last executing test programs: 2m33.670210006s ago: executing program 32 (id=1003): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000272000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\xac\xed\x00\x00') bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m29.200581493s ago: executing program 33 (id=1068): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x178, [], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000f8ffffff000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000000000f00c0000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000000000000008006966623000000000000000000000000064756d6d79300000000000000000000069705f76746930000000000000000000697036746e6c30"]}, 0x149) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000003780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010700000000000000002e0000000e0001"], 0x3c}, 0x1, 0x0, 0x0, 0xc018}, 0x4008010) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t') r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x4600, 0x82) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_IFNAME={0x14, 0x3, 'wg0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) write$P9_RLERRORu(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="16000000070100090063707509263026310916000000"], 0x16) 2m24.407674536s ago: executing program 3 (id=1187): socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xff}, 0x200, 0x0, 0x3, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3ce, &(0x7f00000004c0)="$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") syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x20, 0x2b, 0x0, @remote, @local, {[@routing={0x3a, 0x0, 0x2, 0x1}], {0x4e22, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) write$binfmt_elf32(r3, &(0x7f0000001440)=ANY=[], 0x58) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0xfffffffc}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f00000007c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41002, 0x8, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a18010000060a0b0400000000000000000200000034000480300001800a0001006d617463680000002000028008000240000000030b000100736f636b6574000005000300d60000000900010073797a30000000000900020073797a32"], 0x140}, 0x1, 0x0, 0x0, 0x40480e0}, 0x4008014) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, 0x0, 0x0, 0xffffffffffffff9c) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006"], 0x58}, 0x1, 0x7}, 0x0) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2236824, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x15a, 0x15a, 0x5, [@ptr={0xb, 0x0, 0x0, 0x2, 0x4}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x6e, 0x0, 0x5f, 0x5}, @datasec={0xa, 0x4, 0x0, 0xf, 0x2, [{0x5, 0x3, 0x6}, {0x2, 0xfffffff9, 0x800}, {0x204, 0x9, 0xa86}, {0x3, 0x5, 0x9}], "8ebb"}, @func={0x6, 0x0, 0x0, 0xc, 0x3}, @struct={0xe, 0x6, 0x0, 0x4, 0x0, 0x4, [{0xd, 0x3, 0x9}, {0x6, 0x1, 0x4}, {0x4, 0x4, 0x6}, {0x7, 0x4, 0x31}, {0xd, 0x1, 0x2e7}, {0x1ff, 0x4, 0x1000}]}, @ptr={0xb, 0x0, 0x0, 0x2, 0x2}, @union={0x8, 0xa, 0x0, 0x5, 0x0, 0x3, [{0x10, 0x5, 0x2}, {0x3, 0x5, 0x7f}, {0xc, 0x2}, {0x6, 0x1}, {0x8, 0x1, 0x2}, {0x1, 0x4, 0x35}, {0x9, 0x1, 0x5}, {0xc, 0x2, 0x3}, {0x4, 0x1, 0x9}, {0x0, 0x5, 0x2}]}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x2, 0x1}]}, {0x0, [0x5f, 0x61, 0x30]}}, &(0x7f0000000200)=""/172, 0x179, 0xac, 0x0, 0x6}, 0x28) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10) 2m23.857712416s ago: executing program 3 (id=1191): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd2", 0x59}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 2m23.625494631s ago: executing program 3 (id=1199): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000a80)={0x30b, &(0x7f00000000c0)}) (fail_nth: 1) 2m23.625403831s ago: executing program 34 (id=1199): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000a80)={0x30b, &(0x7f00000000c0)}) (fail_nth: 1) 1m52.798963737s ago: executing program 35 (id=1706): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) 1m27.749489812s ago: executing program 36 (id=2147): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @local, @local}}}}, 0x0) 1m4.323322735s ago: executing program 37 (id=2468): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000180)}], 0x1, 0x8) mount$9p_fd(0x0, 0x0, 0x0, 0x400, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000300000085000000430000009500"/63], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$key(0xf, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_mballoc_prealloc\x00', 0xffffffffffffffff, 0x0, 0xb}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d90000", @ANYRES32, @ANYBLOB="000000000000000000000000008c7c183a49f3e2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xece7, 0x0, @perf_config_ext={0x5, 0x9}, 0x0, 0x1, 0x1009, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x0, 0x8000000000000000, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xc7d7}, 0x0, 0x0, r3, 0xa) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2226000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) add_key$keyring(&(0x7f0000000040), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r4) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[], 0x118) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x74, 0x30, 0x871a15abc695fa3d, 0x0, 0xfffffffe, {}, [{0x60, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x1}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x2c, 0x16, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x74}}, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r6, 0x80045519, &(0x7f0000000480)=0x1) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000eca20ae4000044000380080001"], 0x58}}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r7, &(0x7f0000000900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000940)={0x80, 0x0, 0x200, 0x70bd27, 0x25dfdbee, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x41}}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xffffffffffffff3c, 0x7, {0x0, 0x37}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x845}, @IPVS_CMD_ATTR_DAEMON={0x0, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x0, 0x2, 'pim6reg1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x0, 0x4, 0x80}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000001}, 0x44012) 43.086943597s ago: executing program 38 (id=2797): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x20004810) perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x6, [@func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0xa, 0x5}, {0xd}, {0x1}, {0x5, 0x3}, {0x4, 0x4}, {0xf, 0x4}, {0x4}]}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x5, 0xffffffffffffffff}]}, {0x0, [0x2e, 0x30, 0x0, 0x61]}}, &(0x7f0000000480)=""/90, 0x72, 0x5a, 0x1, 0xcb3}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0xfffffbff, 0x7, 0x2, 0xa, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x80002, 0x2, 0x8}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) ftruncate(r1, 0xf4ff) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) unshare(0x400) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) capset(0x0, 0x0) 40.546711426s ago: executing program 39 (id=2824): r0 = socket(0x10, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@noquota}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, 0x0, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r4, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x2424, 0x0, 0x800000, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x1, 0xffffffffffffffff, 0x1) close(r3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r5, &(0x7f00000009c0)="3bf58d", 0x3) sendfile(r5, r2, 0x0, 0x3ffff) sendfile(r5, r2, 0x0, 0x7fffeffd) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r1, 0x20, &(0x7f0000000180)={&(0x7f00000000c0)=""/182, 0xb6, 0x0, &(0x7f0000000c00)=""/4096, 0x1000}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRESDEC=r1, @ANYBLOB="0800000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000480)='./file0/file0\x00') mount$cgroup2(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x984001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) 37.517816084s ago: executing program 3 (id=2825): r0 = socket(0x10, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@noquota}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, 0x0, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r4, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x2424, 0x0, 0x800000, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r5, &(0x7f00000009c0)="3bf58d", 0x3) sendfile(r5, r2, 0x0, 0x3ffff) sendfile(r5, r2, 0x0, 0x7fffeffd) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRESDEC=r1, @ANYBLOB="0800000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$cgroup2(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x984001, 0x0) 36.570487352s ago: executing program 3 (id=2899): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000000"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000080000000010100"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x48, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}}, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000022000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r5, 0x0, 0xfffffffffffffff4}, 0x18) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0x20) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r8, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r8, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @aes128, 0x8, @desc3}) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 35.300635617s ago: executing program 40 (id=2905): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r0, 0x0, 0x200000000000006}, 0x18) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") 34.62700522s ago: executing program 3 (id=2914): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x130, 0x240, 0x240, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00', {}, {}, 0x0, 0x1}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0xf, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x810, 0xc8, 0x0, 0x3, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40fffffffc140000001100010000000000000000000100800a"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000980)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102032b00fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000003800)=[{{&(0x7f0000000540)=@tipc=@id, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000040)=""/38, 0x26}], 0x2, &(0x7f0000000700)=""/176, 0xb0}, 0x2}, {{&(0x7f0000001880)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000001900)=""/14, 