last executing test programs: 14m59.272562069s ago: executing program 32 (id=12220): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 10m53.659904987s ago: executing program 33 (id=14886): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x401, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x2000000) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x30, 0x3) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) openat$selinux_user(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd26, 0x8000002, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r5) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r9, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r11}, 0x10) sync() 10m9.603473983s ago: executing program 34 (id=15321): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={0xffffffffffffffff, r2, 0x35, 0x0, @val=@tracing={0x0, 0x1}}, 0x20) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 10m0.188334491s ago: executing program 35 (id=15481): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000580)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x66000080) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="0400000004000000040000000500010000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r4, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={r5, 0xf, 0x8}, 0xc) r6 = socket$rds(0x15, 0x5, 0x0) splice(0xffffffffffffffff, &(0x7f00000000c0)=0x3, r2, &(0x7f00000001c0)=0x6, 0x9, 0x9) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x18) 9m53.787791874s ago: executing program 36 (id=15578): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x1000c16, &(0x7f0000000500), 0x1, 0x260, &(0x7f0000000980)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x88640, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r2 = syz_open_pts(r1, 0x141601) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0xd16, 0x20000000, 0xfffffef9, 0x7fffffd, 0x5, "12e141f2fd71a6a76977920ea7e60c0ac7a4a5"}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073"], 0x68}, 0x1, 0x0, 0x0, 0x2010}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 9m50.663865586s ago: executing program 37 (id=15610): socket$inet_tcp(0x2, 0x1, 0x0) shutdown(0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0}, 0x0, 0xfffc, 0x1, 0x3, 0x2, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x2000) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x1, 0x5, &(0x7f0000000300)="1a00000002000000", 0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x28e, &(0x7f0000001980)="$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") getsockopt$inet_tcp_buf(r2, 0x6, 0x23, &(0x7f0000000040)=""/32, &(0x7f0000000080)=0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x200000fe, &(0x7f0000000400)=ANY=[@ANYBLOB="f700000000000000000000000000000095000000000000005a021d640ccef35eb069f63b111d1df9ff1896428b511ec60c9ce6a6c105749098b942367df60c57e3445f7e1fd256194ffd2ef50741100070f6bd17c3303f5078f70000d69a204157c94f43dc5745da27fd5b758fabfcb357771ad30e0c1e60729867cb9f1b091f7e49dff9251cd2abca024e8f7ed7048713a029930d795bf88ae06fa3d8e1a81d8734f2377fc26deecab4b444af8b629dc9439be4c819efcebe2022c767d36a4b09dc7d3fbcc52d84b658f035bd0b460ef8e82828db"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x200, 0x103) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r5 = socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan0\x00', @random="0000230c1100"}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r6, &(0x7f00000005c0)={'#! ', './file0'}, 0xb) close(r6) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="25390000290003"], 0x33fe0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7fce1dca24e3ee4c89a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d83104000000fda542e718f94b929ade", 0x55}], 0x1}, 0x20048000) socket$tipc(0x1e, 0x2, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) 9m41.029700483s ago: executing program 38 (id=15721): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0xf) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x5c0aa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, 0x0}) socket$inet6_sctp(0xa, 0x801, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_setup(0x1, &(0x7f0000000b80)) eventfd2(0x52, 0x1) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x240, 0x4001, @local}, 0x10, 0x0}, 0x3004c080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4002}, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x3, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0xfffffffd, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r2, r2, &(0x7f0000000000)=0x2eb4, 0x2000007ff) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="05000000010000000a00000008000000000000006a320a26e27d7578965b3a16e3c4ece580286e69f85caf5dedf66d17781a3d40b7ef1c475f15dc0d4bb596210907864eb2740e22823e9853bbcf6bd21602", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r3}, &(0x7f0000000400), &(0x7f0000000500)=r4}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="58b1137e0a22f9240000001d2f0600000000000000beed8f102f3c4b20cb55cfe61a6a64a2ef25c239676304cf0bb2dde9c304cf9845f64deeef700cde2078117b84831d7b92514b", @ANYRES16=r6, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="08002a0084210000"], 0x24}}, 0x0) 9m39.795545911s ago: executing program 39 (id=15731): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000280)=@l2={0x1f, 0x13, @none, 0x1a9, 0x2}, 0x80, &(0x7f0000000a00)=[{&(0x7f00000004c0)="822390cdad1c3a2cdbab0ce1857ea93577949f7b95b34e1a91c8109e702d50b60e26105ce3f77d2b206a47041f1cc652f602a752c0d084b0edc8eb807b9b1d9f12e63d446a7e9b00956fe8dc7d448ae9add4c2930f8546583e32ade865cf92bbe00afb40a343abc627860a4e38acf8f30aba38e2b33b2fe1d94a37f2007986a15afbc6998cfc132076f97800877c3124718e7f170f3ae1b3ac0aae84f689c11ea054e5083e56de9fa7b7453423dbea8150895c4bc15bacadcbdc3af867c377dd3ced8f0190117730e036409ff32705231052fc3d83887142aed0194ba3d1ede08280b1ba9f4d27e73383ee31", 0xec}, {&(0x7f0000000bc0)="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", 0x1000}, {&(0x7f00000007c0)="53151c52f50236f4464f14c104f616fc2f7bbf01fe76fe62ed24ea601fa62f6d326dc96636f7261b223b799e60810b84ead02419baecb8bc420b91bd2823962e03af9360342403ab1f9c91b379097da271d27232a79d4d20d092482efc7ac3f7d5ae4af7bc7368fe6b4a1ec6df9046b2d12c4fcb36f399381951a6847d5098d4a643a8f7ecf6ae19c68b72cb643f41f3a53fbde08ce04683a1a5fb61978dbaf4f94fa2824e7dc8021ed17dfc9e790efa482f18345d91b3300c161269c0d89f15e8ecabd98b1783e352a15c8b5cc5587d5aa742392d4cafc3216605a0955e0c495eaf5510a3d0a4d8beda30988d008c524c129091be7c8e3fcf447cbc2d6e", 0xfe}, {&(0x7f00000008c0)="abacb28da400988087807ce477017f1084c8afeccbce733b0a12debeabd0c90cefe6a601a26badddb19b9673f0d66a1256451ec2050192600c78504ab7179406ade2cb171bd392a474f195fc5deeb84c989885fefc5fe22168e8f2cb7dd026c7a395e93e4cce18728bfb33a01b783925411afa6cb58a18947feb61671be4d301311536dfafae7d4d0377696c47ea35894a6848f1d516af37e5b61bd1ff4585b39e9c1e449c149870198fc6437129e63866790ac6d373f126e47599defd77bac875cb81a67f8f6e5cbe5e936104b4d2a302729af2a919e90eaa6133e19862ad908f4a676acb41cf891494", 0xea}, {&(0x7f00000000c0)}, {&(0x7f0000000180)="2d17375571397b4d5baf7dfb52e479a616a7e1f1ce4d1a99609f", 0x1a}, {&(0x7f0000000380)="1a718564e6538b39f18d4fbf9f1f2ce9ba8694e1b3080322fbf9410cbd0191086969e0aa632c8c0a3a4f151f31f99aff2504f849e193bffb45e03ac8fcb7bbc5ab5b30bbd34e071212d41ebcec61d1085c42ce68ea8d8835f0a632352aede8e17900a186a5945f3daebb3d5dec1bdad088aba7eea851f293d0ac540d1d4be3739fcea3254bd022986cf188dec0a08d0376eee51caa9c6df581354bc99930244fa1b75725d043bc92bde52ab8488c400668fe95835e357e2ed2de", 0xba}], 0x7, &(0x7f0000001bc0)=[{0x88, 0x107, 0x8, "3fb8a9bf0243dbe3f9d85a154bfa5e91a0c3df748176c573228c08ed4d70d648b14fe27485762cf7fc6da06cbdb065b51e73574dca574ef70a4c2ca9be4a0572a5fe5a31acc9605c20cf025e303e716b0f1d432eab4afbe58566152ed71ae054b2e51d6047ad53609e52c71936bb07fd31e3f82a45"}, {0x60, 0x110, 0xd, "3a1525b78429260ffd9507dc6e61f207aa925b9f38d1d8d3886cc69718d75857a82bb04414e898b8ab85ef882ca637cbeb8b6dd8f45f0cb13b9a02ec0d6a57f32530b9cc5e6703fa08a67c85f163"}, {0xd8, 0x1, 0x7fff, "867da2a998ccd8a29e34bb64adf575685bed0f0f908aaa307125ece8a7b9408e40b07dcbeb0846665e27a612700ef7b17afc4f21b124bc05ad376cb023ce2f61a57e94ec33a74ffac52b9c47c5b8a73fa7896cb4735d49bffc044cb99d20e3a607e6c87639280f9a3cc364354c6ec415a27440f18402145b188f402b6411f37305d0cb301b84f82cee90df2b944732f7a4783e85ab95816f32f4b1f0cc07bb6df4316e117836ad3053dac3b211dea0f888be6acc6e5e69d475c43b06e3418183f9ed"}, {0x78, 0x84, 0x7, "ba935a1c4e799f1bfa5451ea386d46a6f101228c3053b4b9b1711b00aa9fd28f5f31b533e4e480cc669cd360f8b684192caf56386150d4f876feca49cd53db44c55abe8a2a710b2ade89720ad8c821a34527f516ef00816e4d3f46e78e5d41c6b93065e7"}, {0x98, 0x3a, 0xf51, "10dc9ad7c5cc72b91d1545e36dd8f9b399bc147e4f1a02e1b4dc9bc35e5bc1966670ff6478cd29463142747844908cc0061f792a651c46a40b074bdee6188e59fcb7ab2ee477b6313cacd45d5b6b23243d6c08beff2e5cd0de646dae6456524d21502044144f8637fa78f6f5a820a8ed3aa8282aa497232feb8efbfbab28babd5e0b4ab7d3c3"}, {0x38, 0x103, 0x2, "b344dfb4375f9a09b827c3a59cf7a3ea21a888f3685af4cde072b131e5c1a64443c83bc2ec5ab2"}, {0xc0, 0x110, 0x3, "a2cdbcbe83901ba1b1f8187de0ab292a445d15cfb1c600219126e80524b4174dc684214348648286b5234eecb0ba5bf1ace59f1ba7b83a38cbb3c082bd4d77f5cb67d48a53586384ec6f67d2e376848eb75920c828b868e42e7cbf572bd6756f5b439220f8b3cfba577bcf7fc209b70ccfcbec73885eb3f161b39a642c384601956029a830074feb72657285f9889c51ae31a87d0528daee41590bc90b8ef2549f118753eb62031fd929984bac1b0bf5"}], 0x3c8}, 0x4840) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000001fc0)=ANY=[@ANYBLOB="180000000000000000000000000400009500000000000000df48726a14fec15e42b9d370ed909493a1bb7e7ddd3954d558295539765392121c7e2d29af4b5457baf537e4e425ecec0f25dac619"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x143041, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x735, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r3, 0x0, 0x1ff) mkdirat$cgroup(r3, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r4, r4, 0x0, 0x9) writev(r1, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x60000}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) socket$key(0xf, 0x3, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000700)={0x3, &(0x7f00000000c0)=[{0x0, 0x2, 0xa, 0x994c}, {0x1, 0x3, 0x3d, 0x8}, {0xa, 0xc, 0x1, 0x4}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000a80)) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6002000800fe2c"], 0x0) 9m38.157551944s ago: executing program 40 (id=15743): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000040)="889eefb3a2e6c79bf7fe01", 0xfd3a) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1c824}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x2800088, &(0x7f0000000a00)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303030303030312c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c696f636861727365743d64656661756c742c756e695f786c6174653d302c6e6f6e756d7461696c3d302c757466383d302c666c7573682c726f6469722c726f6469722c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c756e695f786c6174653d302c757466383d302c73686f72746e616d653d6d697865642c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c001762a07a915c8f6c3378b924fc250bdae45cd22bb33f29d72cf1c8410df88b83b9710b49374a748455718cc4af5f3ced9aa10632d595e9c8c3a89f41b650b9ebd4886ae65bf02b7c8ea4e76ef2cc241ac9f89f2753df98db0ba9558c753363f296424ec60e703fac2db7e9f31283852e115cf6acb8d77b3e5d68", @ANYRESOCT, @ANYRES16], 0x97, 0x2aa, &(0x7f0000000c00)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) clock_getres(0x6, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, {0x10, 0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000840)="51cb1a89955d36f660888ade247828106852020826a621a745b3a090fc4cfbcc77b59bc2ce0266c34b8b08755fdddda16fbde6be6850a41436513e93c79997d9636b4a858134019c5e519ac43d1d0d2b936b6a35204661fc324575bce40d3563e907b627025153bb748d6979263bf05c7d9eaaf5c4cd6d7429ef36ecc49d9a33a986fd7308d5f2cec914f2", 0x8b) bind$unix(r4, &(0x7f00000000c0)=@abs={0x1}, 0x6e) bind$unix(r4, &(0x7f00000007c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200004600000000000000000000008500000041000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) 7m15.772795997s ago: executing program 41 (id=17973): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x7600) 7m5.861951161s ago: executing program 42 (id=18114): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0xbf, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r0, &(0x7f0000000080)='\x00\x00', 0x2}]) 7m3.543778005s ago: executing program 43 (id=18148): pipe(&(0x7f00000045c0)={0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000340)="3b256c7a40ff8cf30d776a89d5cfc3ce7467bd24", 0x14}], 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r1, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f0000000400)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000840)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast2, 0x4e22, 0x8, 0x4e22, 0x0, 0xa, 0x0, 0x80, 0x2f, 0x0, r5}, {0x3, 0x401, 0x5, 0x5, 0x10001, 0x8, 0x2, 0xfffffffffffffffb}, {0x9, 0x8, 0x10000, 0x6}, 0x3, 0x6e6bbb, 0x2, 0x0, 0x3, 0x1}, {{@in6=@empty, 0x4d4, 0x33}, 0xa, @in=@multicast1, 0x3503, 0x1, 0x0, 0x8, 0x0, 0x2, 0x2}}, 0xe8) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000e40)="$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") r6 = syz_open_procfs$pagemap(0x0, &(0x7f00000002c0)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x42, 0x5c}) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, 0x0, 0x0) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) creat(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000005040), 0x1, 0x2000) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYRES64=r4, @ANYRESDEC=r7], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='9p_protocol_dump\x00', r10}, 0x10) 7m2.904078464s ago: executing program 44 (id=18153): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000000f0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) io_setup(0xbf, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r1, &(0x7f0000000080)='\x00\x00', 0x2}]) 6m57.774405778s ago: executing program 45 (id=18199): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000002000010027bd7000000000000a108000000000080400000014000200fc0200000000000000000000000000001400010020010000000000000000000000000000d79c4f4504245775ce5456e16d9e4704e17c00df891e06b04b7c0fadf0a5aaa4a0d02abe42ee7c408364e99e"], 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000510400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc0200"/68], 0x5c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000002000010027bd7000000000000a108000000000080400000014000200fc0200000000000000000000000000001400010020010000000000000000000000000000d79c4f4504245775ce5456e16d9e4704e17c00df891e06b04b7c0fadf0a5aaa4a0d02abe42ee7c408364e99e"], 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000510400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc0200"/68], 0x5c}}, 0x0) (async) 6m56.817358062s ago: executing program 46 (id=18210): r0 = socket(0x10, 0x3, 0x9) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) io_submit(0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x9}, 0x8) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000003c0)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000280)={0x0, 0x1}, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x10, 0x3, 0x9) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket(0x80000000000000a, 0x2, 0x0) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async) socket(0x80000000000000a, 0x2, 0x0) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) (async) io_submit(0x0, 0x0, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x9}, 0x8) (async) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000003c0)='\t', 0x1}], 0x1}}], 0x1, 0x0) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000280)={0x0, 0x1}, 0x8) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) 6m48.864912557s ago: executing program 47 (id=18301): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 6m47.885314781s ago: executing program 48 (id=18311): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000001240)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3}, 0x48) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r2, 0x0, 0x0, 0x20004041, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r4}, 0x10) get_robust_list(0x0, &(0x7f0000000300)=0x0, &(0x7f0000000340)) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) open_tree(r5, &(0x7f0000000640)='\x00', 0x81101) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 6m45.067908592s ago: executing program 49 (id=18338): syz_socket_connect_nvme_tcp() bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2d55, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd51}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a000000040000009e0000000b", @ANYRESDEC=r1, @ANYRESDEC=r1], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) close(r2) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r5}, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030030000100050000000c00018008000100", @ANYRES32=r7], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0x34, r6, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8044}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r5}, 0x18) rseq(0x0, 0x0, 0x0, 0x0) gettid() open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 6m40.505521068s ago: executing program 50 (id=18367): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x10000001}, 0x18) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 6m39.483981983s ago: executing program 51 (id=18378): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1b, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB="902f38"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd97}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x4013, &(0x7f0000000200), 0x1, 0x5c0, &(0x7f0000001040)="$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") (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) sched_setscheduler(0x0, 0x2, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r8}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x50bd2f, 0xfffffffc, {0x60, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_etf={{0x8}, {0xfffffffffffffea5, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xb, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x3004408c) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 6m31.734242785s ago: executing program 52 (id=18459): lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000040)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18) syz_io_uring_setup(0x1113, &(0x7f0000000280)={0x0, 0xb44a, 0x0, 0x0, 0x21e}, &(0x7f0000000000), &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) shmget(0x0, 0x2000, 0x40, &(0x7f0000ffc000/0x2000)=nil) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000140)=0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r5, &(0x7f00000078c0)=[{{&(0x7f0000000100)=@tipc=@name, 0x80, &(0x7f0000000e00)=[{&(0x7f0000007cc0)=""/4096, 0x1000}, {&(0x7f0000000c40)=""/187, 0xbb}, {&(0x7f0000000d00)=""/241, 0xf1}], 0x3, &(0x7f00000007c0)=""/138, 0x8a}, 0xd3}, {{&(0x7f0000000580)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000a00)=""/245, 0xf5}, {&(0x7f0000000880)=""/16, 0x10}, {&(0x7f0000000e80)=""/170, 0xaa}, {&(0x7f00000008c0)=""/111, 0x6f}, {&(0x7f0000000f40)=""/160, 0xa0}, {&(0x7f0000001100)=""/210, 0xd2}], 0x6, &(0x7f0000001280)=""/54, 0x36}, 0x4}, {{0x0, 0x0, &(0x7f00000014c0)}, 0xdef}, {{&(0x7f0000001640)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000002980)=[{&(0x7f00000016c0)=""/73, 0x49}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000e40)=""/14, 0xe}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f00000012c0)=""/205, 0xcd}], 0x5, &(0x7f0000000640)=""/232, 0xe8}, 0x8}, {{&(0x7f0000002b00)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000940)=[{&(0x7f0000002b80)=""/88, 0x58}, {&(0x7f0000002c00)=""/4096, 0x1000}, {&(0x7f0000003c00)=""/165, 0xa5}, {&(0x7f0000003cc0)}, {&(0x7f0000003d00)=""/4096, 0x1000}, {&(0x7f0000004d00)=""/4096, 0x1000}, {&(0x7f0000005d00)=""/111, 0x6f}, {&(0x7f0000000b00)=""/131, 0x83}], 0x8, &(0x7f0000005ec0)=""/173, 0xad}, 0x2}, {{&(0x7f0000005f80)=@nfc, 0x80, &(0x7f0000006000)}, 0x8000}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000004c0)=""/116, 0x74}, {&(0x7f0000006100)=""/212, 0xd4}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000007c40)=""/128, 0x80}, {&(0x7f0000000540)=""/6, 0x6}, {&(0x7f0000006340)=""/83, 0x53}, {&(0x7f00000063c0)=""/39, 0x27}], 0x7, &(0x7f0000006480)=""/4096, 0x1000}, 0x81}, {{0x0, 0x0, &(0x7f0000007500)=[{&(0x7f0000007480)}, {&(0x7f00000074c0)=""/17, 0x11}], 0x2, &(0x7f0000007540)=""/42, 0x2a}, 0x7}, {{&(0x7f0000007580)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x80, &(0x7f0000007840)=[{&(0x7f0000007600)=""/121, 0x79}, {&(0x7f0000007680)=""/114, 0x72}, {&(0x7f0000007700)=""/103, 0x67}, {&(0x7f0000007780)=""/138, 0x8a}], 0x4, &(0x7f0000007880)=""/49, 0x31}, 0xffff8000}], 0x9, 0x40000000, &(0x7f0000007b00)={0x0, 0x989680}) fsopen(&(0x7f00000003c0)='debugfs\x00', 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030076657468305f746f5f626f6e6400000008003a00ca1007e3"], 0x44}}, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @broadcast}}) syz_emit_ethernet(0xfdef, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c200000ee43f6642531e080045"], 0x0) 6m26.918252795s ago: executing program 53 (id=18512): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) eventfd(0x7) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2, 0x9}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2, 0x9}}, 0x20) prlimit64(0x0, 0xc, &(0x7f0000000000)={0x8000000000000000, 0xfffffffffffffffb}, 0x0) (async) prlimit64(0x0, 0xc, &(0x7f0000000000)={0x8000000000000000, 0xfffffffffffffffb}, 0x0) brk(0x689d80000000) (async) brk(0x689d80000000) mlockall(0x7) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1b, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="00010000", @ANYRES32=r2, @ANYBLOB="0000000000f80000b70800000000e7057b8af8ff00000700bfa20000000000000702b7130000000000008500000016008c0ec44fae6713000095a07ec36a9094ced1b327967f7a53a8e00a5658f523d90f61f17a939675891c49f16487e7965ff6dfe584c70b13b0c4e53916a96c321da900"/127], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x4, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x10e, &(0x7f0000000700)={[{@debug}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x402}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@init_itable_val={'init_itable', 0x3d, 0x80}}, {@minixdf}, {@errors_remount}]}, 0x3, 0x468, &(0x7f0000000a80)="$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") (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x10e, &(0x7f0000000700)={[{@debug}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x402}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@init_itable_val={'init_itable', 0x3d, 0x80}}, {@minixdf}, {@errors_remount}]}, 0x3, 0x468, &(0x7f0000000a80)="$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") 6m14.587683413s ago: executing program 54 (id=18677): perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xb}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3e7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00121000a6400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000080)=0x4) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004) (async) pwritev(r2, &(0x7f00000001c0)=[{&(0x7f0000000740)="00214717a7070000000003060000000031163ceb9d04", 0x16}], 0x1, 0xb, 0x9) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0203030009000a004000623d885d009c11fffc000000000000000000000000000000ff0200000000000000000000000000014e224e21009c90"], 0xd2) (async) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000030000000000002000000008000300", @ANYRES32=r9, @ANYBLOB="24002d8005000100000000000500040000000000080002"], 0x40}}, 0x0) (async, rerun: 32) r10 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 32) setsockopt$sock_int(r10, 0x1, 0x20, &(0x7f0000000440)=0x7, 0x4) (async) bind$tipc(r10, &(0x7f00000003c0)=@name={0x1e, 0x2, 0x1, {{0x2, 0x1}, 0x3}}, 0x10) r11 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r11, &(0x7f0000000080)=ANY=[@ANYBLOB="180000007800911fdabcf8b3077fa54a07"], 0xfe33) (async, rerun: 32) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r12) 6m10.055665439s ago: executing program 55 (id=18729): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r1, @ANYBLOB="080003"], 0x80}}, 0x8000) r2 = gettid() ptrace(0x10, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="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"], 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)='$', 0x1}], 0x1, &(0x7f0000001a80)=ANY=[@ANYBLOB="10"], 0x10}}], 0x1, 0x4004804) sendmmsg$inet(r7, &(0x7f0000000b40), 0x0, 0x8040) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000070000000200000022bf000001000000", @ANYRES32, @ANYBLOB="a0df23ad4ee5d48457", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x0, &(0x7f00000003c0), &(0x7f0000000200)='syzkaller\x00', 