e2553a770b9899afa89acae56cad01a29dfd0423e4911bb739e3c850938c732e70b20ae669bb9306fd915dd6459dc9be75fcfc0abb54ae78c2aee2e1ef1f12e2d68991d9dd0396097b5f88b9af748f448395d04a5237cc6f1c87d446e7929f8bb2c2a69ccaf8b3cbddd7b07e2471da06594ea81cc4f9ff22800137623511885970ec6cb083c1424647b04a161137a8436939dec516e3513"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x40, 0xfe, 0x3, 0xc, [@generic={0x5f, 0xd, "afefd50d47d5a791c76c2fa4f8511825b5342cb59ee743760d38fc656536d0348a05b82e3b826787632da235f0347599dce2eccd0234488ce4e8da4911f8c15e837e0aed23b015756687b68c3fbb03ab779ecc80d64ddd53fc9e10032c"}, @generic={0x5c, 0x0, "46aa2420f91f4c84da04d19b27ad7227979bf0bb04dfbac5e4539601809b00bf268890e2d9151a53672a3e5422fde079339dc86c33f8935b5125475bdd14832bf217576c4a95085f400616c325cf08fcc646a3b01baf022c3138"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x10, 0x8b, 0x10, 0x4, [@generic={0x7, 0x22, "7bfe0f861c"}]}}, {{0x9, 0x5, 0xd, 0x3, 0x200, 0x3, 0x4, 0x9, [@generic={0xfb, 0x24, "b53d785b716dc4ab0af80025ca21d5438fa6c46ba763abcdd1fe2f555a14fb1da6723a2bd2d9131758f3a5ac8b5836b9ae5b019f8296e3ba8277286abfc162c1cff9e019c86eb277d8d0bae8470eaaa0ad648ab34808c1aeb55cca199ba6f708299d999bb7501f581adf9abb48dbd3ec04f39fd9ccc6351e96386ecddcd0101f5b3b1d7e04a1a663e96b4ff0d516b979bad1ae0dac98db03e04b1f370313bc3b226885a5eed0f7c92e9d60a511c8f06b60b47d5fdeff77d5dc24080af74ae98b00f9328c5f242c3a0aa31892fc459fa1c6b2d4f3f947be2d7aa394ecde462288a99190fda77bdd2738bf6c88af150c138afadccfd3780d28e1"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x0, 0x92, 0x2, [@generic={0xf3, 0x7, "4e5869e07cf833a0bafe65342cf13889dd8b281345e72febc835ca66257280590a590ff536a6fe5a5fb7f0c8bd5f948b8e43a28efffc90089d7cfa4d7f61825576b3a2f2c68a3fe774be5f96f8d3d751980c5c3efad223a1707e5ada8167fee8eb11c4207a8d7cbcb8943753dec552b6b61922181c9aa0fd0e8eca14fee0b6788ca2f834be7d26ac7919b150be9f1bd51416e94b4d9fc5d90f16a1ee4f9680f295a2f43cfbdc2ad1069713c69729e7c5bd2f3c220179cd8d1e4ab4caec7d2dad50adc9e01bd5d2d3737a5cf5e7d68d7f3a9848d0046ea480d26ef57ea50a02910e55122a4e20acd8cf3f54cb929b59ddd3"}]}}]}}, {{0x9, 0x4, 0x4, 0x0, 0x6, 0x56, 0x97, 0x57, 0x1, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0xfffe}, {0xd, 0x24, 0xf, 0x1, 0x8c4, 0x3, 0x2, 0x4}, {0x6, 0x24, 0x1a, 0x80, 0x6}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x6}, @mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x4, 0x2}, @acm={0x4, 0x24, 0x2, 0x6}, @mbim={0xc, 0x24, 0x1b, 0x2, 0xbf3, 0x1, 0x3, 0x9, 0xff}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x2, 0x7, 0x7}]}], [{{0x9, 0x5, 0x15, 0x10, 0x40, 0xae, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x80}]}}, {{0x9, 0x5, 0xf, 0x1, 0x10, 0xf, 0x30, 0x7, [@generic={0x99, 0x22, "9d92a4c65e94612779fcea5e2ce007bbe683335463dfa783c23a759b13948dcf9121f210784476e3b84e29fd26ae39d0cc62239585c8161603609b8e5d0f2d3ad454977a9f49e753ca592ab1abb03779fcb8afbc6c207925bbca04cf0df9324d60457afc939abf41e9d1eca2f976bd4ffed80b7775c9f8b6a8106c3280edfbc00187fdb02e9af5c520746fca903cd30e10d41257bb06e8"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x5, 0x6c, 0x1, [@generic={0xab, 0x11, "5342b2e988f3ca6c89a22176599161853f780b11871bbbd0f7f5a713e07d8cfefe963300d155e0e75fff2619b5d4fa8460c7194830f4eeb725c108501b836d8b198bec2a5f3db06e76b7b1a4d2800543636bb3a1ba6250d3038095daf4061a3512f7cd85e993d4e01e44fa7c5596adf0f8097b645c105c8b584849e588382197f3a45443d35e7178a7af1636c2db30dae229a2c894b1282be294358319fc4b01144e03bd66b07ac8b1"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x7}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x5, 0x0, 0x4, [@generic={0xc9, 0x23, "f502d26dc987509b0d4386880c48129d218c27f66759bb0ed54718a2ed7c7f2b831510de768982f9d45ffd053f4e6aa2c3dfdcdf12702ca9c43a866c31d59beef454969b3533b913efdd76ef2d136599651a2996770d37bbbe97dee54122536ee2f183f3c20bf7aba6f1a7317cd4bc9b14f709ba0332155e93864dc3882a71b0a019a671382d5d7bc01558643a9c693211aad82dfa9e49b9d222fec145244ba01e9b3efc4cd1460a9ef342fdb0be3486849f5f9ee0eb2e6f57c5356f2bd5f65bfc3f5b387886bf"}, @generic={0xa5, 0x2, "1c09e9419904dea7589eb1f4c833c5b146172f96eb5eae5958ca0db61806f710552d87d2801bce10aac501e775b7a4aa0d4cbcfe8cc7597af74d9cc85f95221dbeacf2ba822a36a7c9c1c80d8b58194245ea81d2a1f3fbf47a50be190544e6f23c7a81ee1b56ec537bb07d706a37c03c6662c566d990410a226fe4aff636c1116ffc0528a9f3f03aa12b7a1c767bd7e64c96b757c80e3c2c4ea2bdf119d30fe01b51d5"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x2, 0x9, 0x2, [@generic={0xab, 0x24, "62423022048fa093e56239339c32e3ffb914599d6fd388f7f945a6ec64e84e8f2db471934f5ab976af89ca4921b0e3dd0f0c56a2e0132a463ab38f41a9fdb6a2ab0b7b07551fb0b59a386e6fafa1f27d157a2222a1d4f447a2b82bcf2daa733ff276b7f7a33d5245d7aff99c649901e544f9c37e27e188dd174f99cd4cd6e06d26b8aaedaf7b66991460aa71217c13a2344adb5196831561bfa81161e0bae3d008b7d5e249e13fc7ea"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x0, 0xff, 0x4, [@generic={0xdc, 0xb, "f50771cf73f230438c47e4b10228bf8d7407d8bdadbe22c94b0196ba5fde95523a643161b391e144e53b9202b3bbbc3072db4e607cfd44543798725b594884e4b797d159c36996fb4312e20590c0f8c8d298b75b7976c64c155c07b16d391b9915cf556c425138ab1d394001eaf38445655e18ba9ee04122b5366661eece642440e1c2a428dad869f7c86b7714ef37a2a081597a2078b4c3dcf5c3d3b58dc703ccedc8e9708bc4bdc195967f50f696e4802004f89fc6302733d5ed16f808ec46f5c98c3118e6ad77eea85efb6af58c42c67a0bbdada713f133ef"}]}}]}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0xa, 0x4, 0x5, 0x30, 0x5}, 0x124, &(0x7f0000000300)={0x5, 0xf, 0x124, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x2, 0x7, 0xf098, 0x3}, @generic={0xef, 0x10, 0xa, "026ceb7bf897d4a0b5390d3e4f77a67d2151900a9553b39dfa02b65ad09c6e8cfe7c0b98df14684f0f2488b3f29ab819f8cb4148fbb466a470c4043e9fde22e8bc6fb0c39cb4eafb038ec66e165989237d10379707a20208f7066b0bfb6e8668fe5d77286a3fd364583334d25133af7dbaccfa33b368b53c581624fd570c1c4e0d2fd9c0e0053003e107ac1dd30747003351ab982ef0f2802fdd2461b5cd0d581395a263fcf2676d89d228ca359308e38f1b96c0538802eb4e4446e6aeb46aff9c6f07c77edc4e721ac452e8849c75ea2f004ef727fbfcff4d359c84663415ef136c6409baa2f8b59b5f9d78"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x0, 0xd, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x9, 0x9, 0x1000, 0x1}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x3, 0x1, 0x6, 0xf00, 0x5, [0x47bd0030863e3dd7]}]}, 0x1, [{0xc, &(0x7f0000000080)=@string={0xc, 0x3, "5fe5c75802a64924db70"}}]}) syz_usb_control_io$hid(r0, &(0x7f0000001240)={0x24, &(0x7f00000004c0)={0x40, 0x30, 0xfe, {0xfe, 0x21, "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"}}, &(0x7f0000000600)={0x0, 0x3, 0x60, @string={0x60, 0x3, "f324780918b785863f22914c2cec360ed1296f023d6e5e81bc6d03bd9b4f0805573653645305536682ec1ba0c7332d2c3ce348ae272ee683e8efae3c79098de9c351d3103a217968305f285b2decb82599bd72db18ab9d1315b1fcdfe537"}}, &(0x7f0000000280)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x2, "d81f57a9"}, @local=@item_4={0x3, 0x2, 0x5, "93581a28"}, @global=@item_012={0x2, 0x1, 0x6, "5abc"}, @local=@item_012={0x1, 0x2, 0x5, '<'}]}}, &(0x7f0000001200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x8e, 0x1, {0x22, 0xb03}}}}, &(0x7f0000001440)={0x2c, &(0x7f0000001280)={0x0, 0x13, 0x3f, "23586e18dc0d47522e3a1cfb7c09ee847f39fbe0f1fd6708ac6cb53b1c256b49ecac10b4fd5ef0b8cdb3ae4ad7c457314f73268f799799992441560c1ff9af"}, &(0x7f0000001300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001340)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000001380)={0x20, 0x1, 0x61, "5fc7345a24569b61ccd9f32c038b41411f35cb8dc936b84e99977333ea5cd0c533854e5b917ba48584dd2a76449e641d408a50d39ab880e04c13400b8ec1bf422d7580308dcc0dca1e611581b9caf9c9d65bb3224d82d60ef340abb34c41e75de7"}, &(0x7f0000001400)={0x20, 0x3, 0x1, 0xff}}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x756}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) 2m13.062871344s ago: executing program 35 (id=1719): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect(0x1, 0xa60, &(0x7f0000000780)={{0x12, 0x1, 0x310, 0x78, 0xdd, 0x95, 0xff, 0x19d2, 0x1111, 0x4d5a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa4e, 0x3, 0xf9, 0x3, 0x10, 0xee, [{{0x9, 0x4, 0x84, 0xb, 0x3, 0xff, 0xff, 0xff, 0x7, [@generic={0xd8, 0x30, "76c2000101de3eaa5c860036b5d84374a2e42d2b490cf3ee33e6042efe814001a92f958339ff98893d9f4fabb90aa20385b63c6e57188d0c012849fdefb6daa673ab83d308c32bd2ed889870656baf76f5722d7c4f4bc4175b3083e7591a500a74c31aab9afe843aea49d9a7435528bc8ecc7366304b374c13ee105f7b49c10b57d5d8637c02fd2d15688b539f24c9ce2c503eedb9c8b6763cb9c6e125635b3a0c48f21f75734481ac5399d71b075403816495ae4ee63d63739fd66329cffecf73794e4fe985e27561520bebd303615c7668407beb48"}], [{{0x9, 0x5, 0xa, 0x0, 0x200, 0x3, 0x7, 0x7, [@generic={0x8c, 0xc, "eb42c53f93c1229f6f6ad55e67f164580ca8f0a2c6b7677b0bd0250edf3091f4680b40867379ff9ca5c6e5a91cc7976b221368bbe5bd985cfcd567f701e5848f247b060ef08ffcb4bb0b3eaac30193371e4f4a9353ed92537969cb4baa0ea447b43e3d49ef67d70358bc9e4b76fc0086e67d0b5191a679ba8ba095b00307e542e5dbc330a5a6d340e802"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x4, 0x9, 0x1, [@generic={0x15, 0x11, "ef4b743ffb66f3abf6296239fcd5ba055f1040"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x400, 0x9, 0x40, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x87, 0x9, 0x6}, @generic={0x11, 0x25, "563d3e637d29a7e044a92a2947b2dc"}]}}]}}, {{0x9, 0x4, 0x2e, 0xfb, 0x5, 0x3, 0xcf, 0x2, 0x0, [@uac_as={[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xff, 0x3, 0x9, 0x7, "38596914"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x9, 0x7, 0x5, "9d4f"}]}], [{{0x9, 0x5, 0x9, 0x3, 0x3ff, 0xb, 0x1, 0x0, [@generic={0xcc, 0x0, "48aa59f725718871810feb37d334769a4ebc86682aefce3ea419c3f7fe9c7d11d7f0555a76e8867d8406a6a4c3e3bf0efc009e2553a770b9899afa89acae56cad01a29dfd0423e4911bb739e3c850938c732e70b20ae669bb9306fd915dd6459dc9be75fcfc0abb54ae78c2aee2e1ef1f12e2d68991d9dd0396097b5f88b9af748f448395d04a5237cc6f1c87d446e7929f8bb2c2a69ccaf8b3cbddd7b07e2471da06594ea81cc4f9ff22800137623511885970ec6cb083c1424647b04a161137a8436939dec516e3513"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x40, 0xfe, 0x3, 0xc, [@generic={0x5f, 0xd, "afefd50d47d5a791c76c2fa4f8511825b5342cb59ee743760d38fc656536d0348a05b82e3b826787632da235f0347599dce2eccd0234488ce4e8da4911f8c15e837e0aed23b015756687b68c3fbb03ab779ecc80d64ddd53fc9e10032c"}, @generic={0x5c, 0x0, "46aa2420f91f4c84da04d19b27ad7227979bf0bb04dfbac5e4539601809b00bf268890e2d9151a53672a3e5422fde079339dc86c33f8935b5125475bdd14832bf217576c4a95085f400616c325cf08fcc646a3b01baf022c3138"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x10, 0x8b, 0x10, 0x4, [@generic={0x7, 0x22, "7bfe0f861c"}]}}, {{0x9, 0x5, 0xd, 0x3, 0x200, 0x3, 0x4, 0x9, [@generic={0xfb, 0x24, "b53d785b716dc4ab0af80025ca21d5438fa6c46ba763abcdd1fe2f555a14fb1da6723a2bd2d9131758f3a5ac8b5836b9ae5b019f8296e3ba8277286abfc162c1cff9e019c86eb277d8d0bae8470eaaa0ad648ab34808c1aeb55cca199ba6f708299d999bb7501f581adf9abb48dbd3ec04f39fd9ccc6351e96386ecddcd0101f5b3b1d7e04a1a663e96b4ff0d516b979bad1ae0dac98db03e04b1f370313bc3b226885a5eed0f7c92e9d60a511c8f06b60b47d5fdeff77d5dc24080af74ae98b00f9328c5f242c3a0aa31892fc459fa1c6b2d4f3f947be2d7aa394ecde462288a99190fda77bdd2738bf6c88af150c138afadccfd3780d28e1"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x0, 0x92, 0x2, [@generic={0xf3, 0x7, "4e5869e07cf833a0bafe65342cf13889dd8b281345e72febc835ca66257280590a590ff536a6fe5a5fb7f0c8bd5f948b8e43a28efffc90089d7cfa4d7f61825576b3a2f2c68a3fe774be5f96f8d3d751980c5c3efad223a1707e5ada8167fee8eb11c4207a8d7cbcb8943753dec552b6b61922181c9aa0fd0e8eca14fee0b6788ca2f834be7d26ac7919b150be9f1bd51416e94b4d9fc5d90f16a1ee4f9680f295a2f43cfbdc2ad1069713c69729e7c5bd2f3c220179cd8d1e4ab4caec7d2dad50adc9e01bd5d2d3737a5cf5e7d68d7f3a9848d0046ea480d26ef57ea50a02910e55122a4e20acd8cf3f54cb929b59ddd3"}]}}]}}, {{0x9, 0x4, 0x4, 0x0, 0x6, 0x56, 0x97, 0x57, 0x1, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0xfffe}, {0xd, 0x24, 0xf, 0x1, 0x8c4, 0x3, 0x2, 0x4}, {0x6, 0x24, 0x1a, 0x80, 0x6}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x6}, @mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x4, 0x2}, @acm={0x4, 0x24, 0x2, 0x6}, @mbim={0xc, 0x24, 0x1b, 0x2, 0xbf3, 0x1, 0x3, 0x9, 0xff}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x2, 0x7, 0x7}]}], [{{0x9, 0x5, 0x15, 0x10, 0x40, 0xae, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x80}]}}, {{0x9, 0x5, 0xf, 0x1, 0x10, 0xf, 0x30, 0x7, [@generic={0x99, 0x22, "9d92a4c65e94612779fcea5e2ce007bbe683335463dfa783c23a759b13948dcf9121f210784476e3b84e29fd26ae39d0cc62239585c8161603609b8e5d0f2d3ad454977a9f49e753ca592ab1abb03779fcb8afbc6c207925bbca04cf0df9324d60457afc939abf41e9d1eca2f976bd4ffed80b7775c9f8b6a8106c3280edfbc00187fdb02e9af5c520746fca903cd30e10d41257bb06e8"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x5, 0x6c, 0x1, [@generic={0xab, 0x11, "5342b2e988f3ca6c89a22176599161853f780b11871bbbd0f7f5a713e07d8cfefe963300d155e0e75fff2619b5d4fa8460c7194830f4eeb725c108501b836d8b198bec2a5f3db06e76b7b1a4d2800543636bb3a1ba6250d3038095daf4061a3512f7cd85e993d4e01e44fa7c5596adf0f8097b645c105c8b584849e588382197f3a45443d35e7178a7af1636c2db30dae229a2c894b1282be294358319fc4b01144e03bd66b07ac8b1"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x7}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x5, 0x0, 0x4, [@generic={0xc9, 0x23, "f502d26dc987509b0d4386880c48129d218c27f66759bb0ed54718a2ed7c7f2b831510de768982f9d45ffd053f4e6aa2c3dfdcdf12702ca9c43a866c31d59beef454969b3533b913efdd76ef2d136599651a2996770d37bbbe97dee54122536ee2f183f3c20bf7aba6f1a7317cd4bc9b14f709ba0332155e93864dc3882a71b0a019a671382d5d7bc01558643a9c693211aad82dfa9e49b9d222fec145244ba01e9b3efc4cd1460a9ef342fdb0be3486849f5f9ee0eb2e6f57c5356f2bd5f65bfc3f5b387886bf"}, @generic={0xa5, 0x2, "1c09e9419904dea7589eb1f4c833c5b146172f96eb5eae5958ca0db61806f710552d87d2801bce10aac501e775b7a4aa0d4cbcfe8cc7597af74d9cc85f95221dbeacf2ba822a36a7c9c1c80d8b58194245ea81d2a1f3fbf47a50be190544e6f23c7a81ee1b56ec537bb07d706a37c03c6662c566d990410a226fe4aff636c1116ffc0528a9f3f03aa12b7a1c767bd7e64c96b757c80e3c2c4ea2bdf119d30fe01b51d5"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x2, 0x9, 0x2, [@generic={0xab, 0x24, "62423022048fa093e56239339c32e3ffb914599d6fd388f7f945a6ec64e84e8f2db471934f5ab976af89ca4921b0e3dd0f0c56a2e0132a463ab38f41a9fdb6a2ab0b7b07551fb0b59a386e6fafa1f27d157a2222a1d4f447a2b82bcf2daa733ff276b7f7a33d5245d7aff99c649901e544f9c37e27e188dd174f99cd4cd6e06d26b8aaedaf7b66991460aa71217c13a2344adb5196831561bfa81161e0bae3d008b7d5e249e13fc7ea"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x0, 0xff, 0x4, [@generic={0xdc, 0xb, "f50771cf73f230438c47e4b10228bf8d7407d8bdadbe22c94b0196ba5fde95523a643161b391e144e53b9202b3bbbc3072db4e607cfd44543798725b594884e4b797d159c36996fb4312e20590c0f8c8d298b75b7976c64c155c07b16d391b9915cf556c425138ab1d394001eaf38445655e18ba9ee04122b5366661eece642440e1c2a428dad869f7c86b7714ef37a2a081597a2078b4c3dcf5c3d3b58dc703ccedc8e9708bc4bdc195967f50f696e4802004f89fc6302733d5ed16f808ec46f5c98c3118e6ad77eea85efb6af58c42c67a0bbdada713f133ef"}]}}]}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0xa, 0x4, 0x5, 0x30, 0x5}, 0x124, &(0x7f0000000300)={0x5, 0xf, 0x124, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x2, 0x7, 0xf098, 0x3}, @generic={0xef, 0x10, 0xa, "026ceb7bf897d4a0b5390d3e4f77a67d2151900a9553b39dfa02b65ad09c6e8cfe7c0b98df14684f0f2488b3f29ab819f8cb4148fbb466a470c4043e9fde22e8bc6fb0c39cb4eafb038ec66e165989237d10379707a20208f7066b0bfb6e8668fe5d77286a3fd364583334d25133af7dbaccfa33b368b53c581624fd570c1c4e0d2fd9c0e0053003e107ac1dd30747003351ab982ef0f2802fdd2461b5cd0d581395a263fcf2676d89d228ca359308e38f1b96c0538802eb4e4446e6aeb46aff9c6f07c77edc4e721ac452e8849c75ea2f004ef727fbfcff4d359c84663415ef136c6409baa2f8b59b5f9d78"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x0, 0xd, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x9, 0x9, 0x1000, 0x1}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x3, 0x1, 0x6, 0xf00, 0x5, [0x47bd0030863e3dd7]}]}, 0x1, [{0xc, &(0x7f0000000080)=@string={0xc, 0x3, "5fe5c75802a64924db70"}}]}) syz_usb_control_io$hid(r0, &(0x7f0000001240)={0x24, &(0x7f00000004c0)={0x40, 0x30, 0xfe, {0xfe, 0x21, "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"}}, &(0x7f0000000600)={0x0, 0x3, 0x60, @string={0x60, 0x3, "f324780918b785863f22914c2cec360ed1296f023d6e5e81bc6d03bd9b4f0805573653645305536682ec1ba0c7332d2c3ce348ae272ee683e8efae3c79098de9c351d3103a217968305f285b2decb82599bd72db18ab9d1315b1fcdfe537"}}, &(0x7f0000000280)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x2, "d81f57a9"}, @local=@item_4={0x3, 0x2, 0x5, "93581a28"}, @global=@item_012={0x2, 0x1, 0x6, "5abc"}, @local=@item_012={0x1, 0x2, 0x5, '<'}]}}, &(0x7f0000001200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x8e, 0x1, {0x22, 0xb03}}}}, &(0x7f0000001440)={0x2c, &(0x7f0000001280)={0x0, 0x13, 0x3f, "23586e18dc0d47522e3a1cfb7c09ee847f39fbe0f1fd6708ac6cb53b1c256b49ecac10b4fd5ef0b8cdb3ae4ad7c457314f73268f799799992441560c1ff9af"}, &(0x7f0000001300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001340)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000001380)={0x20, 0x1, 0x61, "5fc7345a24569b61ccd9f32c038b41411f35cb8dc936b84e99977333ea5cd0c533854e5b917ba48584dd2a76449e641d408a50d39ab880e04c13400b8ec1bf422d7580308dcc0dca1e611581b9caf9c9d65bb3224d82d60ef340abb34c41e75de7"}, &(0x7f0000001400)={0x20, 0x3, 0x1, 0xff}}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x756}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) 53.903227449s ago: executing program 6 (id=2798): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000000}, 0x18) creat(&(0x7f00000000c0)='./file0\x00', 0x48) 53.7653955s ago: executing program 6 (id=2803): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = syz_open_dev$sg(&(0x7f0000000340), 0x276, 0x200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r2) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec96558fbe863cac50580cd8b", 0x17}, {&(0x7f0000000440)="9c74dfbf77", 0x5}], 0x2) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0x5) 53.52031571s ago: executing program 6 (id=2807): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$eJzs3c9rHGUfAPDvbJKmTfu+yQsvaL0YEDRQmpgaWwWFigcRLBT0bLtstqFmky3ZTWlCQIsIXgQVD4JeevLgj3rz6o+r/hcexFI1LVY8SGQ2s+2m2U03abIbzecDk32emdl8n+/Or2d3hpkA9qzh9E8u4nBEvJtEDGbjk4joq5V6I06uzndreamQDkmsrLz8a1Kb5+byUiEa3pM6mFUejIhv34o4klsft7KwOJ0vlYpzWX2sOnNhrLKwePT8TH6qOFWcPT4+MXHsxJMnjm9frr//sHjo2nsvPPbFyT/ffODqO98lcTIOZdMa89iyZ9dWh2M4+0z60o9wjefvO9juknS7AWxJumn2rG7lcTgGo6dWAgD+zV6PiBUAYI9JHP8BYI+p/w5wc3mpUB+6+4tEZ11/LiL2r+ZfP7+5OqU3O2e3v3YedOBmsubMSBIRQ9sQfzgiPv7q1c/SIbbrPCRAG964HBFnh4bX7/+TddcsbNbjG0zbl70O3zU+je8MNHTG12n/56lm/b/c7f5PNOn/9DfZdrei2fa/ZsSBbQiygeufRDzTcG3brYb8M0M9We0/tT5fX3LufKmY7tv+GxEj0def1sc3iDFy468braY19v9+e/+1T9P46eudOXI/9/avfc9kvpq/n5wbXb8c8VBvs/yT28s/adH/Pd1mjBeffvujVtPS/NN868P6/CO7OmlnrFyJeLTp8r9zRVuy4fWJY7XVYay+UjTx5Y8fDrSK37j80yGNX/8u0Anp8h/YOP+hpPF6zcrmY3x/ZfCbVtPunX/z9X9f8kqtXO9HXMpXq3PjEfuSl9aPP3bnvZfyD2el1fnT/Eceab79b7T+p98Jz7aZf++1Xz7fev47K81/clPLf/OFq7eme1rFb2/5T9RKI9mYdvZ/7Tbwfj47AAAAAAAAAAAAAAAAAAAAAAAAAGhXLiIORZIbvV3O5UZHV5/h/f8YyJXKleqRc+X52cmoPSt7KPpy9VtdDjbcD3U8ux9+vX7srvoTEfG/iPig/0BSv4/iZJdzBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC6gy2e/5/6qb/brQMAdsz+bjcAAOg4x38A2Hsc/wFg72nv+N+z4+0AADrH938A2Hsc/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANhhp0+dSoeVP5aXCml98uLC/HT54tHJYmV6dGa+MFooz10YnSqXp0rF0UJ55l7/r1QuX5iI2flLY9VipTpWWVg8M1Oen62eOT+TnyqeKfZ1JCsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2JzKwuJ0vlQqzilsobCyO5rR/UJPtjrtlvZ0tJDsjmZsc6HLOyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf4i/AwAA//+3ACFj") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) creat(&(0x7f00000000c0)='./file0\x00', 0x48) 53.469859464s ago: executing program 6 (id=2809): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1\x00', 0x0, 0x5000, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r1 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x110) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3da, &(0x7f0000000b00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f00000000c0)=0x1) r4 = socket$kcm(0x10, 0x2, 0x0) sync_file_range(r4, 0x7, 0xfffffffffffffc00, 0xb) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="040000000500000803000000e2acaddb"]) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="0912000021d40acd9d0a567b5a020000"], 0x10}}, 0x0) 53.250762742s