0xe}, {&(0x7f0000001940)=""/204, 0xcc}, {&(0x7f0000001a40)=""/4096, 0x1000}], 0x3, &(0x7f0000002a80)=""/172, 0xac}, 0x8}, {{&(0x7f0000002b40)=@nfc, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002bc0)=""/214, 0xd6}, {&(0x7f0000002cc0)=""/209, 0xd1}, {&(0x7f0000002dc0)=""/62, 0x3e}], 0x3, &(0x7f0000002e40)=""/240, 0xf0}, 0x81}, {{&(0x7f0000002f40)=@ethernet, 0x80, &(0x7f0000003740)=[{&(0x7f0000002fc0)=""/69, 0x45}, {&(0x7f0000003040)=""/7, 0x7}, {&(0x7f0000003080)=""/213, 0xd5}, {&(0x7f0000003180)=""/252, 0xfc}, {&(0x7f0000003280)=""/194, 0xc2}, {&(0x7f0000003380)=""/233, 0xe9}, {&(0x7f0000003480)=""/241, 0xf1}, {&(0x7f0000003580)=""/158, 0x9e}, {&(0x7f0000003640)=""/94, 0x5e}, {&(0x7f00000036c0)=""/110, 0x6e}], 0xa}, 0x1}], 0x4, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000002, 0x6031, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) 34.62657684s ago: executing program 41 (id=2914): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x130, 0x240, 0x240, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00', {}, {}, 0x0, 0x1}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0xf, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x810, 0xc8, 0x0, 0x3, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40fffffffc140000001100010000000000000000000100800a"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000980)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102032b00fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000003800)=[{{&(0x7f0000000540)=@tipc=@id, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000040)=""/38, 0x26}], 0x2, &(0x7f0000000700)=""/176, 0xb0}, 0x2}, {{&(0x7f0000001880)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000001900)=""/14, 0xe}, {&(0x7f0000001940)=""/204, 0xcc}, {&(0x7f0000001a40)=""/4096, 0x1000}], 0x3, &(0x7f0000002a80)=""/172, 0xac}, 0x8}, {{&(0x7f0000002b40)=@nfc, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002bc0)=""/214, 0xd6}, {&(0x7f0000002cc0)=""/209, 0xd1}, {&(0x7f0000002dc0)=""/62, 0x3e}], 0x3, &(0x7f0000002e40)=""/240, 0xf0}, 0x81}, {{&(0x7f0000002f40)=@ethernet, 0x80, &(0x7f0000003740)=[{&(0x7f0000002fc0)=""/69, 0x45}, {&(0x7f0000003040)=""/7, 0x7}, {&(0x7f0000003080)=""/213, 0xd5}, {&(0x7f0000003180)=""/252, 0xfc}, {&(0x7f0000003280)=""/194, 0xc2}, {&(0x7f0000003380)=""/233, 0xe9}, {&(0x7f0000003480)=""/241, 0xf1}, {&(0x7f0000003580)=""/158, 0x9e}, {&(0x7f0000003640)=""/94, 0x5e}, {&(0x7f00000036c0)=""/110, 0x6e}], 0xa}, 0x1}], 0x4, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000002, 0x6031, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) 30.755738595s ago: executing program 7 (id=2906): syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setscheduler(0x0, 0x2, 0x0) unshare(0x8040600) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000580)={0x0, 0x1, 0x0, 'queue0\x00'}) 30.637158307s ago: executing program 7 (id=2946): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r2, &(0x7f00000004c0)=""/57, 0x39) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) r4 = memfd_secret(0x80000) fcntl$setlease(r4, 0x400, 0x0) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='flush_foreign\x00', r3, 0x0, 0x80}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0xb, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3525, 0x0, 0x0, 0x0, 0xffffffff}, [@ldst={0x1, 0x0, 0x6, 0x0, 0x5, 0x80}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @alu={0x7, 0x1, 0xb, 0x4, 0x9, 0xffffffffffffffe0, 0xe}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @generic={0x9, 0xa, 0xd, 0x59e, 0x9}]}, &(0x7f00000008c0)='syzkaller\x00', 0xffff, 0xb3, &(0x7f0000000900)=""/179, 0x41100, 0x69, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x3, 0x1, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000a80)=[r4, r6, r1, r0], &(0x7f0000000ac0)=[{0x0, 0x4, 0x5, 0x3}, {0x1, 0x1, 0x1}, {0x0, 0x3, 0xe, 0xc}, {0x0, 0x3, 0x8, 0x7}, {0x1, 0x1, 0x7, 0x7}, {0x1, 0x5, 0xd, 0x3}], 0x10, 0x40de}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x5, 0xc, &(0x7f0000000300)=@raw=[@alu={0x7, 0x1, 0xd, 0x0, 0x2, 0x8, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x200}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}], &(0x7f00000001c0)='syzkaller\x00', 0xfffffff6, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x10, r4, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x4, 0x1, 0xf}, 0x10, 0xffffffffffffffff, r7, 0x5, &(0x7f0000000c40)=[r0, 0xffffffffffffffff, r2, r1], &(0x7f0000000c80)=[{0x5, 0x5, 0x8, 0xb}, {0x1, 0x4, 0x6, 0xb}, {0x5, 0x5, 0x6, 0x3}, {0x2, 0x1, 0xe, 0x1}, {0x6, 0x3, 0x3, 0x3}], 0x10, 0x8}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r8}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000580)=@generic={&(0x7f0000000540)='./file0\x00', r9}, 0x18) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 30.617299348s ago: executing program 7 (id=2948): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d697400"], 0xc4}}, 0x20050890) 30.51012527s ago: executing program 7 (id=2951): r0 = socket(0x10, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@noquota}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$eJzs28tvG0UYAPBv105KX8RU5dEHECiIikfSpKX0wAEQSBxAQoJDOYYkrUrdBjVBolUFBaFyRJW4I45I/AWc4IKAExJX4IwqVSiXFk5Ga+82jmunSbDrEP9+0tYzu+POfJ4de3YnG8DAGs3+SSJ2RMRvETHSyC4vMNp4ubF4cfrvxYvTSdRqb/6V1MtdX7w4XRQt3re9yJQj0k+T2Nem3vnzF05PVauz5/L8+MKZ98bnz1945tSZqZOzJ2fPTh47duTwxHNHJ5/tSpxZXNf3fji3f8+rb195ffr4lXd++iYp4m+Jo0tG2+4tN14er9W6XF1/7WxKJ+U+NoQ1KeWn5FB9/I9EKZY6byRe+aSvjQN6qlar1e7rfPhSDdjEkuh3C4D+KH7os+vfYrtDU48N4dqLjQugLO4b+dY4Uo40LzPUcn3bTaMRcfzSP19mW7Teh9jao0oBgIH2XTb/ebrd/C+N5vtCd+drKJWIuCcidkXE0YjYHRH3RtTL3h8RD6yx/tZFklvnn+nVdQW2Stn87/l8bWv5/K+Y/UWllOd21uMfSk6cqs4eyj+TgzG0JctPrFDH9y//+nmnY83zv2zL6i/mgnk7rpa3LH/PzNTC1H+Judm1jyP2ltvFn9xcCUgiYk9EvLDOOk49+fX+Tsc6xD+8qv+4C+tMta8inmj0/6Voib+QrLw+OX5XVGcPjRdnxa1+/uXyG53qv33/91bW/9vanv9F/H9Ukub12vm113H59886XlOu9/wfTt5atu+DqYWFcxMRw8lr9Xylef9kS7nJpfJZ/AcPtB//u2Lpk9gXEdlJ/GBEPBQRD+dtfyQiHo2IAyvE/+NLj727/vh7K4t/ZsX+j5b+X0oMR+ue9onS6R++XVZpZS3xZ/1/pJ46mO9Zzfffatq1vrMZAAAA/n/SiNgRSTp2M52mY2ONv+HfHdvS6tz8wlMn5t4/O9N4RqASQ2lxp2uk6X7oRH5ZX+QnW/KH8/vGX5S21vNj03PVmX4HDwNue4fxn/mz1O/WAT3neS0YXMY/DC7jHwaX8Q+Dq8349+gZDIh2v/8f9aEdwJ3XMv5XXPYzMYDNxfU/DC7jHwaX8Q8DaX5r3P4h+c2RSCNiAzRjsyQi3RDNkOhRot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xbwAAAP//ynflmQ==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, 0x0, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r4, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) close(r3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r5, &(0x7f00000009c0)="3bf58d", 0x3) sendfile(r5, r2, 0x0, 0x3ffff) sendfile(r5, r2, 0x0, 0x7fffeffd) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRESDEC=r1, @ANYBLOB="0800000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$cgroup2(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x984001, 0x0) 29.598429937s ago: executing program 7 (id=2966): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x19c0000, &(0x7f0000000180), 0xfe, 0x455, &(0x7f0000000fc0)="$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") r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20040400) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="073234efa113ba4553af1b0000000000008000420b37e741000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2eafb9fdd672bad09dfb78c7699c74e82fa0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r5, 0x0, 0x200000000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(r0, &(0x7f0000000540)='./bus\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000ff010000"], &(0x7f0000000780), 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) unlink(&(0x7f0000000180)='./file1\x00') fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 27.40263019s ago: executing program 7 (id=3004): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000040), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100000c0000000c000000020000000000000000000004000000000000"], 0x0, 0x26}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x4, 0x0, 0x0, 'queue0\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00"/13], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000002e80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='sys_enter\x00', r5, 0x0, 0x9}, 0x18) setregid(0x0, 0x0) io_setup(0x8154, &(0x7f0000000100)) syz_open_procfs(0x0, &(0x7f0000000480)='net/psched\x00') r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8882) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0x3}, 0x1000d023}) write$sndseq(r6, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick=0x5, {}, {0x4}, @connect={{0x15, 0xb}, {0x6, 0x7}}}], 0x1c) ioprio_set$pid(0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r7, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="9500000000724bf3a4a49074c800000085100000feffffff9500000000000000"], &(0x7f0000000280)='GPL\x00', 0x4, 0xdf, &(0x7f00000002c0)=""/223, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0xc, 0x0, 0x2, 0x10, &(0x7f00000004c0), 0x10}, 0x80) 27.339122201s ago: executing program 42 (id=3004): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000040), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100000c0000000c000000020000000000000000000004000000000000"], 0x0, 0x26}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x4, 0x0, 0x0, 'queue0\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00"/13], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000002e80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='sys_enter\x00', r5, 0x0, 0x9}, 0x18) setregid(0x0, 0x0) io_setup(0x8154, &(0x7f0000000100)) syz_open_procfs(0x0, &(0x7f0000000480)='net/psched\x00') r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8882) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0x3}, 0x1000d023}) write$sndseq(r6, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick=0x5, {}, {0x4}, @connect={{0x15, 0xb}, {0x6, 0x7}}}], 0x1c) ioprio_set$pid(0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r7, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="9500000000724bf3a4a49074c800000085100000feffffff9500000000000000"], &(0x7f0000000280)='GPL\x00', 0x4, 0xdf, &(0x7f00000002c0)=""/223, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0xc, 0x0, 0x2, 0x10, &(0x7f00000004c0), 0x10}, 0x80) 25.163035313s ago: executing program 5 (id=3025): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x19c0000, &(0x7f0000000180), 0xfe, 