0x7d, 0xff, &(0x7f00000009c0)=""/255, 0x41100, 0x40, '\x00', r1, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x10, 0x800, 0x22}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000500)=[r8, r6, r8, r6, r5, r8], 0x0, 0x10, 0x100}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r9}, 0x10) r10 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x108, 0x0) mq_timedsend(r10, 0x0, 0x47, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) 6m1.495235683s ago: executing program 56 (id=18837): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10001}, 0xc104}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xfffffffc, 0x0, 0x0, 0x40f00}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x4a0, 0x30, 0x12f, 0x0, 0x0, {}, [{0x48c, 0x1, [@m_police={0x488, 0x1, 0x0, 0x0, {{0xb}, {0x45c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x4a0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002e80)=@delchain={0x148, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x10c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_EMATCHES={0xe0, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xc4, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x7}}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x4}, {0x4, 0x5, 0x6, "ebe6c48aa9"}}}, @TCF_EM_CONTAINER={0x80, 0x3, 0x0, 0x0, {{0x4, 0x0, 0xb}, "d0fa3d16cd50d147bab4e8cc66b89a2f2ddd8d0b788aa8b69311701d1c85ab32acb6397660ea603b182034545dd0bd1327d2665d5a78a956ac2ec9921388b37854565074bc2cf7610bacd71b29b6291a2dbc80bf91fea392ac67adb245b0a25f26f1ee3e931815552be72cdd91a079b7c6"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0x81}, {0x10, 0xe, 0x6, 0xd4c}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x1}}}]}]}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x148}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r4 = socket(0x10, 0x803, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) getdents64(r5, 0x0, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0900000004000000dd0000000a"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 5m58.156140361s ago: executing program 57 (id=18874): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000000)={@none, 0x9, 0xd, 0xfff4, 0xb6, 0x5, "241407d72a4848fd77896dc23728eb65d740162e548a35ab14099f48c0690e8e3531722295a0813f4eef885cfd3dbe73f9e9901445adf4534a6204d701b09b6b1b1f25c79d2094b46dfb2fca5fe85d91dbeb6510f06e9ebfe3873d6a53067ad2dddaede9dff83c52f344f2e2ff05b2a95c77f80ac45d36ca95ff83d57ecd8dd9"}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061107f000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) r2 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') getsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) read$char_usb(r2, &(0x7f0000000740)=""/253, 0xfd) mq_open(&(0x7f0000000000)='\x10', 0x80, 0x69, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x44, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x21, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x10000, 0x1}, 0x8002, 0x0, 0x1003, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0xa54a9d76e5e2e84, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) dup(0xffffffffffffffff) syz_read_part_table(0x60d, &(0x7f0000002200)="$eJzs3D9olHcYB/DvJbmcUTAdnFxqHDoJRXE0Q5XkqlgIp1IIDvYfIs0UIXDSw5Q4tBkUM0jHLlK4DhonYwYnRaFzEQeLkMGlYBepHXLl7l6SOyjF0oRS/HyGe353PDzf94F3/V34XxtIuTi1Kp3y/qd/298a3TzP50xzYvJ4q9VqnU5KOZtyxsq7l5MMpX9q9icZ7plz8/udq9/+9mG5+fTUq/fOPVgc2JhZyTtJdvU2Z+SvHqXyzzZlO9wafzi6cGW2erX9pdpYW/84uf1yorZycnFp+UT52Oft3y8nj4r+7osxkoup51K+zCdDbxz19eax1Jc/386vj194Um2sfdd8fnB9b3Xw7vkjr/etXrt/KJlrR0yl87JvGv6Xi/fkL/Tkz41dn15qHD1wZ8+Nw/V7j2svBn9vdRWR5a3JBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABge9xqf1yZrV6tj194Um2sffPzTx/dfjlRWzm5uLR8YvjYs6LvUVGHinox9VxKOclMZvJFZt88crrUmz/+cHRhI/+Pncnzg+t7q82754+8nly9dv9Qp6uUqXYZ2IqN+/XnN9bmxq5PLzWOHriz58bh+r3HtReD3b6ZSj7rrJuksvWPAQAAAAAAAAAAAAAAAAAAwFtuYvL4vqkPaqeTUs7uSPLrV51b9q3KyI/p3Lzv2l/UZ5Vkd5KbO7r/BdB8eurV8LkHi78Ul+LnU8l8kl0/rJxJ3t3IudwfW96czH/pzwAAAP//gTiR5w==") r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) lsetxattr$system_posix_acl(&(0x7f00000073c0)='.\x00', &(0x7f0000007400)='system.posix_acl_default\x00', &(0x7f0000007440)={{}, {0x1, 0x2}, [{0x2, 0x2, 0xffffffffffffffff}], {0x4, 0x7}}, 0x2c, 0x3) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) r6 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x8004, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, 0x0, @perf_config_ext={0x18a, 0xf037}, 0x401a, 0x4, 0x0, 0x8, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000000)='cp_~=-||!') 5m51.306874191s ago: executing program 58 (id=18976): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) syz_io_uring_setup(0x10d, 0x0, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x5, 0x7}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) accept(r1, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4, 0xc}]}}]}, 0x98}}, 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x4000000) 5m47.724534993s ago: executing program 59 (id=19009): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = getpgid(0xffffffffffffffff) process_vm_writev(r0, &(0x7f0000000800)=[{&(0x7f0000000200)=""/11, 0xb}, {&(0x7f0000000280)=""/49, 0x31}, {&(0x7f00000003c0)}, {&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f00000005c0)=""/70, 0x46}, {&(0x7f0000000640)=""/60, 0x3c}, {&(0x7f0000000680)=""/189, 0xbd}, {&(0x7f0000000740)=""/159, 0x9f}], 0x8, &(0x7f0000000e80)=[{&(0x7f0000000900)=""/149, 0x95}, {&(0x7f0000000a40)=""/73, 0x49}, {&(0x7f0000000b40)=""/197, 0xc5}, {&(0x7f0000000c40)=""/245, 0xf5}, {&(0x7f0000000d40)=""/67, 0x43}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/129, 0x81}, {&(0x7f0000002280)=""/4096, 0x1000}], 0x8, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) unshare(0x26000400) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x6, 0x0, r2, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) 5m37.775982117s ago: executing program 60 (id=19181): syz_read_part_table(0x593, &(0x7f00000005c0)="$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") (fail_nth: 4) 5m32.752718s ago: executing program 61 (id=19236): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') rename(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0/../file0/file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000280)=0x4) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000200)=0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000580)='\x00!', 0x2}], 0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) 5m29.411414428s ago: executing program 62 (id=19269): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x2, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x478, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x9, 0x8}, {}, {0xb, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x448, 0x2, [@TCA_FLOW_POLICE={0x444, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x2, 0xe0, 0x4636, 0xd6, 0xc8, 0x81, 0x8001, 0x6, 0xbf5c, 0x7, 0x1, 0x1, 0x1, 0x7, 0xff, 0x40, 0x4, 0x5, 0x80000000, 0x1000, 0xfffffffb, 0xcfb, 0x2, 0x7fff, 0x95, 0x15e5, 0x3, 0xff, 0x3, 0x81, 0xfffffffe, 0x3, 0x1c, 0x4, 0x0, 0x0, 0x2, 0x101, 0x30, 0x0, 0x100, 0x1, 0xf4, 0x6, 0x200, 0x1, 0xfffffffd, 0xffffffff, 0x3, 0x1ff, 0x4, 0x8a03, 0x6, 0x1, 0x3, 0x9, 0x2, 0x9c8, 0x9, 0x200, 0x231e, 0xfff, 0xf, 0x0, 0x7, 0x8000, 0x5, 0x8, 0x2, 0xfffffffb, 0x2, 0x4, 0x7fffffff, 0x5, 0x9, 0x6, 0x6, 0x9, 0xae, 0x2, 0x101, 0x4, 0x0, 0x0, 0x1000, 0x0, 0x7, 0xfffffffe, 0x6, 0xd, 0x64b, 0x1efe, 0x6e1c, 0xfffffff9, 0x2, 0x1, 0x5, 0x94, 0x3, 0x5, 0x1, 0x9, 0x0, 0xfffff6e4, 0xec0, 0x7, 0x8, 0x7e, 0xd081, 0x1, 0x1, 0x8, 0x7, 0x7, 0x7fff, 0x7, 0x8, 0x2f, 0x7, 0x9, 0x2, 0x7ff, 0xa38, 0x6, 0x327, 0x101, 0x2, 0x2, 0x1, 0x3, 0xd46, 0x5, 0x338, 0x40, 0x1b8beb60, 0x20000, 0x240, 0x7, 0x0, 0x0, 0x9, 0x8, 0x1, 0x3f0, 0x40, 0x0, 0x0, 0x1, 0xfffffe01, 0x3, 0xfffffffd, 0x2, 0x0, 0x98, 0x8, 0x200, 0x40, 0x4, 0x6, 0x8, 0x4, 0x9, 0x8, 0xf1b, 0x0, 0xfffffffe, 0x10000, 0x0, 0x81, 0x9, 0x3, 0x3, 0x3, 0x5, 0xfffffff7, 0x7, 0x5, 0x5, 0x9, 0x1ff, 0x2, 0x1000, 0x80000000, 0xfffffffc, 0x5, 0xff, 0x40, 0x7f, 0x9, 0xfffffc01, 0x0, 0x7f, 0x200, 0x8, 0x7, 0x5, 0x6, 0x8, 0x40, 0x1, 0x7, 0x7, 0x7fff, 0x301, 0x9, 0x4, 0x7f, 0x80000000, 0xd, 0x3, 0x101, 0x6e, 0x6, 0x3, 0x40000000, 0x3, 0x0, 0x9, 0x0, 0xfffffff8, 0x90b, 0x9, 0x200, 0x2000000, 0x3, 0x200, 0xffffff01, 0x7, 0xfffffff1, 0x80000000, 0x1000, 0x0, 0x4, 0x2, 0x6e3000, 0x4, 0x6, 0x3, 0xdda, 0x4, 0x6, 0xfffffffd, 0x5, 0x80, 0x1000, 0x1, 0x0, 0x2, 0x7ff, 0x6, 0xfffffff8, 0xc, 0x2, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x7, 0x9, 0x9, 0x4, {0x6, 0x0, 0x6b, 0xffc0, 0x5, 0xb}, {0x7, 0x0, 0x800, 0x5, 0x8001, 0x7}, 0xffffff01, 0x8001, 0x3}}]}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x10}, 0x408c014) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000300)=0x1, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x50032, 0xffffffffffffffff, 0x0) 5m21.193828977s ago: executing program 63 (id=19372): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x2021, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x2}, 0x18) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) 5m20.881022371s ago: executing program 64 (id=19375): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000208500000073000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x3, &(0x7f0000000f80)=ANY=[@ANYBLOB="c216af75f9d0123d0090f3c93c54a6c0acedcc84dd8384544e0b449cc137db9d41841a8d7e8da47bfd9a003dbf01a88551368700514b925676e0021c6c35c2fff862f9773cfe3a37f511d4834199f7b0d988996b4ac53b45d53fc71c417f632359e12a759727d6a69f3020c1f5e63b9ddbd1342b0904c681edabbd465d349212d52a9b914dd6a6a9ea668a1d22b68ae5777090b12e00211209c9a11aad6fccfd6b35ce2fbe743ede7820efc1f60557e252a897aa8ba546f9a54f784250e7f8d94ae9795fe5957dc81dd7dc6e2ca0da272c9f36d9fa2b40332dc78a3d2cf0a650251f3c26691b22cc1cfecf54e4aaac90e677b5b616f9fb93fe4f64ef02919f542e72cab74581fa94dc57d415eebb3d4dfdb174e00f6fc5eed7e1b1e7232d9b1ce17883684108b8baa7247293e3643be645e8d785017fb1a43f632fe2ba47035e2149d8209d6c72bdb60593f013d9294fc461c92dcbf758188c293050e3d36e6b55dfa645998e045242fb1d33e70a6135662919752c312c5b9c4194c8c17099b5b6b287511cb9e4b1d3f2ad3f18e9ddbe07e1f1eb7947bc42b9e539e2d4707b1b27bd2337498a28c541b17e4283187d57ef4ffe4fb4de0fc905aa50861503c9fa790ab1628ee04a8724e3203e4e02e992bc32e098f27c15152f0847114bfe818765f538fd2bfd99da4574fe23989d157f64f09a6df69fa24f0a5a9f7a39082fadea561f7b9cff3004c26a72ec0d125bfc70f6c36b8b9c3b997383a8d09072f3b184b7b5bb4f9f8da8a39ed4b76ef28748afe98016d41eac70da332d3932901f204133772af2e94178ab07e11a7c21d67ee0ed728da0f3d534f39cedd87aaad3eb6574d6c3fdde3558a880f26ca48a931a59226384c81de2535e8797df6bc3a7a2ba81b79702d0ad2af69c7f53c969f6ebeb3eb3d99dae105a91d60f1975dbe8d62100582eeab47fb2538d687b7bcc2055a4c0286efc85d0fe0509cdbfc1e63cd73819c595778b85affa256c466c51a1a4cbae35bb6655623833e22a7d72e015bebd57c32e6f9826007bb9256ac7d6e4f8f8f6a666fd4c0fa2a3e78fac92659a81b5321f58e1357d1b70fa1b967f91eb81558201ab20e3f8d5533bacc3d405eba5e6e956a801086458704ff2d4716b9a2051ba90afe790d3bb6f2edb01a81543ad67eb0fe931f6ebc96faa8812e4df200597f6ea8d23ee7d3fc80ff6e3ab1b7605f0aaa5b70e9a87b28bc8b1db94b7f7d19dd955e532c3cd0d3a5a67159a3fa77592dc8ba58d80d88a77d01b7b43a7a9ed8b9206b817b474ec8d257e3a9bcdc81734c35e50450f6bc65f25c723f39e2aad37eb2d242642cc0bdb83de4c4eea3776344a06c1fc01d812fa233cb5ca231ca201518ef1c7a4e721f18eed2db70606575752ff51754b06352ae0214267509f1c9fae433d762cdbdfe5b59cfada43f20bb51b2df0f126125053212912c410bd89d0b381d437f1ff83c5c1803199498b658c07e48f8b6b6b1db97479fac5bd97a7d8c7814825161e9460b8603dd3f3f3ff158ab8bcac806a19306e51749ebd94a79d01590688d445f6230f24c21b138c0b5cb772868d53f23faa3bfb03f50718e6fbb31630544933fa363399424e88697b885295a485c06b70ab0e11d6082287565e12f25fc33af1b3bea50a4d0c63c7ea2102bcf9a1582d20f36e3ffa5b714ba805a650fe441b435f624cfe41cdc78990210eae2b035b9a758bcdf082d7e205909998cfcedfdf54369a9203a87872c6d723b8e991c174ceddbd70e2b797adf1f2950a2b9d0085a5980c3afa961e5026c01df8dd2df1f5de2e6d4e3018c6fa9896ccde8a2a76c124185920e1ebf900e8f5a39549f960bca1f9a83107ed823aed5613c1c24be4eea39effe3f2ecdbdb7b54ff9cf5f0e14b16994e86222814b7ebebf5bcf1b609bb220d00bf1ae4da393e49d9bd5a3b3b06efb6f03ea5a4530695e18d5d6293698629457a56fed009e1adfed0525c1739b8a2a44a28080aade8a8ba3619017c34587cdb9e870fb9ec4bcfef426dfc2455af03605d46b7ee2c2c685fe10b8fe0e71f97f62fe952eb16d2763c53aa5e5f98cbcdcf27142892f8c598276976f4e0eed069d4cff3e38bc27f57986c243d5c4fb869cc07b50d464f215f516a2a71004636615c033caa7d845fc526b6f35b71ac6c4c05bed35dee3548fd5eab4b1d046fbd00bab24b9b7f02fd71cde1d29f872c4ed41f3c96d6ab0e16a3e9473286119d47de9288965fbef4899245a913133897eb24ce7f2026593c7bf81b0342d96c1dbc2afc4eea81fc6b06c3a10723ace2dc1c0c762f2ad2dff597c20ffd5b91912c3a89b477716f3feddf6b21e972edeefed4a3e2baf451c48da08885c5519a812d574d035daa66dbfda0e7bd44efd5aefc9e71ac4af0fcad7780f26df09b7385f89ba5266f8109d202b937c51654921d34d95e42312bed47f22fb872f069dbb2a8ccc60302c057761a61412079ff1b7aa15a4114e3e1c9ebad4ad5b6ab5f830196416b277112031aa9170c815327241258735655cb433606efd008cacd07f29f8cf0cbaf52bc142bb5bed81f6c597620600a328b87a2ce7362078e0a65b0a17f6680856fb13f3f4e1ed4edc7a131c448866c259c036a4df66ce67b274fd4b013be3d8430087ab744a9633c1514e16fca61fbea984a7f0247f7039c907f914d23a4013566971115cbe0dd8d66a54754f14ece3431e67e5ff17adb357fe2acbed2dca273a3c6ace02da009f58821bb427bcc44f09b897fd27a93e98cdd7a35a5df6a1fac726c65d4d6e6b6cacb2a4bd7af8be851966415255dd8979ac52379e7fca35d1fd99930fbf6289f2d88c44c80146b4b71102b0bcb055ec21c78397b7b50d31d36e09cf29bb5367d391824a783d9b099a1c86e29012f461276ee8de3070c31f069853f1d2e4dd8660d5c752b668a6b59c0f3c47a4f0cf14de64296613a64f1c9df027e6b2d90f2b99ffa2fa20df137d04d8c24bf868e707d2657f112310a7ee7c829d8aee8d256310c311bab455d800a4243036668ec8ca7c1e76031e5df8861b59ce4e6ff054569d07d631f187a71792071fd6dbd24e184c6d5982c58f2392d60bcc8453d547a0c20de92f6e455bd0070f3c4ec051da89824f9cbfb275f38f7403f850a7c3e80578b9300271881fc7795dc9c3e45ca6ea9c5c827bbdc04ea149dc808d454133c44b983381067e6d14740d9ceeaf58897b125f3da5fcdae6cb84ecebb91e7c9a6468060670f2978ef44ca80d099a0123629ea2ab4972c7c7456c0114a77fb03e87ed88c421f003be590329bb12c65217c90d8fdc550dd0f57325dc2b41bf0696e326d5f41b2dbdcbf33dec2e34856dadac8704a59b3a4a432a3f7be9e27d930a57cff797e16258a7ed53c946c0eb4d7a25efbd9390d4bd14e4bb995ff18921dab65c62e41d75246e9bbed3d3fb259610cd374362e059f7ffaf6e8d1b03cbbdbf9cf4b68065d74de5e5ec96426153ba93bf63470b3430aa2934230796d7b30af80e4ad39db3ac6895b23908bbe885274411ce80b254e4abd8331dd2ceeb20925a7fb106b0f7bad2bd21e46834768c6cfee72c39c30f6e2448844eb0786ae1895928d3a47af1ddb9af35d53d74d8e0c7ab23223fb960cef94989cb736e5a56f87c800f414758b47b764c5ec242770d5d49b8343fb062a1ca499056acbcbac238ec1aa199d4a4665485ac84389ce7f204e2c8aaaa7dabd02aef9f5137ab57efe8d5713e094f2dd8c543dd46c66e79f571f431c6a8c5c8622577ae85b7bb19b5c8c3db0ba71059f98b72b0e3f7e0f4f25836b91a75d8f7c3b430fc8be6ca86c424b1baccea3d83bf6d74f48830d9136cb2c591f273d7b3767f3c62787a1120fe792da48284f1cf9a18aacd68534dfd668bd5641cc0e6ac1194feb10bf7471bd8d98dd129a4b2a3ec8bc36a4a2da99abd6ebaa6ed1a897676ee65933db0ec885bc40db0e515692144ca045f938aff38ccbc12db6860542d77d1392349cd8e2cacc8cd23dc62422af8eeb0b2d7853742a70de318ec91cd0528f31cc018df5f97c83111954077c0c6e10edecdadf38b6c035bb40e79df4fd18f4d100a896fe1bb548c695adeb11b70436f1f3c375e414559134b7423e952c1e5900aafee6b7dee3a3409e1ba9adac5dc208e8ad830ca817bdd81d16ad80c1e3aeefe988d1f39900b893b5d9f1e90f6a58fb76ed8ba1b4ff471d138bf727567de0297b470721356a6670a85898a653a0c2e6c803bbf4b0c7e68af0d621615d67caefd6666b854d71f414221d700ee5bc07030bd84eff26ca1e996b5148c950cabdc3b21f7652175587cfbbf5d6d7060b46cc4522970224042ef837107f04999cb6dfe37672a52b243b4ba6dbf0623f0960d83622bf5a60353e0ea9ba48eb736c6c121ce85a66057e5017da41f9d8977e7e61501385d55dbf4b7183dcf03772efb29932d7e165e7cf56c7487a2e4d11d8b2e82e5380e48c272ffbf9b8a8811ea698ce8daaf95b8a83dd5a35ac57b32073d6bec597220d27b3b83ec3e217afd7c8025b0d53794fb9cca67e8237b4f8c6272b09b82c119f73ba4ee51e5f80cba6111952f08a684020b38d9f31f41fe905e2d11efde7adefc18c8aaa8d13e5f52c76f83cce237f6d900c54243aab472700f61ef6fe15e57bd472f45fa5ca7aff8b210016cbc945f66b691639453af4210547a10d0b362c0789e281e0eee333510f6eff0df3cdc4a9110b9709405f609bfd3a2763b668aa517b93e1918d73e95a2359584be9f6963117edcd1b21430573293b28a3b6bec3f412dc69fa86abea91400664d7942b224e5a1a002680d533834cbf90f7926a87d5f2b290847ecf8071248eeb441ccb2c63ae58b30239bfddca31ad91a3fb06fe6e86fa620ee8fec82805b0a5a3c0538c1b89aac5d192cb5e231de7b6ef36ed8b2f10ee87e665202bb110bbf82cb14e2a2c55bc81e493097137d0dc030c16666e7c96b1e744e16f894b075fe37c1ce39e8cd264cc28c536c09153ef7ee0ea523027844de5723be82c090aafe6087ed0097e7b8d06aa3897b3896ae31c7704576afaf6b2862ac43d624b9ee5701c5412586171f0532a39878987f2d154c810afc27471f89687e062c0bd02c82afeca21edf8c36fa704aefe81ce172a5c632437f5bdfc3687396d690c563ee6ffdbc22c11da4999ab25f05c82f09d86d2aafa2c2e465389123736ffdacd20029f736d0410b2f92dfe365f6e31c07a84672166dc258d98ed675cbc82aa50379dbfad8c566c04ecd6123c4fe2d660a68412f6b64629e9dad41b48ae8303d113d081e9c7175372fe66b5cf61946d3d89c3a327803232b75484b77a9d3c8b90dd68ab91b610c2f800730b1df03823aabfde1ea9133ef1c53f8aa2900adce5985a564a8c3463a1e9f32acc68a9efe0f23036b89e3490707c39c972240ab9625a9b83360d016c978bad8451b81ee426672d70036d04020119eefc9ae03e1e7db6fdea0e23ec8f1c5281c51cd0332889c1b421bf2914af9cc26ab8cf4dce29fe0cf01740282c692e60261270cd73618b129ddff30a11ef339bbccb7a9a0824ae925e9c93c677bed63f52ea925297969ad807476655dc18558b46dabf8ba949c85419d3d05117fd0e3d7a660888a0c2f5d48c5f40756b504a7fe056d198e7397316660b5ba622d9948304dafb9b1ee1064f91a3c713534eec45258fea349fe10592cc7408c0f3ac96e1100787f03a7a06bc3d6e0ca797b57e48f36281f41bb860285a6482defc9f5a7b70045b355b690003"], 0x0, 0x3}, 0x94) recvmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00'}) syz_read_part_table(0x5e0, &(0x7f0000000000)="$eJzs3L9rJFUcAPDvzM7ObiAasbZYSCMKRrATF23UpBONnYWNgkVEYiFWu4uC4I8/IK1oYRRCrC08OEK4dFcdB+Huv7gUF94xP/fgUt2Gg4PPp9jve2++3/dmdl77Jni+pY2IlEWc1b3fB3Uo8u1Be/2LrMscNWHYdqvxTw/f/2Bn8lE26seq0Xl7dbRcpWxjEZO29V8Rvx1++VPeZcyaMI8Y/lNGUeWmpu7gyZu+qKYvsmv5A1hF8X+qX1aUcTv+jYi9bFC9/FHEIv6MeCnGdd5WxMuDlFL9mucRaxGDKPt98dSOpieLd6PYrdpr0e60YdOb/ZylN9u8YaSUUh6zza5yEPHKO1v7V01a1y/qPdYNpZSG611tvrywd1l2zbdO789iMe5nj9Ru7m6ffnP+8Rv1nWTNHMNVHx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGv36rev3ci7znv1b9b/bv8V+TJ1HvGwa0/G17T+0fRk44cf9/P4fvrVna+zbngQWx+uR4z6vM+bcPxLHYo+bVV7l3n59x831/qBduos4tbm3YvUrXDexu/efqx4mq+8PgAAAAAAAAAAAAAAAAAAAFSOY2fySR67EVl8Fsvj/inGEVl/Hn8ckVJKD1KtO/xfHrzYts7uRVYVRepKTsvmgwIbL0Sk0a+v1x8UaApTSkW9RPYMH5QrPQoAAP//HdhdXQ==") r8 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r8, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 5m13.551068358s ago: executing program 65 (id=19481): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 5m10.243857636s ago: executing program 66 (id=19510): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3, 0x0, 0x6}, 0x18) socket$kcm(0x10, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000002c0)=0x11) 5m6.136185375s ago: executing program 2 (id=19557): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x5) r3 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r3, &(0x7f0000003040)=[{{&(0x7f0000000080)=@isdn, 0x80, &(0x7f0000000000)=[{&(0x7f0000000400)=""/245, 0xf5}], 0x1, &(0x7f0000000180)=""/40, 0x28}, 0x2}, {{&(0x7f0000000280)=@nfc_llcp, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)=""/26, 0x1a}, {&(0x7f00000005c0)=""/151, 0x97}, {&(0x7f0000000340)=""/31, 0x1f}, {&(0x7f00000007c0)=""/214, 0xd6}], 0x4, &(0x7f00000008c0)=""/99, 0x63}, 0x9b}, {{&(0x7f0000000940)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000540)}, {&(0x7f00000009c0)}], 0x2, &(0x7f0000000a40)=""/189, 0xbd}, 0x8}, {{&(0x7f0000000b00)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000b80)=""/50, 0x32}], 0x1}, 0x9}, {{&(0x7f0000000c00)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000001280)=[{&(0x7f0000000c80)=""/19, 0x13}, {&(0x7f0000000cc0)=""/50, 0x32}, {&(0x7f0000000d00)=""/226, 0xe2}, {&(0x7f0000000e00)=""/113, 0x71}, {&(0x7f0000000e80)=""/208, 0xd0}, {&(0x7f0000000f80)=""/52, 0x34}, {&(0x7f0000000fc0)=""/201, 0xc9}, {&(0x7f00000010c0)=""/246, 0xf6}, {&(0x7f00000011c0)=""/178, 0xb2}], 0x9, &(0x7f0000001340)=""/202, 0xca}, 0x6}, {{&(0x7f0000001440)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f00000019c0)=[{&(0x7f00000014c0)=""/195, 0xc3}, {&(0x7f00000015c0)=""/72, 0x48}, {&(0x7f0000001640)=""/221, 0xdd}, {&(0x7f0000001740)=""/191, 0xbf}, {&(0x7f0000001800)=""/161, 0xa1}, {&(0x7f00000018c0)=""/73, 0x49}, {&(0x7f0000001940)=""/95, 0x5f}], 0x7}, 0x2}, {{&(0x7f0000001a40)=@rc={0x1f, @none}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001ac0)=""/196, 0xc4}], 0x1, &(0x7f0000001c00)=""/41, 0x29}, 0x15ab}, {{&(0x7f0000001c40)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000001cc0)=""/4096, 0x1000}, {&(0x7f0000002cc0)=""/83, 0x53}, {&(0x7f0000002d40)=""/48, 0x30}, {&(0x7f0000002d80)=""/36, 0x24}, {&(0x7f0000002dc0)=""/193, 0xc1}], 0x5, &(0x7f0000002f40)=""/237, 0xed}, 0x5}], 0x8, 0x40018020, &(0x7f0000003240)) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r4, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGSKNS(r5, 0x894c, &(0x7f0000000080)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303, 0x36}, "0000000000000080", "a14748a65151e96d6d2a01e49419560000000000000000000000004000", "6d40e581", "066580001e00"}, 0x38) 5m6.092091666s ago: executing program 2 (id=19558): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000}, 0x50) 5m5.964110828s ago: executing program 2 (id=19560): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024023884f23f59a2d95623730bc5a6f000000000800014000000000140000"], 0x68}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8982, &(0x7f0000000100)={0x7, 'vlan1\x00', {0x2}, 0x5}) 5m5.886753909s ago: executing program 2 (id=19562): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) ioprio_get$uid(0x3, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 5m5.737407191s ago: executing program 2 (id=19565): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000201000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) unshare(0x26000400) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x6, 0x0, r2, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) 5m4.222374423s ago: executing program 2 (id=19584): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) (async) listen(0xffffffffffffffff, 0x0) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb763e", 0x28, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x41}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, [{0x18, 0x3, "007c4de20278ab96e88afd5c976b4c1ce4a945b1aafb"}]}}}}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r7, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x40) 5m4.191790364s ago: executing program 67 (id=19584): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) (async) listen(0xffffffffffffffff, 0x0) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb763e", 0x28, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x41}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, [{0x18, 0x3, "007c4de20278ab96e88afd5c976b4c1ce4a945b1aafb"}]}}}}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r7, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x40) 4m57.007834537s ago: executing program 0 (id=19689): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xef, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6e", 0x0, 0x8, 0x60000000}, 0x50) 4m57.007104288s ago: executing program 0 (id=19690): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r2, 0x5608, 0x0) 4m56.934624518s ago: executing program 0 (id=19692): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 4m56.884810459s ago: executing program 0 (id=19693): syz_open_dev$tty1(0xc, 0x4, 0x4) accept4$x25(0xffffffffffffffff, &(0x7f0000000780), 0x0, 0x800) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000100)=0x100000001) connect$inet(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f0000000000), 0x1, 0x503, &(0x7f0000000140)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bind$xdp(r0, 0x0, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4800000, 0x8005, 0x0, 0x0, 0x9, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d10a00966d61fdcf335263bd9bffbcc2542ded71038259ca0400e1a311efec32d71e14ef3dc177b5b48b00", "f2fdffffffffffffff810000000000d300e6d602000000000000000000000001", [0xca4e]}) write$binfmt_misc(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00'}, 0x10) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 4m56.617189173s ago: executing program 0 (id=19696): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xf, {"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", 0x104d}}, 0x1006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) brk(0x400000ffc000) 4m56.303674248s ago: executing program 0 (id=19702): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r2, 0x5608, 0x0) 4m56.243109418s ago: executing program 68 (id=19702): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r2, 0x5608, 0x0) 