ago: executing program 6 (id=2810): r0 = socket(0x1000000000000010, 0x80802, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000), 0x4) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00200008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) 51.984277963s ago: executing program 6 (id=2812): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x1000000000}, 0x18) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x80}, 0x50) 51.964961124s ago: executing program 36 (id=2812): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x1000000000}, 0x18) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x80}, 0x50) 47.704896456s ago: executing program 1 (id=2848): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="e0b9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @local, 0x4}, 0x1c) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) io_setup(0x8f0, &(0x7f0000002400)=0x0) r4 = socket$inet6(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x38, 0x14, 0x509, 0x70bd2c, 0x25dfdbfd, {0x2, 0x20, 0x0, 0xcb, r5}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_BROADCAST={0x8, 0x4, @remote}, @IFA_RT_PRIORITY={0x8, 0x9, 0x31}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="2800ff5b", 0x4, 0x0, 0x0, 0x2}]) 47.180318938s ago: executing program 1 (id=2854): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x80}, 0x50) 47.179761468s ago: executing program 1 (id=2855): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/26, 0x1a}, 0x3}], 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000740)='./file1\x00', 0x1000050, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x7, 0x576, &(0x7f0000000140)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000780)="c86865718f13b6253132917de50893b2389f396dfb8d670798a35fc1c88ac2e737a857", 0x23, 0x4fed0) sendfile(r2, r2, 0x0, 0xe3aa6ea) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c04, &(0x7f0000000340), 0x1, 0x779, &(0x7f0000001900)="$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") sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x80) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) r5 = socket$rxrpc(0x21, 0x2, 0x2) unshare(0x2040600) getsockopt(r5, 0x110, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r5, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000900)={'syztnl1\x00', &(0x7f0000000880)={'ip6_vti0\x00', r7, 0x29, 0x0, 0x2, 0xfffffffb, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x20, 0x700, 0x9}}) 46.355895944s ago: executing program 1 (id=2870): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1\x00', 0x0, 0x5000, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r1 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x110) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3da, &(0x7f0000000b00)="$eJzs3M1uG0UcAPD/br5I+uEgcUCFgyUQBAFxHQhQhEThCuICPICVpKXCbarGSLTkkCJOnDggbhz6AjxCVSEkJF6BF0CVKpTmALegtXcdN45Th9pxm/x+0sgzu+PM/LOb1cxmdwI4tsoRcT4ixiJiISJK+fY0T7HRSlm9+5vrS1ub60tJbG9/+ncSSb6t+FlJ/nkiL8ylEel3Ec9tdLe7dv3Gl7V6feVaXq40Ll+trF2/8fqly7WLKxdXrlTfPletLi68U31zIHHejIifXnzl3NiH58/8/GfpzuLk5HTW35P5/s44BqUc5fbvZLfFQTc2YpOj7gAAAH1J87H/eHP8X4qxZq6lFJX1kXYOAAAAGIjt9/NPAAAA4AhLzP0BAADgiCueA7i/ub5UpBE+jnDo7n0QEbM77zZvteMfj6fyOhNDfL+1HBFXX0pKWYohvYcMANDpTjb+ObvX+C+NZzvqTUU0x0PTA26/vKvcPf5J7w64yQdk47/3ImKra/yXFlVmx/LSqeZQcSK5cKm+cjYiTkfEXExMZeXqPm189M8vn/Tal8X/W3LqdJGy9rPPnRrp3fGpB7+zXGvUHiXmTvduRpwZ3yv+pD3+TSJi5hHaGPvm1ru99j08/uHavhXx8p7Hf2flnmT/9YkqzfOhUpwV3f79dqJn+6OOPzv+M/vHP5t0rte0dvA2bn/xx/O99nXOfw5y/k8mnzXzxbzs61qjca0aMZl83L19Yee7Rbmon8U/98Lef//F9S/J17Q6mV8DDur7H359rZ/4s5S1X8wFD0MW//KBjn87s9G1pUfmrdu/f96r/YfHnx3/1hpgc/mWfq5//fTr/53NAAAA8ORJm/c1knS+nU/T+fnW/Y5nYiatr641Xr2w+tWV5db9j9mYSIs7XaWO+6HV1r/R2+WFXeU3IuLpiPixNN0szy+t1pdHHTwAAAAcEyd6zP8zfx3aUwgAAADA0M2OugMAAADA0Jn/AwAAwJHW1yJ5MscnM/N4dENm1JlRX5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACebP8FAAD//7nAtZ0=") openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) 46.132218132s ago: executing program 1 (id=2880): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x800, 0xfffffffc, 0x7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffde0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='thermal_power_cpu_limit\x00', r3, 0x0, 0x4}, 0x18) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000005b80)={@loopback, 0x33, r5}) 43.972343025s ago: executing program 1 (id=2884): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x20, 0x7ffc1ffb}]}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000280)=0x4) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x64, r2, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdc01, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x48, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "dfeedc2634e7d49420f73e16e79faba0"}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioperm(0x101, 0x295616e7, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000180)={[{@prjquota}, {@debug}]}, 0x1, 0x25b, &(0x7f0000000e00)="$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") prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) brk(0x55555ede6001) 43.972023845s ago: executing program 37 (id=2884): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x20, 0x7ffc1ffb}]}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000280)=0x4) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x64, r2, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdc01, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x48, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "dfeedc2634e7d49420f73e16e79faba0"}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioperm(0x101, 0x295616e7, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000180)={[{@prjquota}, {@debug}]}, 0x1, 0x25b, &(0x7f0000000e00)="$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") prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) brk(0x55555ede6001) 12.899639186s ago: executing program 2 (id=3408): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @link_local={0x7}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}, {0x0, 0x0, 0x28, 0x0, @wg=@data={0x4, 0x0, 0x0, "20029476b3addfab81507b25977f5d53"}}}}}}, 0x0) 12.833375351s ago: executing program 2 (id=3410): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000940)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x2, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_to_hsr\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x1b, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, 0x14) bind$packet(r2, &(0x7f0000000280)={0x11, 0xf8, r3, 0x1, 0x9, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}}, 0x14) 12.782949635s ago: executing program 2 (id=3412): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r4}, 0x10) r5 = syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0x0, 0x1000, 0x7, 0xffffdf}, &(0x7f0000000380), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 12.688279233s ago: executing program 2 (id=3415): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x110) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) openat(0xffffffffffffff9c, 0x0, 0x4842, 0x0) 12.588156261s ago: executing program 2 (id=3417): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/26, 0x1a}, 0x3}], 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000740)='./file1\x00', 0x1000050, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x7, 0x576, &(0x7f0000000140)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000780)="c86865718f13b6253132917de50893b2389f396dfb8d670798a35fc1c88ac2e737a857", 0x23, 0x4fed0) sendfile(r2, r2, 0x0, 0xe3aa6ea) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c04, &(0x7f0000000340), 0x1, 0x779, &(0x7f0000001900)="$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") sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_NL_SOCK_GET(r2, 0x0, 0x80) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) r5 = socket$rxrpc(0x21, 0x2, 0x2) unshare(0x2040600) getsockopt(r5, 0x110, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r5, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000900)={'syztnl1\x00', &(0x7f0000000880)={'ip6_vti0\x00', r7, 0x29, 0x0, 0x2, 0xfffffffb, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x20, 0x700, 0x9}}) 12.200302822s ago: executing program 2 (id=3420): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_int(r1, 0x29, 0xd, &(0x7f0000000240)=0x6, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket(0x200000000000011, 0x2, 0xe6) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x5}, 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='kmem_cache_free\x00', r4, 0x0, 0x1}, 0x18) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x1}}, './file0\x00'}) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_create1(0x0) poll(&(0x7f00000000c0)=[{r7, 0x34}], 0x1, 0x90f0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x5452, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x4}, 0x50) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0x1, 0x21b, &(0x7f0000000300)="$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") 12.070599493s ago: executing program 38 (id=3420): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_int(r1, 0x29, 0xd, &(0x7f0000000240)=0x6, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket(0x200000000000011, 0x2, 0xe6) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x5}, 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='kmem_cache_free\x00', r4, 0x0, 0x1}, 0x18) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x1}}, './file0\x00'}) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_create1(0x0) poll(&(0x7f00000000c0)=[{r7, 0x34}], 0x1, 0x90f0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x5452, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x4}, 0x50) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0x1, 0x21b, &(0x7f0000000300)="$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") 4.815337754s ago: executing program 8 (id=3554): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x40502, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) gettid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) syz_usb_connect(0x4, 0x24, 0x0, 0x0) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x4c6, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) sendto(0xffffffffffffffff, &(0x7f0000000540)="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", 0xdd, 0x488c1, &(0x7f0000000380)=@isdn={0x22, 0x9a, 0x22, 0x6, 0x2}, 0xd6) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) rt_sigpending(&(0x7f0000000200), 0x8) 3.314344384s ago: executing program 7 (id=3580): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x800, 0xfffffffc, 0x7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffde0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000005b80)={@loopback, 0x33, r4}) 3.281042057s ago: executing program 7 (id=3581): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe}]}) syz_emit_ethernet(0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2.348681282s ago: executing program 7 (id=3590): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xa}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="14feffffff0b010100000000000000000100"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000480), 0x8, 0x0) r3 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x226f, 0x13500, 0x0, 0xeffffffd}, &(0x7f0000000240), &(0x7f0000000300)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180900000020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r4}, 0x18) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x21, &(0x7f0000000440)=r2, 0x1) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x48000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000efffffff850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r8}, 0x10) 1.960516652s ago: executing program 7 (id=3591): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x800, 0xfffffffc, 0x7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffde0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000005b80)={@loopback, 0x33, r4}) 1.912023957s ago: executing program 7 (id=3592): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) getgroups(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x24000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x30, r4, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x68}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x1, 0x1ff, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757811"], 0x65) 1.509195489s ago: executing program 8 (id=3596): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 1.436529635s ago: executing program 4 (id=3597): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x9, 0x0, 0x1, 0x8, 0xa78, 0xb, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8b}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000240)='kmem_cache_free\x00', r2}, 0x18) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x88182, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000080)='0', 0x1}], 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r4 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) r8 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) r9 = fsmount(r4, 0x1, 0x8) kcmp(r7, r8, 0x4, r9, r0) fallocate(r4, 0x0, 0x0, 0x1001f0) fallocate(r4, 0x3, 0xf00, 0x10000) 1.178772585s ago: executing program 8 (id=3601): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) 1.112698371s ago: executing program 8 (id=3602): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) 1.033714387s ago: executing program 4 (id=3605): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f626f696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 1.018567498s ago: executing program 8 (id=3607): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/26, 0x1a}, 0x3}], 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000740)='./file1\x00', 0x1000050, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x7, 0x576, &(0x7f0000000140)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000780)="c86865718f13b6253132917de50893b2389f396dfb8d670798a35fc1c88ac2e737a857", 0x23, 0x4fed0) sendfile(r2, r2, 0x0, 0xe3aa6ea) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c04, &(0x7f0000000340), 0x1, 0x779, &(0x7f0000001900)="$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") sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x80) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) r5 = socket$rxrpc(0x21, 0x2, 0x2) unshare(0x2040600) getsockopt(r5, 0x110, 0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r5, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000900)={'syztnl1\x00', &(0x7f0000000880)={'ip6_vti0\x00', r7, 0x29, 0x0, 0x2, 0xfffffffb, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x20, 0x700, 0x9}}) 941.025055ms ago: executing program 7 (id=3608): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x40502, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) gettid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b553850000008500"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) syz_usb_connect(0x4, 0x24, 0x0, 0x0) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x4c6, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) sendto(0xffffffffffffffff, &(0x7f0000000540)="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", 0xdd, 0x488c1, &(0x7f0000000380)=@isdn={0x22, 0x9a, 0x22, 0x6, 0x2}, 0xd6) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) rt_sigpending(&(0x7f0000000200), 0x8) 916.164897ms ago: executing program 4 (id=3609): socket(0x10, 0x3, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xc22cddfde31e1cc9) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYRESHEX=r2]) creat(&(0x7f00000002c0)='./file0\x00', 0xfe) 844.337852ms ago: executing program 4 (id=3611): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 540.259457ms ago: executing program 4 (id=3614): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000003c0)={'tunl0\x00', 0x0, 0x20, 0x8, 0x100, 0x0, {{0x32, 0x4, 0x2, 0x4, 0xc8, 0x68, 0x0, 0x5, 0x29, 0x0, @broadcast, @rand_addr=0x64010102, {[@rr={0x7, 0x1f, 0xaa, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @empty, @private=0xa010100, @remote]}, @noop, @generic={0x89, 0x12, "0c6b76460895a79a56c8d20ed7ef17d0"}, @cipso={0x86, 0x3a, 0x3, [{0x6, 0xa, "9a97774b51d154bb"}, {0x2, 0x10, "9d3d39215dd981547455c7cc3e68"}, {0x5, 0xa, "e9b1bb3d3077c74a"}, {0x2, 0x10, "2013605f1fc235abfd33a676f5f8"}]}, @timestamp={0x44, 0xc, 0x54, 0x0, 0x1, [0x6, 0x81]}, @ssrr={0x89, 0x17, 0x1e, [@dev={0xac, 0x14, 0x14, 0x12}, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x25}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @cipso={0x86, 0x24, 0x1, [{0x6, 0xc, "661863b55cd35cfd3703"}, {0x5, 0x12, "e51512255f7d566895d5cf531f28f04c"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'sit0\x00', &(0x7f00000004c0)={'sit0\x00', 0x0, 0x40, 0x8, 0x3, 0xfffffffd, {{0x10, 0x4, 0x3, 0x1b, 0x40, 0x66, 0x0, 0x6e, 0x29, 0x0, @empty, @empty, {[@rr={0x7, 0xb, 0xe9, [@rand_addr=0x64010100, @remote]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x1d, 0xffffffffffffffff, [{0x0, 0x10, "1ac0bf1c8576f3acdce96bf6a266"}, {0x5, 0x7, "de7f59774f"}]}]}}}}}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x200, {0x0, 0x0, 0x0, r6, {0xfff2}, {}, {0x9, 0x5}}}, 0x24}}, 0x0) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019300)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x1, {0x60, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3906a7ea}]}}]}, 0x48}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000600)={'gretap0\x00', 0x0, 0x20, 0x1, 0xf6, 0xfffffff7, {{0x28, 0x4, 0x3, 0x3a, 0xa0, 0x67, 0x0, 0x0, 0x2f, 0x0, @local, @private=0xa010102, {[@noop, @cipso={0x86, 0x69, 0x2, [{0x7, 0x4, "af42"}, {0x5, 0x9, "df1724f5850acc"}, {0x6, 0x7, "113640f957"}, {0x6, 0xb, "f7dcec3072d0a69dfe"}, {0x6, 0x11, "db757dac808343521e9bcced285c0d"}, {0x0, 0xd, "0f6493a3bec9440de003ac"}, {0x7, 0x8, "3d9856fcb324"}, {0x7, 0x12, "ebd3bb00bd3f8f14a96eec0af8c922d5"}, {0x1, 0xc, "11fc53ddee50e14a1b33"}]}, @noop, @timestamp={0x44, 0x20, 0xb1, 0x0, 0x4, [0x0, 0x400, 0x9, 0x7ff, 0x105f6f52, 0x6, 0xb]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'syztnl2\x00', 0x0, 0x29, 0x5c, 0x5, 0xffffffff, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x7800, 0x8000, 0x1, 0x10}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) r16 = socket$nl_route(0x10, 0x3, 0x0) r17 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r16, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r18, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x4d11, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000008c0)={@private, @remote, 0x0}, &(0x7f0000000900)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000009c0)=0x14) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000a00)=0x0, &(0x7f0000000a40)=0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001040)={&(0x7f0000001300)=ANY=[@ANYBLOB="8c050000", @ANYRES16=0x0, @ANYBLOB="000326bd7000ffdbdf250300000008000100", @ANYRES32=r2, @ANYBLOB="5801028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400af00000008000600", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="7001028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r9, @ANYBLOB="080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004008b0600003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r10, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040080dea44873fa9825f500000008000700000000003c00010024000100757165725f6c696e6b75700000000000000000000000000000000000000000000500e7ff0500000004000400080006009112b7e68f46475a475bfb32f5d488b3970b9475fb3ee53ad7d08c29579b0f7b22e639807efb2f6f0c59a114065152", @ANYRES32=r11, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040099020000080007000000000008000100", @ANYRES32=r12, @ANYBLOB="8c010280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000200000008000600", @ANYRES32=r13, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000300000054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b00000024000400b26e0608080000000600050677000000f05110030c0000000900030098a6000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000700000008000600", @ANYRES32=r14, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e000008000100", @ANYRES32=r18, @ANYBLOB="7c00028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400faffffff40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000800000008000600", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYRES64=r18, @ANYRES32=r21, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=r22, @ANYBLOB], 