0x455, &(0x7f0000000fc0)="$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") r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20040400) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="073234efa113ba4553af1b0000000000008000420b37e741000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2eafb9fdd672bad09dfb78c7699c74e82fa0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r5, 0x0, 0x200000000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x52b, &(0x7f0000000f80)="$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") name_to_handle_at(r0, &(0x7f0000000540)='./bus\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000ff010000"], &(0x7f0000000780), 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") unlink(&(0x7f0000000180)='./file1\x00') fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 24.83273254s ago: executing program 5 (id=3029): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x19c0000, &(0x7f0000000180), 0xfe, 0x455, &(0x7f0000000fc0)="$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") r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20040400) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="073234efa113ba4553af1b0000000000008000420b37e741000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2eafb9fdd672bad09dfb78c7699c74e82fa0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r5, 0x0, 0x200000000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x52b, &(0x7f0000000f80)="$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") name_to_handle_at(r0, &(0x7f0000000540)='./bus\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000ff010000"], &(0x7f0000000780), 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) unlink(&(0x7f0000000180)='./file1\x00') fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 24.599884844s ago: executing program 6 (id=3005): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xc0d00) syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0xc0ed000a, &(0x7f0000000780)={[{@lazytime}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@journal_async_commit}, {@jqfmt_vfsv1}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@obj_role}, {@fowner_eq}, {@pcr={'pcr', 0x3d, 0x14}}, {@dont_measure}]}, 0xfe, 0x483, &(0x7f0000001d40)="$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") r1 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffffb2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newae={0x64, 0x1e, 0x13, 0x70bd2b, 0x25dfdbfc, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d5, 0x2, 0x2b}, @in6=@private1, 0x9b99, 0x3500}, [@lifetime_val={0x24, 0x9, {0x1, 0x4, 0x7f, 0x747}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r3, 0x0, 0x8000000000000}, 0x18) r4 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) write$selinux_validatetrans(r4, &(0x7f0000001cc0)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00000000000w'], 0x79) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sched_rr_get_interval(0x0, 0x0) socket(0x10, 0x3, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e27, 0x1, @mcast1, 0x22}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="10000000000000002900000037"], 0x18}}], 0x2, 0x4004844) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @auto="0300"}}) open(&(0x7f0000000500)='./file1\x00', 0x115081, 0x1d0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0xe0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f00000000c0), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r5}, 0x18) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x80, 0x2b, 0x5, 0x0, 0x7fffffff, 0x105}) syz_emit_ethernet(0x5f0, &(0x7f0000001500)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f9edff", 0x5ba, 0x3a, 0x0, @remote, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0xfff, 0xfff8, "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"}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 24.581471155s ago: executing program 5 (id=3031): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x45, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 8) 24.528879295s ago: executing program 6 (id=3033): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000880)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000000c0), 0x12) r4 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170) socket$inet6_udp(0xa, 0x2, 0x0) fgetxattr(r4, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) 24.447150397s ago: executing program 6 (id=3034): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) creat(&(0x7f0000000080)='./file0\x00', 0x41) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 24.195475702s ago: executing program 5 (id=3037): r0 = socket(0x10, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@noquota}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$eJzs28tvG0UYAPBv105KX8RU5dEHECiIikfSpKX0wAEQSBxAQoJDOYYkrUrdBjVBolUFBaFyRJW4I45I/AWc4IKAExJX4IwqVSiXFk5Ga+82jmunSbDrEP9+0tYzu+POfJ4de3YnG8DAGs3+SSJ2RMRvETHSyC4vMNp4ubF4cfrvxYvTSdRqb/6V1MtdX7w4XRQt3re9yJQj0k+T2Nem3vnzF05PVauz5/L8+MKZ98bnz1945tSZqZOzJ2fPTh47duTwxHNHJ5/tSpxZXNf3fji3f8+rb195ffr4lXd++iYp4m+Jo0tG2+4tN14er9W6XF1/7WxKJ+U+NoQ1KeWn5FB9/I9EKZY6byRe+aSvjQN6qlar1e7rfPhSDdjEkuh3C4D+KH7os+vfYrtDU48N4dqLjQugLO4b+dY4Uo40LzPUcn3bTaMRcfzSP19mW7Teh9jao0oBgIH2XTb/ebrd/C+N5vtCd+drKJWIuCcidkXE0YjYHRH3RtTL3h8RD6yx/tZFklvnn+nVdQW2Stn87/l8bWv5/K+Y/UWllOd21uMfSk6cqs4eyj+TgzG0JctPrFDH9y//+nmnY83zv2zL6i/mgnk7rpa3LH/PzNTC1H+Judm1jyP2ltvFn9xcCUgiYk9EvLDOOk49+fX+Tsc6xD+8qv+4C+tMta8inmj0/6Voib+QrLw+OX5XVGcPjRdnxa1+/uXyG53qv33/91bW/9vanv9F/H9Ukub12vm113H59886XlOu9/wfTt5atu+DqYWFcxMRw8lr9Xylef9kS7nJpfJZ/AcPtB//u2Lpk9gXEdlJ/GBEPBQRD+dtfyQiHo2IAyvE/+NLj727/vh7K4t/ZsX+j5b+X0oMR+ue9onS6R++XVZpZS3xZ/1/pJ46mO9Zzfffatq1vrMZAAAA/n/SiNgRSTp2M52mY2ONv+HfHdvS6tz8wlMn5t4/O9N4RqASQ2lxp2uk6X7oRH5ZX+QnW/KH8/vGX5S21vNj03PVmX4HDwNue4fxn/mz1O/WAT3neS0YXMY/DC7jHwaX8Q+Dq8349+gZDIh2v/8f9aEdwJ3XMv5XXPYzMYDNxfU/DC7jHwaX8Q8DaX5r3P4h+c2RSCNiAzRjsyQi3RDNkOhRot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xbwAAAP//ynflmQ==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, 0x0, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x2424, 0x0, 0x800000, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x1, 0xffffffffffffffff, 0x1) close(r3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r5, &(0x7f00000009c0)="3bf58d", 0x3) sendfile(r5, r2, 0x0, 0x3ffff) sendfile(r5, r2, 0x0, 0x7fffeffd) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRESDEC=r1, @ANYBLOB="0800000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$cgroup2(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x984001, 0x0) 24.173056392s ago: executing program 6 (id=3039): socket(0x10, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@noquota}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, 0x0, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x2424, 0x0, 0x800000, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x1, 0xffffffffffffffff, 0x1) close(r2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r4, &(0x7f00000009c0)="3bf58d", 0x3) sendfile(r4, r1, 0x0, 0x3ffff) sendfile(r4, r1, 0x0, 0x7fffeffd) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r0, 0x20, &(0x7f0000000180)={&(0x7f00000000c0)=""/182, 0xb6, 0x0, &(0x7f0000000c00)=""/4096, 0x1000}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$cgroup2(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x984001, 0x0) 23.344084748s ago: executing program 5 (id=3051): syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setscheduler(0x0, 0x2, 0x0) unshare(0x8040600) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000580)={0x0, 0x1, 0x0, 'queue0\x00'}) 22.938361287s ago: executing program 6 (id=3058): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x5f501}, [@IFLA_MAP={0x24, 0xe, {0x200, 0x19e, 0x6, 0x9, 0x5, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x0) (fail_nth: 9) 22.23926589s ago: executing program 5 (id=3068): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) 22.21552527s ago: executing program 43 (id=3068): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) 21.20838375s ago: executing program 6 (id=3083): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "01"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0) 21.17174289s ago: executing program 44 (id=3083): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "01"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0) 7.667853072s ago: executing program 9 (id=3277): getgroups(0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000000080)={0x2, 0x4, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1, 0x0, 0xa00}, 0x20000000}, {{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000ac0)="6cb76def2c36dab0f366cf47ad785ed2fb5e1fa5fb56d566acdc377060c4ba50a58104620df72c3004bfbc77173110e163f7d8ad60c34cdb064852353438fea809e390e392afbf35311690cd8286a6c49668aee29b7537078dba77963d15c085d7343c1012135d361ac15c082b7ac8db87cc10fe3ffc374c8be18fc53437100a11dddb9981072ec036d513870a5bbf62ce9e39f790f61ef997af390b9f5fc8a699e001c59077c459eb40ee80a3ffeb35737da668ef974592faf129325cd9ad0dc5663950a329804c9f5d261f71165b05dac212cc2afc40f980ddef8773f1045e75de4ec606aef87052e9ac784bb0f5a43f9cac5e44ae1a6dd575ce17a4749dc7cd4d7f76a40676e792e5b31a25703b1f35b48a89ed84582ef8f4ac046695f402c25da1fa6bc732a7016edf093b4c31193130b3bc143702e2b1d23743ca797b24495dc4979b81413701c0597dcd5e3bcc9c2050c18cfe03814d358e0f795e990dc44d2c1b9890514bd5ea94a3f3a1e25a8cdc67133e9176d76dc54c31274cff0101d8a42c103bad1b8b57362446f2c2ed8a69daf3d7306ef3fa2015e4ee1ef3392120b82671d73b07f3082ea69ffa0ebc7b53c78862a3e1ece518c1f0abbe4053b4dfafe815c1fe4b0d079446e80d13af972e00644a0188605d7309812e24cd1158677f94a16a5eb0c5d48b60329fc522026efa596ac913540f2a9b0345f279329bfba29a7dfc8894e6a08eeee3dd974c3de9e0602cfd1e3e584b10dd26cd13f7fb432e72ea85fd1d3a872061bc967d7a67a3a7f09f34cc825db5d9ef3ce0ff9873f8eff342eb30fa970007e2f591f07dc9bc5141a9679a2f7c69aa50894353a7830a0f7cf766aff6e81d7c3b88d730946ce3f327716ef6fd270d5bf467aef288db903f740b6ac27b962a3c6462372e63f8da8505f05d17b364dd8c6b5d449accd01b4c6da297669f098bee986b95e389a2d003539ca9dec8c26b9f6bbb5f7fe6f0b764d99bc0dafcad4121ed6a749ac71fc5deeee54d0e8a2d9dccc87df818258d73c8816b78c1be3670fb14dded879caf925e0f8abf63f55ffee02bbffb465f0303338bd12e22fe94fdaa3f033127ecaf41649232c38e83850fd3ebc890ea5db2763a8389ac49bd9b7f6b81f381d3eeb90d0f596e2b7f7dfa2a0e9453c1f5f359b56aae9e97a51f6c092d25a031843e351f5733a25c5905706618ab569359bdca4932f6471f4f2d152f84cfc0c563885b0d93fd015095a8eb9422e3d17ddaf3f20dde5eeea415f76c0617964198c824b98f4d53ab0d4d734dcd6d07dddd5b77c1bd71208632941973bd5b5aca981137ec21dcd86ba518b3d4979b68f704a2a7d7cfeb9be3edf4b4b3560e930d9dba0bc358cba36a129748c1fa73483a69759ba0c4f2ee2a936899e163c213bb3fe5a28e68669fb2da6bbcdf4c55e933d127a8bc68b8d0e6c6c757fe8ea47f26ceb7c1b3ca8b962eb31a081756ed56fe4385dccc5e2a7a53300e9c8a1a55bcf8db3f828cb3db8485110da631a50199a5c1932b5538a2b1c3cddb4451868a413418e3f761530fd477b2ebb449070c73171964203ad7bad4302af13fa6fe55fb88ede096a7aba95ef3665da778250daa9dd4bd5ecb8a807d83fe6dcf2f0cf5de7a4ef742979afd7d93bb2672ad45f6537640313b1ca8838f3fdc08e57455af6398ce5b253312fe1a88206210831e0de59d1e3f9442fb9dd43f1b9c00d151d3234028990f8bcaf65c0ad9ea1bc20e4b7641ff26969b02ccd60d2d8d2d72fe5fd58068cd6d7525c9e24c4246cd776ecf1f57550bb6bddad5093618797547cde5c07e165bc979bfbb5479c58e89c29efa5fdfa5b4a87917a4275609afc849384458ca980ba5a2aa4d10c761bb3b3a57e3d3b41001cdf6", 