4m0.794087812s ago: executing program 6 (id=20691): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x0) 4m0.731271003s ago: executing program 6 (id=20692): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2, 0x0, 0x6}, 0x18) socket$kcm(0x10, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000002c0)=0x11) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x2) 4m0.526449766s ago: executing program 6 (id=20699): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001811000094539c2e0b8610daabb34cd0eb18c71f6c7e8734e22d101723323a016468f99ada4fac492a86430f4cecfef06cbc922add", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000003c0)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000cc0)={0x2, 0x3, 0x0, 0x3, 0x5, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x17, 0x0, 0x80, 0x0, @in={0x2, 0x0, @private}}]}, 0x28}, 0x1, 0x7}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = socket(0x2a, 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000240)="f2435f203b000000000000000000", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000600)='xprt_transmit\x00', r9}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) r10 = socket$inet(0x2, 0x2, 0x8) bind$inet(r10, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 4m0.383778928s ago: executing program 6 (id=20703): syz_open_dev$tty1(0xc, 0x4, 0x4) accept4$x25(0xffffffffffffffff, &(0x7f0000000780), 0x0, 0x800) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000100)=0x100000001) connect$inet(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f0000000000), 0x1, 0x503, &(0x7f0000000140)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bind$xdp(r0, 0x0, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4800000, 0x8005, 0x0, 0x0, 0x9, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d10a00966d61fdcf335263bd9bffbcc2542ded71038259ca0400e1a311efec32d71e14ef3dc177b5b48b00", "f2fdffffffffffffff810000000000d300e6d602000000000000000000000001", [0xca4e]}) write$binfmt_misc(r0, &(0x7f00000003c0)='(', 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3m59.473332061s ago: executing program 6 (id=20722): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0xa1a2}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0x4}, 0x18) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0xffffff83, @loopback, 0x5}, 0x1c) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@nouser_xattr}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@quota}, {@noload}, {@block_validity}]}, 0x64, 0x51c, &(0x7f0000001740)="$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") 3m59.011785348s ago: executing program 6 (id=20730): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket(0x1e, 0x80004, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0xc7f}, 0x18) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f0000001900)=[{{&(0x7f0000000300)=@phonet, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000380)=""/76, 0x4c}, {&(0x7f0000000b00)=""/227, 0xe3}, {&(0x7f0000000c00)=""/141, 0x8d}, {&(0x7f0000000a40)=""/81, 0x51}, {&(0x7f0000000cc0)=""/177, 0xb1}, {&(0x7f0000000d80)=""/167, 0xa7}], 0x6, &(0x7f0000000ec0)=""/54, 0x36}, 0x800}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000f00)=""/46, 0x2e}, {&(0x7f0000000f40)}], 0x2, &(0x7f0000000fc0)=""/46, 0x2e}, 0x7}, {{&(0x7f0000001000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f0000001240)=[{&(0x7f0000001080)=""/154, 0x9a}, {&(0x7f0000001140)=""/48, 0x30}, {&(0x7f0000001180)=""/144, 0x90}], 0x3, &(0x7f0000001280)=""/51, 0x33}, 0xfffffffd}, {{&(0x7f00000012c0)=@hci, 0x80, &(0x7f00000017c0)=[{&(0x7f0000001340)=""/222, 0xde}, {&(0x7f0000001440)=""/233, 0xe9}, {&(0x7f0000001540)=""/243, 0xf3}, {&(0x7f0000001640)=""/10, 0xa}, {&(0x7f0000001680)=""/115, 0x73}, {&(0x7f0000001700)=""/97, 0x61}], 0x6, &(0x7f0000001840)=""/179, 0xb3}, 0x40}], 0x4, 0x12002, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2000044, &(0x7f0000000040)={[{@debug}, {@jqfmt_vfsold}, {@quota}]}, 0x2, 0x512, &(0x7f0000000500)="$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") perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x50a, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x1823, 0x10000, 0xfffffffd, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a0001400000000000030000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='devices.list\x00', 0x275a, 0x0) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') 3m59.011573628s ago: executing program 69 (id=20730): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket(0x1e, 0x80004, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0xc7f}, 0x18) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f0000001900)=[{{&(0x7f0000000300)=@phonet, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000380)=""/76, 0x4c}, {&(0x7f0000000b00)=""/227, 0xe3}, {&(0x7f0000000c00)=""/141, 0x8d}, {&(0x7f0000000a40)=""/81, 0x51}, {&(0x7f0000000cc0)=""/177, 0xb1}, {&(0x7f0000000d80)=""/167, 0xa7}], 0x6, &(0x7f0000000ec0)=""/54, 0x36}, 0x800}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000f00)=""/46, 0x2e}, {&(0x7f0000000f40)}], 0x2, &(0x7f0000000fc0)=""/46, 0x2e}, 0x7}, {{&(0x7f0000001000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f0000001240)=[{&(0x7f0000001080)=""/154, 0x9a}, {&(0x7f0000001140)=""/48, 0x30}, {&(0x7f0000001180)=""/144, 0x90}], 0x3, &(0x7f0000001280)=""/51, 0x33}, 0xfffffffd}, {{&(0x7f00000012c0)=@hci, 0x80, &(0x7f00000017c0)=[{&(0x7f0000001340)=""/222, 0xde}, {&(0x7f0000001440)=""/233, 0xe9}, {&(0x7f0000001540)=""/243, 0xf3}, {&(0x7f0000001640)=""/10, 0xa}, {&(0x7f0000001680)=""/115, 0x73}, {&(0x7f0000001700)=""/97, 0x61}], 0x6, &(0x7f0000001840)=""/179, 0xb3}, 0x40}], 0x4, 0x12002, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2000044, &(0x7f0000000040)={[{@debug}, {@jqfmt_vfsold}, {@quota}]}, 0x2, 0x512, &(0x7f0000000500)="$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") perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x50a, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x1823, 0x10000, 0xfffffffd, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a0001400000000000030000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='devices.list\x00', 0x275a, 0x0) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') 3m57.624909158s ago: executing program 3 (id=20768): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x763, 0x5, 0xc, 0x9}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) 3m57.49974263s ago: executing program 3 (id=20772): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = io_uring_setup(0x60f7, &(0x7f0000000400)={0x0, 0x39bd, 0x2, 0x1, 0x3c0}) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r2, 0x4) close_range(r1, r2, 0x0) 3m57.413530661s ago: executing program 3 (id=20774): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x11) 3m56.533287554s ago: executing program 3 (id=20787): syz_open_dev$tty1(0xc, 0x4, 0x4) accept4$x25(0xffffffffffffffff, &(0x7f0000000780), 0x0, 0x800) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000100)=0x100000001) connect$inet(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f0000000000), 0x1, 0x503, &(0x7f0000000140)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bind$xdp(r0, 0x0, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4800000, 0x8005, 0x0, 0x0, 0x9, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d10a00966d61fdcf335263bd9bffbcc2542ded71038259ca0400e1a311efec32d71e14ef3dc177b5b48b00", "f2fdffffffffffffff810000000000d300e6d602000000000000000000000001", [0xca4e]}) write$binfmt_misc(r0, &(0x7f00000003c0)='(', 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3m55.923055763s ago: executing program 3 (id=20792): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x763, 0x5, 0xc, 0x9}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) 3m55.598249857s ago: executing program 3 (id=20801): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x88b2}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000000000000002, &(0x7f0000000e80), 0x2, 0x8}}, 0x20) 3m55.550615168s ago: executing program 70 (id=20801): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x88b2}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000000000000002, &(0x7f0000000e80), 0x2, 0x8}}, 0x20) 27.542699591s ago: executing program 5 (id=24447): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1000403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000980)="$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") 27.260176305s ago: executing program 5 (id=24454): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000680), 0x4) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c244, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext, 0x2600, 0x0, 0x3, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket(0x10, 0x3, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) futex(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r4, 0x0, 0x4ab}, 0x18) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000280)={[{@nouid32}]}, 0x1, 0x71c, &(0x7f0000000f40)="$eJzs3U1rXNUbAPDn3mb+yb+NJoKKLyAVxYqlkya2lK6sC9FNMVBwm4bkJsTc9MbMTG1CF+nKrYii4Ea/gxtXims/gF9BQbTURV1F7mQmfZtJpppkIPP7wZ15zr03ec6ZCeeBnGFOAAPrZPmQRjwfEdNJxFjrfBIRlWY0FHFp+747t2/OlUcSW1tX/kia95TtuO9nSiciYjMinouInyoRp9NH89bWN5Zn8zxba7Un6iurE7X1jTNLK7OL2WJ27eK5c1PnLpy/eHH/xvrG+x88Wz3/zuj30wszpyZ//S6JSzHaunb/OPbT9mtSKV/CB7x7EMn6KOl3B/hXhiLiWOv5mRiLY80IADjKtoYjtgCAAZOo/wAwYNr/B2iv7R3UOlg3v78dESOd8g+11sxGmuuQx+8kD6xMJBExfpgd5UjavBURV8dPPvr3lzyyZvu4zu5HBzlQP5bzz6VO80+6M/9Eh/lnpP3Zif+o+/x3L/+xLvPfdI853nuxUXTNfyvihaFO+ZOd/EmX/Fd7zP/D3fm/u13b+jbitY71J3kgV/fPh0wsLOXZ2e3HzjlONm5+uNv4j3fJv7nH+Fd7HP/oZy//vLlL/tdf2f3975S/rImf9pj/k8pbX3S7Vuaf7zL+vd7/b3rMf+GljzZ6vBUAAAAAAAAAAAAAAAAAAAAAAAAAAACOhDQiRiNJqztxmlar23t4Px3H07yo1U8vFI1r89HcK3s8Kmn7q5bHtttJ2Z5sfR9/uz31UPvNiHgqIj4f/n+zXZ0r8vl+Dx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWk48tP//X8Pb+/8DAEfcSL87AAAcOvUfAAaP+g8Ag0f9B4DBo/4DwOBR/wFg8Kj/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAByy6cuXy2Przu2bc2V7/vp6Y7m4fmY+qy1XVxpz1blibbW6WBSLeVadK1b2+n15UaxOTUXjxkQ9q9UnausbMytF41p9ZmlldjGbySqHMioAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeDyjzSNJqxGRNuM0rVYjnoiI8agkC0t5djYinoyIX4Yrw2V7st+dBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB9VlvfWJ7N82xNIBAIdoJ+z0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABw+O5t+t3vngAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAP6W/JRFRHqfGXh19+Or/krvDzeeI+PjrK1/emK3X1ybL83/unK9/1To/1Y/+AwB7adfpdh0HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE5q6xvLs3merR1g0O8xAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwf/4JAAD//68fzsc=") (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) (async, rerun: 32) r7 = socket(0x10, 0x3, 0x0) (rerun: 32) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) (async, rerun: 64) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 64) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x3, {0x0, 0x0, 0x0, r9, {}, {0x5c6701dc5d1a19d6, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async, rerun: 32) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) r11 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe01}, r10, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r11, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x0, 0x0, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xd, 0x30}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x2}]}]}]}}]}, 0x50}}, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15020000000000002000128008000100687372001400028008000100", @ANYRES32=r12, @ANYBLOB="08000200", @ANYRES32=r13], 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) 27.165559847s ago: executing program 5 (id=24455): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}]}, 0x68}}, 0x0) 27.150532267s ago: executing program 5 (id=24457): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x6d}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x13, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000001000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000c0000000000000000010000851000000745180010000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000c1b60878dd21a173bd8d431c79b980e1a8b670f00612f2f80fc0205cfddad0dcfe4f4cd8ad326f035801bab9d113868a6b62f55c6f853c3a6b703fe912dace1521d85c5b527315c30bbd61f34cd26bdab3ff089b0b66b5c84ac20342f45de76b1ff4e8"], &(0x7f00000001c0)='syzkaller\x00', 0x466, 0x34, &(0x7f0000000280)=""/52, 0x40f00, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xf, 0x9, 0x28}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r0], 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000080)='mm_vmscan_lru_isolate\x00', r2, 0x0, 0xffff}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r3 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x5a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x101, 0x7, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@restrict, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}}, &(0x7f0000001b80)=""/4090, 0x46, 0xffa, 0xa}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000340)={[], [], 0x2c}, 0x84, 0x4ca, &(0x7f0000000f80)="$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") open_by_handle_at(0xffffffffffffffff, 0x0, 0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000180)='cpu=~0||!') r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/113, 0x71}], 0x1, 0x0) 26.979810479s ago: executing program 5 (id=24464): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r4}, 0x10) r5 = syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file1\x00', 0x100c085, &(0x7f0000000d00)=ANY=[@ANYRES8=0x0, @ANYBLOB="c0da5b74006e9c47add458a1bd748b7ffa5628dc52f84873cbe6a43cfd29e4198255a0610d383b0e46b2b6457282a9f3caef22979e54c145e6a0ce2850a890af7c4e1fa3628453c70aae32270b0042f1532cf08030eccdca96e2c97aae42cf5d9ec5f0afa4fcc53c8f9289677038d09ae2b1bd2271e0a76e6324df3a2b01a9ed0277d7e8d6f7d463ae62692faa55bdb43dc2bea18eea4a635951fd0a220a835fa24d0700c8f8c245d1d7638b2cae5ed3bec0d2f0415ddff7884bb34ab0cb1598e9c7b92a29005e4090ede480b3412f5c33da5e7c8672bda19fd3d989f8336d69d9e70de142973e7e1f53987b2d"], 0x10, 0x7f4, &(0x7f0000000e40)="$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") creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000000)={0x1, 0x8, 0x4}) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x8, &(0x7f0000000300)=ANY=[@ANYRES8=r3], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = memfd_secret(0x0) fcntl$setlease(r6, 0x400, 0x0) fsetxattr$security_ima(r6, &(0x7f0000000000), 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r7 = eventfd(0x800a6) write$eventfd(r7, &(0x7f0000000000)=0xfffffffffffffffb, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000340)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x80000000) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 26.293677029s ago: executing program 5 (id=24481): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYRES16, @ANYRES8, @ANYRESOCT], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="17e2000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = fsmount(0xffffffffffffffff, 0x0, 0x70) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000000)=0x32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000cc0)={&(0x7f00000003c0)='btrfs_space_reservation\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f00000005c0)={[{@jqfmt_vfsv0}, {@errors_continue}, {@dioread_lock}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nobh}, {@debug}, {@usrjquota_path={'usrjquota', 0x3d, './file1'}}]}, 0x1, 0x57b, &(0x7f0000000640)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_io_uring_setup(0x53c, &(0x7f00000004c0)={0x0, 0xaee2, 0x1, 0x0, 0x7a}, &(0x7f0000000340), &(0x7f0000000300)) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x10, 0x3, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) bind$bt_hci(r5, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x2) sendmmsg(r5, &(0x7f0000000c80)=[{{&(0x7f0000000400)=@sco, 0x80, 0x0, 0x34, &(0x7f0000000bc0)=ANY=[@ANYRES16, @ANYRES16=r4, @ANYRES16=0x0], 0x20}}], 0x1, 0x0) 26.26870149s ago: executing program 71 (id=24481): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYRES16, @ANYRES8, @ANYRESOCT], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="17e2000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = fsmount(0xffffffffffffffff, 0x0, 0x70) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000000)=0x32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000cc0)={&(0x7f00000003c0)='btrfs_space_reservation\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f00000005c0)={[{@jqfmt_vfsv0}, {@errors_continue}, {@dioread_lock}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nobh}, {@debug}, {@usrjquota_path={'usrjquota', 0x3d, './file1'}}]}, 0x1, 0x57b, &(0x7f0000000640)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_io_uring_setup(0x53c, &(0x7f00000004c0)={0x0, 0xaee2, 0x1, 0x0, 0x7a}, &(0x7f0000000340), &(0x7f0000000300)) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x10, 0x3, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) bind$bt_hci(r5, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x2) sendmmsg(r5, &(0x7f0000000c80)=[{{&(0x7f0000000400)=@sco, 0x80, 0x0, 0x34, &(0x7f0000000bc0)=ANY=[@ANYRES16, @ANYRES16=r4, @ANYRES16=0x0], 0x20}}], 0x1, 0x0) 1.162769003s ago: executing program 7 (id=25214): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r0}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x2400c031) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f00000001c0), 0x4) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) close(r2) 1.131482644s ago: executing program 7 (id=25215): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x1000}, {r0, 0x3112}, {0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x4009}, {0xffffffffffffffff, 0x8006}, {0xffffffffffffffff, 0x91}, {r0, 0x11c1}], 0x7, &(0x7f00000005c0)={0x0, 0x3938700}, &(0x7f0000000600)={[0x7]}, 0x8) 956.186246ms ago: executing program 7 (id=25223): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x2000c8, &(0x7f00000005c0)=ANY=[@ANYBLOB="73686f77657865632c747a3d5554432c7379735f696d6d757461626c652c6e6f646f74732c6e6f646f74732c646f74732c6572726f72733d636f6e74696e75652c646f74732c6e6f646f74732c636865636b3d7374726963742c7379735f696d6d757461626c652c646f74732c646f74732c6e6f636173652c7379735f696d6d757461626c652c646f74732c636865636b3d7374726963742c646f74732c6e6f646f74732c757365667265652c6e6f646f74732c6e6f646f74732c00ee9713032a77c86d5c3a5edb0950783b197cf6e509361265937d84cb86a9f59491ade6978711bafdc6e4fd59dedbf4a3afcc5accf742bdd669730d726f201b2721f84eb4fd91e55f81825ac2d4c11007cdbad5f870a7436e1002f40cc70d882b1d62616004185a89e51db441e7da"], 0xfd, 0x1d1, &(0x7f00000002c0)="$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") sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x2eb4, 0x2000007ff) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001d40)=@newtfilter={0x880, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@TCA_RATE={0x6, 0x5, {0xc, 0x61}}, @filter_kind_options=@f_fw={{0x7}, {0x84c, 0x2, [@TCA_FW_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0xbef, 0xba, 0x8, 0x0, 0xc03, 0x1, 0x400, 0x400000e, 0x3, 0xcd30, 0x0, 0xc, 0x4, 0xa, 0x6, 0xa8c, 0x81, 0xfffffff9, 0x1, 0xffffff7f, 0x3, 0x2, 0x1, 0x6, 0x80000000, 0x6, 0x400, 0xcc30, 0x1, 0x8, 0x5, 0x1, 0x3, 0x400, 0x5e, 0x0, 0x6, 0xffff, 0xfffffffb, 0x64eb6274, 0x3, 0x4, 0xff, 0x7ff, 0xd, 0x7fff, 0x8, 0x2, 0x5, 0x1, 0x80000001, 0x8005, 0xfffffffe, 0x2, 0x5, 0x7ff, 0x7f, 0xffffffff, 0x10000, 0x60, 0xd63, 0x8, 0x2, 0x5, 0x6473, 0x10001, 0x119, 0x6, 0x0, 0x9f7, 0x5, 0x8, 0xe, 0x1, 0x0, 0x5, 0x3, 0x49e8, 0x1, 0xb7e3, 0x7, 0x3857, 0x4, 0x0, 0x400, 0x3, 0x80000001, 0xfde, 0x9, 0x9, 0x4, 0x1000, 0x6, 0x1, 0xf3, 0x7fffffff, 0x9, 0x3, 0x0, 0x9, 0x8001, 0x700, 0x7, 0xbb, 0x2, 0x100, 0xfffffffe, 0x5, 0xfffffff5, 0x9, 0x5, 0x1, 0x4, 0x80000001, 0x8, 0x2, 0x8, 0xc547, 0x10000, 0xffff, 0x3, 0xa6, 0x6d0, 0x73e9, 0x4000000, 0xfffffff8, 0x93, 0x3, 0x8, 0x8, 0x2, 0x8, 0x6, 0x9, 0x1, 0x81, 0x9, 0x7f, 0x0, 0x10, 0xed9, 0x6, 0x7ff, 0x0, 0x8, 0xc96, 0x0, 0x0, 0x2, 0x9, 0x1, 0xf8e3, 0x3, 0x5, 0xc, 0x1, 0x4, 0xac75, 0x2, 0x2, 0x104, 0x80000001, 0x918d, 0x85ba, 0x7, 0x1, 0x5, 0x9c0, 0x26, 0x9, 0x8, 0x5, 0x800, 0x4, 0xfffffffb, 0x0, 0x1, 0xc, 0x9, 0x4, 0x2a7a, 0x0, 0x4, 0xffffffff, 0x7, 0x401, 0xfffffffa, 0x0, 0x0, 0x40, 0x5, 0x8, 0x2, 0x3, 0x200, 0x80000000, 0x9, 0x2, 0x4, 0x7, 0x1, 0x3e400000, 0x4e, 0x5, 0x13800000, 0x0, 0x9, 0x200, 0x61, 0x1, 0xeec, 0x7, 0x400, 0x7, 0x0, 0x4bb6, 0x2f, 0x9, 0x86c5b105, 0x1, 0xaf, 0x5, 0x8, 0x0, 0x0, 0x9, 0x7fd8, 0x8, 0x1, 0x40, 0x0, 0xf, 0x4, 0x7, 0x7fffffff, 0x2, 0xfffffffc, 0xc8d, 0xc, 0xa, 0xfd, 0x5, 0x5, 0x2, 0x2, 0x9, 0x8, 0x40000004, 0x1600, 0x5, 0x6, 0x80, 0x1, 0x3, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x2, 0x2, 0xb, 0x2, {0x7, 0x1, 0x80, 0x7, 0xe, 0x749a}, {0x1, 0x0, 0x9, 0x1, 0xc, 0xa5a5}, 0x5, 0x8}}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0xb2ab, 0x4, 0x5, 0x7, 0x52b3, 0x3, 0x7, 0x9, 0x40, 0x5100, 0xf, 0x7fff, 0x3, 0x1, 0x0, 0x5, 0x2, 0x446, 0x46c4, 0x5, 0x7, 0x7ff, 0x4, 0xffff0001, 0x8, 0x1582, 0xd, 0xfffffff8, 0x7, 0x81, 0x0, 0x83c2, 0xcc5, 0x8, 0x9, 0xc, 0x8, 0x7, 0x9, 0x1, 0xa, 0x9, 0x7fffffff, 0x34f67789, 0x80000001, 0x53, 0x4, 0x0, 0x5, 0x20000, 0x7fffffff, 0x3, 0x5, 0x9, 0x6, 0x8, 0x1, 0xbe9d, 0xf548, 0xb2e, 0xe, 0x5, 0x5, 0x10, 0x7, 0x3, 0x1, 0x80, 0x3, 0x6, 0xffff, 0x4, 0x8b65, 0x7, 0x2, 0x9, 0x0, 0x3, 0x4, 0x4, 0x1, 0x560, 0x6, 0x0, 0xffffff81, 0x5, 0x3000000, 0xec25, 0xfffffff7, 0x2a, 0x7, 0x4, 0x7ff, 0x7, 0x400, 0x6, 0x1, 0x3, 0x7, 0x0, 0x3, 0x7ff, 0x7, 0x3, 0x3, 0xfffffbff, 0xffffff45, 0x2, 0x7f, 0x10001, 0x40, 0x7, 0x9, 0x6, 0x6, 0x3ff, 0x400000, 0x8, 0x800, 0xb86, 0x1, 0x7, 0xfffff415, 0x7, 0x3, 0x9, 0x8, 0xb4a1, 0x7, 0x9, 0x80000000, 0x6fb7, 0x8001, 0x9, 0xf0, 0x9, 0x7, 0x4, 0x1, 0x80, 0x8, 0x1, 0x7, 0x1, 0x6, 0x0, 0xffffffff, 0x80000001, 0x3, 0x3, 0x80000000, 0xfffff6f0, 0x3, 0x2, 0x8, 0x6, 0x7ff, 0x5, 0x100, 0xffffffff, 0x4, 0xffffff38, 0x5, 0x400, 0x0, 0x7ff, 0x7, 0x2, 0x10000, 0xff, 0x5, 0x80, 0x3, 0x401, 0xa, 0x1, 0xa56, 0x7, 0x9, 0x6, 0x7, 0x1000, 0x2, 0x3, 0x1, 0x2e, 0x9, 0x38000000, 0x380, 0x0, 0x6, 0x9, 0x6, 0x7fffffff, 0x5, 0x7ff, 0x1, 0x5, 0xffff, 0x1fd, 0x6, 0x2, 0x1, 0x3, 0x1, 0x6, 0x1, 0x1, 0x10, 0x2, 0x1c00, 0xa7, 0x9, 0x7, 0x7, 0x9, 0x6, 0x0, 0x4c, 0x9558, 0x81, 0x8001, 0x3c, 0xff, 0x7fff, 0x3, 0x7, 0x1ff, 0xdfe, 0x9, 0x9, 0x2, 0xe, 0x2, 0x8, 0x5, 0x2, 0xd, 0x3, 0x5, 0x2, 0xe, 0x0, 0x5, 0xc7, 0x1, 0x1, 0x4, 0xb, 0x7, 0x2, 0x4, 0x80, 0x6, 0xffff8000]}]}]}}]}, 0x880}, 0x1, 0x0, 0x0, 0x10}, 0x0) 953.944696ms ago: executing program 9 (id=25224): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0xe, 0x377, @l2={'ib', 0x3a, 'tunl0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x24048000) 920.552147ms ago: executing program 7 (id=25226): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000740)=ANY=[@ANYRES16=r2, @ANYRES32=r2, @ANYRES64=r3], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x7f) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2400c09d}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r8 = socket(0x10, 0x3, 0x0) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180373f6b4dc0000000000000000000018000000", @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) 831.431488ms ago: executing program 8 (id=25230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x6, &(0x7f0000000080)=0x2, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x9a, &(0x7f0000000300)={0x800000, 0x1, 0x84}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x2, 0x0) mq_timedreceive(r4, 0x0, 0x0, 0x2, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000280)='qdisc_dequeue\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) mkdirat(r3, &(0x7f0000000180)='./bus\x00', 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) renameat2(r3, 0x0, r3, &(0x7f0000000200)='./bus/file0\x00', 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) 621.321471ms ago: executing program 9 (id=25234): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_settime(0xfffffff8, &(0x7f0000000140)={0x0, 0x989680}) 560.967402ms ago: executing program 9 (id=25235): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) r1 = syz_io_uring_setup(0x20006b4e, &(0x7f0000000140)={0x0, 0xcb8f, 0x8088, 0x1, 0xdf}, &(0x7f0000000a00), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xe, &(0x7f0000000480)={0x3, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/24, 0x18}, {&(0x7f0000000340)=""/247, 0xf7}, {&(0x7f0000000580)=""/176, 0xb0}, {&(0x7f0000000640)=""/207, 0xcf}, {&(0x7f0000000740)=""/141, 0x8d}, {&(0x7f0000000800)=""/252, 0xfc}, {&(0x7f0000000900)=""/232, 0xe8}], &(0x7f0000000440)=[0x0, 0x7fffffff, 0x9, 0x3, 0x2, 0x5, 0x6], 0x7}, 0x20) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x2400c031) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r3, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f00000001c0), 0x4) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) close(r3) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 