0x58c}, 0x1, 0x0, 0x0, 0x891}, 0x20000004) r23 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r23}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') 529.685278ms ago: executing program 9 (id=3615): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b'], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4d56964ed463fec0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) mq_unlink(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000300)={0x11, 0x1b, r5, 0x1, 0x0, 0x6, @random="0256e946884b"}, 0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r5, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r6}, 0x10) timer_delete(0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) 454.086324ms ago: executing program 9 (id=3616): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) r6 = getgid() setregid(r6, 0xee00) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r10}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0005}]}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2240, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r12}, 0x10) 348.206152ms ago: executing program 5 (id=3617): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x80, 0x8000000}, 0xffffffffffffff1f) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a320000000014000480080001400000000008000240000000002c000000030a03000000000000000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x400c0d1}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000100)=0x40) 340.785713ms ago: executing program 4 (id=3618): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@abs={0x1, 0x30}, 0x6e, 0x0}}], 0x2, 0xe0) socket$pppl2tp(0x18, 0x1, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000007000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket(0x1e, 0x805, 0x0) connect$tipc(r4, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x0, 0x200000}, 0x2}}, 0x10) close(r4) 340.344903ms ago: executing program 5 (id=3619): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xa}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="14feffffff0b01010000000000000000010000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000480), 0x8, 0x0) r3 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x226f, 0x13500, 0x0, 0xeffffffd}, &(0x7f0000000240), &(0x7f0000000300)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180900000020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r4}, 0x18) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x21, &(0x7f0000000440)=r2, 0x1) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x48000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000efffffff850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r8}, 0x10) 268.130218ms ago: executing program 9 (id=3620): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINK={0x8, 0x5, r2}]}, 0x28}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r5}, 0x10) r6 = syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0x0, 0x1000, 0x7, 0xffffdf}, &(0x7f0000000380), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 242.673501ms ago: executing program 5 (id=3621): socket(0x10, 0x3, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xc22cddfde31e1cc9) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r2]) creat(&(0x7f00000002c0)='./file0\x00', 0xfe) 196.951584ms ago: executing program 9 (id=3622): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @link_local={0x7}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}, {0x0, 0x0, 0x28, 0x0, @wg=@data={0x4, 0x0, 0x0, "20029476b3addfab81507b25977f5d53"}}}}}}, 0x0) 178.194225ms ago: executing program 5 (id=3623): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES64], 0x38}}, 0x20000004) 156.146407ms ago: executing program 9 (id=3624): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xa5, &(0x7f00000006c0)=ANY=[@ANYBLOB="0380c2000003ffffffffffff08004b05009700650000801d9078ffffffff0a010100940ba99e537c93e84ed14c9409fc7005e1c65dc20000000029d5c73e28a823bc18d3a5ebb6336ac5241bb8f3710c92801d700ee7b346e4995a9044acf8010dcf053307e2ee5200dd33cdf6217f6e0fa3d1d7fd3e1b8605483a7ac62581da0a9a0c7464f555b30bbdb30508fb4125174d093cdcabf67f080cb220b1b09fffb87a12d781"], 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0200000001000000000000000800050000000000100000000000000020"], 0x24, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x9, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x7fff, 0x0, 0xfffffffe}, 0x3546, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x800}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0) r5 = socket(0x9, 0x803, 0x2) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c00)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r7, {0xf}, {}, {0xe, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_POLICE={0x10, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}]}, @TCA_U32_SEL={0x14, 0x5, {0xb, 0x3, 0x6e, 0x4, 0x0, 0xe, 0x16, 0xfffffff7}}]}}]}, 0x54}}, 0x24040084) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000400)) r8 = socket$igmp6(0xa, 0x3, 0x2) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f00000005c0)={@private1, @remote, @remote, 0x3, 0x2, 0x0, 0x400, 0xb7, 0x440067, r10}) sendto$packet(r9, 0x0, 0x0, 0x44000, &(0x7f00000002c0)={0x11, 0x9, r10, 0x1, 0xd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14) 112.023441ms ago: executing program 5 (id=3625): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x98002, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0xd}, 0x8224, 0xa, 0x0, 0x0, 0x593f, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000300)=0x20, 0xffffffffffffff50) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) (async, rerun: 32) recvfrom(r0, &(0x7f00000006c0)=""/134, 0x86, 0x12162, 0x0, 0x0) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9f0018000000000400000c0000000c0000000200000000000000000db0040003000000007b7e1e2cb6b87832a81b4f96249b93e3f82a26342a730486b950772d79d471565dc0f1"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000300), 0xce4, r6}, 0x38) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0x1, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) (async) vmsplice(r9, &(0x7f0000000880)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000001300)="da", 0x1}, {&(0x7f00000002c0)='@', 0x1}, {&(0x7f0000000000)="150d1c41", 0x4}], 0x4, 0x0) (async, rerun: 64) ioctl$sock_inet_udp_SIOCINQ(r9, 0x541b, 0x0) (async, rerun: 64) write(r7, 0x0, 0x0) (async, rerun: 32) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r6, 0x0, 0x100000000000000}, 0x38) (rerun: 32) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r5, 0x1) 105.327571ms ago: executing program 9 (id=3626): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b'], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4d56964ed463fec0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) mq_unlink(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000300)={0x11, 0x1b, r5, 0x1, 0x0, 0x6, @random="0256e946884b"}, 0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r5, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r6}, 0x10) timer_delete(0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) 74.997934ms ago: executing program 8 (id=3627): r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000002c0)={'dvmrp1\x00', {0x2, 0x4e23, @private=0xa010101}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1}, &(0x7f0000000000), &(0x7f0000000300)}, 0x20) socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x66) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0xfffffffff7ffffe9}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000500)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) r5 = socket$tipc(0x1e, 0x2, 0x0) fcntl$notify(r5, 0x402, 0xd) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x80002, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0x9, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0xe, 0x0, 0x2, 0xfffffffd, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0x6, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffff, 0xffff8000, 0x0, 0xffffffff, 0x1, 0x0, 0x800009, 0x0, 0x0, 0x8, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2000000, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0xaa, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x102, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x3, 0x0, 0x19, 0x40000000}, 0x0, 0x100007f, 0x2}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback, 0x100}, 0x1c) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x2000, 0x0) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f00000004c0)) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000b80)=@ccm_128={{0x304}, "7ba11d27a9e02909", "7d70211c7bf1ac7a0d742ecbc81422f4", "d01f1c43", "cadea6b75a9723ce"}, 0x28) close(r1) 0s ago: executing program 5 (id=3628): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r0}, 0x18) syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x300, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@dev={0xac, 0x14, 0x14, 0x39}}, {@loopback}, {@local, 0x4}, {@multicast1, 0x9}]}]}}}}}}}, 0x0) kernel console output (not intermixed with test programs): batadv_slave_0 [ 343.876499][T13014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.893286][ T8530] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.916955][ T8530] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.933041][ T8530] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.952155][ T8530] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.025874][T13141] bond_slave_0: entered promiscuous mode [ 344.031678][T13141] bond_slave_1: entered promiscuous mode [ 344.038392][T13141] macsec1: entered allmulticast mode [ 344.043769][T13141] bond0: entered allmulticast mode [ 344.048961][T13141] bond_slave_0: entered allmulticast mode [ 344.054837][T13141] bond_slave_1: entered allmulticast mode [ 344.062117][T13141] bond0: left allmulticast mode [ 344.067082][T13141] bond_slave_0: left allmulticast mode [ 344.072790][T13141] bond_slave_1: left allmulticast mode [ 344.078291][T13141] bond_slave_0: left promiscuous mode [ 344.083745][T13141] bond_slave_1: left promiscuous mode [ 344.101224][T13145] loop2: detected capacity change from 0 to 1024 [ 344.111989][T13145] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.124446][T13145] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.137691][T13145] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 344.155337][T13145] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 344.167863][T13145] EXT4-fs (loop2): This should not happen!! Data will be lost [ 344.167863][T13145] [ 344.177648][T13145] EXT4-fs (loop2): Total free blocks count 0 [ 344.183653][T13145] EXT4-fs (loop2): Free/Dirty block details [ 344.189614][T13145] EXT4-fs (loop2): free_blocks=4293918720 [ 344.195351][T13145] EXT4-fs (loop2): dirty_blocks=16 [ 344.200558][T13145] EXT4-fs (loop2): Block reservation details [ 344.206594][T13145] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 344.218673][T13148] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm syz.2.2838: lblock 1 mapped to illegal pblock 1 (length 15) [ 344.240511][T13148] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 344.261280][T13145] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.2838: lblock 1 mapped to illegal pblock 1 (length 3) [ 344.279011][T13145] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.2838: lblock 1 mapped to illegal pblock 1 (length 3) [ 344.296324][T13145] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.2838: lblock 1 mapped to illegal pblock 1 (length 3) [ 344.304452][T13155] openvswitch: netlink: Message has 6 unknown bytes. [ 344.312845][T13150] loop9: detected capacity change from 0 to 128 [ 344.325345][T13150] EXT4-fs (loop9): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 344.328929][T13145] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.2838: lblock 1 mapped to illegal pblock 1 (length 3) [ 344.351831][T13142] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.2838: lblock 1 mapped to illegal pblock 1 (length 3) [ 344.377772][T13142] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.2838: lblock 1 mapped to illegal pblock 1 (length 3) [ 344.394646][T13157] loop8: detected capacity change from 0 to 1024 [ 344.402488][T13145] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.2838: lblock 1 mapped to illegal pblock 1 (length 3) [ 344.419265][T13142] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.2838: lblock 1 mapped to illegal pblock 1 (length 3) [ 344.436772][T13157] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.569085][T10185] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.720161][T13183] lo speed is unknown, defaulting to 1000 [ 344.791581][ T29] kauditd_printk_skb: 233 callbacks suppressed [ 344.791597][ T29] audit: type=1400 audit(1756267652.825:15894): avc: denied { read } for pid=13168 comm="syz.7.2845" path="socket:[41328]" dev="sockfs" ino=41328 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 344.823380][ T29] audit: type=1326 audit(1756267652.815:15893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13182 comm="syz.9.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5c819ebe9 code=0x7ffc0000 [ 344.847216][ T29] audit: type=1326 audit(1756267652.857:15895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13182 comm="syz.9.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5c819ebe9 code=0x7ffc0000 [ 344.850355][T13177] netlink: 59 bytes leftover after parsing attributes in process `syz.1.2848'. [ 344.876919][ T29] audit: type=1326 audit(1756267652.857:15896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13182 comm="syz.9.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb5c819ebe9 code=0x7ffc0000 [ 344.903537][ T29] audit: type=1326 audit(1756267652.857:15897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13182 comm="syz.9.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5c819ebe9 code=0x7ffc0000 [ 344.948131][ T29] audit: type=1326 audit(1756267652.920:15898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13182 comm="syz.9.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb5c819ebe9 code=0x7ffc0000 [ 344.971851][ T29] audit: type=1326 audit(1756267652.920:15899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13182 comm="syz.9.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5c819ebe9 code=0x7ffc0000 [ 344.995526][ T29] audit: type=1326 audit(1756267652.920:15900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13182 comm="syz.9.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7fb5c819ebe9 code=0x7ffc0000 [ 345.019104][ T29] audit: type=1326 audit(1756267652.920:15901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13182 comm="syz.9.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5c819ebe9 code=0x7ffc0000 [ 345.036706][T13187] bond_slave_0: entered promiscuous mode [ 345.042771][ T29] audit: type=1326 audit(1756267652.920:15902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13182 comm="syz.9.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fb5c819ebe9 code=0x7ffc0000 [ 345.048392][T13187] bond_slave_1: entered promiscuous mode [ 345.077711][T13187] macsec1: entered allmulticast mode [ 345.083238][T13187] bond0: entered allmulticast mode [ 345.088371][T13187] bond_slave_0: entered allmulticast mode [ 345.094137][T13187] bond_slave_1: entered allmulticast mode [ 345.102195][T13187] bond0: left allmulticast mode [ 345.107123][T13187] bond_slave_0: left allmulticast mode [ 345.112933][T13187] bond_slave_1: left allmulticast mode [ 345.118456][T13187] bond_slave_0: left promiscuous mode [ 345.123900][T13187] bond_slave_1: left promiscuous mode [ 345.203515][T13202] loop2: detected capacity change from 0 to 1024 [ 345.210743][T13202] EXT4-fs: Ignoring removed orlov option [ 345.221525][T13202] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.221773][T13195] loop9: detected capacity change from 0 to 128 [ 345.246136][T13195] EXT4-fs (loop9): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 345.264592][T13205] loop1: detected capacity change from 0 to 1024 [ 345.286487][T13205] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.301798][T13209] openvswitch: netlink: Message has 6 unknown bytes. [ 345.336470][T13212] netlink: 'syz.9.2858': attribute type 10 has an invalid length. [ 345.348497][T13212] team0: Failed to send options change via netlink (err -105) [ 345.356122][T13212] team0: Port device dummy0 added [ 345.364640][T13212] netlink: 'syz.9.2858': attribute type 10 has an invalid length. [ 345.373270][T13212] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 345.384551][T13205] ext4 filesystem being mounted at /573/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.398303][T13212] team0: Failed to send options change via netlink (err -105) [ 345.410678][T13205] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 345.425659][T13212] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 345.436398][T13205] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 345.448823][T13205] EXT4-fs (loop1): This should not happen!! Data will be lost [ 345.448823][T13205] [ 345.449530][T13212] team0: Port device dummy0 removed [ 345.458487][T13205] EXT4-fs (loop1): Total free blocks count 0 [ 345.458504][T13205] EXT4-fs (loop1): Free/Dirty block details [ 345.458516][T13205] EXT4-fs (loop1): free_blocks=4293918720 [ 345.466743][T13212] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 345.469742][T13205] EXT4-fs (loop1): dirty_blocks=16 [ 345.469761][T13205] EXT4-fs (loop1): Block reservation details [ 345.501058][T13205] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 345.509088][T13218] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 1: comm syz.1.2855: lblock 1 mapped to illegal pblock 1 (length 15) [ 345.535378][T13218] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 345.569353][T13217] lo speed is unknown, defaulting to 1000 [ 345.760294][T13228] lo speed is unknown, defaulting to 1000 [ 345.791340][T13230] loop9: detected capacity change from 0 to 1764 [ 345.805615][T13230] iso9660: Bad value for 'dmode' [ 345.835323][T12980] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.900427][T13232] loop8: detected capacity change from 0 to 128 [ 345.920635][T13232] EXT4-fs (loop8): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 345.961634][T13240] loop2: detected capacity change from 0 to 128 [ 345.968582][T13246] loop8: detected capacity change from 0 to 164 [ 345.978659][T13246] isofs_fill_super: bread failed, dev=loop8, iso_blknum=41, block=82 [ 345.988025][T13240] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 346.001203][T13248] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2869'. [ 346.050933][T13250] loop1: detected capacity change from 0 to 512 [ 346.067263][T13250] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.087857][T13250] ext4 filesystem being mounted at /574/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.119865][T13250] loop1: detected capacity change from 512 to 64 [ 346.129610][T13267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.144909][T13267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.204617][T13271] lo speed is unknown, defaulting to 1000 [ 346.213616][ T3307] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Out of memory [ 346.226950][ T3307] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error [ 346.257364][T13275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.272514][T13275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.298483][ T4487] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.274262][T13279] loop2: detected capacity change from 0 to 2048 [ 348.212720][T13279] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.237475][T13281] loop8: detected capacity change from 0 to 2048 [ 348.261104][T12980] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.280490][T13281] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.387563][ T8526] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.410433][T10185] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.457054][ T8526] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.514835][T13300] lo speed is unknown, defaulting to 1000 [ 348.524926][ T8526] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.575816][ T8526] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.602073][T13320] lo speed is unknown, defaulting to 1000 [ 348.647470][T13300] chnl_net:caif_netlink_parms(): no params data found [ 348.701446][ T8526] bridge_slave_1: left allmulticast mode [ 348.707151][ T8526] bridge_slave_1: left promiscuous mode [ 348.713369][ T8526] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.723177][ T8526] bridge_slave_0: left allmulticast mode [ 348.728865][ T8526] bridge_slave_0: left promiscuous mode [ 348.734722][ T8526] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.790082][ T8526] bond0 (unregistering): (slave gretap1): Releasing active interface [ 348.798500][ T8526] gretap1 (unregistering): left promiscuous mode [ 348.804902][ T8526] gretap1 (unregistering): left allmulticast mode [ 348.988952][ T8526] »»»» (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.999595][ T8526] »»»» (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.010336][ T8526] »»»» (unregistering): Released all slaves [ 349.019390][ T8526] bond1 (unregistering): Released all slaves [ 349.029573][ T8526] bond0 (unregistering): Released all slaves [ 349.051928][T13300] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.059184][T13300] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.066875][T13300] bridge_slave_0: entered allmulticast mode [ 349.073811][T13300] bridge_slave_0: entered promiscuous mode [ 349.081171][T13300] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.088287][T13300] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.095881][T13300] bridge_slave_1: entered allmulticast mode [ 349.102893][T13300] bridge_slave_1: entered promiscuous mode [ 349.116354][ T8526] hsr_slave_0: left promiscuous mode [ 349.122098][ T8526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.129531][ T8526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.142636][ T8526] veth1_macvtap: left promiscuous mode [ 349.148317][ T8526] veth0_macvtap: left promiscuous mode [ 349.154215][ T8526] veth0_vlan: left promiscuous mode [ 349.211944][ T8526] batadv_slave_0 (unregistering): left allmulticast mode [ 349.222021][ T8526] team0 (unregistering): Port device team_slave_1 removed [ 349.237303][ T8526] team0 (unregistering): Port device team_slave_0 removed [ 349.287987][T13300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.297584][ T3412] lo speed is unknown, defaulting to 1000 [ 349.303443][ T3412] infiniband syz0: ib_query_port failed (-19) [ 349.311682][T13300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.341445][T13300] team0: Port device team_slave_0 added [ 349.348154][T13300] team0: Port device team_slave_1 added [ 349.366195][T13300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.373265][T13300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.399379][T13300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.444180][T13300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.451221][T13300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.477335][T13300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.519898][T13300] hsr_slave_0: entered promiscuous mode [ 349.526074][T13300] hsr_slave_1: entered promiscuous mode [ 349.532124][T13300] debugfs: 'hsr0' already exists in 'hsr' [ 349.537870][T13300] Cannot create hsr debugfs directory [ 349.591064][ T29] kauditd_printk_skb: 438 callbacks suppressed [ 349.591083][ T29] audit: type=1326 audit(1756267657.864:16341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13298 comm="syz.2.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64319ebe9 code=0x7ffc0000 [ 349.629589][ T29] audit: type=1326 audit(1756267657.864:16342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13298 comm="syz.2.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64319ebe9 code=0x7ffc0000 [ 349.662321][ T8526] IPVS: stop unused estimator thread 0... [ 349.705672][ T29] audit: type=1400 audit(1756267657.990:16343): avc: denied { search } for pid=13346 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.728131][ T29] audit: type=1400 audit(1756267657.990:16344): avc: denied { search } for pid=13346 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.751045][ T29] audit: type=1400 audit(1756267657.990:16345): avc: denied { search } for pid=13346 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.774337][ T29] audit: type=1400 audit(1756267657.990:16346): avc: denied { search } for pid=13346 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.802773][ T29] audit: type=1400 audit(1756267657.990:16347): avc: denied { read open } for pid=13347 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.828453][ T29] audit: type=1400 audit(1756267657.990:16348): avc: denied { getattr } for pid=13347 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.853941][ T29] audit: type=1400 audit(1756267657.990:16349): avc: denied { getattr } for pid=13347 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=510 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 349.917185][ T29] audit: type=1400 audit(1756267658.190:16350): avc: denied { read } for pid=13349 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=510 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 349.951407][T13353] loop8: detected capacity change from 0 to 512 [ 349.965939][T13353] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.2901: iget: bad i_size value: 38620345925642 [ 349.981019][T13353] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.2901: couldn't read orphan inode 15 (err -117) [ 350.006401][T13353] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.147087][T10185] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.193275][T13300] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 350.204160][T13374] openvswitch: netlink: Message has 6 unknown bytes. [ 350.224324][T13300] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 350.242284][T13300] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 350.273714][T13300] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 350.359740][T13300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.392913][T13300] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.401995][T13401] loop7: detected capacity change from 0 to 2048 [ 350.426231][ T8526] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.433417][ T8526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.452302][T13401] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.467413][ T8496] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.474578][ T8496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.527238][ T7197] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.563022][T13420] loop9: detected capacity change from 0 to 2048 [ 350.580793][T13420] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.610286][T13300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.635864][T13014] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.914447][T13300] veth0_vlan: entered promiscuous mode [ 350.924966][T13300] veth1_vlan: entered promiscuous mode [ 350.962844][T13300] veth0_macvtap: entered promiscuous mode [ 350.971679][T13300] veth1_macvtap: entered promiscuous mode [ 350.986034][T13300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.998930][T13300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.010097][ T8530] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.081791][ T8530] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.104367][ T8530] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.132732][ T8530] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.273163][T13494] loop4: detected capacity change from 0 to 512 [ 351.281237][T13494] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 351.291261][T13494] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 351.299269][T13494] System zones: 1-12 [ 351.304935][T13494] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.2916: corrupted in-inode xattr: e_value size too large [ 351.319636][T13494] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2916: couldn't read orphan inode 15 (err -117) [ 351.332399][T13494] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.361443][T13494] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.663511][T13502] netlink: 'syz.9.2918': attribute type 10 has an invalid length. [ 351.698249][T13504] loop8: detected capacity change from 0 to 128 [ 351.716857][T13502] ipvlan0: entered allmulticast mode [ 351.722236][T13502] veth0_vlan: entered allmulticast mode [ 351.738950][T13504] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 351.754136][T13502] team0: Device ipvlan0 failed to register rx_handler [ 351.762604][T13504] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 351.810507][T13519] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2924'. [ 351.841398][T13521] loop4: detected capacity change from 0 to 2048 [ 351.866765][T13521] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.899820][T10185] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 351.915660][T13529] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2926'. [ 351.970543][T13300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.209020][T13567] SELinux: ebitmap: truncated map [ 352.226242][T13567] SELinux: failed to load policy [ 352.233003][T13575] loop8: detected capacity change from 0 to 1024 [ 352.259146][T13577] loop4: detected capacity change from 0 to 512 [ 352.261482][T13575] EXT4-fs: Ignoring removed orlov option [ 352.271265][T13575] EXT4-fs: Ignoring removed nomblk_io_submit option [ 352.277832][T13577] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 352.314204][T13575] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.326471][T13584] loop9: detected capacity change from 0 to 512 [ 352.347500][T13575] macvtap0: refused to change device tx_queue_len [ 352.359028][T13584] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.397928][T13584] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 352.469061][T10185] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.497614][T13014] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.596364][T13612] loop2: detected capacity change from 0 to 512 [ 352.644323][T13612] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 352.687005][T13612] EXT4-fs (loop2): warning: maximal mount count reached, running e2fsck is recommended [ 352.707563][T13612] EXT4-fs error (device loop2): ext4_orphan_get:1392: comm syz.2.2943: inode #15: comm syz.2.2943: iget: illegal inode # [ 352.727374][T13612] EXT4-fs (loop2): Remounting filesystem read-only [ 352.778626][T13612] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.887474][T13648] loop8: detected capacity change from 0 to 2048 [ 352.897398][T13646] netlink: 'syz.9.2950': attribute type 12 has an invalid length. [ 352.914785][T13648] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.957922][T10185] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.011375][T13666] loop8: detected capacity change from 0 to 512 [ 353.055079][T13666] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.098351][T13666] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.213561][T10185] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.402145][T13703] loop9: detected capacity change from 0 to 1024 [ 353.411494][T12980] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.416981][T13703] EXT4-fs: Ignoring removed bh option [ 353.429700][T13703] EXT4-fs (loop9): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 353.439757][T13697] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 353.459476][T13703] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.510289][T13703] random: crng reseeded on system resumption [ 353.543827][T13703] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2961'. [ 353.561506][T13718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2966'. [ 353.727703][T13014] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.741888][ T3379] Process accounting resumed [ 353.777113][T13733] loop9: detected capacity change from 0 to 2048 [ 353.801876][T13733] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.878640][T13014] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.922259][T13745] loop4: detected capacity change from 0 to 512 [ 353.937282][T13745] EXT4-fs: Ignoring removed mblk_io_submit option [ 353.952501][T13745] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 353.970260][T13745] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 353.984684][T13745] System zones: 1-12 [ 353.997601][T13745] EXT4-fs (loop4): 1 truncate cleaned up [ 354.010101][T13745] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.185609][T13755] bond_slave_0: entered promiscuous mode [ 354.191310][T13755] bond_slave_1: entered promiscuous mode [ 354.196956][T13755] dummy0: entered promiscuous mode [ 354.219637][T13742] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13742 comm=syz.8.2977 [ 354.222234][T13755] macsec1: entered allmulticast mode [ 354.237717][T13755] bond0: entered allmulticast mode [ 354.242842][T13755] bond_slave_0: entered allmulticast mode [ 354.248597][T13755] bond_slave_1: entered allmulticast mode [ 354.254375][T13742] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13742 comm=syz.8.2977 [ 354.285068][T13755] dummy0: entered allmulticast mode [ 354.304748][T13755] bond0: left allmulticast mode [ 354.309644][T13755] bond_slave_0: left allmulticast mode [ 354.315154][T13755] bond_slave_1: left allmulticast mode [ 354.331011][T13755] dummy0: left allmulticast mode [ 354.336028][T13755] bond_slave_0: left promiscuous mode [ 354.341467][T13755] bond_slave_1: left promiscuous mode [ 354.346891][T13755] dummy0: left promiscuous mode [ 354.434890][ T29] kauditd_printk_skb: 567 callbacks suppressed [ 354.434906][ T29] audit: type=1326 audit(1756267662.945:16918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13758 comm="syz.8.2981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66365ebe9 code=0x7ffc0000 [ 354.465043][ T29] audit: type=1326 audit(1756267662.945:16919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13758 comm="syz.8.2981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66365ebe9 code=0x7ffc0000 [ 354.488876][ T29] audit: type=1326 audit(1756267662.945:16920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13758 comm="syz.8.2981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc66365ebe9 code=0x7ffc0000 [ 354.512530][ T29] audit: type=1326 audit(1756267662.956:16921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13758 comm="syz.8.2981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66365ebe9 code=0x7ffc0000 [ 354.536235][ T29] audit: type=1326 audit(1756267662.956:16922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13758 comm="syz.8.2981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66365ebe9 code=0x7ffc0000 [ 354.559902][ T29] audit: type=1326 audit(1756267662.956:16923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13758 comm="syz.8.2981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc66365ebe9 code=0x7ffc0000 [ 354.583526][ T29] audit: type=1326 audit(1756267662.956:16924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13758 comm="syz.8.2981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66365ebe9 code=0x7ffc0000 [ 354.607143][ T29] audit: type=1326 audit(1756267662.956:16925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13758 comm="syz.8.2981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc66365ebe9 code=0x7ffc0000 [ 354.631077][ T29] audit: type=1326 audit(1756267662.956:16926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13758 comm="syz.8.2981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66365ebe9 code=0x7ffc0000 [ 354.654740][ T29] audit: type=1326 audit(1756267662.956:16927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13758 comm="syz.8.2981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66365ebe9 code=0x7ffc0000 [ 354.734898][T13772] loop7: detected capacity change from 0 to 2048 [ 354.753320][T13772] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.781982][ T7197] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.805071][T13781] loop9: detected capacity change from 0 to 512 [ 354.826522][T13781] EXT4-fs: Ignoring removed oldalloc option [ 354.860257][T13781] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.873070][T13781] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.874470][T13300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.888627][T13781] EXT4-fs error (device loop9): ext4_empty_dir:3077: inode #12: comm syz.9.2987: invalid size [ 354.915174][T13014] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.981225][T13795] loop9: detected capacity change from 0 to 1024 [ 354.998426][T13795] EXT4-fs: Ignoring removed bh option [ 355.011330][T13801] bond_slave_0: entered promiscuous mode [ 355.017801][T13795] EXT4-fs (loop9): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 355.028788][T13801] macsec1: entered allmulticast mode [ 355.034137][T13801] bond0: entered allmulticast mode [ 355.039762][T13801] bond_slave_0: entered allmulticast mode [ 355.051101][T13801] bond0: left allmulticast mode [ 355.056054][T13801] bond_slave_0: left allmulticast mode [ 355.061564][T13801] bond_slave_0: left promiscuous mode [ 355.158242][T13812] tipc: Enabling of bearer rejected, failed to enable media [ 355.174193][T13813] syzkaller0: entered promiscuous mode [ 355.179745][T13813] syzkaller0: entered allmulticast mode [ 355.209429][T13819] FAULT_INJECTION: forcing a failure. [ 355.209429][T13819] name failslab, interval 1, probability 0, space 0, times 0 [ 355.222144][T13819] CPU: 1 UID: 0 PID: 13819 Comm: syz.7.3002 Not tainted syzkaller #0 PREEMPT(voluntary) [ 355.222209][T13819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 355.222225][T13819] Call Trace: [ 355.222232][T13819] [ 355.222241][T13819] __dump_stack+0x1d/0x30 [ 355.222303][T13819] dump_stack_lvl+0xe8/0x140 [ 355.222328][T13819] dump_stack+0x15/0x1b [ 355.222356][T13819] should_fail_ex+0x265/0x280 [ 355.222382][T13819] should_failslab+0x8c/0xb0 [ 355.222492][T13819] __kmalloc_noprof+0xa5/0x3e0 [ 355.222603][T13819] ? iovec_from_user+0x84/0x210 [ 355.222643][T13819] iovec_from_user+0x84/0x210 [ 355.222741][T13819] __import_iovec+0xf3/0x540 [ 355.222781][T13819] import_iovec+0x61/0x80 [ 355.222878][T13819] vfs_writev+0xfb/0x8b0 [ 355.222921][T13819] __se_sys_pwritev2+0xfc/0x1c0 [ 355.222951][T13819] __x64_sys_pwritev2+0x67/0x80 [ 355.222984][T13819] x64_sys_call+0x2c55/0x2ff0 [ 355.223051][T13819] do_syscall_64+0xd2/0x200 [ 355.223078][T13819] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 355.223110][T13819] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 355.223142][T13819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.223243][T13819] RIP: 0033:0x7f1e7fc9ebe9 [ 355.223262][T13819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.223282][T13819] RSP: 002b:00007f1e7e707038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 355.223306][T13819] RAX: ffffffffffffffda RBX: 00007f1e7fec5fa0 RCX: 00007f1e7fc9ebe9 [ 355.223322][T13819] RDX: 0000000000000019 RSI: 00002000000001c0 RDI: 0000000000000003 [ 355.223341][T13819] RBP: 00007f1e7e707090 R08: 0000000000000000 R09: 0000000000000000 [ 355.223357][T13819] R10: 0000000000000e7b R11: 0000000000000246 R12: 0000000000000001 [ 355.223404][T13819] R13: 00007f1e7fec6038 R14: 00007f1e7fec5fa0 R15: 00007fffe30d2278 [ 355.223423][T13819] [ 355.561830][T13842] bond_slave_0: entered promiscuous mode [ 355.567754][T13842] macsec1: entered allmulticast mode [ 355.573114][T13842] bond0: entered allmulticast mode [ 355.578345][T13842] bond_slave_0: entered allmulticast mode [ 355.591235][T13842] bond0: left allmulticast mode [ 355.596274][T13842] bond_slave_0: left allmulticast mode [ 355.601826][T13842] bond_slave_0: left promiscuous mode [ 355.625154][T13849] netlink: 'syz.2.3015': attribute type 10 has an invalid length. [ 355.640593][T13849] ipvlan0: entered allmulticast