0x541}], 0x1}}], 0x2, 0x0) 7.596137833s ago: executing program 9 (id=3279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) 7.412639467s ago: executing program 9 (id=3282): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x130, 0x240, 0x240, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00', {}, {}, 0x0, 0x1}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0xf, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x810, 0xc8, 0x0, 0x3, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40fffffffc140000001100010000000000000000000100800a"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000980)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102032b00fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000003800)=[{{&(0x7f0000000540)=@tipc=@id, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000040)=""/38, 0x26}], 0x3, &(0x7f0000000700)=""/176, 0xb0}, 0x2}, {{&(0x7f0000001880)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000001900)=""/14, 0xe}, {&(0x7f0000001940)=""/204, 0xcc}, {&(0x7f0000001a40)=""/4096, 0x1000}], 0x3, &(0x7f0000002a80)=""/172, 0xac}, 0x8}, {{&(0x7f0000002b40)=@nfc, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002bc0)=""/214, 0xd6}, {&(0x7f0000002cc0)=""/209, 0xd1}, {&(0x7f0000002dc0)=""/62, 0x3e}], 0x3, &(0x7f0000002e40)=""/240, 0xf0}, 0x81}, {{&(0x7f0000002f40)=@ethernet, 0x80, &(0x7f0000003740)=[{&(0x7f0000002fc0)=""/69, 0x45}, {&(0x7f0000003040)=""/7, 0x7}, {&(0x7f0000003080)=""/213, 0xd5}, {&(0x7f0000003180)=""/252, 0xfc}, {&(0x7f0000003280)=""/194, 0xc2}, {&(0x7f0000003380)=""/233, 0xe9}, {&(0x7f0000003480)=""/241, 0xf1}, {&(0x7f0000003580)=""/158, 0x9e}, {&(0x7f0000003640)=""/94, 0x5e}, {&(0x7f00000036c0)=""/110, 0x6e}], 0xa}, 0x1}], 0x4, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000002, 0x6031, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r7}, 0x18) 7.063933713s ago: executing program 9 (id=3285): r0 = socket(0x10, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@noquota}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(0xffffffffffffffff, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x2424, 0x0, 0x800000, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x1, 0xffffffffffffffff, 0x1) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r4, &(0x7f00000009c0)="3bf58d", 0x3) sendfile(r4, r2, 0x0, 0x3ffff) sendfile(r4, r2, 0x0, 0x7fffeffd) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRESDEC=r1, @ANYBLOB="0800000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$cgroup2(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x984001, 0x0) 5.957809595s ago: executing program 9 (id=3300): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000010000108000000000000db0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b"], 0x30}}, 0x0) r3 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r3) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r4, 0x100, 0x70bd2b, 0x12, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8d5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x8000) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) 5.400050476s ago: executing program 9 (id=3305): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) 5.398426755s ago: executing program 45 (id=3305): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) 4.986554694s ago: executing program 2 (id=3314): signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x7]}, 0x8) r0 = socket(0x200000000000011, 0x2, 0xd) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xfffffffb}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x100000, 0x0, 0x10, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r3, 0x10001, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r4 = socket$netlink(0x10, 0x3, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000740)={[], [{@uid_lt={'uid<', r5}}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@measure}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@dont_appraise}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f00000004c0)=@md0, r5, &(0x7f0000000c40)={0x2, 0x40, 0x0, 0x4}) quotactl_fd$Q_SETINFO(r4, 0xffffffff80000600, r5, &(0x7f0000000080)={0x8, 0xbf2, 0x1, 0x1}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000440)="4c4ca16a0430b2afe3c174a6af402e958df243230000000e", 0x18, 0x0, &(0x7f0000000200)={0x11, 0x1b, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="50000000100003e3ffffff0000000000113c96a86e3c356e534f515e43dee89ca5797cf25fecc8fafff381c2b8d4df364c783105543ccfdb823adda2d7fe753637d4e5297fa71dc7ae45fb87d8d6470c429f571d600e0657a01d9d16309c01fe41d4056405a4a429b2587c3a9c66776b1dd88a22dccd29672cb7888882f5a5ce764511ab8e5f713191342ad83de986287f3ef836d8dd76da47cc01af7d7affc3cd2828702d5c7b", @ANYRES32=0x0, @ANYBLOB="15460100ef0000002800128008000100687372001c000280050006000300000008000100", @ANYRES32=r7, @ANYBLOB="05000300050000000500270006000000"], 0x50}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f00000008c0)={'gre0\x00', r7, 0x7818, 0x20, 0x80000001, 0x3ff, {{0x12, 0x4, 0x0, 0x3, 0x48, 0x68, 0x0, 0x6, 0x4, 0x0, @multicast1, @remote, {[@rr={0x7, 0x17, 0x98, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010101, @multicast2]}, @cipso={0x86, 0x6, 0x3}, @noop, @rr={0x7, 0x13, 0x20, [@broadcast, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}]}}}}}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) open(&(0x7f0000000940)='./file0\x00', 0x480, 0x43) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYBLOB="4b3e25889d4a2feb3cb781418b6baeadadd4b3ed53f042dbcf32c54b88550fd5424e6ceea56764e2ef20ba04f188482377aa0f593a28845fb744e5dd6c50178b664f313e76d742bca502427ae8686888a979bae17c0de19b4a84997d72ae992941b6794cfc03cf", @ANYRES32], 0x7c}, 0x1, 0x0, 0x0, 0x20004095}, 0x0) 4.798152617s ago: executing program 2 (id=3319): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) acct(0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x4000004}, 0x10) write(r4, &(0x7f0000000080)="240000001a007f0214f9f407000904080a000000000000050002000008000f40a600000e", 0x24) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x1574, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc83}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)='F', 0x1}, {0x0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r6}}], 0x20, 0x2400e044}, 0xff0f) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000200)={r6, 0xad, "40ff3960e3910970ecb32d1c03068584af9ab11999e58ed2d5bd98fd3da2d401ffd51a2d0bf597311be9e29decd2f68d85cddd0aac976c91a4254fab14f8dc78671ac28b0502cb2057c1d3bbedd56090b9969d81d3396ea04c54c04e380372ad97ea20fec9414295c4737fba41e821de66d60f2921eb6f3e81bd45620e5b7b2cf880bd42eca77256260d6bb99804eff10e9718d3b96db3c3630a0ff4218d8e3ea922d2fc3ffaa1eb02fe8ab907"}, &(0x7f0000000000)=0xb5) 3.930727364s ago: executing program 2 (id=3335): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "de"}]}}, 0x0, 0x2a}, 0x28) r0 = socket(0xa, 0x3, 0x1) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') (fail_nth: 2) 3.891295675s ago: executing program 2 (id=3336): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 3.863541066s ago: executing program 2 (id=3337): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xa, 0x8, 0x7fe2, 0x1}, 0x50) io_setup(0x8f0, &(0x7f0000002400)=0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4, &(0x7f0000000740)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@jqfmt_vfsv1}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x10) statx(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x6000, &(0x7f0000000240)) r5 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0xc001, 0x1a7, 0x1}, 0x18) write$P9_RREADLINK(r5, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r0}, &(0x7f0000000280), &(0x7f0000000440)}, 0x20) r6 = getpgrp(0x0) syz_pidfd_open(r6, 0x0) prlimit64(r6, 0x1, 0x0, &(0x7f0000000140)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000e00)={r0, &(0x7f0000000d00), 0x0}, 0x20) 3.470387983s ago: executing program 2 (id=3340): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000080000000010100"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x48, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}}, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x2c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000220000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xfffffffffffffe9b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r5, 0x0, 0xfffffffffffffff4}, 0x18) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0x20) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r8, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r8, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @aes128, 0x8, @desc3}) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.301698445s ago: executing program 0 (id=3307): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000600)=0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x57}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='br_fdb_external_learn_add\x00', r1}, 0x18) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000537a6121874f0000000000000c7460f6588178244a35868af67cf0caf9ee716eacc2e88a940a2838cb0c01cb359f147d4a7764e7432b25a5cba807dbfcc35256ff0d1563d70e7d8807c99ef0c6b25bdaeaa8c8c8ae043416f9db4f22d1dc26c756d0f117c1c9b34a99dfe809136d9862d8f360280a0097f866533af8329928326fed5584621c2e82200d6232342012d446fae87b3136ff81009e0ad0cafdaff5a043304c8e76ffb699cf23e83a6a02e34df807f39a3fdf69cbaf60498410372bb0"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1d00006a6ef22600082000d848", @ANYRES16=r2, @ANYRESDEC=r3], 0x48) sched_setscheduler(0x0, 0x1, 0x0) syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc474, 0x3850, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xffff, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0x2}, 0x18) syz_clone3(&(0x7f0000000600)={0xa0202000, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1}, 0x58) 1.088499519s ago: executing program 4 (id=3356): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setreuid(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x20, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noload}, {@grpquota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x10000000000001}}]}, 0x1, 0x797, &(0x7f0000002040)="$eJzs3c9rHGUfAPDvbJKmSfu+yQsvvG89BQQNlG5Mja2Ch4oHESwU9GwbNttQs8mW7KY0IWCLCF4EFQ+CXnr2R7159cdV/wsP0lI1LVY8SGQ2s8022Y2bNrtbzOcDs/s8M7P7PN95Zmaf2XnYDWDfGksfchFHIuK9JGIkm59ExEAt1R9xamO9u2urhXRKYn391V+S2jp31lYL0fCa1KEs8/+I+PbtiKO57eVWllfmpkul4mKWn6jOX5yoLK8cuzA/PVucLS6cmJyaOn7ymZMn9i7W335YOXzz/Zee/OLUH2/97/q73yVxKg5nyxrj2CtjMZZtk4F0E97nxb0urMeSXleAB5Iemn0bR3kciZHoq6VaGOpmzQCATlkHAPahRB8AAPaZ+vcAd9ZWC/Wp2fcETW7h/SPceiEiDm7EX7+/ubGkP7tnd7B2H3T4TnLfnZEkIkb3oPyxiPjkq9c/S6fI2sG9NKAbrlyNiHOjY9vP/8m2MQu79dROC9cH08fBrbM7MQ4DaO7rtP/zbLP+X+5e/yea9H8G62PHHtLW99h+/Odu7EExLaX9v+cbxrbdbYg/M9qX5f5V6/MNJOcvlIrpue3fETEeA4NpfrK2avOe2/jtP2+3Kr+x//frB298mpafPm+ukbvRv+UsOTNdnX7YuOtuXY14rL9Z/Mm99k9a9H/PtFnGy8+983GrZWn8abz1aXv8nbV+LeKJpu2/2ZbJjuMTJ2q7w0R9p2jiyx8/Gm5VfmP7p1Nafv1aoBvS9h/eOf7RpHG8ZmX3ZXx/beSbVsv+Pv7m+/+B5LVa+kA27/J0tbo4GXEgeWX7/OObr63n6+un8Y8/3vz43yi2+f6fXhOeazP+/ps/f/7g8XdWGv/Mrtp/94nrd+f6WpXfXvtP1VLj2Zx2zn/tVvBhth0AAAAAAAAAAAAAAAAAAAAAAAAAtCsXEYcjyeXvpXO5fH7jP7z/G8O5UrlSPXq+vLQwE7X/yh6NgVz9py5HGn4PdTL7Pfx6/viW/NMR8Z+I+HBwqJbPF8qlmV4HDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACZQ03+/38gW/bTYI8rBwB0zsFeVwAA6Dqf/wCw/+zu83+oY/UAALrH9T8A7D9tf/6f62w9AIDucf0PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAh505fTqd1n9fWy2k+ZlLy0tz5UvHZoqVufz8UiFfKC9ezM+Wy7OlYr5Qnm/5Rlc2nkrl8sWpWFi6PFEtVqoTleWVs/PlpYXq2Qvz07PFs8WBrkUGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO2rLK/MTZdKxUWJHRNDj0Y1tiT6o1el98fmnDfj0dgaEnuZaDxLDPXuBAUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwiPsrAAD///GKLI4=") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) mknod$loop(&(0x7f0000000180)='./file1\x00', 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r4, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={&(0x7f00000007c0)="583f5b408b68a456d4ba4e5cbbabc0a87ebf4a4ca0b6df947c09445abea7d1485d8642bebf391d4df16ba31889976830b9bbef449a9521f3672116c6470f0c626d6a6e404f63e30fe4bd87810cba0ee2ecf589f88c464cca14c2361ca26b3ffa513d2494fd9119aba4ff2baf8e022d0def38cb4528cc614509a00f4acb26cfeade3f9144d66a2ee1da1a2ff789d76b4a0ead13cf41feb1b4dfd353de5fc9d866e4ef6f61bf6ab7569d", &(0x7f0000000980)=""/212, &(0x7f0000000280)="620bcafe3f954ce26c49ecea2045a2df24584a975b81ba7c77029235bad34740ca04d0c60700f89b04f087719ef66b56ded7d5a791bdda453482268835eeccb2846bcdb3c44dc7ca93", &(0x7f0000000540)="de8c13a593071501fbc23f96e68ccd82b6a06e6241eb9f969a416a2673fd987929f82450d2a1095986b8b77e610e37cfae046c54a1f07d3803a108d493aec612f1d3d972acdf88fb375b3507b2c29f03aaafa45651aff61bf9395d3bfeeedbf138025a4399b0a976858b1994956611860c51eddef2fb63bd", 0x8, r2}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) 1.05234107s ago: executing program 0 (id=3357): statx(0xffffffffffffff9c, 0x0, 0x1000, 0x1, 0x0) r0 = socket(0x2, 0x80805, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000000080)={0x2, 0x4, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000ac0)="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", 0x541}], 0x1}}], 0x2, 0x0) (fail_nth: 7) 707.154536ms ago: executing program 4 (id=3360): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@typedef={0xe, 0x0, 0x0, 0x8, 0x1}, @ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @enum64={0x4, 0x5, 0x0, 0x13, 0x1, 0x2, [{0x10, 0x5, 0x80}, {0x7, 0x8, 0x18}, {0x4, 0x9, 0x5}, {0x8, 0x8, 0x8}, {0xb, 0xb2f, 0x2e4ad45f}]}, @func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0x5, 0x4}, {0x9, 0x2}, {0x2, 0x3}, {0x6}, {0xc}, {0xc, 0x1}, {0x1, 0x3}, {0x6, 0x4}, {0xe, 0x2}]}]}, {0x0, [0x0]}}, &(0x7f0000000280)=""/213, 0xcf, 0xd5, 0x1, 0x7f}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x80000001, 0x0, 0x1, 0x2, '\x00', 0x0, r2, 0x2, 0x3, 0x1}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000b000000050010000200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYRES32, @ANYBLOB="0000000002"], 0x50) 707.007596ms ago: executing program 0 (id=3361): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x20004850) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 706.727086ms ago: executing program 4 (id=3362): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="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", 0x12d, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sctp_probe_path\x00', r4}, 0x18) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r5, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) ioctl$SIOCPNENABLEPIPE(r5, 0x89ed, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000380)) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000000)={0x0, 0x0, {0x3}, 0x8}) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) socket$kcm(0x2, 0x7, 0x2) write$cgroup_int(r8, &(0x7f0000000040)=0x900, 0x12) 672.654767ms ago: executing program 0 (id=3364): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f01000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/reserved_size', 0x141a82, 0x0) sendfile(r0, r0, 0x0, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, &(0x7f0000000a40)={{0x3, 0x100, 0x0, 0x5, 0x108, 0x3}, 0xe5, [0xb6400000, 0x2d12, 0x6, 0xd, 0x371, 0x7fff, 0x5, 0x2, 0x9, 0x5, 0x9, 0x200, 0x8, 0x4, 0x1, 0x8, 0x7fffffff, 0x0, 0x1, 0x300, 0x5, 0x5e64, 0x9, 0x89f2, 0x8001, 0x5, 0x8, 0xb79, 0x55, 0x7c1, 0x69, 0x1, 0x10, 0xe3d9, 0x401, 0x10, 0x9, 0x80000000, 0x3, 0xfffffffc, 0x0, 0x6, 0x575, 0x8, 0x1, 0x3, 0x3, 0x2, 0x3, 0x2, 0x4, 0x5, 0x414, 0x8, 0x5, 0x64, 0x15, 0x3ff, 0xd13, 0x7, 0x1000, 0x3, 0x4, 0x0, 0xfffffffb, 0x9, 0x7, 0x3, 0x1000, 0xf0a3d96a, 0x3ff, 0x8, 0x800000, 0x6, 0x9, 0x6, 0xc0000000, 0xbe2, 0x9, 0x80000001, 0x51a5, 0x80, 0x2, 0x2, 0x60, 0x0, 0x3, 0x3, 0x3, 0x7f, 0x4, 0x4, 0x8, 0xfff, 0xffff, 0x1, 0xfffeffff, 0x9, 0xffff, 0x1b3d, 0x2, 0xb, 0xffffffff, 0x3, 0xa, 0x9, 0x0, 0x8, 0xfffffffc, 0x7, 0x101, 0xacde, 0x9, 0x40000, 0x1, 0x5, 0x8, 0x7, 0x81, 0x0, 0x6, 0x6, 0xd, 0x0, 0x400, 0x67, 0x1, 0xe9, 0x8001, 0x5, 0x7c70cf15, 0x101, 0x1, 0x1, 0x7, 0x9, 0x1ff, 0x5, 0x6, 0x7ff, 0x10, 0x1, 0x3, 0x40, 0x57b, 0x0, 0x4, 0xff, 0x1, 0x4c3, 0x4, 0x8, 0xff2, 0x8, 0xe5d, 0x0, 0x1, 0x7fffffff, 0x2, 0x7, 0x9, 0x3a, 0xfff, 0x400, 0x7, 0x6, 0xa966, 0x8, 0x2, 0x3, 0x9, 0x9c1c, 0x8, 0x9, 0x3, 0xb, 0x2, 0x4, 0x80000, 0x9, 0x8, 0x86, 0x4, 0x8, 0x100, 0x9, 0x6, 0x6e6, 0x4, 0x0, 0x0, 0x2, 0x4, 0x748, 0x0, 0x9, 0x6, 0xfffffffe, 0x7, 0x8, 0x6, 0x1, 0x6, 0x2, 0x7ccc, 0xf6, 0x401, 0x8, 0x0, 0x2, 0x4, 0x9, 0x2, 0x1, 0x1, 0x2, 0x8, 0xfe, 0x2, 0x400, 0xa6, 0x6, 0x6, 0x1, 0xfffffffa, 0xfffffffb, 0x6, 0x3, 0x7fff, 0x1ff, 0x2, 0x2, 0x3, 0xd8, 0x3, 0x8, 0x1, 0x6, 0x8, 0x9, 0x7f, 0x6, 0x7f, 0xffffffff, 0xeb, 0xe8d3, 0x0, 0x8, 0x35, 0x1, 0x7e9c, 0xf2b, 0xaeef, 0x4, 0x3, 0xb3, 0x3808, 0x8000, 0x5, 0x7fff, 0x5, 0xd, 0xf769, 0x27, 0x1, 0x7fff, 0x40, 0x2, 0xe, 0x24, 0x2, 0x4fda, 0x7, 0x32, 0x2, 0x8, 0x3, 0x9, 0x7fffffff, 0x1ff, 0x7, 0x881, 0x93, 0x8, 0x6, 0x9, 0x8, 0x306b, 0xf9b, 0x6, 0x2, 0x3ff, 0xb433, 0x80000001, 0x2, 0x2, 0x2, 0x2, 0x7ff, 0x6, 0x0, 0x20ae, 0x0, 0x3, 0x7fffffff, 0x6, 0xffffffff, 0xfffffffb, 0x4, 0x8, 0x10000, 0xc, 0x7, 0x8001, 0x3, 0x7, 0xfff, 0x7a2, 0x7, 0xf, 0x7f, 0x81f0, 0x7fffffff, 0xdb5, 0xffff7fff, 0x7f, 0x47, 0x8, 0x10001, 0x1, 0x6, 0x8, 0x57, 0x0, 0x832b, 0x7, 0x845d, 0x8, 0x6, 0xbc, 0x8000, 0x2, 0x81, 0x16, 0x5, 0x164f, 0x3, 0x3, 0x8, 0x10000, 0x3, 0xfffffff1, 0x0, 0xfffff581, 0x7, 0xa00, 0x6, 0x6, 0x7, 0x5, 0x6668db10, 0xf1, 0x8000, 0xe, 0x3, 0x2, 0x3, 0xfffffff7, 0x429a, 0x4, 0x2, 0x8, 0x400, 0x2, 0x8387, 0xffffc000, 0x1ff, 0x5, 0xfffffffd, 0x0, 0x1ff, 0x0, 0xd5, 0x80000000, 0x6, 0x3, 0x5, 0xfffffffa, 0x760833ee, 0x8001, 0x1, 0x9, 0x2, 0x2, 0xa, 0x2, 0x5, 0x1, 0x22, 0x7, 0x6, 0x10000, 0x7fff, 0x401, 0xfffffffc, 0x4, 0x7, 0xffffffff, 0x6, 0x5, 0x9, 0x6, 0x800, 0x3, 0x8, 0xc9, 0x7fffffff, 0x5d5, 0x139, 0xf2, 0x0, 0xd, 0xfffffffb, 0x6, 0x0, 0x0, 0x3, 0x6, 0x4, 0x8, 0x8b14, 0x8, 0x7, 0x79, 0x200, 0x4, 0x8, 0x1, 0x98, 0x4, 0x2, 0x9, 0x5, 0x9, 0xffff, 0x40, 0x5, 0x2, 0x1, 0xbe7a, 0xffffff5a, 0x7, 0xfffffffe, 0x1, 0x52f8, 0xfffff801, 0xa, 0x0, 0x5, 0x99, 0x8, 0x7, 0x6000, 0x5f, 0x1ff, 0x1, 0x4, 0x5, 0x8, 0x4f9a, 0x7, 0x22, 0x8, 0x4, 0x7, 0x7fff, 0x0, 0x7, 0x0, 0xff, 0x1, 0x101, 0x6, 0x8000000, 0x6, 0x6888fe60, 0x7fffffff, 0x2, 0xe, 0x7, 0xb, 0x4, 0x0, 0x0, 0x8, 0x8, 0x8, 0xe8e, 0x1, 0x2, 0xa, 0x3, 0x7, 0x37, 0xfff, 0x8, 0x598, 0x0, 0xc3f, 0x3, 0x1, 0x1, 0x10001, 0x6, 0x0, 0x1, 0x649, 0x9, 0x400, 0x32, 0x7, 0x400, 0x10001, 0x17ed, 0x7, 0x2, 0x5, 0x409, 0x7f, 0x2, 0x3, 0x5, 0x0, 0x8, 0x1, 0x219, 0x80000001, 0x8, 0x2, 0x3, 0x8, 0x3ff, 0xd, 0x6, 0x238, 0x72, 0xfe, 0xe4, 0x64, 0x6, 0x5, 0x11, 0xf2, 0x0, 0xe94, 0xb, 0x5, 0x7, 0x5, 0x0, 0x2, 0x5, 0x8, 0x9, 0x42, 0x1, 0x2, 0x1f, 0xf, 0x5, 0xd, 0x8, 0x1ff, 0x1ff, 0x8, 0xffffffff, 0xfffffffb, 0xb3e2, 0x5, 0x97, 0x0, 0xe, 0xffff, 0x9, 0x9, 0x7, 0xfff, 0x1, 0x5, 0x100, 0x6, 0x1, 0x0, 0x80000000, 0x8001, 0x6, 0x3, 0xffff8000, 0x0, 0x7, 0xb2, 0x0, 0x200, 0xa9, 0x1ff, 0x310a, 0x4, 0x20000, 0x5, 0x10000000, 0xffff, 0x1917b088, 0x6, 0x298, 0x10000, 0x0, 0x39, 0xffff, 0x1, 0xa5, 0x1ff, 0x200, 0x400, 0x1, 0x8, 0x1, 0x0, 0x8, 0xfffffffc, 0x6, 0x10, 0x4c, 0x2f, 0xb, 0xf246, 0x7, 0x7, 0x8, 0x7, 0x7ff, 0x1000, 0xedb, 0x1000, 0x6, 0x0, 0x4, 0x9, 0xa, 0x9, 0x800, 0x12f5d561, 0x2, 0x5, 0x8, 0x6a9a23fe, 0x101, 0x2, 0x1, 0x3, 0xd3, 0x7fff, 0x2, 0x3, 0x10000, 0x202000, 0x9, 0x3ff, 0x3, 0xf504, 0x7, 0x5, 0x80, 0x3, 0x4, 0x7, 0x6, 0x1, 0x1, 0x2, 0x6, 0x7, 0x4, 0x0, 0x8, 0x9, 0x2, 0x3ff, 0x8001, 0x0, 0x8, 0xdce, 0xb6, 0x8001, 0x6, 0x0, 0x3c, 0x8, 0x0, 0x3256, 0x1, 0x7f, 0x5, 0x7d9, 0x7fffffff, 0x8, 0x7ab, 0x10000, 0x3e, 0xfffffff8, 0x9, 0x8, 0xfffffff9, 0x2, 0x6, 0x377f, 0x2, 0xcd, 0x7, 0x7fffffff, 0x80000000, 0x8, 0x3, 0x2000000, 0x3a0, 0x9, 0x6, 0xffffffff, 0x9103, 0xfffffffd, 0x1, 0x9, 0x8, 0x5, 0x40, 0x2, 0x40, 0x0, 0xfff, 0x1c85, 0xf, 0xfffffcbc, 0x2, 0x81, 0x6, 0x80, 0x1, 0x3, 0x29b, 0x9, 0xfffffff8, 0x3, 0x7ff, 0x1, 0x8000, 0xcd51, 0x101, 0x7f, 0x762, 0x5895, 0x8, 0x3, 0x2, 0xfffffff7, 0x5, 0x1, 0x8, 0x5, 0x3, 0x7, 0xf201, 0x7f, 0x4, 0x5, 0x4, 0x3, 0xe3, 0x6, 0x1, 0x3d3b4140, 0x85b, 0x8, 0xec, 0xffff, 0xffffffff, 0x4, 0x7, 0x2, 0x0, 0xe, 0x0, 0xa1e, 0xffffffff, 0x10, 0x8, 0x8, 0x80000001, 0x5, 0x6, 0x4a, 0x4, 0x9, 0x6, 0xa1, 0x3, 0x100, 0x6, 0xe, 0x2, 0x8, 0x5b0a, 0x6, 0x9, 0x2, 0xfff, 0x1, 0x10, 0x5, 0x2, 0x6, 0x3ff, 0x7, 0x5, 0x5, 0x6a8, 0x2, 0x5, 0x200, 0x0, 0x1ff, 0x7ff, 0x2, 0xffffffff, 0x9, 0x2a8, 0x5d, 0x5, 0xe, 0x200, 0xc, 0x2, 0x7, 0x4, 0x0, 0x40, 0x1c, 0x200040, 0x2, 0x0, 0x4, 0x1, 0x1, 0x8, 0x5, 0x9, 