560.582022ms ago: executing program 1 (id=25236): bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@bloom_filter={0x1e, 0x1, 0x1, 0xd697, 0x1084, 0xffffffffffffffff, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2, 0xa}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8100d00c}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)={0x6c, 0x3, 0x1, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_NAT_SRC={0x30, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}]}, @CTA_NAT_DST={0x20, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0xa}]}, 0x6c}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080081000000060027"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2, 0x0, 0x4}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@map=r4, r3, 0x2f}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x108, 0x0) socket(0x5, 0x3, 0x6) mq_timedsend(r5, 0x0, 0x47, 0x6, 0x0) 560.343562ms ago: executing program 8 (id=25237): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r1}, 0x18) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x4000}]) 504.074823ms ago: executing program 9 (id=25238): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000008085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x2400c031) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r2, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f00000001c0), 0x4) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) close(r2) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 470.250723ms ago: executing program 9 (id=25239): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = io_uring_setup(0x37ae, &(0x7f00000003c0)={0x0, 0x800000, 0x0, 0x2, 0x22a}) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000740)={&(0x7f0000002000)={[{0x0, 0x0, 0x3}, {0x0}, {0x0, 0x0, 0xfffe}, {0x0}]}, 0x4}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r2, 0x17, &(0x7f0000000300)={0x0}, 0x1) 434.213254ms ago: executing program 8 (id=25240): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x4092}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380"], 0x44}}, 0x0) 406.222924ms ago: executing program 8 (id=25242): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, 0x0, 0x2400c031) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f00000001c0), 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) close(r1) 375.593825ms ago: executing program 9 (id=25243): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000008c0)="3bcbdb0fcfa026557d2ea2b0fa34b7b3ddf4e60fe678186210e935989ea66d7c81fcd371943f18f118107da91cf43c5479ca82428e90b96b3635a98e39939ef5109511d949224164c044f18fb4d64db5c0404f01b99fba50263ee03e82a28fcd751660b0cab68a62a8b6eac29946c988fc747092d35e935ad8442feece96b4ee481cf95a8feb6ec3d6e5cff03f59eb97136d7cb400c1d0ed4ed9b83090abb1", 0x9f}, {&(0x7f0000000980)="742f311a83a225186454bcfd09e48b60d703de616d0e6f11523b39811b58bc1452d76496e44c55", 0x27}], 0x2}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000000f00)="52348bf9812fc081678b5760a4c4967393fd8939aaf12a894c5424df616c4eea14fbac2dad114a75c405d89fafa5715b56abba4bbceca456d8225e3f6eb57a03287e74c7bd74e40e3fda3150f92d181e7c82cb2f8ea0416fc4c0f111161cdb9a52911925644e25f871d02f403c83214f830f93b30b874e75cab53f1ed7871f21c0d654a47fab0637868517d7e8d9915e99b4dc2dcafdcb2ef2a012ec95418a544c32181fb969e01318e00a12fd1b2a0eb57bcf7de086e320f2d4be4e1453010be849e4d7dba41558329699aacd3d1c7d97b9bf74caf8b7946647309d209558b1965ef7ea4576ec0e28", 0xe9}], 0x1}}], 0x2, 0x4) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 374.895285ms ago: executing program 7 (id=25244): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1d, 0x24, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0xffffff81}, {}, {}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @ldst={0x2, 0x0, 0x1, 0x2, 0xb, 0xfffffffffffffff4, 0x8}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @ringbuf_query, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='GPL\x00', 0x71, 0x1000, &(0x7f0000000740)=""/4096, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0xe, 0x3, 0xffffffff}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x6}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x2000}) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x4, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000001800)={'syztnl2\x00', 0x0, 0x80, 0x7, 0xc4d3, 0x8, {{0xa, 0x4, 0x2, 0x2, 0x28, 0x65, 0x400, 0x8, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x29}, {[@rr={0x7, 0xb, 0x21, [@local, @loopback]}, @generic={0x44, 0x5, "84cbcb"}, @noop]}}}}}) r7 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c3a42, 0x0) pwrite64(r8, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r7, 0x0, 0x1, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000040)={0xc, r7, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x7, 0x10, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x33}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x8e}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000640)='syzkaller\x00', 0x5, 0xa7, &(0x7f0000001740)=""/167, 0x40f00, 0x40, '\x00', r6, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000001880)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000018c0)={0x4, 0xd, 0x7d, 0x6}, 0x10, 0x0, r1, 0x6, &(0x7f0000001900)=[0xffffffffffffffff, r2, r0, r0, r0, r7], &(0x7f0000001940)=[{0x0, 0x2, 0xc, 0x8}, {0x2, 0x4, 0xe, 0x4}, {0x1, 0x1, 0xb, 0x8}, {0x5, 0x5, 0x9, 0x7}, {0x1, 0x1, 0x10, 0x1}, {0x0, 0x1, 0x10, 0x6}], 0x10, 0x30000}, 0x94) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01032dbd7000ffdbdf25010000000800010001000000c1fe87c6"], 0x1c}, 0x1, 0x0, 0x0, 0x48880}, 0x4) 373.298235ms ago: executing program 8 (id=25245): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1000403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000980)="$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") 288.174486ms ago: executing program 4 (id=25248): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) syz_io_uring_setup(0x20006b4e, &(0x7f0000000140)={0x0, 0xcb8f, 0x8088, 0x1, 0xdf}, &(0x7f0000000a00), &(0x7f00000001c0)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x2400c031) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r2, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f00000001c0), 0x4) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) close(r2) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 276.661896ms ago: executing program 1 (id=25249): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000008085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x2400c031) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r2, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f00000001c0), 0x4) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) close(r2) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 215.950267ms ago: executing program 4 (id=25250): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) io_setup(0x200, 0x0) io_submit(0x0, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x4000}]) 191.312067ms ago: executing program 1 (id=25251): socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc0200000000000000000000000000000300"], 0x88}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 153.563918ms ago: executing program 4 (id=25252): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0}) 153.028298ms ago: executing program 1 (id=25253): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0xb00, r4, {0x9, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x40010) 131.099958ms ago: executing program 4 (id=25254): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = io_uring_setup(0x37ae, &(0x7f00000003c0)={0x0, 0x800000, 0x0, 0x2, 0x22a}) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000740)={&(0x7f0000002000)={[{0x0, 0x0, 0x3}, {0x0}, {0x0, 0x0, 0xfffe}, {0x0}]}, 0x4}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r2, 0x17, &(0x7f0000000300)={0x0}, 0x1) 64.758889ms ago: executing program 4 (id=25255): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, 0x0, 0x2400c031) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f00000001c0), 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) close(r1) 64.294109ms ago: executing program 7 (id=25256): r0 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x108, 0x0) mq_timedsend(r0, 0x0, 0x47, 0x6, 0x0) 63.695769ms ago: executing program 1 (id=25257): socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc0200000000000000000000000000000300"], 0x88}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = fsopen(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) close_range(r1, 0xffffffffffffffff, 0x0) 39.47282ms ago: executing program 1 (id=25258): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9", 0x2a, r0) keyctl$instantiate(0xc, r0, &(0x7f0000000000)=@encrypted_new={'new ', 'default', 0x20, 'user:', '', 0x20, 0xe6}, 0x27, 0xfffffffffffffffb) 31.7591ms ago: executing program 4 (id=25259): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000040)={[], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@smackfsdef={'smackfsdef', 0x3d, 'ext4\x00'}}, {@obj_user}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x39, 0x39, 0x66, 0x62, 0x34, 0x56, 0x32], 0x2d, [0x39, 0x36, 0x38, 0x36], 0x2d, [0x37, 0x65, 0x33, 0x37], 0x2d, [0x64, 0x72, 0x66, 0x62], 0x2d, [0x0, 0x65, 0x34, 0x32, 0x31, 0x61, 0x65, 0x66]}}}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}, {@seclabel}]}, 0x0, 0x79c, &(0x7f0000001700)="$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") bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0xffffffffffffffff, 0xc0}, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000400)=ANY=[@ANYRES64=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRES64=r2], 0x13c}}, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffe, 0x3ff}}, './file0\x00'}) socket(0x2a, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net\x00') getdents64(r6, &(0x7f0000002080)=""/170, 0xaa) sendto$packet(r4, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000440)=0x8000, 0x4) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001300010000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000280)="6b5ea0cd187ede3e538bc3543948db9297109ca599cded039b156251280c7ab65af41be8ce62414fe0e3ec3ee9e934d857d01d2100604b4cb96352c190d2a873f0456fbfe4300bb80f3eb66e6ac9489e2c0a22124aa2564aa23304616ea710e465bb0aa8ba8801dc0b084a4236366badebbb569d86ef4bfd7a2df95ad4166bbf747cf7de9182b5fa64964a9ad96509352de403f4bc14496ae66126bd59b36d90f4bedd941657ea3800", 0xa9}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, 0xffffffffffffffff, 0x0) 0s ago: executing program 8 (id=25260): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x2400c031) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r2, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f00000001c0), 0x4) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) close(r2) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) kernel console output (not intermixed with test programs): ][T30990] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1712.179002][T31005] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=31005 comm=syz.5.24177 [ 1712.253276][T30990] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1712.281407][T31019] serio: Serial port ptm0 [ 1712.283813][T31015] loop1: detected capacity change from 0 to 2048 [ 1712.330833][T31015] Alternate GPT is invalid, using primary GPT. [ 1712.337233][T31015] loop1: p1 p2 p3 [ 1712.342150][T31025] netlink: 8 bytes leftover after parsing attributes in process `syz.8.24183'. [ 1712.354904][T31025] loop8: detected capacity change from 0 to 512 [ 1712.371163][T31015] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 1712.386979][T31025] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1712.400131][T31025] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1712.472252][T31041] usb usb8: check_ctrlrecip: process 31041 (syz.1.24188) requesting ep 01 but needs 81 [ 1712.482132][T31041] usb usb8: usbfs: process 31041 (syz.1.24188) did not claim interface 0 before use [ 1712.493664][T31041] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1712.597670][T31054] netlink: 'syz.9.24193': attribute type 8 has an invalid length. [ 1712.856127][T31083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1712.865806][T31083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1713.053328][T28587] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1713.104064][T31097] loop8: detected capacity change from 0 to 512 [ 1713.112519][T31097] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1713.119479][T31097] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.24206: bg 0: block 248: padding at end of block bitmap is not set [ 1713.134266][T31097] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.24206: Failed to acquire dquot type 1 [ 1713.146366][T31097] EXT4-fs (loop8): 1 truncate cleaned up [ 1713.152887][T31097] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1713.176831][T28587] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1713.403234][T31116] rdma_rxe: rxe_newlink: failed to add lo [ 1713.410452][T31117] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1713.460233][T31120] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=31120 comm=syz.7.24213 [ 1713.461560][T31117] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1713.507622][T30990] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1713.520399][T30990] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1713.530300][T31117] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1713.544140][T30990] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1713.555862][T30990] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1713.581310][T31117] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1713.596309][T31134] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 1713.641123][T31140] loop1: detected capacity change from 0 to 512 [ 1713.664401][T31144] loop5: detected capacity change from 0 to 1024 [ 1713.672125][T31144] EXT4-fs: Ignoring removed orlov option [ 1713.679320][T31144] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1713.685453][T31140] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1713.688128][T31144] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1713.697016][T31140] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.24217: bg 0: block 248: padding at end of block bitmap is not set [ 1713.705963][T31144] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e01c, mo2=0000] [ 1713.729522][T31144] System zones: 0-1, 3-12 [ 1713.735387][T31144] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #3: block 1: comm syz.5.24218: lblock 1 mapped to illegal pblock 1 (length 1) [ 1713.737028][T31140] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.24217: Failed to acquire dquot type 1 [ 1713.754005][T31144] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.24218: Failed to acquire dquot type 0 [ 1713.772885][T31144] EXT4-fs error (device loop5): ext4_free_blocks:6587: comm syz.5.24218: Freeing blocks not in datazone - block = 0, count = 4096 [ 1713.787166][T31140] EXT4-fs (loop1): 1 truncate cleaned up [ 1713.793616][T31140] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1713.798058][T31144] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.24218: Invalid inode bitmap blk 0 in block_group 0 [ 1713.819238][T21981] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 1713.830363][T31144] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 1713.836506][T21981] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0 [ 1713.843086][T31144] EXT4-fs (loop5): 1 orphan inode deleted [ 1713.855866][T19955] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1713.860191][T31144] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1713.893038][T31144] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1713.989613][T31144] loop5: detected capacity change from 0 to 2048 [ 1714.049764][T31144] Alternate GPT is invalid, using primary GPT. [ 1714.056082][T31144] loop5: p1 p2 p3 [ 1714.071744][ T29] kauditd_printk_skb: 558 callbacks suppressed [ 1714.071762][ T29] audit: type=1326 audit(1752585070.329:100744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31142 comm="syz.5.24218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fe9d5bed13a code=0x7ffc0000 [ 1714.103343][ T29] audit: type=1326 audit(1752585070.349:100745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31142 comm="syz.5.24218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fe9d5bed13a code=0x7ffc0000 [ 1714.127309][ T29] audit: type=1326 audit(1752585070.349:100746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31142 comm="syz.5.24218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fe9d5bed13a code=0x7ffc0000 [ 1714.151462][ T29] audit: type=1326 audit(1752585070.349:100747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31142 comm="syz.5.24218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fe9d5bed13a code=0x7ffc0000 [ 1714.175807][ T29] audit: type=1326 audit(1752585070.349:100748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31142 comm="syz.5.24218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fe9d5bed13a code=0x7ffc0000 [ 1714.199922][ T29] audit: type=1326 audit(1752585070.349:100749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31142 comm="syz.5.24218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fe9d5bed13a code=0x7ffc0000 [ 1714.223898][ T29] audit: type=1326 audit(1752585070.349:100750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31142 comm="syz.5.24218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fe9d5bed13a code=0x7ffc0000 [ 1714.247675][ T29] audit: type=1326 audit(1752585070.349:100751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31142 comm="syz.5.24218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe9d5bed58a code=0x7ffc0000 [ 1714.271863][ T29] audit: type=1326 audit(1752585070.369:100752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31142 comm="syz.5.24218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d5bee929 code=0x7ffc0000 [ 1714.295738][ T29] audit: type=1326 audit(1752585070.369:100753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31142 comm="syz.5.24218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d5bee929 code=0x7ffc0000 [ 1714.351717][T31186] loop1: detected capacity change from 0 to 512 [ 1714.401819][T31200] loop8: detected capacity change from 0 to 512 [ 1714.410009][T31200] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1714.417423][T31200] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.24232: bg 0: block 248: padding at end of block bitmap is not set [ 1714.434135][T31200] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.24232: Failed to acquire dquot type 1 [ 1714.446627][T31200] EXT4-fs (loop8): 1 truncate cleaned up [ 1714.454699][T31200] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1714.473693][T31208] lo speed is unknown, defaulting to 1000 [ 1714.482161][T28587] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1714.515269][T31218] loop1: detected capacity change from 0 to 1024 [ 1714.528770][T31218] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1714.539822][T31218] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1714.569865][T31218] JBD2: no valid journal superblock found [ 1714.575675][T31218] EXT4-fs (loop1): Could not load journal inode [ 1714.655942][T31252] loop8: detected capacity change from 0 to 1024 [ 1714.666795][T31224] tipc: Failed to obtain node identity [ 1714.672486][T31224] tipc: Enabling of bearer rejected, failed to enable media [ 1714.682883][T31252] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1714.696289][T31252] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1714.752637][T31261] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 1714.763051][T31262] rdma_rxe: rxe_newlink: failed to add lo [ 1714.831499][T31271] loop8: detected capacity change from 0 to 764 [ 1714.838940][T31271] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1714.890967][T31279] loop8: detected capacity change from 0 to 512 [ 1714.899503][T31279] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1714.906957][T31279] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.24246: bg 0: block 248: padding at end of block bitmap is not set [ 1714.924038][T31279] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.24246: Failed to acquire dquot type 1 [ 1714.936505][T31279] EXT4-fs (loop8): 1 truncate cleaned up [ 1714.943244][T31279] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1714.965516][T28587] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1714.987025][T31288] loop8: detected capacity change from 0 to 1024 [ 1714.997746][T31288] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1715.013245][T31288] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1715.060693][T31117] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1715.075524][T31117] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1715.096172][T31303] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 1715.104125][T31117] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1715.129464][T31117] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1715.181343][T31320] loop8: detected capacity change from 0 to 2048 [ 1715.261002][T31320] Alternate GPT is invalid, using primary GPT. [ 1715.267413][T31320] loop8: p1 p2 p3 [ 1715.275699][T31331] loop5: detected capacity change from 0 to 1024 [ 1715.285587][T31331] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1715.300988][T31331] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1715.447076][T31350] lo speed is unknown, defaulting to 1000 [ 1715.575082][T31350] loop9: detected capacity change from 0 to 512 [ 1715.582162][T31350] ext4: Unknown parameter 'fowner>00000000000000000000' [ 1715.793103][T31383] 9pnet_fd: Insufficient options for proto=fd [ 1715.859181][T31388] loop5: detected capacity change from 0 to 512 [ 1715.912097][T31388] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1715.922906][T31392] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 1715.984874][T31397] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1716.040910][T31401] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=31401 comm=syz.8.24267 [ 1716.058159][T31388] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1716.066376][T31388] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 1716.089458][T31388] System zones: 0-1, 15-15, 18-18, 34-34 [ 1716.103706][T31397] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1716.113481][T31388] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1716.120350][T31388] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1716.135074][T31388] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 1716.142191][T31388] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.24265: bg 0: block 40: padding at end of block bitmap is not set [ 1716.157432][T31388] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 1716.166927][T31388] EXT4-fs (loop5): 1 truncate cleaned up [ 1716.175033][T31388] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1716.188431][T31388] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1716.196403][T31420] loop1: detected capacity change from 0 to 1024 [ 1716.207940][T31420] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1716.223731][T31426] rdma_rxe: rxe_newlink: failed to add lo [ 1716.225113][T31420] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1716.240016][T31397] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1716.267919][T31428] loop9: detected capacity change from 0 to 2048 [ 1716.290552][T31437] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 1716.302118][T31437] openvswitch: netlink: Message has 6 unknown bytes. [ 1716.311087][T31397] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1716.322038][T31428] Alternate GPT is invalid, using primary GPT. [ 1716.328438][T31428] loop9: p1 p2 p3 [ 1716.392114][T31455] netlink: 8 bytes leftover after parsing attributes in process `syz.9.24280'. [ 1716.398150][T31397] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.421679][T31397] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.442727][T31397] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.457650][T31397] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.539947][T31479] loop1: detected capacity change from 0 to 764 [ 1716.550322][T31479] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1716.587767][T31482] bridge0: port 2(bridge_slave_1) entered disabled state [ 1716.595037][T31482] bridge0: port 1(bridge_slave_0) entered disabled state [ 1716.627113][T31489] loop1: detected capacity change from 0 to 1024 [ 1716.645080][T31489] EXT4-fs: Ignoring removed nobh option [ 1716.651745][T31489] EXT4-fs: quotafile must be on filesystem root [ 1716.661455][T31472] tipc: Failed to obtain node identity [ 1716.667014][T31472] tipc: Enabling