mode [ 355.646521][T13849] veth0_vlan: entered allmulticast mode [ 355.652426][T13852] loop7: detected capacity change from 0 to 512 [ 355.660507][T13849] team0: Device ipvlan0 failed to register rx_handler [ 355.676623][T13852] ext4 filesystem being mounted at /411/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 355.713242][T13852] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3016: bg 0: block 217: padding at end of block bitmap is not set [ 355.731174][T13852] EXT4-fs (loop7): Remounting filesystem read-only [ 355.807993][T13867] loop7: detected capacity change from 0 to 1024 [ 355.854324][T13865] loop8: detected capacity change from 0 to 128 [ 355.874658][T13865] FAT-fs (loop8): Directory bread(block 32) failed [ 355.891131][T13865] FAT-fs (loop8): Directory bread(block 33) failed [ 355.907742][T13865] FAT-fs (loop8): Directory bread(block 34) failed [ 355.917354][T13865] FAT-fs (loop8): Directory bread(block 35) failed [ 355.924027][T13865] FAT-fs (loop8): Directory bread(block 36) failed [ 355.934209][T13865] FAT-fs (loop8): Directory bread(block 37) failed [ 355.941805][T13865] FAT-fs (loop8): Directory bread(block 38) failed [ 355.948388][T13865] FAT-fs (loop8): Directory bread(block 39) failed [ 355.956358][T13865] FAT-fs (loop8): Directory bread(block 40) failed [ 355.963124][T13865] FAT-fs (loop8): Directory bread(block 41) failed [ 355.991557][T13865] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3022'. [ 356.052411][T13884] openvswitch: netlink: Message has 6 unknown bytes. [ 356.078933][T13886] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 356.085524][T13886] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 356.093005][T13886] vhci_hcd vhci_hcd.0: Device attached [ 356.105175][T13886] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(9) [ 356.111721][T13886] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 356.119368][T13886] vhci_hcd vhci_hcd.0: Device attached [ 356.131109][T13887] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(12) [ 356.137730][T13887] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 356.145293][T13887] vhci_hcd vhci_hcd.0: Device attached [ 356.152926][T13894] loop9: detected capacity change from 0 to 2048 [ 356.170296][T13895] vhci_hcd: connection closed [ 356.170638][ T8530] vhci_hcd: stop threads [ 356.170675][T13893] vhci_hcd: connection closed [ 356.175345][ T8530] vhci_hcd: release socket [ 356.175357][ T8530] vhci_hcd: disconnect device [ 356.189026][T13890] vhci_hcd: connection closed [ 356.201657][ T8530] vhci_hcd: stop threads [ 356.210657][ T8530] vhci_hcd: release socket [ 356.215125][ T8530] vhci_hcd: disconnect device [ 356.229349][ T8530] vhci_hcd: stop threads [ 356.233694][ T8530] vhci_hcd: release socket [ 356.238175][ T8530] vhci_hcd: disconnect device [ 356.266941][T13908] bridge0: entered promiscuous mode [ 356.275186][T13908] bridge0: port 3(macsec1) entered blocking state [ 356.281748][T13908] bridge0: port 3(macsec1) entered disabled state [ 356.281993][ T1035] vhci_hcd: vhci_device speed not set [ 356.288498][T13908] macsec1: entered allmulticast mode [ 356.298991][T13908] bridge0: entered allmulticast mode [ 356.307613][T13908] macsec1: left allmulticast mode [ 356.312798][T13908] bridge0: left allmulticast mode [ 356.324374][T13908] bridge0: left promiscuous mode [ 356.627777][T13930] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3039'. [ 356.657802][T13931] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3043'. [ 356.907676][T13934] openvswitch: netlink: Message has 6 unknown bytes. [ 357.094165][T13942] loop8: detected capacity change from 0 to 128 [ 357.109758][T13942] ext4 filesystem being mounted at /208/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 357.371630][T13964] SELinux: Context system_u:object_r:src_t:s0 is not valid (left unmapped). [ 357.529092][T13950] cgroup: fork rejected by pids controller in /syz2 [ 357.887990][T13993] lo speed is unknown, defaulting to 1000 [ 357.894456][T13993] lo speed is unknown, defaulting to 1000 [ 357.900748][T13993] lo speed is unknown, defaulting to 1000 [ 357.916468][T13993] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 357.927404][T13993] lo speed is unknown, defaulting to 1000 [ 357.933786][T13993] lo speed is unknown, defaulting to 1000 [ 357.941302][T13993] lo speed is unknown, defaulting to 1000 [ 357.947427][T13993] lo speed is unknown, defaulting to 1000 [ 357.953655][T13993] lo speed is unknown, defaulting to 1000 [ 358.101651][T14006] lo speed is unknown, defaulting to 1000 [ 358.651651][T14016] ieee802154 phy1 wpan1: encryption failed: -22 [ 358.663151][T14016] loop2: detected capacity change from 0 to 512 [ 358.677978][T14016] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.3062: error while reading EA inode 32 err=-116 [ 358.692526][T14016] EXT4-fs (loop2): Remounting filesystem read-only [ 358.699194][T14016] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 358.710951][T14016] EXT4-fs (loop2): 1 orphan inode deleted [ 358.745486][T14023] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3065'. [ 358.796201][T14030] loop4: detected capacity change from 0 to 128 [ 358.828531][T14031] loop2: detected capacity change from 0 to 1024 [ 358.861957][T14031] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.876365][T14031] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 358.893054][T14031] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 358.905532][T14031] EXT4-fs (loop2): This should not happen!! Data will be lost [ 358.905532][T14031] [ 358.915218][T14031] EXT4-fs (loop2): Total free blocks count 0 [ 358.921225][T14031] EXT4-fs (loop2): Free/Dirty block details [ 358.927251][T14031] EXT4-fs (loop2): free_blocks=4293918720 [ 358.929898][T14037] lo speed is unknown, defaulting to 1000 [ 358.933017][T14031] EXT4-fs (loop2): dirty_blocks=16 [ 358.933032][T14031] EXT4-fs (loop2): Block reservation details [ 358.933045][T14031] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 358.938023][T14031] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm syz.2.3068: lblock 1 mapped to illegal pblock 1 (length 15) [ 358.971562][T14031] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 358.984046][T14031] EXT4-fs (loop2): This should not happen!! Data will be lost [ 358.984046][T14031] [ 359.013588][T14031] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.3068: lblock 1 mapped to illegal pblock 1 (length 3) [ 359.044534][T14031] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.3068: lblock 1 mapped to illegal pblock 1 (length 3) [ 359.064800][T14028] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.3068: lblock 1 mapped to illegal pblock 1 (length 3) [ 359.076546][T14046] openvswitch: netlink: Message has 6 unknown bytes. [ 359.091061][T14028] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.3068: lblock 1 mapped to illegal pblock 1 (length 3) [ 359.127350][T14031] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.3068: lblock 1 mapped to illegal pblock 1 (length 3) [ 359.158808][T14028] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.3068: lblock 1 mapped to illegal pblock 1 (length 3) [ 359.177964][T14031] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.3068: lblock 1 mapped to illegal pblock 1 (length 3) [ 359.213196][T14043] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.3068: lblock 1 mapped to illegal pblock 1 (length 3) [ 359.216804][ T29] kauditd_printk_skb: 747 callbacks suppressed [ 359.216822][ T29] audit: type=1326 audit(1756267667.963:17673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14039 comm="syz.9.3071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5c819ebe9 code=0x7ffc0000 [ 359.262139][ T29] audit: type=1326 audit(1756267667.984:17674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14039 comm="syz.9.3071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5c819ebe9 code=0x7ffc0000 [ 359.286087][ T29] audit: type=1326 audit(1756267668.016:17675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14058 comm="syz.8.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66365ebe9 code=0x7ffc0000 [ 359.310115][ T29] audit: type=1326 audit(1756267668.016:17676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14058 comm="syz.8.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66365ebe9 code=0x7ffc0000 [ 359.333853][ T29] audit: type=1326 audit(1756267668.016:17677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14058 comm="syz.8.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc66365ebe9 code=0x7ffc0000 [ 359.357523][ T29] audit: type=1326 audit(1756267668.016:17678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14058 comm="syz.8.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66365ebe9 code=0x7ffc0000 [ 359.381296][ T29] audit: type=1326 audit(1756267668.016:17679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14058 comm="syz.8.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66365ebe9 code=0x7ffc0000 [ 359.404955][ T29] audit: type=1326 audit(1756267668.016:17680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14058 comm="syz.8.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc66365ebe9 code=0x7ffc0000 [ 359.428915][ T29] audit: type=1326 audit(1756267668.016:17681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14058 comm="syz.8.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66365ebe9 code=0x7ffc0000 [ 359.452668][ T29] audit: type=1326 audit(1756267668.016:17682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14058 comm="syz.8.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66365ebe9 code=0x7ffc0000 [ 359.573174][T14076] lo speed is unknown, defaulting to 1000 [ 359.592262][T14082] bridge0: port 3(team0) entered blocking state [ 359.598783][T14082] bridge0: port 3(team0) entered disabled state [ 359.624311][T14082] team0: entered allmulticast mode [ 359.629713][T14082] team_slave_0: entered allmulticast mode [ 359.635603][T14082] team_slave_1: entered allmulticast mode [ 359.653372][T14082] team0: entered promiscuous mode [ 359.658577][T14082] team_slave_0: entered promiscuous mode [ 359.664815][T14082] team_slave_1: entered promiscuous mode [ 359.671283][T14082] bridge0: port 3(team0) entered blocking state [ 359.677590][T14082] bridge0: port 3(team0) entered forwarding state [ 359.730505][T14090] loop8: detected capacity change from 0 to 2048 [ 359.792242][T14100] loop4: detected capacity change from 0 to 512 [ 359.799000][T14100] EXT4-fs: Ignoring removed oldalloc option [ 359.813035][T14100] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 359.886548][T14116] loop8: detected capacity change from 0 to 128 [ 359.960711][T14128] loop4: detected capacity change from 0 to 2048 [ 360.062116][T14146] loop9: detected capacity change from 0 to 512 [ 360.104963][T14150] : renamed from bond0 (while UP) [ 360.183457][T14164] loop2: detected capacity change from 0 to 1024 [ 360.196290][T14164] EXT4-fs: Ignoring removed nobh option [ 360.207504][T14164] EXT4-fs: Ignoring removed orlov option [ 360.223476][T14168] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3121'. [ 360.241976][T14168] 8021q: adding VLAN 0 to HW filter on device bond1 [ 360.257077][T14168] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3121'. [ 360.314950][T14176] Q±6ã×\b‹¡Y­4: renamed from lo (while UP) [ 360.862547][T14213] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3137'. [ 360.863261][T14212] loop8: detected capacity change from 0 to 128 [ 360.971160][T14221] hub 6-0:1.0: USB hub found [ 360.980551][T14221] hub 6-0:1.0: 8 ports detected [ 360.999464][T14221] random: crng reseeded on system resumption [ 361.045556][T14223] SELinux: policydb magic number 0x40 does not match expected magic number 0xf97cff8c [ 361.065635][T14223] SELinux: failed to load policy [ 361.175196][T14233] veth0: entered promiscuous mode [ 361.190840][T14234] loop8: detected capacity change from 0 to 128 [ 361.197580][T14233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3143'. [ 361.323124][T14240] loop4: detected capacity change from 0 to 1024 [ 361.329800][T14240] ext4: Unknown parameter 'obj_role' [ 361.352075][T14244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3150'. [ 361.482202][T14249] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3152'. [ 361.494829][T14253] loop9: detected capacity change from 0 to 128 [ 361.508588][T14253] loop9: detected capacity change from 0 to 512 [ 361.516549][T14253] EXT4-fs: Ignoring removed i_version option [ 361.522641][T14253] journal_path: Non-blockdev passed as './bus' [ 361.528899][T14253] EXT4-fs: error: could not find journal device path [ 361.617574][T14269] loop4: detected capacity change from 0 to 1024 [ 361.633270][T14269] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.645381][T14269] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 361.660623][T14269] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 361.673079][T14269] EXT4-fs (loop4): This should not happen!! Data will be lost [ 361.673079][T14269] [ 361.682763][T14269] EXT4-fs (loop4): Total free blocks count 0 [ 361.688846][T14269] EXT4-fs (loop4): Free/Dirty block details [ 361.694785][T14269] EXT4-fs (loop4): free_blocks=4293918720 [ 361.700520][T14269] EXT4-fs (loop4): dirty_blocks=16 [ 361.705678][T14269] EXT4-fs (loop4): Block reservation details [ 361.711691][T14269] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 361.724471][T14276] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 1: comm syz.4.3158: lblock 1 mapped to illegal pblock 1 (length 15) [ 361.740204][T14276] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 361.752817][T14276] EXT4-fs (loop4): This should not happen!! Data will be lost [ 361.752817][T14276] [ 361.767308][T14269] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.3158: lblock 1 mapped to illegal pblock 1 (length 3) [ 361.781819][T14269] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.3158: lblock 1 mapped to illegal pblock 1 (length 3) [ 361.796203][T14269] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.3158: lblock 1 mapped to illegal pblock 1 (length 3) [ 361.810611][T14269] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.3158: lblock 1 mapped to illegal pblock 1 (length 3) [ 361.828098][T14263] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.3158: lblock 1 mapped to illegal pblock 1 (length 3) [ 361.843587][T14269] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.3158: lblock 1 mapped to illegal pblock 1 (length 3) [ 361.859220][T14263] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.3158: lblock 1 mapped to illegal pblock 1 (length 3) [ 361.873587][T14269] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.3158: lblock 1 mapped to illegal pblock 1 (length 3) [ 362.037625][T14284] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3164'. [ 362.121269][T14288] syzkaller1: entered promiscuous mode [ 362.126920][T14288] syzkaller1: entered allmulticast mode [ 362.217794][T14295] FAULT_INJECTION: forcing a failure. [ 362.217794][T14295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 362.230984][T14295] CPU: 1 UID: 0 PID: 14295 Comm: syz.8.3169 Not tainted syzkaller #0 PREEMPT(voluntary) [ 362.231025][T14295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 362.231038][T14295] Call Trace: [ 362.231045][T14295] [ 362.231054][T14295] __dump_stack+0x1d/0x30 [ 362.231079][T14295] dump_stack_lvl+0xe8/0x140 [ 362.231114][T14295] dump_stack+0x15/0x1b [ 362.231130][T14295] should_fail_ex+0x265/0x280 [ 362.231150][T14295] should_fail+0xb/0x20 [ 362.231165][T14295] should_fail_usercopy+0x1a/0x20 [ 362.231197][T14295] _copy_to_user+0x20/0xa0 [ 362.231224][T14295] simple_read_from_buffer+0xb5/0x130 [ 362.231245][T14295] proc_fail_nth_read+0x10e/0x150 [ 362.231278][T14295] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 362.231332][T14295] vfs_read+0x1a8/0x770 [ 362.231353][T14295] ? selinux_file_ioctl+0x308/0x3a0 [ 362.231373][T14295] ? __pfx_blkdev_ioctl+0x10/0x10 [ 362.231398][T14295] ? xfd_validate_state+0x45/0xf0 [ 362.231492][T14295] ksys_read+0xda/0x1a0 [ 362.231519][T14295] __x64_sys_read+0x40/0x50 [ 362.231545][T14295] x64_sys_call+0x27bc/0x2ff0 [ 362.231570][T14295] do_syscall_64+0xd2/0x200 [ 362.231636][T14295] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 362.231665][T14295] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 362.231764][T14295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.231790][T14295] RIP: 0033:0x7fc66365d5fc [ 362.231808][T14295] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 362.231830][T14295] RSP: 002b:00007fc6620bf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 362.231849][T14295] RAX: ffffffffffffffda RBX: 00007fc663885fa0 RCX: 00007fc66365d5fc [ 362.231912][T14295] RDX: 000000000000000f RSI: 00007fc6620bf0a0 RDI: 0000000000000004 [ 362.231924][T14295] RBP: 00007fc6620bf090 R08: 0000000000000000 R09: 0000000000000000 [ 362.231935][T14295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.231946][T14295] R13: 00007fc663886038 R14: 00007fc663885fa0 R15: 00007ffde74ebeb8 [ 362.231964][T14295] [ 362.511124][T14300] loop2: detected capacity change from 0 to 1024 [ 362.535838][T14306] loop7: detected capacity change from 0 to 128 [ 362.582045][T14311] veth0: entered promiscuous mode [ 362.587900][T14311] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3175'. [ 362.622374][T14300] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.3170: Allocating blocks 449-513 which overlap fs metadata [ 362.641988][T14300] SELinux: Context @ is not valid (left unmapped). [ 362.649060][T14300] EXT4-fs (loop2): pa ffff88810049de00: logic 48, phys. 177, len 21 [ 362.657146][T14300] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 362.672761][T14317] loop4: detected capacity change from 0 to 1024 [ 362.679998][T14317] EXT4-fs: test_dummy_encryption option not supported [ 362.753512][T14324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3181'. [ 362.768632][ T8502] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.777710][T14324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3181'. [ 362.792708][ T8502] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.804774][ T8502] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.835106][ T8502] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.864901][T14327] lo speed is unknown, defaulting to 1000 [ 362.902677][T14331] netlink: 'syz.4.3182': attribute type 1 has an invalid length. [ 362.910565][T14331] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3182'. [ 362.968163][T14333] loop2: detected capacity change from 0 to 512 [ 363.037885][T14333] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 363.056232][T14333] EXT4-fs (loop2): 1 truncate cleaned up [ 363.341184][T14336] lo speed is unknown, defaulting to 1000 [ 363.423445][T14337] lo speed is unknown, defaulting to 1000 [ 363.816862][T14345] vlan2: entered allmulticast mode [ 363.822220][T14345] dummy0: entered allmulticast mode [ 363.939033][T14351] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3188'. [ 364.058507][ T29] kauditd_printk_skb: 623 callbacks suppressed [ 364.058528][ T29] audit: type=1326 audit(1756267673.055:18306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14356 comm="syz.7.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7fc9ebe9 code=0x7ffc0000 [ 364.098790][T14347] SELinux: policydb table sizes (2,655368) do not match mine (8,7) [ 364.128427][T14347] SELinux: failed to load policy [ 364.144416][T14347] netlink: 'syz.9.3183': attribute type 21 has an invalid length. [ 364.189842][ T29] audit: type=1326 audit(1756267673.097:18307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14356 comm="syz.7.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e7fc9ebe9 code=0x7ffc0000 [ 364.213694][ T29] audit: type=1326 audit(1756267673.097:18308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14356 comm="syz.7.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7fc9ebe9 code=0x7ffc0000 [ 364.237325][ T29] audit: type=1326 audit(1756267673.097:18309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14356 comm="syz.7.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7fc9ebe9 code=0x7ffc0000 [ 364.260957][ T29] audit: type=1326 audit(1756267673.097:18310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14356 comm="syz.7.