0x63e, 0x9, 0x8, 0x800, 0x6, 0x7f, 0x10, 0x3, 0x98, 0x1, 0x2, 0x9, 0x0, 0xfffffffd, 0x8, 0xd, 0x7, 0x7ff, 0x0, 0x5424, 0xa13, 0x9, 0x23d, 0x2, 0x5, 0x5, 0x0, 0x100, 0x4, 0x1ff, 0x7, 0x6, 0x4, 0x7, 0x841, 0x5, 0x5, 0x1, 0x6, 0x0, 0x2add, 0x2dc, 0x2, 0x80, 0x1a000000, 0x6, 0xb936, 0x4, 0x1000, 0x5, 0x3, 0x10, 0x6, 0x4, 0x81, 0x9, 0x7, 0x6, 0x4, 0x8, 0x6, 0x10000, 0x6, 0x100, 0x4, 0x4, 0x4, 0x101, 0xfffffffb, 0x6, 0x800, 0xbc2, 0x4, 0x7f, 0x401, 0x4, 0x30000, 0x8, 0x4, 0x7, 0x4, 0x8, 0x9, 0x6, 0x8, 0x80000000, 0x3, 0xa, 0x787, 0x9, 0x9, 0x8d, 0x80, 0x2, 0x4, 0x2, 0x0, 0x2, 0x68, 0x1000, 0x9, 0x0, 0x4, 0xc, 0x7fff, 0x10, 0x7, 0xf5, 0x3, 0x6, 0x2, 0x8000, 0x80000000, 0x5, 0x5, 0x5, 0x8001, 0xd4, 0x8, 0x9, 0xaa8a, 0x7, 0x1, 0x2a8a, 0x7f, 0xf043, 0x46, 0x494, 0x368, 0xe, 0x4c, 0x3, 0x7, 0x3, 0x7, 0x2, 0x7, 0x400, 0x4, 0x0, 0x80000001, 0xaa1, 0xfa8, 0x0, 0x0, 0x2, 0x1, 0xff, 0x65, 0x7, 0x9, 0x8, 0x1000, 0x80000000, 0x400, 0x3, 0x1, 0x10000, 0x7ff, 0x1, 0x4, 0x7ff, 0x0, 0x9, 0xac5, 0x7, 0x1, 0xd, 0x800, 0x6]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='xdp_bulk_tx\x00', r5, 0x0, 0x4000000000000}, 0x18) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r6, 0x400, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x440, 0x0) fcntl$setlease(r7, 0x400, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/4\x00') preadv(r8, &(0x7f0000000340)=[{&(0x7f00000008c0)=""/201, 0xc9}], 0x1, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r9, 0x0, 0x4}, 0x18) r10 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r11, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x4, 0xfffffffffffff000) 626.175028ms ago: executing program 4 (id=3365): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee1, 0x80, 0x2, 0x8b4}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd8, 0xd8, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x7ff}}, @struct={0x3, 0x8, 0x0, 0x4, 0x1, 0x3, [{0x6, 0x3, 0x23}, {0xb, 0x0, 0x3}, {0x1, 0x4, 0x82}, {0x2, 0x5, 0x5}, {0xb, 0x2, 0x3ae6}, {0x4, 0x4, 0x1}, {0x2, 0x5, 0x6}, {0x4, 0x0, 0x9}]}, @union={0x8, 0x1, 0x0, 0x5, 0x0, 0xffffffff, [{0x3, 0x5, 0x6}]}, @union={0x9, 0x2, 0x0, 0x5, 0x1, 0x0, [{0x4, 0x4, 0x3}, {0x1, 0x2, 0x9}]}, @func={0x10, 0x0, 0x0, 0xc, 0x3}, @const={0xb, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x61, 0x0, 0x30, 0x5f, 0x0, 0x5f]}}, &(0x7f0000000780)=""/250, 0xf8, 0xfa, 0x0, 0x9}, 0x28) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 575.101699ms ago: executing program 0 (id=3366): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="646f74732c747a3d5554432c646f74732c6e6f646f74732c636865636b3d7374726963742c666c7573682c6e6f646f74732c6e6f646f74732c71756965742c00a8f43e0a9765c2419bbc93d3bb042cde7dc609bd874b9221aab9404318121ead7505cda193a13e6d2fd30034c9c4f457dc798a67d4d30285c0590475ba33482c83a51b42d7f7ea92b35388ec28309e3b4b8a758575baa63a8679030bf6423a4759c2bb9f9353f43cc4c825234e791353a87ed0bcade85e0808d879b38514fafbba"], 0x1, 0x168, &(0x7f0000000a40)="$eJzs27GK1FAUBuAzJqurNluLRcDGalArS0VWEAOKMoVWCrs2Gxlwmmg1z+AT+GI+gihTTXdFo5OZiDgoMbrzfU0O+RM4t0guJ5Bnl1+eHE1nL6YPF7E/GkV+K4pYjuIgzkQWjXkAAKfJMqX4lFJK5+Zx/l2klIbuCADom/0fAHbPL/f/mwM1BgD0xvwPALvn8ZOn92+X5eGjotiP+DCvJ/WkOTb53Xvl4bXiq4P2rkVdT7JVfr3Js818Ly58y280ebGZn42rV5r8S3bnQdnJL8ZR/8sHAACAnTBeje5r8/3Hdr4fj4vvOvN/U619H+jM73lcyv/eOgCA7c1evzl5XlXHrxT/Q5G3Z96//Qf6UfxQ5FV1vDd8G39cDP1mAvrWPvRDdwIAAAAAAAAAAAAAAPzM7/4hFNn2Fw+9RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOj6HAAA//8nKlEY") r0 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x542, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='kfree\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) r3 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xffdffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) (async) write$binfmt_elf64(r1, &(0x7f0000001400)=ANY=[], 0x740) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x10000, 0x9) (async) splice(r1, &(0x7f0000000180)=0x1000000000008000, r5, 0x0, 0x202, 0x5) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6, 0x0, 0xffffffffffffffff}, 0x18) creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1, 0x0, r8}}, 0x40) (async) read$eventfd(r4, &(0x7f0000001b40), 0x8) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r9, r11, 0xfffffffffffffc01, 0x0) sendmmsg$inet6(r0, &(0x7f0000001f80)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x7ff, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000040)='Z', 0x1}], 0x1}}], 0x1, 0x4000001) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) r12 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r11, 0x4c81, r12) (async, rerun: 32) shutdown(r0, 0x1) (async, rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000003c0)=@assoc_value={0x0, 0x9}, 0x8) (rerun: 64) 565.768429ms ago: executing program 0 (id=3367): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000004000000450000008814"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x7cb641, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x1, 0xd}, {0x7}, {0x10, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40085}, 0x40000) recvmmsg(r6, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0) 546.050809ms ago: executing program 1 (id=3368): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xffffffffffffffa8, 0x0, 0x0) (fail_nth: 1) 243.229755ms ago: executing program 8 (id=3370): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 217.424376ms ago: executing program 1 (id=3371): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xc0d00) syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0xc0ed000a, &(0x7f0000000780)={[{@lazytime}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@journal_async_commit}, {@jqfmt_vfsv1}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@obj_role}, {@fowner_eq}, {@pcr={'pcr', 0x3d, 0x14}}, {@dont_measure}]}, 0xfe, 0x483, &(0x7f0000001d40)="$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") r1 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffffb2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newae={0x64, 0x1e, 0x13, 0x70bd2b, 0x25dfdbfc, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d5, 0x2, 0x2b}, @in6=@private1, 0x9b99, 0x3500}, [@lifetime_val={0x24, 0x9, {0x1, 0x4, 0x7f, 0x747}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095f41826f82aa76cff62a980b3368d6fee16188935b2aa9aa0803eeac1a18662c805e16102757baff8e4a81ffb18c8bc64ee015415d6bfa0e188657d67309d30d0ca96be4a347fd4327b886d73378774ef4463d454adb88cad5b996adc7e26"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) write$selinux_validatetrans(r3, &(0x7f0000001cc0)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00000000000w'], 0x79) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sched_rr_get_interval(0x0, 0x0) socket(0x10, 0x3, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e27, 0x1, @mcast1, 0x22}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="10000000000000002900000037"], 0x18}}], 0x2, 0x4004844) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @auto="0300"}}) open(&(0x7f0000000500)='./file1\x00', 0x115081, 0x1d0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0xe0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f00000000c0), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4}, 0x18) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x80, 0x2b, 0x5, 0x0, 0x7fffffff, 0x105}) syz_emit_ethernet(0x5f0, &(0x7f0000001500)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f9edff", 0x5ba, 0x3a, 0x0, @remote, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0xfff, 0xfff8, "e169018abf3bba16f1cc4357d84e73a4d6861c12dd0261b74589b7137749d96324657062cf14743c7aaed18f642c71ee65bf55552536196208372f133eae26ff892efe07790d0327cd32895042bac0bce167d9d57f4a79fad9dbc0854af14467cbe187bb1ad85b6a7951070659432a831232249183527dbc1273676d5a8895b20e1e546a77e13f1318eb4c9be48499b018b66bc585e7a8113dc7ed13cc497440b3f09bce6074ac056e7fe968b3c169c5be2a5fd8b6fe5c0b5b52a8493844fe4319acc98940987cd59625d9e272fa7b677f47db3ebd1935be20a177f47047edc705777dae28834748111e1d6a8fe4c5f3f7a588fd5111d46a20e6bb4b3029e313d837a581d4411bed9191d73b89d6efecc419b4db6c3e9c6d299e23569ed4c49b05a7c5f54238e6b6290c0826bdee5057f36963cd0a439dbb38c1152c9ba2b71a9fc9e06a7e38f0e64646510c8f6d5d09317ee7735baf198206b724538b2059b7e7cb3af0986ef3615d991cb74a34903273e9da22972f57c40b77288109d209cc4c4a526c692d87e9a5261ea1de79462d18c4bb1c5b91dcaba8d4adfa68434be9d6d93148c63d002ec26da072258c0aecaa72b189077333a92f67d7c19a767df420ae7891cda232b9ca0d97c4b6b0a200ef78223a4f5e73ae0e34cf0173f6e57fdf7c44037a0265892033f575756d2f72ce32b5a9902239e837727f251d26f21fad7a64702cb9d2d1dc99fccfc4130e597984cbe0baff28c3323e7f354d1846078ffaebb82b2bcd10dd5c50f80b0fe5e5d4a6fa4c05f1e4e0b15e93d2c1243da6d9c67bf1a23576f5078a682dad3b60535f7471f6e2e7b61450321585b862c33f733309a6af16c50b4f490efca2fec4303d04dd18f2f92539eb15ac94012497b497e44baa370b6bd173dc068cad7bc16f8ca19f77a3838f8f20d4395d4f0578cf5c16cb352a5fb9aadd3125efb529ff2d51afafb1923f37da0982f2eb6469f3d6cd312dcb6162ddacfa376e3004c4fa90264440fce34b5f442d327af14c4c62b01f43e39a1b8f728c9a5bd0b3850ca6fd364a42c9ea2313a3510d46c1bfeaade3626900161d3d27a76721da32e686ebb04a0d531a6f88c52d2385e33413c3562805430d0c7936d5bee80c21f12fc87fc64f6a38a9d260e9eeb25450c140f9d6ea5c525522d04d39f5ffcec822b78718354b61c3cc0276a096dbc2d59956914e388a04f64538fed548a5276e9e5ba84e8758280e76e54b84efa973a0add06799cad803f92050d9af4f45f33b6a82517c8a1efab256edd5c7a3938809a22e649560386d0c1eb0946ad6d572e1c8caac0eaa4d448927e444e2c0610285b0100ee0e7f88ca0472086a09473263a3d20f59c67bfa754c4fbb927e82422b878030e9147da79b1aa296b34056b4cd3596b93797a74db603f2cf83a1a61475539f7d1f67dd767930806eb51d610f2806b4ec9d6585514f2078951e6570f3ee275a9647b0b5fc29e21bda2428f3aba499ae4b5c445a1277d5d6aede5e4f3b80d94e814475e43936db3ab38ea0a21a7cac62e706ba41d12fbe545093570687ef4e549a9a7c5b0afd2ef86d4477c30d8929aac65eac8bc56e5b04460c10886255cbbb6a2afdd8144e039a1b25c614cf96cacbcb64d6e71d24fff1135b960aed9c6fd8fc0f855519aec548b64cace2efbb6b6de8fb8f5d5a963ef0567a8ba09eaf7992a8eec82de57ea383eaa4f310a70fe27aed53f1eecd6a4924046bf8caa20ba3b61b8aa344c0b528cd0678b9ac52baf65f3c47d1de97af1542eb9fb55d9a4a9235ee362d69040108b9fe5a2184b87370a62f7fe472d861825473dc55b5802dde5d5429fa38a82e0546a67fee08e7d6fe63aa4f4a2509fbe826c1de770c2b4ac96e64766e38984c299ecdd797f3fc36b93a08e127da9855c57d7bfdb3b18686889b1db53ce0e1e2819226db19d9142b1da6c3459f1d303ca42784b026a01130ca55d028eef0bca625ee61a1eaa14a7178c833669fe47baedb39a8aa10eb69cbaaca593a0aac0c6f41f4c4a2ab92f77fc7d85a7f543b714"}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 217.130586ms ago: executing program 8 (id=3372): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xffffffffffffffa8, 