of bearer rejected, failed to enable media [ 1716.690658][T31482] netlink: 8 bytes leftover after parsing attributes in process `syz.8.24289'. [ 1716.697595][T31497] loop9: detected capacity change from 0 to 1024 [ 1716.701811][T31482] netlink: 2 bytes leftover after parsing attributes in process `syz.8.24289'. [ 1716.740035][T31497] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1716.755723][T31497] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1716.765190][T31482] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1716.773641][T31482] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1716.781881][T31482] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1716.790170][T31482] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1716.802102][T31482] netdevsim netdevsim8 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1716.806493][T31506] netlink: 8 bytes leftover after parsing attributes in process `syz.5.24294'. [ 1716.810546][T31482] netdevsim netdevsim8 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1716.828063][T31482] netdevsim netdevsim8 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1716.836774][T31482] netdevsim netdevsim8 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1716.857429][T31514] loop5: detected capacity change from 0 to 512 [ 1716.866538][T31514] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1716.873970][T31514] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.24295: bg 0: block 248: padding at end of block bitmap is not set [ 1716.889545][T31502] loop1: detected capacity change from 0 to 1024 [ 1716.896495][T31514] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.24295: Failed to acquire dquot type 1 [ 1716.896854][T31502] EXT4-fs: Ignoring removed orlov option [ 1716.909856][T31514] EXT4-fs (loop5): 1 truncate cleaned up [ 1716.921185][T31514] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1716.927440][T31502] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1716.959045][T23108] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1717.012547][T31501] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1717.027661][T31531] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1717.078061][T31547] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 1717.080512][T31549] loop8: detected capacity change from 0 to 764 [ 1717.088016][T31547] openvswitch: netlink: Message has 6 unknown bytes. [ 1717.103361][T31552] netlink: 8 bytes leftover after parsing attributes in process `syz.9.24305'. [ 1717.113534][T31549] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1717.125214][T31531] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1717.140499][T31545] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=31545 comm=syz.7.24298 [ 1717.149017][T31557] loop5: detected capacity change from 0 to 512 [ 1717.182608][T31557] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1717.191918][T31562] 9pnet_fd: Insufficient options for proto=fd [ 1717.192258][T31557] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.24306: bg 0: block 248: padding at end of block bitmap is not set [ 1717.214790][T31557] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.24306: Failed to acquire dquot type 1 [ 1717.231137][T31531] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1717.237557][T31557] EXT4-fs (loop5): 1 truncate cleaned up [ 1717.259859][T31557] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1717.287369][T23108] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1717.299767][T31531] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1717.325964][T31586] loop5: detected capacity change from 0 to 1024 [ 1717.335606][T31588] rdma_rxe: rxe_newlink: failed to add lo [ 1717.348020][T31586] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1717.359598][T31586] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1717.373562][T31586] JBD2: no valid journal superblock found [ 1717.379465][T31586] EXT4-fs (loop5): Could not load journal inode [ 1717.396623][T31595] 9pnet_fd: Insufficient options for proto=fd [ 1717.485967][T31599] netlink: 'syz.1.24316': attribute type 8 has an invalid length. [ 1717.497135][T31600] pim6reg: entered allmulticast mode [ 1717.687881][T31610] lo speed is unknown, defaulting to 1000 [ 1718.372824][T31596] pim6reg: left allmulticast mode [ 1718.457480][T31648] netlink: 24 bytes leftover after parsing attributes in process `syz.8.24320'. [ 1718.490068][T31656] loop8: detected capacity change from 0 to 128 [ 1718.501176][T31656] FAULT_INJECTION: forcing a failure. [ 1718.501176][T31656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1718.501290][T31656] CPU: 1 UID: 0 PID: 31656 Comm: syz.8.24322 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 1718.501325][T31656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1718.501340][T31656] Call Trace: [ 1718.501348][T31656] [ 1718.501356][T31656] __dump_stack+0x1d/0x30 [ 1718.501376][T31656] dump_stack_lvl+0xe8/0x140 [ 1718.501395][T31656] dump_stack+0x15/0x1b [ 1718.501459][T31656] should_fail_ex+0x265/0x280 [ 1718.501492][T31656] should_fail+0xb/0x20 [ 1718.501518][T31656] should_fail_usercopy+0x1a/0x20 [ 1718.501634][T31656] copy_folio_from_iter_atomic+0x278/0x1170 [ 1718.501683][T31656] ? fat_write_begin+0x4f/0xe0 [ 1718.501712][T31656] ? __pfx_fat_get_block+0x10/0x10 [ 1718.501767][T31656] generic_perform_write+0x2c2/0x490 [ 1718.501798][T31656] __generic_file_write_iter+0xec/0x120 [ 1718.501822][T31656] ? __pfx_generic_file_write_iter+0x10/0x10 [ 1718.501847][T31656] generic_file_write_iter+0x8d/0x2f0 [ 1718.501945][T31656] ? _parse_integer_limit+0x170/0x190 [ 1718.501997][T31656] ? _parse_integer+0x27/0x40 [ 1718.502067][T31656] ? kstrtoull+0x111/0x140 [ 1718.502101][T31656] ? kstrtouint+0x76/0xc0 [ 1718.502130][T31656] ? kstrtouint_from_user+0x9f/0xf0 [ 1718.502167][T31656] ? avc_policy_seqno+0x15/0x30 [ 1718.502325][T31656] ? selinux_file_permission+0x1e4/0x320 [ 1718.502358][T31656] ? __pfx_generic_file_write_iter+0x10/0x10 [ 1718.502382][T31656] vfs_write+0x49d/0x8e0 [ 1718.502439][T31656] ksys_write+0xda/0x1a0 [ 1718.502477][T31656] __x64_sys_write+0x40/0x50 [ 1718.502514][T31656] x64_sys_call+0x2cdd/0x2fb0 [ 1718.502540][T31656] do_syscall_64+0xd2/0x200 [ 1718.502571][T31656] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1718.502602][T31656] ? clear_bhb_loop+0x40/0x90 [ 1718.502627][T31656] ? clear_bhb_loop+0x40/0x90 [ 1718.502652][T31656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1718.502718][T31656] RIP: 0033:0x7f1f8a2be929 [ 1718.502737][T31656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1718.502760][T31656] RSP: 002b:00007f1f88927038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1718.502807][T31656] RAX: ffffffffffffffda RBX: 00007f1f8a4e5fa0 RCX: 00007f1f8a2be929 [ 1718.502825][T31656] RDX: 0000000000032600 RSI: 0000200000000300 RDI: 0000000000000007 [ 1718.502840][T31656] RBP: 00007f1f88927090 R08: 0000000000000000 R09: 0000000000000000 [ 1718.502855][T31656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1718.502870][T31656] R13: 0000000000000000 R14: 00007f1f8a4e5fa0 R15: 00007ffdca3aa2b8 [ 1718.502892][T31656] [ 1718.502990][T31656] syz.8.24322: attempt to access beyond end of device [ 1718.502990][T31656] loop8: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 1718.508218][T31654] x_tables: duplicate underflow at hook 3 [ 1718.508470][T31659] loop9: detected capacity change from 0 to 1024 [ 1718.513010][T31659] EXT4-fs: Ignoring removed nobh option [ 1718.513093][T31659] EXT4-fs: quotafile must be on filesystem root [ 1718.638885][T31674] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=31674 comm=syz.9.24324 [ 1718.720463][T31680] netlink: 'syz.8.24328': attribute type 8 has an invalid length. [ 1718.771939][T31682] loop9: detected capacity change from 0 to 764 [ 1718.914407][T31682] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1718.967126][T31697] FAULT_INJECTION: forcing a failure. [ 1718.967126][T31697] name failslab, interval 1, probability 0, space 0, times 0 [ 1718.979943][T31697] CPU: 0 UID: 0 PID: 31697 Comm: syz.9.24333 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 1718.980031][T31697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1718.980047][T31697] Call Trace: [ 1718.980056][T31697] [ 1718.980065][T31697] __dump_stack+0x1d/0x30 [ 1718.980084][T31697] dump_stack_lvl+0xe8/0x140 [ 1718.980103][T31697] dump_stack+0x15/0x1b [ 1718.980123][T31697] should_fail_ex+0x265/0x280 [ 1718.980221][T31697] should_failslab+0x8c/0xb0 [ 1718.980249][T31697] __kmalloc_node_noprof+0xa9/0x410 [ 1718.980276][T31697] ? load_msg+0x41/0x2f0 [ 1718.980295][T31697] load_msg+0x41/0x2f0 [ 1718.980326][T31697] do_mq_timedsend+0x23e/0x6b0 [ 1718.980420][T31697] __x64_sys_mq_timedsend+0xd1/0x160 [ 1718.980452][T31697] x64_sys_call+0x2db9/0x2fb0 [ 1718.980478][T31697] do_syscall_64+0xd2/0x200 [ 1718.980520][T31697] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1718.980546][T31697] ? clear_bhb_loop+0x40/0x90 [ 1718.980624][T31697] ? clear_bhb_loop+0x40/0x90 [ 1718.980669][T31697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1718.980695][T31697] RIP: 0033:0x7f5679a8e929 [ 1718.980713][T31697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1718.980737][T31697] RSP: 002b:00007f56780f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f2 [ 1718.980757][T31697] RAX: ffffffffffffffda RBX: 00007f5679cb5fa0 RCX: 00007f5679a8e929 [ 1718.980801][T31697] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1718.980812][T31697] RBP: 00007f56780f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1718.980825][T31697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1718.980840][T31697] R13: 0000000000000000 R14: 00007f5679cb5fa0 R15: 00007ffecb082218 [ 1718.980876][T31697] [ 1719.184485][T31701] loop5: detected capacity change from 0 to 1024 [ 1719.193250][ T29] kauditd_printk_skb: 609 callbacks suppressed [ 1719.193269][ T29] audit: type=1326 audit(1752585075.449:101354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31703 comm="syz.1.24336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28653ae929 code=0x7ffc0000 [ 1719.223427][ T29] audit: type=1326 audit(1752585075.449:101355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31703 comm="syz.1.24336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28653ae929 code=0x7ffc0000 [ 1719.247500][ T29] audit: type=1326 audit(1752585075.449:101356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31703 comm="syz.1.24336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28653ae929 code=0x7ffc0000 [ 1719.272236][ T29] audit: type=1326 audit(1752585075.489:101357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31703 comm="syz.1.24336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28653ae929 code=0x7ffc0000 [ 1719.275909][T31701] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1719.296276][ T29] audit: type=1326 audit(1752585075.499:101358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31703 comm="syz.1.24336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28653ae929 code=0x7ffc0000 [ 1719.296312][ T29] audit: type=1400 audit(1752585075.519:101359): avc: denied { egress } for pid=14 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 1719.356608][ T29] audit: type=1400 audit(1752585075.519:101360): avc: denied { sendto } for pid=14 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 1719.371488][T31701] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1719.380286][ T29] audit: type=1326 audit(1752585075.519:101361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31703 comm="syz.1.24336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f28653ae929 code=0x7ffc0000 [ 1719.413394][ T29] audit: type=1326 audit(1752585075.519:101362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31703 comm="syz.1.24336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f28653ae963 code=0x7ffc0000 [ 1719.437061][ T29] audit: type=1326 audit(1752585075.519:101363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31703 comm="syz.1.24336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f28653ae963 code=0x7ffc0000 [ 1719.474866][T31717] loop9: detected capacity change from 0 to 1024 [ 1719.494313][T31717] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1719.510256][T31717] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1719.538005][T31724] netlink: 36 bytes leftover after parsing attributes in process `syz.1.24342'. [ 1719.549833][T31724] 9pnet_fd: Insufficient options for proto=fd [ 1719.584471][T31731] loop5: detected capacity change from 0 to 512 [ 1719.604104][T31731] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.24344: Parent and EA inode have the same ino 15 [ 1719.620676][T31731] EXT4-fs (loop5): Remounting filesystem read-only [ 1719.631811][T31731] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 1719.643945][T31731] EXT4-fs (loop5): 1 orphan inode deleted [ 1719.681494][T31731] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1719.708243][T23108] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1719.861276][T31757] loop1: detected capacity change from 0 to 512 [ 1719.866655][T31763] lo speed is unknown, defaulting to 1000 [ 1719.950632][T31757] EXT4-fs (loop1): 1 orphan inode deleted [ 1719.956885][T31757] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1719.969707][T31763] loop5: detected capacity change from 0 to 1024 [ 1719.977760][T31757] ext4 filesystem being mounted at /418/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1719.978041][T19503] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:41: Failed to release dquot type 1 [ 1719.988747][T31763] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1720.011107][T31763] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1720.023294][T31763] JBD2: no valid journal superblock found [ 1720.029133][T31763] EXT4-fs (loop5): Could not load journal inode [ 1720.042016][T31757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1720.050690][T31757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1720.067526][T31531] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1720.079354][T31531] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1720.092211][T31531] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1720.104425][T31531] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1720.121982][T31816] usb usb7: usbfs: process 31816 (syz.8.24362) did not claim interface 0 before use [ 1720.195686][T31824] loop5: detected capacity change from 0 to 128 [ 1720.209645][T31825] can0: slcan on ttyS3. [ 1720.278799][T31825] can0 (unregistered): slcan off ttyS3. [ 1720.307908][T31817] tipc: Failed to obtain node identity [ 1720.313500][T31817] tipc: Enabling of bearer rejected, failed to enable media [ 1720.461836][T31848] netlink: 12 bytes leftover after parsing attributes in process `syz.9.24369'. [ 1720.516245][T31852] loop9: detected capacity change from 0 to 1024 [ 1720.525658][T31852] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1720.540849][T31852] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1720.583391][T19955] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1720.648557][T31872] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1720.662493][T31874] loop9: detected capacity change from 0 to 1024 [ 1720.675190][T31874] EXT4-fs: Ignoring removed nobh option [ 1720.681810][T31874] EXT4-fs: quotafile must be on filesystem root [ 1720.703263][T31872] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1720.726802][T31882] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=31882 comm=syz.1.24374 [ 1720.741077][T31884] loop9: detected capacity change from 0 to 1024 [ 1720.747127][T31888] loop5: detected capacity change from 0 to 1024 [ 1720.780788][T31872] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1720.852379][T31872] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1720.908208][T31910] loop5: detected capacity change from 0 to 2048 [ 1720.943557][T31872] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1720.953049][T31910] Alternate GPT is invalid, using primary GPT. [ 1720.957012][T31872] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1720.959492][T31910] loop5: p1 p2 p3 [ 1720.971805][T31872] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1721.006187][T31872] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1721.028557][T31925] loop8: detected capacity change from 0 to 1024 [ 1721.040581][T31910] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 1721.067349][T31927] netlink: 'syz.7.24381': attribute type 8 has an invalid length. [ 1721.078145][T31925] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4113: comm syz.8.24380: Allocating blocks 481-513 which overlap fs metadata [ 1721.116092][T31908] tipc: Failed to obtain node identity [ 1721.121846][T31908] tipc: Enabling of bearer rejected, failed to enable media [ 1721.135543][T31935] loop1: detected capacity change from 0 to 512 [ 1721.148355][T31925] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4113: comm syz.8.24380: Allocating blocks 465-513 which overlap fs metadata [ 1721.191043][T31935] EXT4-fs (loop1): 1 orphan inode deleted [ 1721.198924][T31947] FAULT_INJECTION: forcing a failure. [ 1721.198924][T31947] name failslab, interval 1, probability 0, space 0, times 0 [ 1721.211778][T31947] CPU: 1 UID: 0 PID: 31947 Comm: syz.5.24383 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 1721.211812][T31947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1721.211826][T31947] Call Trace: [ 1721.211831][T31947] [ 1721.211914][T31947] __dump_stack+0x1d/0x30 [ 1721.211939][T31947] dump_stack_lvl+0xe8/0x140 [ 1721.211959][T31947] dump_stack+0x15/0x1b [ 1721.211980][T31947] should_fail_ex+0x265/0x280 [ 1721.212071][T31947] should_failslab+0x8c/0xb0 [ 1721.212099][T31947] kmem_cache_alloc_noprof+0x50/0x310 [ 1721.212125][T31947] ? alloc_empty_file+0x76/0x200 [ 1721.212149][T31947] ? mntput+0x4b/0x80 [ 1721.212185][T31947] alloc_empty_file+0x76/0x200 [ 1721.212215][T31947] path_openat+0x68/0x2170 [ 1721.212250][T31947] ? _parse_integer_limit+0x170/0x190 [ 1721.212259][T19494] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:32: Failed to release dquot type 1 [ 1721.212289][T31947] ? kstrtoull+0x111/0x140 [ 1721.212363][T31947] ? kstrtouint+0x76/0xc0 [ 1721.212403][T31947] do_filp_open+0x109/0x230 [ 1721.212460][T31947] do_sys_openat2+0xa6/0x110 [ 1721.212564][T31947] __x64_sys_openat+0xf2/0x120 [ 1721.212604][T31947] x64_sys_call+0x1af/0x2fb0 [ 1721.212633][T31947] do_syscall_64+0xd2/0x200 [ 1721.212721][T31947] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1721.212769][T31947] ? clear_bhb_loop+0x40/0x90 [ 1721.212790][T31947] ? clear_bhb_loop+0x40/0x90 [ 1721.212811][T31947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1721.212865][T31947] RIP: 0033:0x7fe9d5bee929 [ 1721.212887][T31947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1721.212956][T31947] RSP: 002b:00007fe9d4229038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1721.212981][T31947] RAX: ffffffffffffffda RBX: 00007fe9d5e16080 RCX: 00007fe9d5bee929 [ 1721.212999][T31947] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1721.213017][T31947] RBP: 00007fe9d4229090 R08: 0000000000000000 R09: 0000000000000000 [ 1721.213034][T31947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1721.213093][T31947] R13: 0000000000000000 R14: 00007fe9d5e16080 R15: 00007fff91f58718 [ 1721.213122][T31947] [ 1721.244428][T31935] ext4 filesystem being mounted at /421/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1721.330697][T31950] loop9: detected capacity change from 0 to 1024 [ 1721.391714][T31951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1721.460826][T31951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1721.569100][T31973] openvswitch: netlink: Message has 6 unknown bytes. [ 1721.583963][T31977] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 1721.646692][T31984] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1721.699288][T31990] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=31990 comm=syz.9.24392 [ 1721.715448][T31984] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1721.764434][T31998] loop5: detected capacity change from 0 to 2048 [ 1721.773138][T31984] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1721.821208][T31998] Alternate GPT is invalid, using primary GPT. [ 1721.827553][T31998] loop5: p1 p2 p3 [ 1721.837831][T31998] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 1721.872291][T31984] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1721.929883][T32017] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=32017 comm=syz.7.24397 [ 1721.952585][T31984] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1721.965390][T31984] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1722.000705][T31984] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1722.026475][T31984] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1722.040367][T32041] openvswitch: netlink: Message has 6 unknown bytes. [ 1722.143258][T32053] loop1: detected capacity change from 0 to 512 [ 1722.169687][T32053] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1722.199392][T32053] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.24407: bg 0: block 248: padding at end of block bitmap is not set [ 1722.230720][T32053] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.24407: Failed to acquire dquot type 1 [ 1722.238013][T32059] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 1722.259743][T32053] EXT4-fs (loop1): 1 truncate cleaned up [ 1722.377438][T32067] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=32067 comm=syz.1.24409 [ 1722.380636][T32050] tipc: Failed to obtain node identity [ 1722.395632][T32050] tipc: Enabling of bearer rejected, failed to enable media [ 1722.491774][T32077] openvswitch: netlink: Message has 6 unknown bytes. [ 1722.522397][T32079] loop5: detected capacity change from 0 to 764 [ 1722.545336][T32079] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1722.584306][T32081] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 1722.625188][T32091] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=32091 comm=syz.8.24419 [ 1722.655031][T32092] loop1: detected capacity change from 0 to 512 [ 1722.676478][T32092] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1722.685149][T32092] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.24420: bg 0: block 248: padding at end of block bitmap is not set [ 1722.700307][T32092] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.24420: Failed to acquire dquot type 1 [ 1722.713235][T32092] EXT4-fs (loop1): 1 truncate cleaned up [ 1722.755890][T32103] lo speed is unknown, defaulting to 1000 [ 1722.767452][T32103] lo speed is unknown, defaulting to 1000 [ 1722.780919][T32103] lo speed is unknown, defaulting to 1000 [ 1722.788044][T32103] infiniband qyz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1722.813060][T32106] netlink: 8 bytes leftover after parsing attributes in process `syz.8.24425'. [ 1722.845896][T32108] loop1: detected capacity change from 0 to 512 [ 1722.869698][T32108] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1722.886604][T32103] lo speed is unknown, defaulting to 1000 [ 1722.895595][T32108] EXT4-fs (loop1): 1 truncate cleaned up [ 1722.914730][T32119] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=32119 comm=syz.7.24427 [ 1722.927996][T32103] lo speed is unknown, defaulting to 1000 [ 1722.934336][T32103] lo speed is unknown, defaulting to 1000 [ 1722.940627][T32103] lo speed is unknown, defaulting to 1000 [ 1722.946871][T32103] lo speed is unknown, defaulting to 1000 [ 1722.953043][T32103] lo speed is unknown, defaulting to 1000 [ 1722.959723][T32103] lo speed is unknown, defaulting to 1000 [ 1722.965959][T32103] lo speed is unknown, defaulting to 1000 [ 1722.972243][T32103] lo speed is unknown, defaulting to 1000 [ 1722.978475][T32103] lo speed is unknown, defaulting to 1000 [ 1722.984788][T32103] lo speed is unknown, defaulting to 1000 [ 1722.991122][T32103] lo speed is unknown, defaulting to 1000 [ 1722.997473][T32103] lo speed is unknown, defaulting to 1000 [ 1723.003873][T32103] lo speed is unknown, defaulting to 1000 [ 1723.010134][T32103] lo speed is unknown, defaulting to 1000 [ 1723.016355][T32103] lo speed is unknown, defaulting to 1000 [ 1723.022789][T32103] lo speed is unknown, defaulting to 1000 [ 1723.029013][T32103] lo speed is unknown, defaulting to 1000 [ 1723.035259][T32103] lo speed is unknown, defaulting to 1000 [ 1723.041439][T32103] lo speed is unknown, defaulting to 1000 [ 1723.047821][T32103] lo speed is unknown, defaulting to 1000 [ 1723.054188][T32103] lo speed is unknown, defaulting to 1000 [ 1723.060479][T32103] lo speed is unknown, defaulting to 1000 [ 1723.066690][T32103] lo speed is unknown, defaulting to 1000 [ 1723.073151][T32103] lo speed is unknown, defaulting to 1000 [ 1723.145317][T32128] openvswitch: netlink: Message has 6 unknown bytes. [ 1723.154251][T32126] loop1: detected capacity change from 0 to 1024 [ 1723.283570][T32143] loop9: detected capacity change from 0 to 256 [ 1723.336964][T32151] netlink: 8 bytes leftover after parsing attributes in process `syz.7.24437'. [ 1723.409201][T32174] openvswitch: netlink: Message has 6 unknown bytes. [ 1723.446997][T32176] loop1: detected capacity change from 0 to 1024 [ 1723.476879][T32176] EXT4-fs: Ignoring removed nobh option [ 1723.484612][T32176] EXT4-fs: quotafile must be on filesystem root [ 1723.523622][T32183] loop5: detected capacity change from 0 to 1024 [ 1723.559275][T32183] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1723.570284][T32183] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1723.598193][T32183] JBD2: no valid journal superblock found [ 1723.604078][T32183] EXT4-fs (loop5): Could not load journal inode [ 1723.701203][T32200] netlink: 'syz.1.24450': attribute type 8 has an invalid length. [ 1723.713227][T32201] loop9: detected capacity change from 0 to 512 [ 1723.760870][T32201] EXT4-fs: quotafile must be on filesystem root [ 1723.845300][T32219] openvswitch: netlink: Message has 6 unknown bytes. [ 1723.879658][T32222] loop5: detected capacity change from 0 to 512 [ 1723.918527][T32226] loop8: detected capacity change from 0 to 1024 [ 1723.926108][T32222] EXT4-fs error (device loop5): ext4_iget_extra_inode:5035: inode #15: comm syz.5.24457: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 1723.929499][T32226] EXT4-fs: Ignoring removed nobh option [ 1723.952746][T32226] EXT4-fs: quotafile must be on filesystem root [ 1723.964948][T32222] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.24457: couldn't read orphan inode 15 (err -117) [ 1724.011344][T23108] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 1724.041843][T23108] EXT4-fs warning (device loop5): dx_probe:791: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 1724.108002][T32261] FAULT_INJECTION: forcing a failure. [ 1724.108002][T32261] name failslab, interval 1, probability 0, space 0, times 0 [ 1724.121250][T32261] CPU: 1 UID: 0 PID: 32261 Comm: syz.9.24469 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 1724.121316][T32261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1724.121328][T32261] Call Trace: [ 1724.121335][T32261] [ 1724.121346][T32261] __dump_stack+0x1d/0x30 [ 1724.121373][T32261] dump_stack_lvl+0xe8/0x140 [ 1724.121398][T32261] dump_stack+0x15/0x1b [ 1724.121525][T32261] should_fail_ex+0x265/0x280 [ 1724.121599][T32261] should_failslab+0x8c/0xb0 [ 1724.121621][T32261] kmem_cache_alloc_node_noprof+0x57/0x320 [ 1724.121654][T32261] ? __alloc_skb+0x101/0x320 [ 1724.121732][T32261] __alloc_skb+0x101/0x320 [ 1724.121815][T32261] netlink_alloc_large_skb+0xba/0xf0 [ 1724.121846][T32261] netlink_sendmsg+0x3cf/0x6b0 [ 1724.121872][T32261] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1724.121896][T32261] __sock_sendmsg+0x145/0x180 [ 1724.121930][T32261] ____sys_sendmsg+0x31e/0x4e0 [ 1724.121971][T32261] ___sys_sendmsg+0x17b/0x1d0 [ 1724.122086][T32261] __x64_sys_sendmsg+0xd4/0x160 [ 1724.122123][T32261] x64_sys_call+0x2999/0x2fb0 [ 1724.122230][T32261] do_syscall_64+0xd2/0x200 [ 1724.122252][T32261] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1724.122283][T32261] ? clear_bhb_loop+0x40/0x90 [ 1724.122309][T32261] ? clear_bhb_loop+0x40/0x90 [ 1724.122333][T32261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1724.122432][T32261] RIP: 0033:0x7f5679a8e929 [ 1724.122446][T32261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1724.122464][T32261] RSP: 002b:00007f56780f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1724.122484][T32261] RAX: ffffffffffffffda RBX: 00007f5679cb5fa0 RCX: 00007f5679a8e929 [ 1724.122496][T32261] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 1724.122509][T32261] RBP: 00007f56780f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1724.122523][T32261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1724.122538][T32261] R13: 0000000000000000 R14: 00007f5679cb5fa0 R15: 00007ffecb082218 [ 1724.122576][T32261] [ 1724.360050][T32265] openvswitch: netlink: Message has 6 unknown bytes. [ 1724.376457][ T29] kauditd_printk_skb: 1288 callbacks suppressed [ 1724.376475][ T29] audit: type=1326 audit(1752585080.629:102646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32266 comm="syz.9.24470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5679a8e929 code=0x7ffc0000 [ 1724.385709][T32267] netlink: 8 bytes leftover after parsing attributes in process `syz.9.24470'. [ 1724.407936][ T29] audit: type=1326 audit(1752585080.629:102647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32266 comm="syz.9.24470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5679a8e929 code=0x7ffc0000 [ 1724.439956][ T29] audit: type=1326 audit(1752585080.629:102648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32266 comm="syz.9.24470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5679a8e929 code=0x7ffc0000 [ 1724.463913][ T29] audit: type=1326 audit(1752585080.629:102649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32266 comm="syz.9.24470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5679a8e929 code=0x7ffc0000 [ 1724.487753][ T29] audit: type=1326 audit(1752585080.629:102650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32266 comm="syz.9.24470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5679a8e929 code=0x7ffc0000 [ 1724.511603][ T29] audit: type=1326 audit(1752585080.629:102651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32266 comm="syz.9.24470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5679a8d290 code=0x7ffc0000 [ 1724.535798][ T29] audit: type=1326 audit(1752585080.629:102652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32266 comm="syz.9.24470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f5679a90157 code=0x7ffc0000 [ 1724.560056][ T29] audit: type=1326 audit(1752585080.629:102653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32266 comm="syz.9.24470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5679a8e929 code=0x7ffc0000 [ 1724.583762][ T29] audit: type=1326 audit(1752585080.629:102654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32266 comm="syz.9.24470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f5679a90157 code=0x7ffc0000 [ 1724.607642][ T29] audit: type=1326 audit(1752585080.629:102655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32266 comm="syz.9.24470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5679a8d58a code=0x7ffc0000 [ 1724.834991][T32310] loop9: detected capacity change from 0 to 512 [ 1724.869730][T32316] FAULT_INJECTION: forcing a failure. [ 1724.869730][T32316] name failslab, interval 1, probability 0, space 0, times 0 [ 1724.882737][T32316] CPU: 1 UID: 0 PID: 32316 Comm: syz.8.24487 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 1724.882772][T32316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1724.882787][T32316] Call Trace: [ 1724.882794][T32316] [ 1724.882804][T32316] __dump_stack+0x1d/0x30 [ 1724.882849][T32316] dump_stack_lvl+0xe8/0x140 [ 1724.882873][T32316] dump_stack+0x15/0x1b [ 1724.882937][T32316] should_fail_ex+0x265/0x280 [ 1724.882967][T32316] should_failslab+0x8c/0xb0 [ 1724.882993][T32316] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 1724.883064][T32316] ? sidtab_sid2str_get+0xa0/0x130 [ 1724.883093][T32316] kmemdup_noprof+0x2b/0x70 [ 1724.883142][T32316] sidtab_sid2str_get+0xa0/0x130 [ 1724.883171][T32316] security_sid_to_context_core+0x1eb/0x2e0 [ 1724.883261][T32316] security_sid_to_context+0x27/0x40 [ 1724.883281][T32316] selinux_lsmprop_to_secctx+0x67/0xf0 [ 1724.883308][T32316] security_lsmprop_to_secctx+0x43/0x80 [ 1724.883432][T32316] audit_log_task_context+0x77/0x190 [ 1724.883476][T32316] audit_log_task+0xf4/0x250 [ 1724.883514][T32316] audit_seccomp+0x61/0x100 [ 1724.883624][T32316] ? __seccomp_filter+0x68c/0x10d0 [ 1724.883652][T32316] __seccomp_filter+0x69d/0x10d0 [ 1724.883722][T32316] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1724.883762][T32316] ? vfs_write+0x75e/0x8e0 [ 1724.883798][T32316] __secure_computing+0x82/0x150 [ 1724.883846][T32316] syscall_trace_enter+0xcf/0x1e0 [ 1724.883926][T32316] do_syscall_64+0xac/0x200 [ 1724.883948][T32316] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1724.883981][T32316] ? clear_bhb_loop+0x40/0x90 [ 1724.884008][T32316] ? clear_bhb_loop+0x40/0x90 [ 1724.884058][T32316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1724.884078][T32316] RIP: 0033:0x7f1f8a2be929 [ 1724.884096][T32316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1724.884119][T32316] RSP: 002b:00007f1f88927038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd [ 1724.884143][T32316] RAX: ffffffffffffffda RBX: 00007f1f8a4e5fa0 RCX: 00007f1f8a2be929 [ 1724.884236][T32316] RDX: ffffffffffffffe6 RSI: 0000000000000004 RDI: ffffffffffffffff [ 1724.884252][T32316] RBP: 00007f1f88927090 R08: 0000000000000000 R09: 0000000000000000 [ 1724.884268][T32316] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1724.884283][T32316] R13: 0000000000000000 R14: 00007f1f8a4e5fa0 R15: 00007ffdca3aa2b8 [ 1724.884307][T32316] [ 1725.180010][T32310] can0: slcan on ptm0. [ 1725.205615][T32326] lo speed is unknown, defaulting to 1000 [ 1725.226622][T32343] loop1: detected capacity change from 0 to 1024 [ 1725.237174][T32343] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1725.248262][T32343] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1725.260049][T32345] loop8: detected capacity change from 0 to 1024 [ 1725.267652][T32343] JBD2: no valid journal superblock found [ 1725.273622][T32343] EXT4-fs (loop1): Could not load journal inode [ 1725.276560][T32309] can0 (unregistered): slcan off ptm0. [ 1725.294254][T32322] lo speed is unknown, defaulting to 1000 [ 1725.302568][T32326] lo speed is unknown, defaulting to 1000 [ 1725.310964][T32345] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1725.322043][T32345] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1725.337413][T32345] JBD2: no valid journal superblock found [ 1725.343300][T32345] EXT4-fs (loop8): Could not load journal inode [ 1725.367395][T32322] lo speed is unknown, defaulting to 1000 [ 1725.373376][T32359] loop9: detected capacity change from 0 to 512 [ 1725.375446][T32302] lo speed is unknown, defaulting to 1000 [ 1725.382230][T32359] ext4: Bad value for 'debug_want_extra_isize' [ 1725.471890][T32302] lo speed is unknown, defaulting to 1000 [ 1725.502331][T32412] 9pnet_fd: Insufficient options for proto=fd [ 1725.562604][T32452] loop8: detected capacity change from 0 to 1024 [ 1725.575016][T32430] lo speed is unknown, defaulting to 1000 [ 1725.603917][T32302] chnl_net:caif_netlink_parms(): no params data found [ 1725.614063][T32514] loop9: detected capacity change from 0 to 1024 [ 1725.623282][T32514] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1725.625802][T32430] lo speed is unknown, defaulting to 1000 [ 1725.634229][T32514] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1725.652536][T32514] JBD2: no valid journal superblock found [ 1725.658448][T32514] EXT4-fs (loop9): Could not load journal inode [ 1725.713515][T32302] bridge0: port 1(bridge_slave_0) entered blocking state [ 1725.720738][T32302] bridge0: port 1(bridge_slave_0) entered disabled state [ 1725.728408][T32302] bridge_slave_0: entered allmulticast mode [ 1725.735187][T32302] bridge_slave_0: entered promiscuous mode [ 1725.745159][T32302] bridge0: port 2(bridge_slave_1) entered blocking state [ 1725.752318][T32302] bridge0: port 2(bridge_slave_1) entered disabled state [ 1725.759692][T32302] bridge_slave_1: entered allmulticast mode [ 1725.766387][T32302] bridge_slave_1: entered promiscuous mode [ 1725.794945][T32302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1725.807924][T32302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1725.842118][T32302] team0: Port device team_slave_0 added [ 1725.849249][T32302] team0: Port device team_slave_1 added [ 1725.871455][T32302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1725.878483][T32302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1725.904569][T32302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1725.916656][T32302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1725.923687][T32302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1725.949737][T32302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1725.960822][T32674] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=32674 comm=syz.9.24502 [ 1725.995313][T32302] hsr_slave_0: entered promiscuous mode [ 1726.001629][T32302] hsr_slave_1: entered promiscuous mode [ 1726.007622][T32302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1726.015284][T32302] Cannot create hsr debugfs directory [ 1726.182413][ T318] 9pnet_fd: Insufficient options for proto=fd [ 1726.240830][ T331] loop9: detected capacity change from 0 to 2048 [ 1726.270161][ T331] Alternate GPT is invalid, using primary GPT. [ 1726.276508][ T331] loop9: p1 p2 p3 [ 1726.338241][ T331] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 1726.340536][ T354] 9pnet_fd: Insufficient options for proto=fd [ 1726.361874][T32302] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1726.375292][T32302] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1726.394039][T32302] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1726.410006][T32302] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1726.431841][ T369] loop1: detected capacity change from 0 to 764 [ 1726.440438][ T369] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1726.465084][T32302] bridge0: port 2(bridge_slave_1) entered blocking state [ 1726.472399][T32302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1726.479739][T32302] bridge0: port 1(bridge_slave_0) entered blocking state [ 1726.486861][T32302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1726.488795][ T388] netlink: 'syz.9.24519': attribute type 8 has an invalid length. [ 1726.528896][T32302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1726.543116][T32302] 8021q: adding VLAN 0 to HW filter on device team0 [ 1726.554054][T21981] bridge0: port 1(bridge_slave_0) entered disabled state [ 1726.572146][T21981] bridge0: port 2(bridge_slave_1) entered disabled state [ 1726.593651][T21981] bridge0: port 1(bridge_slave_0) entered blocking state [ 1726.600889][T21981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1726.614612][T19494] bridge0: port 2(bridge_slave_1) entered blocking state [ 1726.621772][T19494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1726.741663][ T415] netlink: 'syz.7.24524': attribute type 4 has an invalid length. [ 1726.747795][T32302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1726.798769][ T425] loop8: detected capacity change from 0 to 2048 [ 1726.841607][ T425] Alternate GPT is invalid, using primary GPT. [ 1726.848025][ T425] loop8: p1 p2 p3 [ 1726.871146][ T425] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 1726.943087][T32302] veth0_vlan: entered promiscuous mode [ 1726.954861][T32302] veth1_vlan: entered promiscuous mode [ 1726.980014][ T457] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=457 comm=syz.7.24530 [ 1726.993827][T32302] veth0_macvtap: entered promiscuous mode [ 1727.003075][T32302] veth1_macvtap: entered promiscuous mode [ 1727.031597][ T458] can0: slcan on ttyS3. [ 1727.037953][T32302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1727.054907][T32302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1727.080765][T32302] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1727.080853][ T458] can0 (unregistered): slcan off ttyS3. [ 1727.089592][T32302] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1727.089634][T32302] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1727.112878][T32302] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1727.399573][ T482] tipc: Failed to obtain node identity [ 1727.405129][ T482] tipc: Enabling of bearer rejected, failed to enable media [ 1727.426684][ T500] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=500 comm=syz.7.24539 [ 1727.432769][ T499] loop1: detected capacity change from 0 to 2048 [ 1727.496384][ T499] Alternate GPT is invalid, using primary GPT. [ 1727.502788][ T499] loop1: p1 p2 p3 [ 1727.541186][ T499] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 1727.574751][ T514] loop9: detected capacity change from 0 to 1024 [ 1727.609111][ T514] EXT4-fs: Ignoring removed orlov option [ 1727.615000][ T514] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1727.685904][ T532] 9pnet_fd: Insufficient options for proto=fd [ 1727.694593][ T535] 9pnet_fd: Insufficient options for proto=fd [ 1727.703247][ T533] loop1: detected capacity change from 0 to 764 [ 1727.711146][ T533] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1727.851432][ T552] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=552 comm=syz.4.24552 [ 1727.898301][ T559] openvswitch: netlink: Message has 6 unknown bytes. [ 1727.947865][ T561] loop4: detected capacity change from 0 to 2048 [ 1727.991476][ T561] Alternate GPT is invalid, using primary GPT. [ 1727.997931][ T561] loop4: p1 p2 p3 [ 1728.006614][ T561] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 1728.593688][ T615] lo speed is unknown, defaulting to 1000 [ 1728.648007][ T615] lo speed is unknown, defaulting to 1000 [ 1728.662275][ T619] loop1: detected capacity change from 0 to 1024 [ 1728.699975][ T619] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1728.705994][ T621] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1728.710974][ T619] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1728.811637][ T645] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=645 comm=syz.4.24572 [ 1728.854720][ T619] JBD2: no valid journal superblock found [ 1728.860636][ T619] EXT4-fs (loop1): Could not load journal inode [ 1728.880022][ T663] 9pnet_fd: Insufficient options for proto=fd [ 1728.930530][ T665] loop8: detected capacity change from 0 to 512 [ 1728.967818][ T665] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1729.036219][ T679] loop1: detected capacity change from 0 to 1024 [ 1729.045335][ T665] ext4 filesystem being mounted at /156/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1729.255517][ T704] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=704 comm=syz.9.24588 [ 1729.262661][ T705] 9pnet_fd: Insufficient options for proto=fd [ 1729.319480][ T707] loop8: detected capacity change from 0 to 256 [ 1729.389523][ T29] kauditd_printk_skb: 680 callbacks suppressed [ 1729.389539][ T29] audit: type=1400 audit(1752585085.649:103335): avc: denied { unmount } for pid=28587 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 1729.437100][ T29] audit: type=1326 audit(1752585085.679:103336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=719 comm="syz.9.24595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5679a8e929 code=0x7ffc0000 [ 1729.461050][ T29] audit: type=1326 audit(1752585085.679:103337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=719 comm="syz.9.24595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5679a8e929 code=0x7ffc0000 [ 1729.484776][ T29] audit: type=1326 audit(1752585085.679:103338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=719 comm="syz.9.24595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5679a8e929 code=0x7ffc0000 [ 1729.509019][ T29] audit: type=1326 audit(1752585085.679:103339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=719 comm="syz.9.24595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5679a8e929 code=0x7ffc0000 [ 1729.533241][ T29] audit: type=1326 audit(1752585085.679:103340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=719 comm="syz.9.24595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5679a8e929 code=0x7ffc0000 [ 1729.556934][ T29] audit: type=1326 audit(1752585085.679:103341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=719 comm="syz.9.24595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f5679a8e929 code=0x7ffc0000 [ 1729.580595][ T29] audit: type=1326 audit(1752585085.679:103342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=719 comm="syz.9.24595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5679a8e963 code=0x7ffc0000 [ 1729.604040][ T29] audit: type=1326 audit(1752585085.679:103343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=719 comm="syz.9.24595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5679a8e963 code=0x7ffc0000 [ 1729.627580][ T29] audit: type=1326 audit(1752585085.679:103344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=719 comm="syz.9.24595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5679a8e929 code=0x7ffc0000 [ 1729.735609][ T729] netlink: 12 bytes leftover after parsing attributes in process `syz.8.24597'. [ 1729.794682][ T731] netlink: 12 bytes leftover after parsing attributes in process `syz.8.24599'. [ 1729.863572][ T736] 9pnet_fd: Insufficient options for proto=fd [ 1729.872240][ T737] openvswitch: netlink: Message has 6 unknown bytes. [ 1729.938262][ T744] loop9: detected capacity change from 0 to 512 [ 1729.954944][ T744] can0: slcan on ptm0. [ 1730.018684][ T743] can0 (unregistered): slcan off ptm0. [ 1730.054383][ T760] netlink: 12 bytes leftover after parsing attributes in process `syz.8.24609'. [ 1730.165688][ T776] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=776 comm=syz.7.24603 [ 1730.180081][ T774] netlink: 96 bytes leftover after parsing attributes in process `syz.9.24614'. [ 1730.214612][ T782] 9pnet_fd: Insufficient options for proto=fd [ 1730.225850][ T784] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 1730.272016][ T794] loop1: detected capacity change from 0 to 764 [ 1730.282028][ T794] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1730.319020][ T799] FAULT_INJECTION: forcing a failure. [ 1730.319020][ T799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1730.332266][ T799] CPU: 1 UID: 0 PID: 799 Comm: !\ Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 1730.332293][ T799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1730.332305][ T799] Call Trace: [ 1730.332311][ T799] [ 1730.332319][ T799] __dump_stack+0x1d/0x30 [ 1730.332337][ T799] dump_stack_lvl+0xe8/0x140 [ 1730.332355][ T799] dump_stack+0x15/0x1b [ 1730.332410][ T799] should_fail_ex+0x265/0x280 [ 1730.332437][ T799] should_fail+0xb/0x20 [ 1730.332461][ T799] should_fail_usercopy+0x1a/0x20 [ 1730.332544][ T799] copy_fpstate_to_sigframe+0x628/0x7d0 [ 1730.332574][ T799] ? copy_fpstate_to_sigframe+0xe6/0x7d0 [ 1730.332626][ T799] ? x86_task_fpu+0x36/0x60 [ 1730.332651][ T799] get_sigframe+0x34d/0x490 [ 1730.332666][ T799] ? get_signal+0xdc8/0xf70 [ 1730.332748][ T799] x64_setup_rt_frame+0xa8/0x580 [ 1730.332768][ T799] arch_do_signal_or_restart+0x27c/0x480 [ 1730.332860][ T799] exit_to_user_mode_loop+0x7a/0x100 [ 1730.332930][ T799] do_syscall_64+0x1d6/0x200 [ 1730.332946][ T799] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1730.332999][ T799] ? clear_bhb_loop+0x40/0x90 [ 1730.333018][ T799] ? clear_bhb_loop+0x40/0x90 [ 1730.333067][ T799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1730.333128][ T799] RIP: 0033:0x7f33d09de927 [ 1730.333141][ T799] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 1730.333158][ T799] RSP: 002b:00007f33cf047038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1730.333199][ T799] RAX: 0000000000000013 RBX: 00007f33d0c05fa0 RCX: 00007f33d09de929 [ 1730.333211][ T799] RDX: 0000000000000001 RSI: 0000200000001340 RDI: 000000000000000c [ 1730.333222][ T799] RBP: 00007f33cf047090 R08: 0000000000000000 R09: 0000000000000000 [ 1730.333233][ T799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1730.333243][ T799] R13: 0000000000000000 R14: 00007f33d0c05fa0 R15: 00007ffe3eb8cc58 [ 1730.333311][ T799] [ 1730.558076][ T806] FAULT_INJECTION: forcing a failure. [ 1730.558076][ T806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1730.571303][ T806] CPU: 0 UID: 0 PID: 806 Comm: syz.8.24624 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 1730.571339][ T806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1730.571362][ T806] Call Trace: [ 1730.571370][ T806] [ 1730.571381][ T806] __dump_stack+0x1d/0x30 [ 1730.571408][ T806] dump_stack_lvl+0xe8/0x140 [ 1730.571432][ T806] dump_stack+0x15/0x1b [ 1730.571451][ T806] should_fail_ex+0x265/0x280 [ 1730.571485][ T806] should_fail+0xb/0x20 [ 1730.571559][ T806] should_fail_usercopy+0x1a/0x20 [ 1730.571614][ T806] _copy_to_user+0x20/0xa0 [ 1730.571641][ T806] simple_read_from_buffer+0xb5/0x130 [ 1730.571822][ T806] proc_fail_nth_read+0x100/0x140 [ 1730.571864][ T806] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1730.571903][ T806] vfs_read+0x19d/0x6f0 [ 1730.571959][ T806] ? __rcu_read_unlock+0x4f/0x70 [ 1730.571988][ T806] ? __fget_files+0x184/0x1c0 [ 1730.572013][ T806] ksys_read+0xda/0x1a0 [ 1730.572126][ T806] __x64_sys_read+0x40/0x50 [ 1730.572155][ T806] x64_sys_call+0x2d77/0x2fb0 [ 1730.572178][ T806] do_syscall_64+0xd2/0x200 [ 1730.572208][ T806] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1730.572241][ T806] ? clear_bhb_loop+0x40/0x90 [ 1730.572269][ T806] ? clear_bhb_loop+0x40/0x90 [ 1730.572297][ T806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1730.572395][ T806] RIP: 0033:0x7f1f8a2bd33c [ 1730.572412][ T806] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1730.572431][ T806] RSP: 002b:00007f1f88927030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1730.572502][ T806] RAX: ffffffffffffffda RBX: 00007f1f8a4e5fa0 RCX: 00007f1f8a2bd33c [ 1730.572518][ T806] RDX: 000000000000000f RSI: 00007f1f889270a0 RDI: 0000000000000007 [ 1730.572573][ T806] RBP: 00007f1f88927090 R08: 0000000000000000 R09: 0000000000000000 [ 1730.572585][ T806] R10: 000000000000004a R11: 0000000000000246 R12: 0000000000000001 [ 1730.572597][ T806] R13: 0000000000000000 R14: 00007f1f8a4e5fa0 R15: 00007ffdca3aa2b8 [ 1730.572616][ T806] [ 1730.812578][ T621] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.867836][ T816] pim6reg1: entered promiscuous mode [ 1730.873298][ T816] pim6reg1: entered allmulticast mode [ 1730.881632][ T816] loop8: detected capacity change from 0 to 128 [ 1730.890146][ T816] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1731.001004][ T829] loop8: detected capacity change from 0 to 1024 [ 1731.021759][ T835] 9pnet_fd: Insufficient options for proto=fd [ 1731.059549][ T839] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 1731.098874][ T843] 9pnet: Could not find request transport: f [ 1731.114920][ T621] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1731.230523][ T621] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1731.264161][ T880] loop1: detected capacity change from 0 to 1024 [ 1731.278880][ T621] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1731.290509][ T621] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1731.302211][ T621] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1731.314689][ T621] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1731.408546][ T910] can0: slcan on ttyS3. [ 1731.451770][ T922] netlink: 8 bytes leftover after parsing attributes in process `syz.8.24644'. [ 1731.468829][ T910] can0 (unregistered): slcan off ttyS3. [ 1731.691572][ T947] loop1: detected capacity change from 0 to 512 [ 1731.710732][ T947] EXT4-fs (loop1): 1 orphan inode deleted [ 1731.717161][ T947] ext4 filesystem being mounted at /475/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1731.728754][T19503] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:41: Failed to release dquot type 1 [ 1731.753866][ T947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1731.772882][ T947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1731.843598][ T949] tipc: Failed to obtain node identity [ 1731.849282][ T949] tipc: Enabling of bearer rejected, failed to enable media [ 1731.921209][ T957] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 1732.225220][ T980] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 1732.233932][ T985] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 1732.318901][ T1003] netlink: 'syz.8.24673': attribute type 13 has an invalid length. [ 1732.533737][ T1003] bridge0: port 2(bridge_slave_1) entered blocking state [ 1732.540966][ T1003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1732.548457][ T1003] bridge0: port 1(bridge_slave_0) entered blocking state [ 1732.555604][ T1003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1732.601134][ T1003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1732.629501][ T1003] 8021q: adding VLAN 0 to HW filter on device team0 [ 1732.658410][ T982] loop4: detected capacity change from 0 to 512 [ 1732.658431][ T1003] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1732.740145][ T1034] lo speed is unknown, defaulting to 1000 [ 1732.767207][ T1043] netlink: 4 bytes leftover after parsing attributes in process `syz.7.24680'. [ 1732.790040][ T1045] loop9: detected capacity change from 0 to 1024 [ 1732.811127][ T1045] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1732.822207][ T1045] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1732.855570][ T1034] lo speed is unknown, defaulting to 1000 [ 1732.861668][ T1045] JBD2: no valid journal superblock found [ 1732.867453][ T1045] EXT4-fs (loop9): Could not load journal inode [ 1732.906441][ T1064] openvswitch: netlink: Message has 6 unknown bytes. [ 1732.986738][ T1084] 9pnet_fd: Insufficient options for proto=fd [ 1733.024974][ T1087] netlink: 168 bytes leftover after parsing attributes in process `syz.7.24687'. [ 1733.042617][ T1093] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 1733.297655][ T1108] netlink: 12 bytes leftover after parsing attributes in process `syz.8.24692'. [ 1733.323037][ T1112] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=1112 comm=syz.7.24694 [ 1733.355773][ T1115] loop4: detected capacity change from 0 to 512 [ 1733.456461][ T1122] 9pnet_fd: Insufficient options for proto=fd [ 1733.470268][ T1120] bridge_slave_0: left allmulticast mode [ 1733.476041][ T1120] bridge_slave_0: left promiscuous mode [ 1733.481978][ T1120] bridge0: port 1(bridge_slave_0) entered disabled state [ 1733.538936][ T1129] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 1733.540641][ T1120] bridge_slave_1: left allmulticast mode [ 1733.552305][ T1120] bridge_slave_1: left promiscuous mode [ 1733.558042][ T1120] bridge0: port 2(bridge_slave_1) entered disabled state [ 1733.578287][ T1120] bond0: (slave bond_slave_0): Releasing backup interface [ 1733.626037][ T1120] bond0: (slave bond_slave_1): Releasing backup interface [ 1733.644756][ T1133] 9pnet: Could not find request transport: 0xffffffffffffffff [ 1733.645702][ T1120] team0: Port device team_slave_0 removed [ 1733.664327][ T1120] team0: Port device team_slave_1 removed [ 1733.671725][ T1120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1733.679377][ T1120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1733.690641][ T1120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1733.698129][ T1120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1733.722722][ T1125] tipc: Started in network mode [ 1733.727733][ T1125] tipc: Node identity 7, cluster identity 4711 [ 1733.734067][ T1125] tipc: Node number set to 7 [ 1733.770605][ T1133] vlan0: entered promiscuous mode [ 1733.788217][ T1133] team0: Port device vlan0 added [ 1733.804488][ T1144] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1733.862275][ T1151] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1733.919845][ T1144] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1733.971317][ T1165] 9pnet_fd: Insufficient options for proto=fd [ 1733.985339][ T1167] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 1733.996127][ T1144] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1734.035065][ T1149] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=1149 comm=syz.7.24705 [ 1734.120606][ T1144] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1734.185576][ T1144] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1734.197659][ T1144] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1734.209791][ T1144] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1734.227684][ T1144] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1734.245675][ T1199] loop9: detected capacity change from 0 to 1024 [ 1734.265026][ T1199] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1734.302242][ T1199] EXT4-fs error (device loop9): ext4_map_blocks:816: inode #15: block 1: comm syz.9.24721: lblock 1 mapped to illegal pblock 1 (length 15) [ 1734.321996][ T1199] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 1734.334662][ T1199] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1734.334662][ T1199] [ 1734.367712][ T1207] netlink: 'syz.9.24721': attribute type 21 has an invalid length. [ 1734.376602][ T1207] netlink: 'syz.9.24721': attribute type 1 has an invalid length. [ 1734.384587][ T1207] netlink: 144 bytes leftover after parsing attributes in process `syz.9.24721'. [ 1734.398916][ T29] kauditd_printk_skb: 631 callbacks suppressed [ 1734.398931][ T29] audit: type=1326 audit(1752585090.649:103975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1198 comm="syz.9.24721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5679a8e929 code=0x7ffc0000 [ 1734.405145][ T1199] pim6reg: entered allmulticast mode [ 1734.406433][ T1199] pim6reg: left allmulticast mode [ 1734.445550][ T29] audit: type=1326 audit(1752585090.659:103976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1198 comm="syz.9.24721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f5679a8e929 code=0x7ffc0000 [ 1734.469532][ T29] audit: type=1326 audit(1752585090.659:103977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1198 comm="syz.9.24721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5679a8e929 code=0x7ffc0000 [ 1734.493272][ T29] audit: type=1326 audit(1752585090.659:103978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1198 comm="syz.9.24721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5679a8e929 code=0x7ffc0000 [ 1734.517126][ T29] audit: type=1326 audit(1752585090.659:103979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1198 comm="syz.9.24721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5679a8e929 code=0x7ffc0000 [ 1734.540891][ T29] audit: type=1326 audit(1752585090.659:103980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1198 comm="syz.9.24721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5679a8e929 code=0x7ffc0000 [ 1734.564712][ T29] audit: type=1326 audit(1752585090.659:103981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1198 comm="syz.9.24721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5679a8e929 code=0x7ffc0000 [ 1734.588455][ T29] audit: type=1400 audit(1752585090.659:103982): avc: denied { setopt } for pid=1198 comm="syz.9.24721" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1734.609333][ T29] audit: type=1326 audit(1752585090.659:103983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1198 comm="syz.9.24721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5679a8e929 code=0x7ffc0000 [ 1734.633394][ T29] audit: type=1326 audit(1752585090.659:103984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1198 comm="syz.9.24721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5679a8e929 code=0x7ffc0000 [ 1734.670328][ T1214] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 1734.784075][ T1195] loop1: detected capacity change from 0 to 512 [ 1734.927031][ T1247] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1734.984752][ T1256] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 1734.993791][ T1258] 9pnet_fd: Insufficient options for proto=fd [ 1735.031068][ T1247] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1735.112505][ T1247] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1735.173696][ T1290] loop9: detected capacity change from 0 to 512 [ 1735.207342][ T1299] loop4: detected capacity change from 0 to 256 [ 1735.215297][ T1247] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1735.227830][ T1290] EXT4-fs (loop9): 1 orphan inode deleted [ 1735.238679][ T1290] ext4 filesystem being mounted at /162/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1735.240230][T19514] EXT4-fs error (device loop9): ext4_release_dquot:6969: comm kworker/u8:56: Failed to release dquot type 1 [ 1735.264572][ T1290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1735.273715][ T1290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1735.287148][ T1259] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=1259 comm=syz.1.24733 [ 1735.321142][ T1327] 9pnet_fd: Insufficient options for proto=fd [ 1735.331755][ T1329] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 1735.365223][ T1247] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.388302][ T1247] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.400958][ T1247] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.415876][ T1247] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.470045][ T1353] netlink: 'syz.8.24759': attribute type 13 has an invalid length. [ 1735.505249][ T1359] loop4: detected capacity change from 0 to 512 [ 1735.511910][ T1353] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1735.553814][ T1353] netlink: 4 bytes leftover after parsing attributes in process `syz.8.24759'. [ 1735.576624][ T1353] netlink: 4 bytes leftover after parsing attributes in process `syz.8.24759'. [ 1735.586918][ T1367] 9pnet_fd: Insufficient options for proto=fd [ 1735.597995][ T1353] netlink: 4 bytes leftover after parsing attributes in process `syz.8.24759'. [ 1735.612011][ T1371] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 1735.633437][ T1353] netlink: 4 bytes leftover after parsing attributes in process `syz.8.24759'. [ 1735.674639][ T1353] netlink: 4 bytes leftover after parsing attributes in process `syz.8.24759'. [ 1735.677763][ T1378] FAULT_INJECTION: forcing a failure. [ 1735.677763][ T1378] name failslab, interval 1, probability 0, space 0, times 0 [ 1735.686229][ T1353] netlink: 4 bytes leftover after parsing attributes in process `syz.8.24759'. [ 1735.696515][ T1378] CPU: 1 UID: 0 PID: 1378 Comm: syz.4.24768 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 1735.696615][ T1378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1735.696634][ T1378] Call Trace: [ 1735.696642][ T1378] [ 1735.696653][ T1378] __dump_stack+0x1d/0x30 [ 1735.696685][ T1378] dump_stack_lvl+0xe8/0x140 [ 1735.696715][ T1378] dump_stack+0x15/0x1b [ 1735.696737][ T1378] should_fail_ex+0x265/0x280 [ 1735.696831][ T1378] should_failslab+0x8c/0xb0 [ 1735.696861][ T1378] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 1735.696990][ T1378] ? sidtab_sid2str_get+0xa0/0x130 [ 1735.697025][ T1378] kmemdup_noprof+0x2b/0x70 [ 1735.697057][ T1378] sidtab_sid2str_get+0xa0/0x130 [ 1735.697088][ T1378] security_sid_to_context_core+0x1eb/0x2e0 [ 1735.697191][ T1378] security_sid_to_context+0x27/0x40 [ 1735.697217][ T1378] selinux_lsmprop_to_secctx+0x67/0xf0 [ 1735.697250][ T1378] security_lsmprop_to_secctx+0x43/0x80 [ 1735.697350][ T1378] audit_log_task_context+0x77/0x190 [ 1735.697399][ T1378] audit_log_task+0xf4/0x250 [ 1735.697439][ T1378] audit_seccomp+0x61/0x100 [ 1735.697482][ T1378] ? __seccomp_filter+0x68c/0x10d0 [ 1735.697520][ T1378] __seccomp_filter+0x69d/0x10d0 [ 1735.697552][ T1378] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1735.697626][ T1378] ? vfs_write+0x75e/0x8e0 [ 1735.697669][ T1378] ? __rcu_read_unlock+0x4f/0x70 [ 1735.697698][ T1378] ? __fget_files+0x184/0x1c0 [ 1735.697764][ T1378] __secure_computing+0x82/0x150 [ 1735.697793][ T1378] syscall_trace_enter+0xcf/0x1e0 [ 1735.697836][ T1378] do_syscall_64+0xac/0x200 [ 1735.697861][ T1378] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1735.697897][ T1378] ? clear_bhb_loop+0x40/0x90 [ 1735.697925][ T1378] ? clear_bhb_loop+0x40/0x90 [ 1735.698019][ T1378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1735.698048][ T1378] RIP: 0033:0x7f722af5e929 [ 1735.698142][ T1378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1735.698168][ T1378] RSP: 002b:00007f72295c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1735.698195][ T1378] RAX: ffffffffffffffda RBX: 00007f722b185fa0 RCX: 00007f722af5e929 [ 1735.698211][ T1378] RDX: 00002000000003c0 RSI: 00000000c0a85320 RDI: 0000000000000004 [ 1735.698241][ T1378] RBP: 00007f72295c7090 R08: 0000000000000000 R09: 0000000000000000 [ 1735.698290][ T1378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1735.698307][ T1378] R13: 0000000000000000 R14: 00007f722b185fa0 R15: 00007ffceca94a38 [ 1735.698334][ T1378] [ 1736.006472][ T1394] loop8: detected capacity change from 0 to 512 [ 1736.024390][ T1396] loop1: detected capacity change from 0 to 1024 [ 1736.096232][ T1413] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 1736.105817][ T1418] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=1418 comm=syz.4.24777 [ 1736.155698][ T1424] loop8: detected capacity change from 0 to 512 [ 1736.188852][ T1424] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1736.205937][ T1424] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.24782: bg 0: block 248: padding at end of block bitmap is not set [ 1736.255478][ T1424] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.24782: Failed to acquire dquot type 1 [ 1736.284998][ T1424] EXT4-fs (loop8): 1 truncate cleaned up [ 1736.342711][ T1450] loop9: detected capacity change from 0 to 512 [ 1736.361371][ T1450] EXT4-fs (loop9): 1 orphan inode deleted [ 1736.367662][ T1450] EXT4-fs mount: 44 callbacks suppressed [ 1736.367680][ T1450] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1736.387267][T19514] EXT4-fs error (device loop9): ext4_release_dquot:6969: comm kworker/u8:56: Failed to release dquot type 1 [ 1736.409902][ T1450] ext4 filesystem being mounted at /168/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1736.473503][ T1450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1736.482290][ T1450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1736.496862][ T1476] loop4: detected capacity change from 0 to 512 [ 1736.503927][ T1476] EXT4-fs: quotafile must be on filesystem root [ 1736.571984][ T1491] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=1491 comm=syz.8.24794 [ 1736.592014][ T1490] netlink: 16 bytes leftover after parsing attributes in process `syz.4.24800'. [ 1736.911883][ T1547] loop4: detected capacity change from 0 to 512 [ 1736.918867][ T1547] EXT4-fs: quotafile must be on filesystem root [ 1737.038411][T29229] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1737.067177][ T1568] netlink: 'syz.1.24826': attribute type 8 has an invalid length. [ 1737.083352][ T1574] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 1737.119479][ T1578] openvswitch: netlink: Message has 6 unknown bytes. [ 1737.168314][ T1582] loop4: detected capacity change from 0 to 764 [ 1737.202348][ T1582] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1737.265812][ T1595] loop1: detected capacity change from 0 to 512 [ 1737.268205][ T1593] ip6gre1: entered promiscuous mode [ 1737.277522][ T1593] ip6gre1: entered allmulticast mode [ 1737.279210][ T1595] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -13 [ 1737.292277][ T1595] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #13: comm syz.1.24834: iget: bad i_size value: 12154757448730 [ 1737.305917][ T1595] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.24834: couldn't read orphan inode 13 (err -117) [ 1737.307928][ T1603] netlink: 8 bytes leftover after parsing attributes in process `syz.9.24833'. [ 1737.320934][ T1595] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1737.358777][T19955] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1737.399814][ T1615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1615 comm=syz.8.24837 [ 1737.414985][ T1615] netlink: 'syz.8.24837': attribute type 1 has an invalid length. [ 1737.439547][ T1615] bond1: (slave bridge5): making interface the new active one [ 1737.447524][ T1615] bond1: (slave bridge5): Enslaving as an active interface with an up link [ 1737.517616][ T1652] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=1652 comm=syz.1.24838 [ 1737.593227][ T1658] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 1737.618956][ T1661] openvswitch: netlink: Message has 6 unknown bytes. [ 1737.658502][ T1667] rdma_rxe: rxe_newlink: failed to add lo [ 1737.661459][ T1668] netlink: 'syz.8.24845': attribute type 8 has an invalid length. [ 1738.042798][ T1691] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=1691 comm=syz.4.24850 [ 1738.240843][ T1708] loop9: detected capacity change from 0 to 512 [ 1738.251641][ T1708] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1738.262467][ T1708] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.24857: bg 0: block 248: padding at end of block bitmap is not set [ 1738.277595][ T1708] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.24857: Failed to acquire dquot type 1 [ 1738.290206][ T1708] EXT4-fs (loop9): 1 truncate cleaned up [ 1738.297739][ T1708] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1738.326346][T29229] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1738.423935][ T1727] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=1727 comm=syz.8.24861 [ 1738.447231][ T1726] lo speed is unknown, defaulting to 1000 [ 1738.479028][ T1734] loop1: detected capacity change from 0 to 1024 [ 1738.514657][ T1734] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1738.525625][ T1734] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1738.544950][ T1726] lo speed is unknown, defaulting to 1000 [ 1738.573352][ T1734] JBD2: no valid journal superblock found [ 1738.579263][ T1734] EXT4-fs (loop1): Could not load journal inode [ 1738.606080][ T1743] loop8: detected capacity change from 0 to 1024 [ 1738.615614][ T1743] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1738.678366][ T1743] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1738.695016][ T1774] loop9: detected capacity change from 0 to 512 [ 1738.731255][ T1774] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1738.739574][ T1774] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.24870: bg 0: block 248: padding at end of block bitmap is not set [ 1738.756065][ T1774] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.24870: Failed to acquire dquot type 1 [ 1738.769195][ T1774] EXT4-fs (loop9): 1 truncate cleaned up [ 1738.775717][ T1774] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1738.806041][T29229] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1738.865708][ T1795] loop8: detected capacity change from 0 to 512 [ 1738.877274][ T1795] EXT4-fs: quotafile must be on filesystem root [ 1738.921345][ T1806] netlink: 'syz.7.24879': attribute type 8 has an invalid length. [ 1738.945026][ T1808] netlink: 'syz.8.24880': attribute type 8 has an invalid length. [ 1739.133801][ T1832] loop8: detected capacity change from 0 to 1024 [ 1739.144184][ T1832] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1739.160162][ T1832] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1739.413314][ T29] kauditd_printk_skb: 1389 callbacks suppressed [ 1739.413336][ T29] audit: type=1326 audit(1752585095.669:105365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1875 comm="syz.7.24898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d09de929 code=0x7ffc0000 [ 1739.454953][ T29] audit: type=1326 audit(1752585095.669:105366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1875 comm="syz.7.24898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33d09de929 code=0x7ffc0000 [ 1739.478823][ T29] audit: type=1326 audit(1752585095.709:105367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1875 comm="syz.7.24898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d09de929 code=0x7ffc0000 [ 1739.502921][ T29] audit: type=1326 audit(1752585095.709:105368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1875 comm="syz.7.24898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d09de929 code=0x7ffc0000 [ 1739.527858][ T29] audit: type=1326 audit(1752585095.709:105369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1875 comm="syz.7.24898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f33d09de929 code=0x7ffc0000 [ 1739.551716][ T29] audit: type=1326 audit(1752585095.709:105370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1875 comm="syz.7.24898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f33d09de963 code=0x7ffc0000 [ 1739.575376][ T29] audit: type=1326 audit(1752585095.709:105371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1875 comm="syz.7.24898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f33d09de963 code=0x7ffc0000 [ 1739.599163][ T29] audit: type=1326 audit(1752585095.709:105372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1875 comm="syz.7.24898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d09de929 code=0x7ffc0000 [ 1739.623032][ T29] audit: type=1326 audit(1752585095.709:105373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1875 comm="syz.7.24898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d09de929 code=0x7ffc0000 [ 1739.646825][ T29] audit: type=1326 audit(1752585095.709:105374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1875 comm="syz.7.24898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f33d09de929 code=0x7ffc0000 [ 1739.703530][ T1883] loop1: detected capacity change from 0 to 1024 [ 1739.715383][ T1883] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1739.730882][ T1883] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1739.978852][ T1899] tipc: Failed to obtain node identity [ 1739.984418][ T1899] tipc: Enabling of bearer rejected, failed to enable media [ 1740.145691][ T1925] netlink: 'syz.1.24916': attribute type 8 has an invalid length. [ 1740.198006][ T1934] rdma_rxe: rxe_newlink: failed to add lo [ 1740.215768][ T1935] loop4: detected capacity change from 0 to 1024 [ 1740.230041][ T1935] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1740.245905][ T1935] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1740.522066][ T1973] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1740.594197][ T1973] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1740.674250][ T1973] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1740.735361][ T1973] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1740.806650][ T1973] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1740.834249][ T1973] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1740.847594][ T1973] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1740.881790][ T1973] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1741.002703][ T2016] ip6gre1: entered promiscuous mode [ 1741.008038][ T2016] ip6gre1: entered allmulticast mode [ 1741.177252][ T2031] netlink: 'syz.8.24947': attribute type 8 has an invalid length. [ 1741.286411][ T2037] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1741.330648][ T2037] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1741.399613][ T2037] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1741.471093][ T2037] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1741.508149][ T2060] loop8: detected capacity change from 0 to 1024 [ 1741.534686][ T2060] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1741.565508][ T2037] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1741.575156][ T2060] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1741.590133][ T2075] loop4: detected capacity change from 0 to 1024 [ 1741.607599][ T2075] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1741.618799][ T2075] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1741.640972][ T2037] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1741.654958][ T2018] loop1: detected capacity change from 0 to 512 [ 1741.663562][ T2064] lo speed is unknown, defaulting to 1000 [ 1741.679214][ T2037] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1741.690119][ T2075] JBD2: no valid journal superblock found [ 1741.695904][ T2075] EXT4-fs (loop4): Could not load journal inode [ 1741.711448][ T2037] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1741.785949][ T2092] netlink: 'syz.7.24958': attribute type 8 has an invalid length. [ 1741.830096][ T2064] lo speed is unknown, defaulting to 1000 [ 1741.854219][ T2103] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 1741.868946][ T2067] tipc: Failed to obtain node identity [ 1741.874492][ T2067] tipc: Enabling of bearer rejected, failed to enable media [ 1742.006114][ T2125] can0: slcan on ttyS3. [ 1742.116209][ T2143] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1742.160722][ T2143] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1742.199632][ T2155] rdma_rxe: rxe_newlink: failed to add lo [ 1742.203154][ T2161] netlink: 'syz.7.24973': attribute type 8 has an invalid length. [ 1742.215037][ T2159] netlink: 'syz.1.24972': attribute type 10 has an invalid length. [ 1742.225848][ T2159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1742.233181][ T2159] bridge0: port 1(O3ãc¤±) entered disabled state [ 1742.251976][ T2159] bridge0: port 2(bridge_slave_1) entered blocking state [ 1742.259155][ T2159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1742.266655][ T2159] bridge0: port 1(O3ãc¤±) entered blocking state [ 1742.273186][ T2159] bridge0: port 1(O3ãc¤±) entered forwarding state [ 1742.286457][ T2159] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1742.304004][ T2143] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1742.351792][ T2143] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1742.413401][ T2143] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1742.462790][ T2143] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1742.502754][ T2143] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1742.539336][ T2143] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1742.544058][ T2192] loop1: detected capacity change from 0 to 256 [ 1742.727090][ T2214] loop4: detected capacity change from 0 to 8192 [ 1742.952125][ T2244] loop4: detected capacity change from 0 to 256 [ 1742.992605][ T2258] loop8: detected capacity change from 0 to 512 [ 1742.996358][ T2216] tipc: Enabled bearer , priority 14 [ 1743.025846][ T2258] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #4: comm syz.8.24999: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 1743.044239][ T2255] loop9: detected capacity change from 0 to 8192 [ 1743.053400][ T2258] EXT4-fs error (device loop8): ext4_quota_enable:7127: comm syz.8.24999: Bad quota inode: 4, type: 1 [ 1743.096753][ T2258] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1743.127556][ T2258] EXT4-fs (loop8): mount failed [ 1743.147783][ T2276] loop1: detected capacity change from 0 to 1024 [ 1743.192326][ T2276] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1743.234239][ T2273] FAULT_INJECTION: forcing a failure. [ 1743.234239][ T2273] name failslab, interval 1, probability 0, space 0, times 0 [ 1743.247050][ T2273] CPU: 0 UID: 0 PID: 2273 Comm: syz.7.25003 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 1743.247079][ T2273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1743.247092][ T2273] Call Trace: [ 1743.247099][ T2273] [ 1743.247107][ T2273] __dump_stack+0x1d/0x30 [ 1743.247169][ T2273] dump_stack_lvl+0xe8/0x140 [ 1743.247189][ T2273] dump_stack+0x15/0x1b [ 1743.247234][ T2273] should_fail_ex+0x265/0x280 [ 1743.247306][ T2277] loop9: detected capacity change from 0 to 8192 [ 1743.247346][ T2273] should_failslab+0x8c/0xb0 [ 1743.247369][ T2273] kmem_cache_alloc_noprof+0x50/0x310 [ 1743.247405][ T2273] ? getname_flags+0x80/0x3b0 [ 1743.247433][ T2273] ? fput+0x8f/0xc0 [ 1743.247530][ T2273] getname_flags+0x80/0x3b0 [ 1743.247562][ T2273] __x64_sys_unlinkat+0x70/0xb0 [ 1743.247606][ T2273] x64_sys_call+0x2438/0x2fb0 [ 1743.247636][ T2273] do_syscall_64+0xd2/0x200 [ 1743.247660][ T2273] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1743.247735][ T2273] ? clear_bhb_loop+0x40/0x90 [ 1743.247765][ T2273] ? clear_bhb_loop+0x40/0x90 [ 1743.247795][ T2273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1743.247825][ T2273] RIP: 0033:0x7f33d09de929 [ 1743.247848][ T2273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1743.247934][ T2273] RSP: 002b:00007f33cf047038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 1743.247960][ T2273] RAX: ffffffffffffffda RBX: 00007f33d0c05fa0 RCX: 00007f33d09de929 [ 1743.247978][ T2273] RDX: 0000000000000200 RSI: 0000200000000080 RDI: 0000000000000004 [ 1743.247996][ T2273] RBP: 00007f33cf047090 R08: 0000000000000000 R09: 0000000000000000 [ 1743.248014][ T2273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1743.248031][ T2273] R13: 0000000000000000 R14: 00007f33d0c05fa0 R15: 00007ffe3eb8cc58 [ 1743.248058][ T2273] [ 1743.321786][ T2290] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.25004: Allocating blocks 481-513 which overlap fs metadata [ 1743.363251][ T2289] rdma_rxe: rxe_newlink: failed to add lo [ 1743.498088][ T2290] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.25004: Allocating blocks 465-513 which overlap fs metadata [ 1743.587676][T19955] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1744.008160][ T2320] 9pnet_fd: Insufficient options for proto=fd [ 1744.192485][ T2333] loop4: detected capacity change from 0 to 1024 [ 1744.224785][ T2333] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1744.270964][ T2333] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1744.412035][ T2352] 9pnet_fd: Insufficient options for proto=fd [ 1744.446491][ T29] kauditd_printk_skb: 882 callbacks suppressed [ 1744.446511][ T29] audit: type=1326 audit(1752585100.699:106257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2295 comm="syz.9.25008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5679a8d3df code=0x7ffc0000 [ 1744.482811][ T2296] loop9: detected capacity change from 0 to 512 [ 1744.497477][ T29] audit: type=1326 audit(1752585100.729:106258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2295 comm="syz.9.25008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f5679a8e9b7 code=0x7ffc0000 [ 1744.497527][ T29] audit: type=1326 audit(1752585100.739:106259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2295 comm="syz.9.25008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5679a8d290 code=0x7ffc0000 [ 1744.497615][ T29] audit: type=1326 audit(1752585100.739:106260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2295 comm="syz.9.25008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5679a8e52b code=0x7ffc0000 [ 1744.538336][ T2358] loop4: detected capacity change from 0 to 256 [ 1744.582982][ T29] audit: type=1326 audit(1752585100.819:106261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2295 comm="syz.9.25008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5679a8d58a code=0x7ffc0000 [ 1744.606696][ T29] audit: type=1326 audit(1752585100.819:106262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2295 comm="syz.9.25008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5679a8d58a code=0x7ffc0000 [ 1744.630373][ T29] audit: type=1326 audit(1752585100.829:106263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2295 comm="syz.9.25008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f5679a8d197 code=0x7ffc0000 [ 1744.654970][ T29] audit: type=1326 audit(1752585100.839:106264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2295 comm="syz.9.25008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f5679a900ca code=0x7ffc0000 [ 1744.678705][ T29] audit: type=1326 audit(1752585100.839:106265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2295 comm="syz.9.25008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5679a8d290 code=0x7ffc0000 [ 1744.702498][ T29] audit: type=1326 audit(1752585100.839:106266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2295 comm="syz.9.25008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5679a8e52b code=0x7ffc0000 [ 1744.732549][ T2368] rdma_rxe: rxe_newlink: failed to add lo [ 1744.901094][ T2395] lo speed is unknown, defaulting to 1000 [ 1744.951841][ T2403] loop4: detected capacity change from 0 to 1024 [ 1744.956948][ T2395] lo speed is unknown, defaulting to 1000 [ 1744.960675][ T2403] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1744.975024][ T2403] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1745.029107][ T2403] JBD2: no valid journal superblock found [ 1745.034921][ T2403] EXT4-fs (loop4): Could not load journal inode [ 1745.038159][ T2404] syzkaller1: entered promiscuous mode [ 1745.047254][ T2404] syzkaller1: entered allmulticast mode [ 1745.055880][ T2425] lo speed is unknown, defaulting to 1000 [ 1745.105913][ T2425] lo speed is unknown, defaulting to 1000 [ 1745.239636][ T2473] loop9: detected capacity change from 0 to 764 [ 1745.247189][ T2473] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1745.366944][ T2484] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=2484 comm=syz.7.25054 [ 1745.381745][ T2487] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 1745.414978][ T2483] tipc: Failed to obtain node identity [ 1745.420592][ T2483] tipc: Enabling of bearer rejected, failed to enable media [ 1745.425744][ T2492] netlink: 'syz.8.25058': attribute type 8 has an invalid length. [ 1745.568160][ T2499] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1745.636664][ T2499] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1745.715514][ T2508] lo speed is unknown, defaulting to 1000 [ 1745.730791][ T2499] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1745.753259][ T2508] lo speed is unknown, defaulting to 1000 [ 1745.832156][ T2499] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1745.895455][ T2499] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1745.907923][ T2499] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1745.919991][ T2499] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1745.931518][ T2499] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1746.121701][ T2583] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 1746.132803][ T2585] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1746.147466][ T2581] SELinux: ebitmap: truncated map [ 1746.162474][ T2581] SELinux: failed to load policy [ 1746.181411][ T2593] loop8: detected capacity change from 0 to 512 [ 1746.195119][ T2593] EXT4-fs: quotafile must be on filesystem root [ 1746.204335][ T2585] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1746.282512][ T2585] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1746.375539][ T2585] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1746.430176][ T2628] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 1746.437829][ T2629] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=2629 comm=syz.4.25088 [ 1746.605784][ T2655] openvswitch: netlink: Message has 6 unknown bytes. [ 1746.715175][ T2669] lo speed is unknown, defaulting to 1000 [ 1746.760705][ T2678] loop8: detected capacity change from 0 to 1024 [ 1746.760696][ T2669] lo speed is unknown, defaulting to 1000 [ 1746.788929][ T2678] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1746.799975][ T2678] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1746.812205][ T2678] JBD2: no valid journal superblock found [ 1746.818020][ T2678] EXT4-fs (loop8): Could not load journal inode [ 1746.880793][ T2715] 9pnet_fd: Insufficient options for proto=fd [ 1746.946294][ T2723] lo speed is unknown, defaulting to 1000 [ 1746.993101][ T2735] loop8: detected capacity change from 0 to 1024 [ 1747.002846][ T2723] lo speed is unknown, defaulting to 1000 [ 1747.009809][ T2735] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1747.020918][ T2735] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1747.048877][ T2735] JBD2: no valid journal superblock found [ 1747.054746][ T2735] EXT4-fs (loop8): Could not load journal inode [ 1747.100695][ T2769] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1747.171416][ T2774] 9pnet_fd: Insufficient options for proto=fd [ 1747.246103][ T2786] loop8: detected capacity change from 0 to 512 [ 1747.260922][ T2786] EXT4-fs (loop8): 1 orphan inode deleted [ 1747.261101][ T2797] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 1747.267153][ T2786] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1747.287694][T19539] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:67: Failed to release dquot type 1 [ 1747.300439][ T2786] ext4 filesystem being mounted at /300/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1747.314810][ T2786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1747.325434][ T2786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1747.379778][ T2810] loop9: detected capacity change from 0 to 512 [ 1747.387897][ T2810] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1747.396117][ T2810] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.25134: bg 0: block 248: padding at end of block bitmap is not set [ 1747.412812][ T2810] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.25134: Failed to acquire dquot type 1 [ 1747.425851][ T2810] EXT4-fs (loop9): 1 truncate cleaned up [ 1747.434371][ T2810] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1747.459345][T29229] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1747.508302][ T2822] 9pnet_fd: Insufficient options for proto=fd [ 1747.549912][ T2826] netlink: 'syz.7.25140': attribute type 8 has an invalid length. [ 1747.586377][ T2832] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 1747.772717][ T2854] 9pnet_fd: Insufficient options for proto=fd [ 1747.834889][ T2862] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 1747.870918][T28587] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1747.884028][ T2866] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 1747.985698][ T2882] 9pnet_fd: Insufficient options for proto=fd [ 1748.023056][ T2889] rdma_rxe: rxe_newlink: failed to add lo [ 1748.135527][ T2896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1748.146424][ T2896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1748.151047][ T2898] loop4: detected capacity change from 0 to 512 [ 1748.162589][ T2898] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1748.169864][ T2898] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.25167: bg 0: block 248: padding at end of block bitmap is not set [ 1748.184834][ T2898] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.25167: Failed to acquire dquot type 1 [ 1748.196770][ T2898] EXT4-fs (loop4): 1 truncate cleaned up [ 1748.203279][ T2898] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1748.228065][T32302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1748.255293][ T2906] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1748.481040][ T2915] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1748.735030][ T2922] lo speed is unknown, defaulting to 1000 [ 1748.785685][ T2922] lo speed is unknown, defaulting to 1000 [ 1748.899901][ T2960] loop9: detected capacity change from 0 to 512 [ 1748.908274][ T2960] EXT4-fs: quotafile must be on filesystem root [ 1748.945997][ T2965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1748.954865][ T2965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1748.990010][ T2974] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1748.997386][ T2974] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 1749.062018][ T2983] loop8: detected capacity change from 0 to 512 [ 1749.069074][ T2983] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 1749.214961][ T3004] loop9: detected capacity change from 0 to 256 [ 1749.299864][ T3014] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1749.307365][ T3014] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 1749.323388][ T3016] loop9: detected capacity change from 0 to 256 [ 1749.355925][ T3022] syzkaller1: entered promiscuous mode [ 1749.361584][ T3022] syzkaller1: entered allmulticast mode [ 1749.369513][ T3028] netlink: 12 bytes leftover after parsing attributes in process `syz.8.25199'. [ 1749.508751][ T29] kauditd_printk_skb: 1115 callbacks suppressed [ 1749.508769][ T29] audit: type=1326 audit(1752585105.769:107375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3044 comm="syz.9.25205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5679a8e929 code=0x7ffc0000 [ 1749.557361][ T29] audit: type=1326 audit(1752585105.799:107376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3044 comm="syz.9.25205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5679a8e929 code=0x7ffc0000 [ 1749.581240][ T29] audit: type=1326 audit(1752585105.799:107377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3044 comm="syz.9.25205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5679a8e929 code=0x7ffc0000 [ 1749.605190][ T29] audit: type=1326 audit(1752585105.799:107378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3044 comm="syz.9.25205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5679a8e929 code=0x7ffc0000 [ 1749.629161][ T29] audit: type=1326 audit(1752585105.799:107379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3044 comm="syz.9.25205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5679a8e929 code=0x7ffc0000 [ 1749.653056][ T29] audit: type=1326 audit(1752585105.799:107380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3044 comm="syz.9.25205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5679a8e929 code=0x7ffc0000 [ 1749.677239][ T29] audit: type=1326 audit(1752585105.799:107381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3044 comm="syz.9.25205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5679a8e929 code=0x7ffc0000 [ 1749.701031][ T29] audit: type=1326 audit(1752585105.799:107382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3044 comm="syz.9.25205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5679a8e929 code=0x7ffc0000 [ 1749.725000][ T29] audit: type=1326 audit(1752585105.799:107383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3044 comm="syz.9.25205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5679a8e929 code=0x7ffc0000 [ 1749.748876][ T29] audit: type=1326 audit(1752585105.799:107384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3044 comm="syz.9.25205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5679a8e929 code=0x7ffc0000 [ 1749.808443][ T2585] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1749.841621][ T2585] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1749.862561][ T2585] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1749.892844][ T2585] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1749.910232][ T3070] loop4: detected capacity change from 0 to 512 [ 1749.917242][ T3070] EXT4-fs: quotafile must be on filesystem root [ 1749.925313][ T3057] loop8: detected capacity change from 0 to 8192 [ 1750.121757][ T3111] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1750.223851][ T3111] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1750.267587][ T3109] tipc: Failed to obtain node identity [ 1750.273224][ T3109] tipc: Enabling of bearer rejected, failed to enable media [ 1750.344767][ T3111] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1750.355191][ T3126] loop8: detected capacity change from 0 to 8192 [ 1750.367315][ T3134] loop4: detected capacity change from 0 to 1024 [ 1750.400430][ T3134] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1750.414992][ T3111] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1750.441356][ T3134] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1750.474433][ T3154] netlink: 'syz.1.25236': attribute type 8 has an invalid length. [ 1750.487687][ T3111] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1750.502505][ T3111] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1750.523245][ T3111] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1750.565511][ T3111] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1750.726393][ T3195] loop8: detected capacity change from 0 to 1024 [ 1750.742267][ T3187] lo speed is unknown, defaulting to 1000 [ 1750.746709][ T3195] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1750.759089][ T3195] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1750.828435][ T3195] JBD2: no valid journal superblock found [ 1750.834307][ T3195] EXT4-fs (loop8): Could not load journal inode [ 1750.852915][ T3208] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 1750.895075][ T3187] lo speed is unknown, defaulting to 1000 [ 1750.999585][ T3247] loop4: detected capacity change from 0 to 2048 [ 1751.006687][ T3247] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 1751.033494][ T3247] netlink: 28 bytes leftover after parsing attributes in process `syz.4.25259'. [ 1751.055588][T19494] ================================================================== [ 1751.063722][T19494] BUG: KCSAN: data-race in copy_process / free_pid [ 1751.070264][T19494] [ 1751.072595][T19494] read-write to 0xffffffff868608e0 of 4 bytes by task 3258 on cpu 1: [ 1751.080672][T19494] free_pid+0x77/0x180 [ 1751.084754][T19494] free_pids+0x7a/0xb0 [ 1751.088830][T19494] release_task+0x9a9/0xb60 [ 1751.093357][T19494] do_exit+0xd81/0x1590 [ 1751.097537][T19494] call_usermodehelper_exec_async+0x247/0x250 [ 1751.103630][T19494] ret_from_fork+0xda/0x150 [ 1751.108161][T19494] ret_from_fork_asm+0x1a/0x30 [ 1751.112948][T19494] [ 1751.115282][T19494] read to 0xffffffff868608e0 of 4 bytes by task 19494 on cpu 0: [ 1751.122922][T19494] copy_process+0x1790/0x1f90 [ 1751.127624][T19494] kernel_clone+0x16c/0x5b0 [ 1751.132151][T19494] user_mode_thread+0x7d/0xb0 [ 1751.136845][T19494] call_usermodehelper_exec_work+0x41/0x160 [ 1751.142764][T19494] process_scheduled_works+0x4cb/0x9d0 [ 1751.148244][T19494] worker_thread+0x582/0x770 [ 1751.152854][T19494] kthread+0x489/0x510 [ 1751.156936][T19494] ret_from_fork+0xda/0x150 [ 1751.161466][T19494] ret_from_fork_asm+0x1a/0x30 [ 1751.166253][T19494] [ 1751.168595][T19494] value changed: 0x8000010a -> 0x80000109 [ 1751.174407][T19494] [ 1751.176746][T19494] Reported by Kernel Concurrency Sanitizer on: [ 1751.182901][T19494] CPU: 0 UID: 0 PID: 19494 Comm: kworker/u8:32 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 1751.195788][T19494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1751.205880][T19494] Workqueue: events_unbound call_usermodehelper_exec_work [ 1751.213040][T19494] ================================================================== [ 1751.226745][ T3247] bond1: entered promiscuous mode [ 1751.231860][ T3247] bond1: entered allmulticast mode [ 1751.239479][ T3247] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1751.257522][ T3247] bond1 (unregistering): Released all slaves