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e7fc9ebe9 code=0x7ffc0000 [ 364.284591][ T29] audit: type=1326 audit(1756267673.097:18311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14356 comm="syz.7.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7fc9ebe9 code=0x7ffc0000 [ 364.308197][ T29] audit: type=1326 audit(1756267673.097:18312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14356 comm="syz.7.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7fc9ebe9 code=0x7ffc0000 [ 364.331854][ T29] audit: type=1326 audit(1756267673.097:18313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14356 comm="syz.7.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1e7fc9ebe9 code=0x7ffc0000 [ 364.355458][ T29] audit: type=1326 audit(1756267673.097:18314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14356 comm="syz.7.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7fc9ebe9 code=0x7ffc0000 [ 364.379160][ T29] audit: type=1326 audit(1756267673.097:18315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14356 comm="syz.7.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7fc9ebe9 code=0x7ffc0000 [ 364.460528][T14371] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3194'. [ 364.531470][T14375] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3196'. [ 364.951438][T14398] netlink: 'syz.2.3206': attribute type 1 has an invalid length. [ 364.966462][T14398] netlink: 'syz.2.3206': attribute type 1 has an invalid length. [ 364.986950][T14398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.001500][T14398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3206'. [ 365.025591][T14398] bond0 (unregistering): Released all slaves [ 365.147404][T14409] netlink: 'syz.2.3208': attribute type 3 has an invalid length. [ 365.471598][T14424] loop2: detected capacity change from 0 to 1024 [ 365.501811][T14424] EXT4-fs: Mount option(s) incompatible with ext2 [ 365.628314][T14435] loop8: detected capacity change from 0 to 512 [ 365.653529][T14436] loop7: detected capacity change from 0 to 1024 [ 365.660296][T14435] journal_path: Lookup failure for './file0' [ 365.666376][T14435] EXT4-fs: error: could not find journal device path [ 365.674673][T14436] EXT4-fs: Ignoring removed bh option [ 365.690392][T14436] EXT4-fs: inline encryption not supported [ 365.705585][T14436] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 365.705913][T14435] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14435 comm=syz.8.3218 [ 365.725321][T14436] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 365.775651][T14436] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm syz.7.3219: lblock 2 mapped to illegal pblock 2 (length 1) [ 365.811901][T14436] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.3219: lblock 0 mapped to illegal pblock 48 (length 1) [ 365.864296][T14436] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.3219: Failed to acquire dquot type 0 [ 365.897638][T14447] loop8: detected capacity change from 0 to 512 [ 365.908843][T14436] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 365.927557][T14436] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.3219: mark_inode_dirty error [ 365.949133][T14447] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 365.962712][T14436] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 365.981598][T14447] EXT4-fs (loop8): orphan cleanup on readonly fs [ 365.998386][T14436] EXT4-fs (loop7): 1 orphan inode deleted [ 366.004394][T14447] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:517: comm syz.8.3222: Block bitmap for bg 0 marked uninitialized [ 366.018271][T14436] EXT4-fs mount: 28 callbacks suppressed [ 366.018290][T14436] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.047511][ T8532] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:39: lblock 1 mapped to illegal pblock 1 (length 1) [ 366.081919][T14447] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 366.099136][ T8532] EXT4-fs error (device loop7): ext4_release_dquot:6973: comm kworker/u8:39: Failed to release dquot type 0 [ 366.131289][T14447] EXT4-fs (loop8): 1 orphan inode deleted [ 366.146517][T14447] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 366.169241][T14436] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.3219: lblock 0 mapped to illegal pblock 48 (length 1) [ 366.190726][T14447] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.225999][ T7197] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.289964][T14457] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 366.375572][T14465] __nla_validate_parse: 5 callbacks suppressed [ 366.375635][T14465] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3223'. [ 366.456667][T14470] loop9: detected capacity change from 0 to 512 [ 366.523730][T14473] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3231'. [ 366.687917][ T3412] hid_parser_main: 26 callbacks suppressed [ 366.687975][ T3412] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x4 [ 366.701819][ T3412] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x2 [ 366.711021][ T3412] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x3 [ 366.719462][ T3412] hid-generic 0000:3000000:0000.0006: hidraw0: HID v0.00 Device [sy] on syz0 [ 366.760846][T14517] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3241'. [ 366.830700][T14527] loop2: detected capacity change from 0 to 2048 [ 366.867407][T14527] loop2: p3 p4 < > [ 366.871470][T14527] loop2: p3 size 57344 extends beyond EOD, truncated [ 366.910119][T14539] loop2: detected capacity change from 0 to 512 [ 366.918879][T14539] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.3243: error while reading EA inode 32 err=-116 [ 366.931778][T14539] EXT4-fs (loop2): Remounting filesystem read-only [ 366.938517][T14539] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 366.950120][T14539] EXT4-fs (loop2): 1 orphan inode deleted [ 366.959478][T14539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.973662][T14539] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.011584][T14553] loop2: detected capacity change from 0 to 1024 [ 367.032213][T14553] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.063581][T12980] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.087725][T14567] FAULT_INJECTION: forcing a failure. [ 367.087725][T14567] name failslab, interval 1, probability 0, space 0, times 0 [ 367.100518][T14567] CPU: 1 UID: 0 PID: 14567 Comm: syz.2.3245 Not tainted syzkaller #0 PREEMPT(voluntary) [ 367.100630][T14567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 367.100643][T14567] Call Trace: [ 367.100651][T14567] [ 367.100661][T14567] __dump_stack+0x1d/0x30 [ 367.100710][T14567] dump_stack_lvl+0xe8/0x140 [ 367.100736][T14567] dump_stack+0x15/0x1b [ 367.100759][T14567] should_fail_ex+0x265/0x280 [ 367.100787][T14567] should_failslab+0x8c/0xb0 [ 367.100820][T14567] kmem_cache_alloc_noprof+0x50/0x310 [ 367.100880][T14567] ? p9_client_prepare_req+0xef/0x820 [ 367.100920][T14567] p9_client_prepare_req+0xef/0x820 [ 367.100951][T14567] ? read_word_at_a_time+0x10/0x20 [ 367.101013][T14567] ? __rcu_read_unlock+0x4f/0x70 [ 367.101115][T14567] p9_client_rpc+0xdf/0x6c0 [ 367.101144][T14567] ? terminate_walk+0x27f/0x2a0 [ 367.101180][T14567] ? path_lookupat+0x1fc/0x2a0 [ 367.101294][T14567] ? p9_client_stat+0x5a/0x200 [ 367.101413][T14567] ? should_failslab+0x8c/0xb0 [ 367.101507][T14567] ? __kmalloc_cache_noprof+0x189/0x320 [ 367.101547][T14567] p9_client_stat+0x8e/0x200 [ 367.101633][T14567] v9fs_vfs_getattr+0x143/0x260 [ 367.101747][T14567] vfs_getattr_nosec+0x143/0x1e0 [ 367.101776][T14567] vfs_statx+0x113/0x390 [ 367.101805][T14567] vfs_fstatat+0x115/0x170 [ 367.101858][T14567] __se_sys_newfstatat+0x55/0x260 [ 367.101906][T14567] ? __fget_files+0x184/0x1c0 [ 367.101939][T14567] ? fput+0x8f/0xc0 [ 367.102056][T14567] ? ksys_write+0x192/0x1a0 [ 367.102086][T14567] __x64_sys_newfstatat+0x55/0x70 [ 367.102181][T14567] x64_sys_call+0x135a/0x2ff0 [ 367.102207][T14567] do_syscall_64+0xd2/0x200 [ 367.102242][T14567] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 367.102317][T14567] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 367.102352][T14567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.102380][T14567] RIP: 0033:0x7ff64319ebe9 [ 367.102436][T14567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.102518][T14567] RSP: 002b:00007ff641bff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 367.102543][T14567] RAX: ffffffffffffffda RBX: 00007ff6433c5fa0 RCX: 00007ff64319ebe9 [ 367.102560][T14567] RDX: 0000000000000000 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 367.102576][T14567] RBP: 00007ff641bff090 R08: 0000000000000000 R09: 0000000000000000 [ 367.102608][T14567] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001 [ 367.102624][T14567] R13: 00007ff6433c6038 R14: 00007ff6433c5fa0 R15: 00007ffd84b57c08 [ 367.102687][T14567] [ 367.436432][T14611] loop2: detected capacity change from 0 to 1024 [ 367.449077][T14611] EXT4-fs: Ignoring removed nobh option [ 367.461658][T14611] EXT4-fs: Ignoring removed oldalloc option [ 367.467853][T14611] EXT4-fs: Ignoring removed i_version option [ 367.475012][T14611] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 367.488422][T14611] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz.2.3246: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 367.509077][T14611] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.3246: couldn't read orphan inode 11 (err -117) [ 367.521515][T14611] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.609560][T14611] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.3246: Invalid block bitmap block 0 in block_group 0 [ 367.624073][T14611] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.3246: Failed to acquire dquot type 0 [ 367.684069][T12980] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.695137][ T8532] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:39: Failed to release dquot type 0 [ 367.730521][T14650] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3253'. [ 367.748618][T14648] FAULT_INJECTION: forcing a failure. [ 367.748618][T14648] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.761848][T14648] CPU: 1 UID: 0 PID: 14648 Comm: syz.8.3254 Not tainted syzkaller #0 PREEMPT(voluntary) [ 367.761883][T14648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 367.761899][T14648] Call Trace: [ 367.761908][T14648] [ 367.761917][T14648] __dump_stack+0x1d/0x30 [ 367.761985][T14648] dump_stack_lvl+0xe8/0x140 [ 367.762007][T14648] dump_stack+0x15/0x1b [ 367.762023][T14648] should_fail_ex+0x265/0x280 [ 367.762127][T14648] should_fail+0xb/0x20 [ 367.762148][T14648] should_fail_usercopy+0x1a/0x20 [ 367.762210][T14648] _copy_from_user+0x1c/0xb0 [ 367.762267][T14648] sock_do_ioctl+0xe6/0x220 [ 367.762297][T14648] sock_ioctl+0x41b/0x610 [ 367.762380][T14648] ? __pfx_sock_ioctl+0x10/0x10 [ 367.762450][T14648] __se_sys_ioctl+0xce/0x140 [ 367.762471][T14648] __x64_sys_ioctl+0x43/0x50 [ 367.762554][T14648] x64_sys_call+0x1816/0x2ff0 [ 367.762581][T14648] do_syscall_64+0xd2/0x200 [ 367.762616][T14648] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 367.762639][T14648] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 367.762729][T14648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.762818][T14648] RIP: 0033:0x7fc66365ebe9 [ 367.762835][T14648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.762858][T14648] RSP: 002b:00007fc6620bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 367.762882][T14648] RAX: ffffffffffffffda RBX: 00007fc663885fa0 RCX: 00007fc66365ebe9 [ 367.762898][T14648] RDX: 0000200000000000 RSI: 0000000000008923 RDI: 0000000000000004 [ 367.762913][T14648] RBP: 00007fc6620bf090 R08: 0000000000000000 R09: 0000000000000000 [ 367.762955][T14648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.762971][T14648] R13: 00007fc663886038 R14: 00007fc663885fa0 R15: 00007ffde74ebeb8 [ 367.763106][T14648] [ 367.970565][T14657] loop8: detected capacity change from 0 to 512 [ 367.985178][T14657] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.999556][T14657] ext4 filesystem being mounted at /250/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.011284][T14664] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3257'. [ 368.048533][T14657] loop8: detected capacity change from 512 to 64 [ 368.085176][T10185] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6334: Out of memory [ 368.109393][T10185] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error [ 368.154494][T14675] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3263'. [ 368.743550][T10185] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.753754][ T8496] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.802042][ T8496] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.830643][ T8496] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.897728][ T8496] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.966679][ T8496] bridge_slave_1: left allmulticast mode [ 368.972362][ T8496] bridge_slave_1: left promiscuous mode [ 368.978035][ T8496] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.986016][ T8496] bridge_slave_0: left allmulticast mode [ 368.991731][ T8496] bridge_slave_0: left promiscuous mode [ 368.997433][ T8496] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.060480][ T8496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.070148][ T8496] bond0 (unregistering): Released all slaves [ 369.079090][ T8496] bond1 (unregistering): (slave batadv1): Releasing active interface [ 369.087955][ T8496] bond1 (unregistering): Released all slaves [ 369.135124][ T8496] tipc: Left network mode [ 369.141843][ T8496] hsr_slave_0: left promiscuous mode [ 369.147498][ T8496] hsr_slave_1: left promiscuous mode [ 369.153216][ T8496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.160596][ T8496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.170459][ T8496] veth1_macvtap: left promiscuous mode [ 369.176032][ T8496] veth0_macvtap: left promiscuous mode [ 369.181738][ T8496] veth1_vlan: left promiscuous mode [ 369.187019][ T8496] veth0_vlan: left promiscuous mode [ 369.238853][ T8496] team0 (unregistering): Port device team_slave_1 removed [ 369.248444][ T8496] team0 (unregistering): Port device team_slave_0 removed [ 369.275279][ T3399] lo speed is unknown, defaulting to 1000 [ 369.281271][ T3399] infiniband syz0: ib_query_port failed (-19) [ 369.535030][ T8496] IPVS: stop unused estimator thread 0... [ 370.226008][ T29] kauditd_printk_skb: 263 callbacks suppressed [ 370.226041][ T29] audit: type=1400 audit(1756267679.533:18572): avc: denied { mount } for pid=14683 comm="syz.2.3266" name="/" dev="configfs" ino=1156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 370.257415][ T29] audit: type=1400 audit(1756267679.554:18573): avc: denied { search } for pid=14683 comm="syz.2.3266" name="/" dev="configfs" ino=1156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 370.435104][ T29] audit: type=1326 audit(1756267679.754:18574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14694 comm="syz.9.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5c819ebe9 code=0x7ffc0000 [ 370.458961][ T29] audit: type=1326 audit(1756267679.754:18575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14694 comm="syz.9.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5c819ebe9 code=0x7ffc0000 [ 370.482618][ T29] audit: type=1326 audit(1756267679.754:18576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14694 comm="syz.9.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fb5c819ebe9 code=0x7ffc0000 [ 370.506156][ T29] audit: type=1326 audit(1756267679.754:18577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14694 comm="syz.9.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5c819ebe9 code=0x7ffc0000 [ 370.529751][ T29] audit: type=1326 audit(1756267679.754:18578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14694 comm="syz.9.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5c819ebe9 code=0x7ffc0000 [ 370.553346][ T29] audit: type=1326 audit(1756267679.754:18579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14694 comm="syz.9.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb5c819ebe9 code=0x7ffc0000 [ 370.577028][ T29] audit: type=1326 audit(1756267679.754:18580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14694 comm="syz.9.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5c819ebe9 code=0x7ffc0000 [ 370.600698][ T29] audit: type=1326 audit(1756267679.754:18581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14694 comm="syz.9.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5c819ebe9 code=0x7ffc0000 [ 370.759131][T14706] futex_wake_op: syz.9.3270 tries to shift op by -1; fix this program [ 371.050094][T14712] loop9: detected capacity change from 0 to 512 [ 371.058327][T14691] chnl_net:caif_netlink_parms(): no params data found [ 371.117593][T14717] bond_slave_0: entered promiscuous mode [ 371.123412][T14717] bond_slave_1: entered promiscuous mode [ 371.131351][T14717] macsec1: entered allmulticast mode [ 371.136704][T14717] bond0: entered allmulticast mode [ 371.141922][T14717] bond_slave_0: entered allmulticast mode [ 371.147825][T14717] bond_slave_1: entered allmulticast mode [ 371.167904][T14717] bond0: left allmulticast mode [ 371.172962][T14717] bond_slave_0: left allmulticast mode [ 371.178519][T14717] bond_slave_1: left allmulticast mode [ 371.184017][T14717] bond_slave_0: left promiscuous mode [ 371.189432][T14717] bond_slave_1: left promiscuous mode [ 371.224266][T14691] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.231603][T14691] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.238921][T14691] bridge_slave_0: entered allmulticast mode [ 371.245676][T14691] bridge_slave_0: entered promiscuous mode [ 371.252899][T14691] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.260048][T14691] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.268014][T14727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3276'. [ 371.277490][T14691] bridge_slave_1: entered allmulticast mode [ 371.284034][T14691] bridge_slave_1: entered promiscuous mode [ 371.306611][T14691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.316214][T14726] veth0: entered promiscuous mode [ 371.330594][T14691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.356757][T14691] team0: Port device team_slave_0 added [ 371.364046][T14691] team0: Port device team_slave_1 added [ 371.552402][T14691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.559399][T14691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.585351][T14691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.656812][T14738] netlink: 'syz.4.3279': attribute type 1 has an invalid length. [ 371.694516][T14738] 8021q: adding VLAN 0 to HW filter on device bond1 [ 371.736497][T14691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.743593][T14691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.769552][T14691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.803387][T14691] hsr_slave_0: entered promiscuous mode [ 371.817436][T14691] hsr_slave_1: entered promiscuous mode [ 371.823550][T14691] debugfs: 'hsr0' already exists in 'hsr' [ 371.829366][T14691] Cannot create hsr debugfs directory [ 372.018232][T14754] loop9: detected capacity change from 0 to 512 [ 372.101121][T14691] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 372.110821][T14691] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 372.119713][T14691] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 372.129160][T14691] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 372.167534][T14691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.180347][T14691] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.192343][ T3455] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.199466][ T3455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.211455][ T8496] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.218538][ T8496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.288112][T14691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.405080][T14691] veth0_vlan: entered promiscuous mode [ 372.413198][T14691] veth1_vlan: entered