0x0, 0x0) 169.363137ms ago: executing program 1 (id=3373): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x5, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)={0x2c, r4, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x2c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="100000084557bea9c2c633dd0000800000000012911811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='napi_poll\x00', r6, 0x0, 0xfffffffffffffffc}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r7) sendmsg$BATADV_CMD_SET_VLAN(r7, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00042cbd7000fc1b30db3028df2512000000050033000100000008002b000700"], 0x24}}, 0xda9be93476120f4c) syz_emit_ethernet(0xffffffffffffffa8, 0x0, 0x0) 168.747977ms ago: executing program 8 (id=3374): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x20004850) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 168.463767ms ago: executing program 4 (id=3375): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2, 0x0, 0x9}, 0x18) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) setreuid(0x0, 0xee00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) r5 = socket(0x10, 0x803, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0, 0x0, &(0x7f0000000a80)=""/205, 0xcd}}], 0x1, 0x2, &(0x7f0000003700)={0x77359400}) socket$inet(0x2, 0x3, 0x6) unshare(0x20040600) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0x4}, 0x18) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0x7000000) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) 127.856728ms ago: executing program 8 (id=3376): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f01000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/reserved_size', 0x141a82, 0x0) sendfile(r0, r0, 0x0, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, &(0x7f0000000a40)={{0x3, 0x100, 0x0, 0x5, 0x108, 0x3}, 0xe5, [0xb6400000, 0x2d12, 0x6, 0xd, 0x371, 0x7fff, 0x5, 0x2, 0x9, 0x5, 0x9, 0x200, 0x8, 0x4, 0x1, 0x8, 0x7fffffff, 0x0, 0x1, 0x300, 0x5, 0x5e64, 0x9, 0x89f2, 0x8001, 0x5, 0x8, 0xb79, 0x55, 0x7c1, 0x69, 0x1, 0x10, 0xe3d9, 0x401, 0x10, 0x9, 0x80000000, 0x3, 0xfffffffc, 0x0, 0x6, 0x575, 0x8, 0x1, 0x3, 0x3, 0x2, 0x3, 0x2, 0x4, 0x5, 0x414, 0x8, 0x5, 0x64, 0x15, 0x3ff, 0xd13, 0x7, 0x1000, 0x3, 0x4, 0x0, 0xfffffffb, 0x9, 0x7, 0x3, 0x1000, 0xf0a3d96a, 0x3ff, 0x8, 0x800000, 0x6, 0x9, 0x6, 0xc0000000, 0xbe2, 0x9, 0x80000001, 0x51a5, 0x80, 0x2, 0x2, 0x60, 0x0, 0x3, 0x3, 0x3, 0x7f, 0x4, 0x4, 0x8, 0xfff, 0xffff, 0x1, 0xfffeffff, 0x9, 0xffff, 0x1b3d, 0x2, 0xb, 0xffffffff, 0x3, 0xa, 0x9, 0x0, 0x8, 0xfffffffc, 0x7, 0x101, 0xacde, 0x9, 0x40000, 0x1, 0x5, 0x8, 0x7, 0x81, 0x0, 0x6, 0x6, 0xd, 0x0, 0x400, 0x67, 0x1, 0xe9, 0x8001, 0x5, 0x7c70cf15, 0x101, 0x1, 0x1, 0x7, 0x9, 0x1ff, 0x5, 0x6, 0x7ff, 0x10, 0x1, 0x3, 0x40, 0x57b, 0x0, 0x4, 0xff, 0x1, 0x4c3, 0x4, 0x8, 0xff2, 0x8, 0xe5d, 0x0, 0x1, 0x7fffffff, 0x2, 0x7, 0x9, 0x3a, 0xfff, 0x400, 0x7, 0x6, 0xa966, 0x8, 0x2, 0x3, 0x9, 0x9c1c, 0x8, 0x9, 0x3, 0xb, 0x2, 0x4, 0x80000, 0x9, 0x8, 0x86, 0x4, 0x8, 0x100, 0x9, 0x6, 0x6e6, 0x4, 0x0, 0x0, 0x2, 0x4, 0x748, 0x0, 0x9, 0x6, 0xfffffffe, 0x7, 0x8, 0x6, 0x1, 0x6, 0x2, 0x7ccc, 0xf6, 0x401, 0x8, 0x0, 0x2, 0x4, 0x9, 0x2, 0x1, 0x1, 0x2, 0x8, 0xfe, 0x2, 0x400, 0xa6, 0x6, 0x6, 0x1, 0xfffffffa, 0xfffffffb, 0x6, 0x3, 0x7fff, 0x1ff, 0x2, 0x2, 0x3, 0xd8, 0x3, 0x8, 0x1, 0x6, 0x8, 0x9, 0x7f, 0x6, 0x7f, 0xffffffff, 0xeb, 0xe8d3, 0x0, 0x8, 0x35, 0x1, 0x7e9c, 0xf2b, 0xaeef, 0x4, 0x3, 0xb3, 0x3808, 0x8000, 0x5, 0x7fff, 0x5, 0xd, 0xf769, 0x27, 0x1, 0x7fff, 0x40, 0x2, 0xe, 0x24, 0x2, 0x4fda, 0x7, 0x32, 0x2, 0x8, 0x3, 0x9, 0x7fffffff, 0x1ff, 0x7, 0x881, 0x93, 0x8, 0x6, 0x9, 0x8, 0x306b, 0xf9b, 0x6, 0x2, 0x3ff, 0xb433, 0x80000001, 0x2, 0x2, 0x2, 0x2, 0x7ff, 0x6, 0x0, 0x20ae, 0x0, 0x3, 0x7fffffff, 0x6, 0xffffffff, 0xfffffffb, 0x4, 0x8, 0x10000, 0xc, 0x7, 0x8001, 0x3, 0x7, 0xfff, 0x7a2, 0x7, 0xf, 0x7f, 0x81f0, 0x7fffffff, 0xdb5, 0xffff7fff, 0x7f, 0x47, 0x8, 0x10001, 0x1, 0x6, 0x8, 0x57, 0x0, 0x832b, 0x7, 0x845d, 0x8, 0x6, 0xbc, 0x8000, 0x2, 0x81, 0x16, 0x5, 0x164f, 0x3, 0x3, 0x8, 0x10000, 0x3, 0xfffffff1, 0x0, 0xfffff581, 0x7, 0xa00, 0x6, 0x6, 0x7, 0x5, 0x6668db10, 0xf1, 0x8000, 0xe, 0x3, 0x2, 0x3, 0xfffffff7, 0x429a, 0x4, 0x2, 0x8, 0x400, 0x2, 0x8387, 0xffffc000, 0x1ff, 0x5, 0xfffffffd, 0x0, 0x1ff, 0x0, 0xd5, 0x80000000, 0x6, 0x3, 0x5, 0xfffffffa, 0x760833ee, 0x8001, 0x1, 0x9, 0x2, 0x2, 0xa, 0x2, 0x5, 0x1, 0x22, 0x7, 0x6, 0x10000, 0x7fff, 0x401, 0xfffffffc, 0x4, 0x7, 0xffffffff, 0x6, 0x5, 0x9, 0x6, 0x800, 0x3, 0x8, 0xc9, 0x7fffffff, 0x5d5, 0x139, 0xf2, 0x0, 0xd, 0xfffffffb, 0x6, 0x0, 0x0, 0x3, 0x6, 0x4, 0x8, 0x8b14, 0x8, 0x7, 0x79, 0x200, 0x4, 0x8, 0x1, 0x98, 0x4, 0x2, 0x9, 0x5, 0x9, 0xffff, 0x40, 0x5, 0x2, 0x1, 0xbe7a, 0xffffff5a, 0x7, 0xfffffffe, 0x1, 0x52f8, 0xfffff801, 0xa, 0x0, 0x5, 0x99, 0x8, 0x7, 0x6000, 0x5f, 0x1ff, 0x1, 0x4, 0x5, 0x8, 0x4f9a, 0x7, 0x22, 0x8, 0x4, 0x7, 0x7fff, 0x0, 0x7, 0x0, 0xff, 0x1, 0x101, 0x6, 0x8000000, 0x6, 0x6888fe60, 0x7fffffff, 0x2, 0xe, 0x7, 0xb, 0x4, 0x0, 0x0, 0x8, 0x8, 0x8, 0xe8e, 0x1, 0x2, 0xa, 0x3, 0x7, 0x37, 0xfff, 0x8, 0x598, 0x0, 0xc3f, 0x3, 0x1, 0x1, 0x10001, 0x6, 0x0, 0x1, 0x649, 0x9, 0x400, 0x32, 0x7, 0x400, 0x10001, 0x17ed, 0x7, 0x2, 0x5, 0x409, 0x7f, 0x2, 0x3, 0x5, 0x0, 0x8, 0x1, 0x219, 0x80000001, 0x8, 0x2, 0x3, 0x8, 0x3ff, 0xd, 0x6, 0x238, 0x72, 0xfe, 0xe4, 0x64, 0x6, 0x5, 0x11, 0xf2, 0x0, 0xe94, 0xb, 0x5, 0x7, 0x5, 0x0, 0x2, 0x5, 0x8, 0x9, 0x42, 0x1, 0x2, 0x1f, 0xf, 0x5, 0xd, 0x8, 0x1ff, 0x1ff, 0x8, 0xffffffff, 0xfffffffb, 0xb3e2, 0x5, 0x97, 0x0, 0xe, 0xffff, 0x9, 0x9, 0x7, 0xfff, 0x1, 0x5, 0x100, 0x6, 0x1, 0x0, 0x80000000, 0x8001, 0x6, 0x3, 0xffff8000, 0x0, 0x7, 0xb2, 0x0, 0x200, 0xa9, 0x1ff, 0x310a, 0x4, 0x20000, 0x5, 0x10000000, 0xffff, 0x1917b088, 0x6, 0x298, 0x10000, 0x0, 0x39, 0xffff, 0x1, 0xa5, 0x1ff, 0x200, 0x400, 0x1, 0x8, 0x1, 0x0, 0x8, 0xfffffffc, 0x6, 0x10, 0x4c, 0x2f, 0xb, 0xf246, 0x7, 0x7, 0x8, 0x7, 0x7ff, 0x1000, 0xedb, 0x1000, 0x6, 0x0, 0x4, 0x9, 0xa, 0x9, 0x800, 0x12f5d561, 0x2, 0x5, 0x8, 0x6a9a23fe, 0x101, 0x2, 0x1, 0x3, 0xd3, 0x7fff, 0x2, 0x3, 0x10000, 0x202000, 0x9, 0x3ff, 0x3, 0xf504, 0x7, 0x5, 0x80, 0x3, 0x4, 0x7, 0x6, 0x1, 0x1, 0x2, 0x6, 0x7, 0x4, 0x0, 0x8, 0x9, 0x2, 0x3ff, 0x8001, 0x0, 0x8, 0xdce, 0xb6, 0x8001, 0x6, 0x0, 0x3c, 0x8, 0x0, 0x3256, 0x1, 0x7f, 0x5, 0x7d9, 0x7fffffff, 0x8, 0x7ab, 0x10000, 0x3e, 0xfffffff8, 0x9, 0x8, 0xfffffff9, 0x2, 0x6, 0x377f, 0x2, 0xcd, 0x7, 0x7fffffff, 0x80000000, 0x8, 0x3, 0x2000000, 0x3a0, 0x9, 0x6, 0xffffffff, 0x9103, 0xfffffffd, 0x1, 0x9, 0x8, 0x5, 0x40, 0x2, 0x40, 0x0, 0xfff, 0x1c85, 0xf, 0xfffffcbc, 0x2, 0x81, 0x6, 0x80, 0x1, 0x3, 0x29b, 0x9, 0xfffffff8, 0x3, 0x7ff, 0x1, 0x8000, 0xcd51, 0x101, 0x7f, 0x762, 0x5895, 0x8, 0x3, 0x2, 0xfffffff7, 0x5, 0x1, 0x8, 0x5, 0x3, 0x7, 0xf201, 0x7f, 0x4, 0x5, 0x4, 0x3, 0xe3, 0x6, 0x1, 0x3d3b4140, 0x85b, 0x8, 0xec, 0xffff, 0xffffffff, 0x4, 0x7, 0x2, 0x0, 0xe, 0x0, 0xa1e, 0xffffffff, 0x10, 0x8, 0x8, 0x80000001, 0x5, 0x6, 0x4a, 0x4, 0x9, 0x6, 0xa1, 0x3, 0x100, 0x6, 0xe, 0x2, 0x8, 0x5b0a, 0x6, 0x9, 0x2, 0xfff, 0x1, 0x10, 0x5, 0x2, 0x6, 0x3ff, 0x7, 0x5, 0x5, 0x6a8, 0x2, 0x5, 0x200, 0x0, 0x1ff, 0x7ff, 0x2, 0xffffffff, 0x9, 0x2a8, 0x5d, 0x5, 0xe, 0x200, 0xc, 0x2, 0x7, 0x4, 0x0, 0x40, 0x1c, 0x200040, 0x2, 0x0, 0x4, 0x1, 0x1, 0x8, 0x5, 0x9, 0x63e, 0x9, 0x8, 0x800, 0x6, 0x7f, 0x10, 0x3, 0x98, 0x1, 0x2, 0x9, 0x0, 0xfffffffd, 0x8, 0xd, 0x7, 0x7ff, 0x0, 0x5424, 0xa13, 0x9, 0x23d, 0x2, 0x5, 0x5, 0x0, 0x100, 0x4, 0x1ff, 0x7, 0x6, 0x4, 0x7, 0x841, 0x5, 0x5, 0x1, 0x6, 0x0, 0x2add, 0x2dc, 0x2, 0x80, 0x1a000000, 0x6, 0xb936, 0x4, 0x1000, 0x5, 0x3, 0x10, 0x6, 0x4, 0x81, 0x9, 0x7, 0x6, 0x4, 0x8, 0x6, 0x10000, 0x6, 0x100, 0x4, 0x4, 0x4, 0x101, 0xfffffffb, 0x6, 0x800, 0xbc2, 0x4, 0x7f, 0x401, 0x4, 0x30000, 0x8, 0x4, 0x7, 0x4, 0x8, 0x9, 0x6, 0x8, 0x80000000, 0x3, 0xa, 0x787, 0x9, 0x9, 0x8d, 0x80, 0x2, 0x4, 0x2, 0x0, 0x2, 0x68, 0x1000, 0x9, 0x0, 0x4, 0xc, 0x7fff, 0x10, 0x7, 0xf5, 0x3, 0x6, 0x2, 0x8000, 0x80000000, 0x5, 0x5, 0x5, 0x8001, 0xd4, 0x8, 0x9, 0xaa8a, 0x7, 0x1, 0x2a8a, 0x7f, 0xf043, 0x46, 0x494, 0x368, 0xe, 0x4c, 0x3, 0x7, 0x3, 0x7, 0x2, 0x7, 0x400, 0x4, 0x0, 0x80000001, 0xaa1, 0xfa8, 0x0, 0x0, 0x2, 0x1, 0xff, 0x65, 0x7, 0x9, 0x8, 0x1000, 0x80000000, 0x400, 0x3, 0x1, 0x10000, 0x7ff, 0x1, 0x4, 0x7ff, 0x0, 0x9, 0xac5, 0x7, 0x1, 0xd, 0x800, 0x6]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='xdp_bulk_tx\x00', r5, 0x0, 0x4000000000000}, 0x18) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r6, 0x400, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x440, 0x0) fcntl$setlease(r7, 0x400, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/4\x00') preadv(r8, &(0x7f0000000340)=[{&(0x7f00000008c0)=""/201, 0xc9}], 0x1, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r9, 0x0, 0x4}, 0x18) r10 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r11, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x4, 0xfffffffffffff000) 79.097279ms ago: executing program 1 (id=3377): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r0, 0x0) prctl$PR_GET_NAME(0x10, 0x0) 78.676169ms ago: executing program 4 (id=3378): r0 = socket(0x10, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@noquota}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x2424, 0x0, 0x800000, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x1, 0xffffffffffffffff, 0x1) close(0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r4, &(0x7f00000009c0)="3bf58d", 0x3) sendfile(r4, r2, 0x0, 0x3ffff) sendfile(r4, r2, 0x0, 0x7fffeffd) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRESDEC=r1, @ANYBLOB="0800000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$cgroup2(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x984001, 0x0) 71.890939ms ago: executing program 8 (id=3379): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3000008, &(0x7f0000000200)={[{@grpid}, {@grpjquota}, {@nobarrier}]}, 0x1, 