promiscuous mode [ 372.430647][T14691] veth0_macvtap: entered promiscuous mode [ 372.438297][T14691] veth1_macvtap: entered promiscuous mode [ 372.450129][T14691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.461780][T14691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.473362][ T3455] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.482329][ T8532] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.492476][ T8532] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.501224][ T8532] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.545792][T14782] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3267'. [ 372.606437][T14784] bond_slave_0: entered promiscuous mode [ 372.612207][T14784] bond_slave_1: entered promiscuous mode [ 372.618196][T14784] macsec1: entered allmulticast mode [ 372.623494][T14784] bond0: entered allmulticast mode [ 372.628767][T14784] bond_slave_0: entered allmulticast mode [ 372.634586][T14784] bond_slave_1: entered allmulticast mode [ 372.644832][T14784] bond0: left allmulticast mode [ 372.649896][T14784] bond_slave_0: left allmulticast mode [ 372.655445][T14784] bond_slave_1: left allmulticast mode [ 372.661004][T14784] bond_slave_0: left promiscuous mode [ 372.664017][T14788] loop4: detected capacity change from 0 to 1024 [ 372.666424][T14784] bond_slave_1: left promiscuous mode [ 372.686641][T14788] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.746499][T14788] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.753765][T14788] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.789184][T14788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.799614][T14788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.803213][T14799] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3289'. [ 372.852808][ T3455] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.861888][ T3455] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.876788][T13300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.879219][ T3455] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.894897][ T3455] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.908868][ T3455] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.917853][ T3455] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.928036][ T3455] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.937010][ T3455] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.027492][T14813] loop4: detected capacity change from 0 to 2048 [ 373.044650][T14813] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.077318][T13300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.097593][T14821] loop7: detected capacity change from 0 to 128 [ 373.547314][T14832] bond_slave_0: entered promiscuous mode [ 373.553053][T14832] bond_slave_1: entered promiscuous mode [ 373.558719][T14832] dummy0: entered promiscuous mode [ 373.573429][T14834] loop4: detected capacity change from 0 to 512 [ 373.599766][T14832] macsec1: entered allmulticast mode [ 373.605134][T14832] bond0: entered allmulticast mode [ 373.610344][T14832] bond_slave_0: entered allmulticast mode [ 373.616243][T14832] bond_slave_1: entered allmulticast mode [ 373.623499][T14832] dummy0: entered allmulticast mode [ 373.632177][T14832] bond0: left allmulticast mode [ 373.637096][T14832] bond_slave_0: left allmulticast mode [ 373.642637][T14832] bond_slave_1: left allmulticast mode [ 373.649702][T14832] dummy0: left allmulticast mode [ 373.654765][T14832] bond_slave_0: left promiscuous mode [ 373.660258][T14832] bond_slave_1: left promiscuous mode [ 373.665670][T14832] dummy0: left promiscuous mode [ 373.698236][T14834] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.759992][T14834] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.810964][T13300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.921645][T14841] loop7: detected capacity change from 0 to 1024 [ 373.928586][T14841] EXT4-fs: Ignoring removed bh option [ 373.951851][T14847] loop8: detected capacity change from 0 to 2048 [ 373.960274][T14841] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.972976][T14850] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3304'. [ 373.990165][T14847] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.031332][T14841] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.038668][T14841] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.050245][T14691] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.150872][T14841] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.158658][T14866] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3313'. [ 374.185059][T14841] bridge1: left allmulticast mode [ 374.193156][T14862] vxcan1: entered allmulticast mode [ 374.215903][T14865] veth0: entered promiscuous mode [ 374.233015][ T8496] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.257386][ T8496] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.273764][T14870] loop9: detected capacity change from 0 to 512 [ 374.288757][ T8496] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.301711][T14872] macsec1: entered allmulticast mode [ 374.307094][T14872] bond0: entered allmulticast mode [ 374.312303][T14872] bond_slave_0: entered allmulticast mode [ 374.318101][T14872] bond_slave_1: entered allmulticast mode [ 374.325260][T14872] bond0: left allmulticast mode [ 374.330179][T14872] bond_slave_0: left allmulticast mode [ 374.335716][T14872] bond_slave_1: left allmulticast mode [ 374.347061][ T8496] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.677754][T14889] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3321'. [ 374.725383][ T7197] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.931484][T14891] 9pnet_virtio: no channels available for device 127.0.0.1 [ 375.002337][T14901] loop7: detected capacity change from 0 to 2048 [ 375.018585][T14901] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.041676][ T7197] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.128025][ T29] kauditd_printk_skb: 314 callbacks suppressed [ 375.128118][ T29] audit: type=1326 audit(1756267684.680:18896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14907 comm="syz.9.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5c819ebe9 code=0x7ffc0000 [ 375.131624][T14910] loop7: detected capacity change from 0 to 512 [ 375.158187][ T29] audit: type=1326 audit(1756267684.690:18897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14907 comm="syz.9.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb5c819ebe9 code=0x7ffc0000 [ 375.188034][ T29] audit: type=1326 audit(1756267684.690:18898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14907 comm="syz.9.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5c819ebe9 code=0x7ffc0000 [ 375.211714][ T29] audit: type=1326 audit(1756267684.690:18899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14907 comm="syz.9.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5c819ebe9 code=0x7ffc0000 [ 375.229439][T14910] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.235306][ T29] audit: type=1326 audit(1756267684.690:18900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14907 comm="syz.9.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb5c819ebe9 code=0x7ffc0000 [ 375.249388][T14910] ext4 filesystem being mounted at /465/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.271269][ T29] audit: type=1326 audit(1756267684.690:18901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14907 comm="syz.9.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5c819ebe9 code=0x7ffc0000 [ 375.305313][ T29] audit: type=1326 audit(1756267684.690:18902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14907 comm="syz.9.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5c819ebe9 code=0x7ffc0000 [ 375.329072][ T29] audit: type=1326 audit(1756267684.690:18903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14907 comm="syz.9.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb5c819ebe9 code=0x7ffc0000 [ 375.352746][ T29] audit: type=1326 audit(1756267684.690:18904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14907 comm="syz.9.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5c819ebe9 code=0x7ffc0000 [ 375.376519][ T29] audit: type=1326 audit(1756267684.690:18905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14907 comm="syz.9.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5c819ebe9 code=0x7ffc0000 [ 375.405346][ T7197] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.464901][T14920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3333'. [ 375.517395][T14928] loop9: detected capacity change from 0 to 1024 [ 375.524570][T14928] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 375.535671][T14928] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 375.546038][T14928] JBD2: no valid journal superblock found [ 375.551846][T14928] EXT4-fs (loop9): Could not load journal inode [ 375.708547][T14941] loop4: detected capacity change from 0 to 512 [ 375.734374][T14941] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.747043][T14941] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.777402][T14947] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 375.777549][T13300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.859972][T14954] loop4: detected capacity change from 0 to 128 [ 375.885955][T14956] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3347'. [ 376.106729][T14960] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3348'. [ 376.524929][T14967] macsec1: entered allmulticast mode [ 376.530352][T14967] bond0: entered allmulticast mode [ 376.535553][T14967] bond_slave_0: entered allmulticast mode [ 376.541317][T14967] bond_slave_1: entered allmulticast mode [ 376.693152][T14967] bond0: left allmulticast mode [ 376.698116][T14967] bond_slave_0: left allmulticast mode [ 376.703679][T14967] bond_slave_1: left allmulticast mode [ 377.581883][T15001] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3365'. [ 377.609149][T15004] loop4: detected capacity change from 0 to 128 [ 378.100642][T15052] bond_slave_0: entered promiscuous mode [ 378.106438][T15052] bond_slave_1: entered promiscuous mode [ 378.112118][T15052] dummy0: entered promiscuous mode [ 378.118170][T15052] macsec1: entered allmulticast mode [ 378.123740][T15052] bond0: entered allmulticast mode [ 378.128897][T15052] bond_slave_0: entered allmulticast mode [ 378.134701][T15052] bond_slave_1: entered allmulticast mode [ 378.140518][T15052] dummy0: entered allmulticast mode [ 378.147613][T15052] bond0: left allmulticast mode [ 378.152656][T15052] bond_slave_0: left allmulticast mode [ 378.158137][T15052] bond_slave_1: left allmulticast mode [ 378.167106][T15052] dummy0: left allmulticast mode [ 378.172126][T15052] bond_slave_0: left promiscuous mode [ 378.177507][T15052] bond_slave_1: left promiscuous mode [ 378.182914][T15052] dummy0: left promiscuous mode [ 378.364104][T15064] cgroup: Unknown subsys name 'cpuset' [ 378.429203][T15071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3391'. [ 378.438193][T15071] netlink: 348 bytes leftover after parsing attributes in process `syz.4.3391'. [ 378.447254][T15071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3391'. [ 378.456116][T15071] netlink: 348 bytes leftover after parsing attributes in process `syz.4.3391'. [ 378.465709][T15071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3391'. [ 378.643847][T15087] loop9: detected capacity change from 0 to 1024 [ 378.663091][T15092] loop2: detected capacity change from 0 to 128 [ 378.672253][T15087] loop9: detected capacity change from 0 to 2048 [ 379.048326][T15101] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3404'. [ 379.626990][T15130] loop2: detected capacity change from 0 to 512 [ 379.648454][T15130] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.661266][T15130] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.711031][T15130] loop2: detected capacity change from 512 to 64 [ 379.755304][T12980] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 379.770973][T12980] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error [ 380.040664][T12980] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.076879][ T8530] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.200446][ T8530] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.329249][ T8530] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.447306][ T29] kauditd_printk_skb: 510 callbacks suppressed [ 380.447320][ T29] audit: type=1326 audit(1756267690.257:19416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15151 comm="syz.4.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc72c74ebe9 code=0x7ffc0000 [ 380.477149][ T29] audit: type=1326 audit(1756267690.267:19417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15151 comm="syz.4.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc72c74ebe9 code=0x7ffc0000 [ 380.523189][ T29] audit: type=1326 audit(1756267690.278:19418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15151 comm="syz.4.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc72c74ebe9 code=0x7ffc0000 [ 380.546850][ T29] audit: type=1326 audit(1756267690.278:19419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15151 comm="syz.4.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc72c74ebe9 code=0x7ffc0000 [ 380.570473][ T29] audit: type=1326 audit(1756267690.278:19420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15151 comm="syz.4.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc72c74ebe9 code=0x7ffc0000 [ 380.594057][ T29] audit: type=1326 audit(1756267690.278:19421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15151 comm="syz.4.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc72c74ebe9 code=0x7ffc0000 [ 380.617716][ T29] audit: type=1326 audit(1756267690.278:19422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15151 comm="syz.4.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc72c74ebe9 code=0x7ffc0000 [ 380.641335][ T29] audit: type=1326 audit(1756267690.278:19423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15151 comm="syz.4.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc72c74ebe9 code=0x7ffc0000 [ 380.664987][ T29] audit: type=1326 audit(1756267690.278:19424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15151 comm="syz.4.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc72c74ebe9 code=0x7ffc0000 [ 380.688727][ T29] audit: type=1326 audit(1756267690.278:19425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15151 comm="syz.4.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc72c74ebe9 code=0x7ffc0000 [ 380.810635][ T8530] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.919283][ T8530] bridge_slave_1: left allmulticast mode [ 380.925056][ T8530] bridge_slave_1: left promiscuous mode [ 380.930789][ T8530] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.931359][T15175] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3431'. [ 380.956410][ T8530] bridge_slave_0: left allmulticast mode [ 380.962206][ T8530] bridge_slave_0: left promiscuous mode [ 380.968024][ T8530] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.104462][ T8530]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.129715][ T8530]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.142441][ T8530]  (unregistering): Released all slaves [ 381.152792][ T8530] bond0 (unregistering): Released all slaves [ 381.162239][T15175] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (255) [ 381.212586][ T8530] hsr_slave_0: left promiscuous mode [ 381.222375][ T8530] hsr_slave_1: left promiscuous mode [ 381.228985][ T8530] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.236560][ T8530] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.244245][ T8530] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.251700][ T8530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.263554][ T8530] veth1_macvtap: left promiscuous mode [ 381.269205][ T8530] veth0_macvtap: left promiscuous mode [ 381.276458][ T8530] veth1_vlan: left promiscuous mode [ 381.282369][ T8530] veth0_vlan: left promiscuous mode [ 381.370363][ T8530] team0 (unregistering): Port device team_slave_1 removed [ 381.579912][ T8530] team0 (unregistering): Port device team_slave_0 removed [ 381.832072][T15154] chnl_net:caif_netlink_parms(): no params data found [ 381.858216][T15203] loop4: detected capacity change from 0 to 1024 [ 381.883089][T15154] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.890193][T15154] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.898761][T15203] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.913184][T15154] bridge_slave_0: entered allmulticast mode [ 381.920073][T15203] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 381.924502][T15154] bridge_slave_0: entered promiscuous mode [ 381.933510][T15203] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 381.953345][T15154] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.960448][T15154] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.969042][T15154] bridge_slave_1: entered allmulticast mode [ 381.975161][T15203] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 381.976626][T15154] bridge_slave_1: entered promiscuous mode [ 381.987629][T15203] EXT4-fs (loop4): This should not happen!! Data will be lost [ 381.987629][T15203] [ 382.003073][T15203] EXT4-fs (loop4): Total free blocks count 0 [ 382.009096][T15203] EXT4-fs (loop4): Free/Dirty block details [ 382.014663][T15215] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 1: comm syz.4.3436: lblock 1 mapped to illegal pblock 1 (length 15) [ 382.015121][T15203] EXT4-fs (loop4): free_blocks=4293918720 [ 382.035007][T15203] EXT4-fs (loop4): dirty_blocks=64 [ 382.040129][T15203] EXT4-fs (loop4): Block reservation details [ 382.046162][T15203] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 382.055898][T15214] 9pnet_fd: Insufficient options for proto=fd [ 382.065517][T15215] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 382.085593][T15203] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.3436: lblock 1 mapped to illegal pblock 1 (length 3) [ 382.101058][T15203] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.3436: lblock 1 mapped to illegal pblock 1 (length 3) [ 382.115743][T15203] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.3436: lblock 1 mapped to illegal pblock 1 (length 3) [ 382.130428][T15203] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.3436: lblock 1 mapped to illegal pblock 1 (length 3) [ 382.148238][T15203] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.3436: lblock 1 mapped to illegal pblock 1 (length 3) [ 382.159348][T15154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.174353][T15154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.188652][T15197] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.3436: lblock 1 mapped to illegal pblock 1 (length 3) [ 382.204307][T15197] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.3436: lblock 1 mapped to illegal pblock 1 (length 3) [ 382.211222][T15219] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3442'. [ 382.220209][T15197] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.3436: lblock 1 mapped to illegal pblock 1 (length 3) [ 382.242957][T15154] team0: Port device team_slave_0 added [ 382.249781][T15154] team0: Port device team_slave_1 added [ 382.274797][T15154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.281803][T15154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.307776][T15154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.323889][T15154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.330942][T15154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.356978][T15154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.406562][T15154] hsr_slave_0: entered promiscuous mode [ 382.412665][T15154] hsr_slave_1: entered promiscuous mode [ 382.418939][T15154] debugfs: 'hsr0' already exists in 'hsr' [ 382.424760][T15154] Cannot create hsr debugfs directory [ 382.646137][T15154] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 382.664789][T15154] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 382.677605][T15154] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 382.687159][T15154] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 382.707549][T15154] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.714678][T15154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.722123][T15154] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.729204][T15154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.762203][T15154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.774533][T15154] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.875832][T15154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.409375][T15154] veth0_vlan: entered promiscuous mode [ 383.420661][T15326] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3454'. [ 383.434575][T15154] veth1_vlan: entered promiscuous mode [ 383.478420][T15154] veth0_macvtap: entered promiscuous mode [ 383.498506][T15154] veth1_macvtap: entered promiscuous mode [ 383.568317][T15154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.593247][T15154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.613782][ T8530] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.630981][T15355] loop9: detected capacity change from 0 to 1024 [ 383.667728][ T8530] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.688733][T15355] loop9: detected capacity change from 0 to 2048 [ 383.706629][ T8530] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.706670][ T8530] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.849679][T15384] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3466'. [ 383.936254][T15397] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3469'. [ 384.162262][T15448] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3481'. [ 384.245869][T15464] loop8: detected capacity change from 0 to 256 [ 384.546083][T15509] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3494'. [ 384.643553][T15526] loop9: detected capacity change from 0 to 1024 [ 384.667648][T15526] loop9: detected capacity change from 0 to 2048 [ 384.775401][T15512] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3495'. [ 384.943873][T15555] FAULT_INJECTION: forcing a failure. [ 384.943873][T15555] name failslab, interval 1, probability 0, space 0, times 0 [ 384.956570][T15555] CPU: 0 UID: 0 PID: 15555 Comm: syz.7.3506 Not tainted syzkaller #0 PREEMPT(voluntary) [ 384.956685][T15555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 384.956748][T15555] Call Trace: [ 384.956757][T15555] [ 384.956811][T15555] __dump_stack+0x1d/0x30 [ 384.956839][T15555] dump_stack_lvl+0xe8/0x140 [ 384.956890][T15555] dump_stack+0x15/0x1b [ 384.956910][T15555] should_fail_ex+0x265/0x280 [ 384.956932][T15555] ? sctp_add_bind_addr+0x71/0x1e0 [ 384.956960][T15555] should_failslab+0x8c/0xb0 [ 384.956985][T15555] __kmalloc_cache_noprof+0x4c/0x320 [ 384.957041][T15555] sctp_add_bind_addr+0x71/0x1e0 [ 384.957068][T15555] sctp_copy_local_addr_list+0x199/0x220 [ 384.957137][T15555] sctp_copy_one_addr+0x7f/0x280 [ 384.957163][T15555] sctp_bind_addr_copy+0x79/0x290 [ 384.957191][T15555] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 384.957271][T15555] sctp_connect_new_asoc+0x1c3/0x3a0 [ 384.957328][T15555] sctp_sendmsg+0xf10/0x18d0 [ 384.957366][T15555] ? __pfx_sctp_sendmsg+0x10/0x10 [ 384.957466][T15555] inet_sendmsg+0xc5/0xd0 [ 384.957488][T15555] __sock_sendmsg+0x102/0x180 [ 384.957519][T15555] ____sys_sendmsg+0x31e/0x4e0 [ 384.957545][T15555] ___sys_sendmsg+0x17b/0x1d0 [ 384.957609][T15555] __x64_sys_sendmsg+0xd4/0x160 [ 384.957636][T15555] x64_sys_call+0x191e/0x2ff0 [ 384.957670][T15555] do_syscall_64+0xd2/0x200 [ 384.957699][T15555] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 384.957727][T15555] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 384.957810][T15555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.957832][T15555] RIP: 0033:0x7f1e7fc9ebe9 [ 384.957887][T15555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.957905][T15555] RSP: 002b:00007f1e7e707038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.957925][T15555] RAX: ffffffffffffffda RBX: 00007f1e7fec5fa0 RCX: 00007f1e7fc9ebe9 [ 384.957937][T15555] RDX: 000000002400c8c5 RSI: 0000200000001280 RDI: 0000000000000004 [ 384.957950][T15555] RBP: 00007f1e7e707090 R08: 0000000000000000 R09: 0000000000000000 [ 384.958031][T15555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.958043][T15555] R13: 00007f1e7fec6038 R14: 00007f1e7fec5fa0 R15: 00007fffe30d2278 [ 384.958062][T15555] [ 384.962995][T15556] loop8: detected capacity change from 0 to 736 [ 385.027557][T15559] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3508'. [ 385.038084][T15556] iso9660: Unknown parameter 'ÿÿÿÿ' [ 385.446075][ T29] kauditd_printk_skb: 546 callbacks suppressed [ 385.446093][ T29] audit: type=1326 audit(1756267695.411:19972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15587 comm="syz.8.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01458ebe9 code=0x7ffc0000 [ 385.476828][ T29] audit: type=1326 audit(1756267695.411:19973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15587 comm="syz.8.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc01458ebe9 code=0x7ffc0000 [ 385.500573][ T29] audit: type=1326 audit(1756267695.411:19974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15587 comm="syz.8.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01458ebe9 code=0x7ffc0000 [ 385.524231][ T29] audit: type=1326 audit(1756267695.411:19975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15587 comm="syz.8.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc01458ebe9 code=0x7ffc0000 [ 385.547841][ T29] audit: type=1326 audit(1756267695.411:19976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15587 comm="syz.8.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01458ebe9 code=0x7ffc0000 [ 385.571430][ T29] audit: type=1326 audit(1756267695.411:19977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15587 comm="syz.8.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc01458ebe9 code=0x7ffc0000 [ 385.595133][ T29] audit: type=1326 audit(1756267695.411:19978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15587 comm="syz.8.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01458ebe9 code=0x7ffc0000 [ 385.618734][ T29] audit: type=1326 audit(1756267695.411:19979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15587 comm="syz.8.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01458ebe9 code=0x7ffc0000 [ 385.642440][ T29] audit: type=1326 audit(1756267695.411:19980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15587 comm="syz.8.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc01458ebe9 code=0x7ffc0000 [ 385.666035][ T29] audit: type=1326 audit(1756267695.411:19981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15587 comm="syz.8.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01458ebe9 code=0x7ffc0000 [ 385.793681][T15599] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3519'. [ 385.851590][T15596] tipc: Started in network mode [ 385.856668][T15596] tipc: Node identity d696fe1eabf5, cluster identity 4711 [ 385.863972][T15596] tipc: Enabled bearer , priority 0 [ 386.027869][T15591] tipc: Resetting bearer [ 386.086653][T15591] tipc: Disabling bearer [ 386.205357][T15610] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3524'. [ 386.362141][T15622] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 386.392761][T15623] loop5: detected capacity change from 0 to 1024 [ 386.458928][T15623] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.467298][T15631] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3533'. [ 386.484227][T15623] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 386.504590][T15623] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 386.519654][T15623] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 386.532091][T15623] EXT4-fs (loop5): This should not happen!! Data will be lost [ 386.532091][T15623] [ 386.541781][T15623] EXT4-fs (loop5): Total free blocks count 0 [ 386.547808][T15623] EXT4-fs (loop5): Free/Dirty block details [ 386.553767][T15623] EXT4-fs (loop5): free_blocks=4293918720 [ 386.559547][T15623] EXT4-fs (loop5): dirty_blocks=16 [ 386.564677][T15623] EXT4-fs (loop5): Block reservation details [ 386.570702][T15623] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 386.579725][T15642] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 1: comm syz.5.3527: lblock 1 mapped to illegal pblock 1 (length 15) [ 386.612793][T15642] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 386.642541][T15623] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 1: comm syz.5.3527: lblock 1 mapped to illegal pblock 1 (length 3) [ 386.669302][T15623] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 1: comm syz.5.3527: lblock 1 mapped to illegal pblock 1 (length 3) [ 386.707916][T15615] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 1: comm syz.5.3527: lblock 1 mapped to illegal pblock 1 (length 3) [ 386.727219][T15623] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 1: comm syz.5.3527: lblock 1 mapped to illegal pblock 1 (length 3) [ 386.750619][T15615] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 1: comm syz.5.3527: lblock 1 mapped to illegal pblock 1 (length 3) [ 386.766249][T15623] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 1: comm syz.5.3527: lblock 1 mapped to illegal pblock 1 (length 3) [ 386.782526][T15615] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 1: comm syz.5.3527: lblock 1 mapped to illegal pblock 1 (length 3) [ 386.797759][T15623] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 1: comm syz.5.3527: lblock 1 mapped to illegal pblock 1 (length 3) [ 387.347954][T15666] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 387.780527][T15698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3558'. [ 388.042398][T15729] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3570'. [ 388.084231][T15735] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3571'. [ 388.493459][T15745] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3574'. [ 388.916105][T15756] tipc: Started in network mode [ 388.921150][T15756] tipc: Node identity 36d4a82ad55f, cluster identity 4711 [ 388.929218][T15756] tipc: Enabled bearer , priority 0 [ 388.945000][T15755] tipc: Resetting bearer [ 388.988184][T15755] tipc: Disabling bearer [ 389.523128][T15764] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3582'. [ 389.678483][T15770] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3585'. [ 389.789086][ T3417] IPVS: starting estimator thread 0... [ 389.901677][T15777] IPVS: using max 2592 ests per chain, 129600 per kthread [ 390.522200][T15794] SELinux: security policydb version 17 (MLS) not backwards compatible [ 390.530704][T15794] SELinux: failed to load policy [ 390.874358][ T29] kauditd_printk_skb: 1723 callbacks suppressed [ 390.874372][ T29] audit: type=1400 audit(1756267700.417:21672): avc: denied { prog_load } for pid=15795 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 390.884236][T15797] loop9: detected capacity change from 0 to 1024 [ 390.919174][ T29] audit: type=1400 audit(1756267700.417:21673): avc: denied { bpf } for pid=15795 comm="+}[@" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 390.939518][ T29] audit: type=1400 audit(1756267700.417:21674): avc: denied { perfmon } for pid=15795 comm="+}[@" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 390.960143][ T29] audit: type=1400 audit(1756267700.417:21675): avc: denied { bpf } for pid=15795 comm="+}[@" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 390.980981][ T29] audit: type=1400 audit(1756267700.417:21676): avc: denied { prog_run } for pid=15795 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 391.000160][ T29] audit: type=1400 audit(1756267700.435:21677): avc: denied { read write } for pid=15795 comm="+}[@" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 391.023903][ T29] audit: type=1400 audit(1756267700.435:21678): avc: denied { open } for pid=15795 comm="+}[@" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 391.047513][ T29] audit: type=1400 audit(1756267700.435:21679): avc: denied { ioctl } for pid=15795 comm="+}[@" path="/dev/loop9" dev="devtmpfs" ino=109 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 391.072793][ T29] audit: type=1400 audit(1756267700.453:21680): avc: denied { create } for pid=15801 comm="syz.8.3596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 391.092792][ T29] audit: type=1400 audit(1756267700.463:21681): avc: denied { read write } for pid=13300 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 391.138179][T15802] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3596'. [ 391.165013][T15804] loop4: detected capacity change from 0 to 1024 [ 391.175973][T15804] EXT4-fs: Ignoring removed orlov option [ 391.181889][T15804] EXT4-fs: Ignoring removed nomblk_io_submit option [ 391.206244][T15818] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3601'. [ 391.223329][T15804] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.252938][T15804] 9pnet_fd: Insufficient options for proto=fd [ 391.337955][T13300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.438999][T15830] loop9: detected capacity change from 0 to 1024 [ 391.453480][T15830] EXT4-fs: inline encryption not supported [ 391.457203][T15838] loop8: detected capacity change from 0 to 1024 [ 391.475177][T15839] 9pnet_fd: Insufficient options for proto=fd [ 391.516267][T15838] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.533357][T15838] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.553222][T15838] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 391.597361][T15838] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 391.609849][T15838] EXT4-fs (loop8): This should not happen!! Data will be lost [ 391.609849][T15838] [ 391.619639][T15838] EXT4-fs (loop8): Total free blocks count 0 [ 391.625690][T15838] EXT4-fs (loop8): Free/Dirty block details [ 391.631614][T15838] EXT4-fs (loop8): free_blocks=4293918720 [ 391.637428][T15838] EXT4-fs (loop8): dirty_blocks=16 [ 391.640019][T15852] EXT4-fs error (device loop8): ext4_map_blocks:814: inode #15: block 1: comm syz.8.3607: lblock 1 mapped to illegal pblock 1 (length 15) [ 391.642562][T15838] EXT4-fs (loop8): Block reservation details [ 391.642578][T15838] EXT4-fs (loop8): i_reserved_data_blocks=4 [ 391.658432][T15852] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 391.671001][T15853] __nla_validate_parse: 2 callbacks suppressed [ 391.671020][T15853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3611'. [ 391.696127][T15838] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #15: block 1: comm syz.8.3607: lblock 1 mapped to illegal pblock 1 (length 3) [ 391.712243][T15838] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #15: block 1: comm syz.8.3607: lblock 1 mapped to illegal pblock 1 (length 3) [ 391.766615][T15838] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #15: block 1: comm syz.8.3607: lblock 1 mapped to illegal pblock 1 (length 3) [ 391.782000][T15851] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15851 comm=syz.5.3612 [ 391.792075][T15829] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #15: block 1: comm syz.8.3607: lblock 1 mapped to illegal pblock 1 (length 3) [ 391.794607][T15851] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15851 comm=syz.5.3612 [ 391.816477][T15838] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #15: block 1: comm syz.8.3607: lblock 1 mapped to illegal pblock 1 (length 3) [ 391.839976][T15829] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #15: block 1: comm syz.8.3607: lblock 1 mapped to illegal pblock 1 (length 3) [ 391.853299][T15860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3614'. [ 391.863219][T15838] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #15: block 1: comm syz.8.3607: lblock 1 mapped to illegal pblock 1 (length 3) [ 391.878903][T15838] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #15: block 1: comm syz.8.3607: lblock 1 mapped to illegal pblock 1 (length 3) [ 391.931869][T15864] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 391.941799][T15851] ieee802154 phy1 wpan1: encryption failed: -22 [ 391.953907][T15865] openvswitch: netlink: Message has 6 unknown bytes. [ 392.130436][T15877] 9pnet_fd: Insufficient options for proto=fd [ 392.204380][T15883] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3624'. [ 392.316376][ C1] ================================================================== [ 392.324489][ C1] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 392.331781][ C1] [ 392.334109][ C1] read-write to 0xffff8881000732b8 of 8 bytes by interrupt on cpu 0: [ 392.342192][ C1] wq_worker_tick+0x60/0x230 [ 392.346785][ C1] sched_tick+0x11a/0x270 [ 392.351127][ C1] update_process_times+0x15f/0x190 [ 392.356346][ C1] tick_nohz_handler+0x249/0x2d0 [ 392.361294][ C1] __hrtimer_run_queues+0x20c/0x5a0 [ 392.366498][ C1] hrtimer_interrupt+0x21a/0x460 [ 392.371441][ C1] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 392.377353][ C1] sysvec_apic_timer_interrupt+0x6f/0x80 [ 392.382993][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 392.388981][ C1] _raw_spin_unlock_irqrestore+0x3c/0x60 [ 392.394634][ C1] free_percpu+0x660/0xa30 [ 392.399057][ C1] bpf_lru_destroy+0x3d/0x50 [ 392.403657][ C1] prealloc_destroy+0x174/0x1a0 [ 392.408523][ C1] htab_map_free+0x4cc/0x590 [ 392.413116][ C1] bpf_map_free_deferred+0xc9/0x160 [ 392.418324][ C1] process_scheduled_works+0x4ce/0x9d0 [ 392.423801][ C1] worker_thread+0x582/0x770 [ 392.428402][ C1] kthread+0x486/0x510 [ 392.432476][ C1] ret_from_fork+0xda/0x150 [ 392.436984][ C1] ret_from_fork_asm+0x1a/0x30 [ 392.441755][ C1] [ 392.444080][ C1] read-write to 0xffff8881000732b8 of 8 bytes by interrupt on cpu 1: [ 392.452142][ C1] wq_worker_tick+0x60/0x230 [ 392.456734][ C1] sched_tick+0x11a/0x270 [ 392.461074][ C1] update_process_times+0x15f/0x190 [ 392.466288][ C1] tick_nohz_handler+0x249/0x2d0 [ 392.471236][ C1] __hrtimer_run_queues+0x20c/0x5a0 [ 392.476437][ C1] hrtimer_interrupt+0x21a/0x460 [ 392.481382][ C1] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 392.487288][ C1] sysvec_apic_timer_interrupt+0x6f/0x80 [ 392.492926][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 392.498913][ C1] _raw_spin_unlock_irqrestore+0x3c/0x60 [ 392.504563][ C1] free_percpu+0x660/0xa30 [ 392.508981][ C1] prealloc_destroy+0xec/0x1a0 [ 392.513759][ C1] htab_map_free+0x4cc/0x590 [ 392.518362][ C1] bpf_map_free_deferred+0xc9/0x160 [ 392.523582][ C1] process_scheduled_works+0x4ce/0x9d0 [ 392.529057][ C1] worker_thread+0x582/0x770 [ 392.533659][ C1] kthread+0x486/0x510 [ 392.537734][ C1] ret_from_fork+0xda/0x150 [ 392.542240][ C1] ret_from_fork_asm+0x1a/0x30 [ 392.547014][ C1] [ 392.549347][ C1] value changed: 0x0000000000563650 -> 0x0000000000565d60 [ 392.556449][ C1] [ 392.558792][ C1] Reported by Kernel Concurrency Sanitizer on: [ 392.564943][ C1] CPU: 1 UID: 0 PID: 3455 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(voluntary) [ 392.574843][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 392.584903][ C1] Workqueue: events_unbound bpf_map_free_deferred [ 392.591335][ C1] ================================================================== [ 392.629587][T15892] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 397.417351][ T29] kauditd_printk_skb: 1039 callbacks suppressed [ 397.417369][ T29] audit: type=1400 audit(1756267706.465:22709): avc: denied { egress } for pid=3379 comm="kworker/1:3" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 397.447480][ T29] audit: type=1400 audit(1756267706.465:22710): avc: denied { sendto } for pid=3379 comm="kworker/1:3" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 398.110355][ T29] audit: type=1400 audit(1756267707.112:22711): avc: denied { egress } for pid=8496 comm="kworker/u8:12" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 398.134613][ T29] audit: type=1400 audit(1756267707.112:22712): avc: denied { sendto } for pid=8496 comm="kworker/u8:12" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 402.269545][ T29] audit: type=1400 audit(1756267710.944:22713): avc: denied { egress } for pid=14 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 402.293286][ T29] audit: type=1400 audit(1756267710.944:22714): avc: denied { sendto } for pid=14 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1