0x521, &(0x7f0000000b80)="$eJzs3d9rZFcdAPDvvcmkyW5qpiqyFmyLrewW3ZmksRpF2gqiTwW1vq8xmYSQSSZkJnUTiqb4BwgiKvgH+CL44KMg/RNEWNB3UVFEd/VR98qdudH8mEnGZJJZJ58PnMw598f5nnPJ3Lk/DvcGcG29EBFvRMRYRLwcETPF9LRIsd9J+XKPHr6zlKcksuytvyaRFNMO6srL4xFxs1htMiK++qWIbyQn4zZ399YX6/XadlGutja2qs3dvbtrG4urtdXa5vz83M8j4tWF2axwoX6WI+K1L/zxB9/9yRdf++Unvvm7e3++8628WZ/7UKfdEbF0oQA9dOoutbfFgXwbbV9GsCHJ+1MaG3YrAADoR36M//6I+Gj7+H8mxtpHcwAAAMAoyV6fjn8mERkAAAAwstKImI4krRRjAaYjTSuVzhjeD8aNtN5otj6+0tjZXM7nRZSjlK6s1WuzxVjhcpSSvDxXjLE9KL9yrDwfEc9ExPdnptrlylKjvjzsix8AAABwTdx8/uj5/z9m0nYeAAAAGDHlngUAAABgVDjlBwAAgNHn/B8AAABG2pfffDNP2cF7vJff3t1Zb7x9d7nWXK9s7CxVlhrbW5XVRmO1/cy+jbPqqzcaW5+MzZ371Vat2ao2d/fubTR2Nlv31o68AhsAAAC4Qs88/95vk4jY/+xUO0XxHECAI/4w7AYAgzQ27AYAQzM+7AYAQ1M6cwl7CBh1yRnzTw7e6VwrjF9dTnsAAIDBu/3hk/f/J4p5Z18bAP6fGesDANfP0bt7U0NrB3D1SucdAXhr0C0BhuV9nY+nes3v+fCOPu7/d64xZNm5GgYAAAzMdDslaaU4Tp+ONK1UIp6Ox1k5SsnKWr02W5wf/Gam9FRenmuvmZw5ZhgAAAAAAAAAAAAAAAAAAAAAAAAA6MiyJDIAAABgpEWkf0raT/OPuD3z0vTRqwPH3vr147d+eH+x1dqei5hI/jaTT5qIiNaPiumvZF4JAAAAAMM1lf/pnKcXn3PDbhIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAo+bRw3eWDtJVxv3L5yOi3C3+eEy2PyejFBE3/p7E+KH1kogYG0D8/Xcj4la3+Ek8zrKsXLSiW/ypS45fbm+a7vHTiLg5gPhwnb2X73/e6Pb9S+OF9mf37994kS6q9/4v/c/+b6zH/ufpY+Venn3ws2rP+O9GPDveff9zED/pxD8SIi+82Gcfv/61vb2uMw5V2S3+4VjV1sZWtbm7d3dtY3G1tlrbnJ+f+9TCpxdeXZitrqzVa8XfrmG+95FfPD6t/zd6xC8f7f+J7f9SX73P4l8P7j/8QKdQ6hb/zovdf39v9YifFr99Hyvy+fzbB/n9Tv6w53766+dO6/9yj/5PntH/O331Pz7z8le+8/uuc05sDQDgKjR399YX6/Xa9imZyT6W+Z8yERet5/WBtudJyMTZy0w+IU29jEz27c7/48XqueDqJzLZRVYfjwE0Y+LE93QszlthErGf19XnPyQAADBi/nvQf9odJAAAAAAAAAAAAAAAAAAAAOAynfOxZJMR0ffCx2PuD6erAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACn+ncAAAD//+8b0g8=") r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1e1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0xa55c}, 0x18) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r3, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) accept4(r0, 0x0, &(0x7f0000000040), 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c) listen(r5, 0x3) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xb0, 0x1405, 0x400, 0x70bd2a, 0x25dfdbff, "", [{{0x8}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8}}, {{0x8}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4044040}, 0x84) close_range(r5, r5, 0x0) 69.603008ms ago: executing program 1 (id=3380): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000600)=0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x57}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='br_fdb_external_learn_add\x00', r1}, 0x18) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000537a6121874f0000000000000c7460f6588178244a35868af67cf0caf9ee716eacc2e88a940a2838cb0c01cb359f147d4a7764e7432b25a5cba807dbfcc35256ff0d1563d70e7d8807c99ef0c6b25bdaeaa8c8c8ae043416f9db4f22d1dc26c756d0f117c1c9b34a99dfe809136d9862d8f360280a0097f866533af8329928326fed5584621c2e82200d6232342012d446fae87b3136ff81009e0ad0cafdaff5a043304c8e76ffb699cf23e83a6a02e34df807f39a3fdf69cbaf60498410372bb0"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1d00006a6ef22600082000d848", @ANYRES16=r2, @ANYRESDEC=r3], 0x48) sched_setscheduler(0x0, 0x1, 0x0) syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc474, 0x3850, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xffff, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) syz_clone3(&(0x7f0000000600)={0xa0202000, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1}, 0x58) 4.2012ms ago: executing program 1 (id=3381): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000000020200d7b1af8ff00000000bfa10000de5da90807010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) setns(r3, 0x66020000) syz_clone(0x50a60080, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000030500000000fddbdf0000000000", @ANYRES32=0x0, @ANYBLOB="02000000010100009dc3128008000100687372001400028808000102", @ANYRES32=r5, @ANYBLOB="08000200", @ANYRESHEX=r4], 0x40}}, 0x4008054) 0s ago: executing program 8 (id=3382): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x2}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="8171abea835fa101f7d3b67524725f1de26e34c8a72359778a5f323766e25a89", 0x20}], 0x1, 0x0, 0x0, 0x8000}, 0x4000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0xfffc, 0xbfff, 0x19, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x12, "0062ba5d8200"}) r1 = syz_open_pts(r0, 0x20800) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x44) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r2, 0x0) prctl$PR_GET_NAME(0x10, 0x0) kernel console output (not intermixed with test programs): im3 netdevsim0: renamed from eth0 [ 216.891310][T12195] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 216.900592][T12195] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 216.910537][T12195] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 216.957196][T12195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.972878][T12195] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.983083][ T7718] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.990389][ T7718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.022397][T12097] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.029967][ T7726] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.038695][ T7726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.048177][T12347] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2874'. [ 217.218408][T12195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.256981][T12373] loop0: detected capacity change from 0 to 512 [ 217.280962][T12373] EXT4-fs: Ignoring removed mblk_io_submit option [ 217.288155][T12373] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 217.321603][T12373] EXT4-fs (loop0): 1 truncate cleaned up [ 217.327904][T12373] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.342457][T12388] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2885'. [ 217.355343][T12195] veth0_vlan: entered promiscuous mode [ 217.364863][T12195] veth1_vlan: entered promiscuous mode [ 217.374777][T12391] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2888'. [ 217.385413][T12195] veth0_macvtap: entered promiscuous mode [ 217.393827][T12195] veth1_macvtap: entered promiscuous mode [ 217.406484][T12195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.419244][T12195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.431398][ T7689] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.445542][ T7722] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.458936][ T7726] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.474835][ T7726] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.498485][T12397] loop3: detected capacity change from 0 to 512 [ 217.506200][T12397] EXT4-fs: Ignoring removed mblk_io_submit option [ 217.513810][T12397] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 217.545135][T12397] EXT4-fs (loop3): 1 truncate cleaned up [ 217.553801][T12397] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.928443][ T7689] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.939072][ T7689] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.002588][ T7689] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.013335][ T7689] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.033237][T12408] chnl_net:caif_netlink_parms(): no params data found [ 218.074007][ T7689] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.084617][ T7689] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.111561][T12408] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.118812][T12408] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.128369][T12408] bridge_slave_0: entered allmulticast mode [ 218.135231][T12408] bridge_slave_0: entered promiscuous mode [ 218.144676][ T7689] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.155219][ T7689] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.179849][T12408] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.187094][T12408] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.201454][T12408] bridge_slave_1: entered allmulticast mode [ 218.208068][T12408] bridge_slave_1: entered promiscuous mode [ 218.236765][T12408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.300636][T12408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.321200][ T7689] bridge_slave_1: left allmulticast mode [ 218.327109][ T7689] bridge_slave_1: left promiscuous mode [ 218.332975][ T7689] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.364240][ T7689] bridge_slave_0: left allmulticast mode [ 218.370092][ T7689] bridge_slave_0: left promiscuous mode [ 218.376005][ T7689] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.411918][T12436] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2898'. [ 218.420941][T12436] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2898'. [ 218.454844][T12195] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /0/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 218.504581][T12097] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /8/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 218.538875][T12195] EXT4-fs error (device loop3): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 218.560541][T12097] EXT4-fs error (device loop0): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 218.582327][T12195] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /0/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 218.605175][T12097] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /8/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 218.629382][T12195] EXT4-fs error (device loop3): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 218.651084][T12097] EXT4-fs error (device loop0): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 218.673229][T12195] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /0/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 218.696070][T12195] EXT4-fs error (device loop3): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 218.717911][T12195] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /0/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 218.742990][T12195] EXT4-fs error (device loop3): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 218.764862][T12195] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /0/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 218.764901][T12097] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /8/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 218.788730][T12195] EXT4-fs error (device loop3): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 218.848919][T12097] EXT4-fs error (device loop0): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 218.882637][T12097] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /8/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 218.906211][T12097] EXT4-fs error (device loop0): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 218.928565][ T7689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.938948][ T7689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.947776][T12097] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /8/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 218.970632][T12097] EXT4-fs error (device loop0): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 218.971570][ T7689] bond0 (unregistering): Released all slaves [ 219.001870][ T7689] bond1 (unregistering): Released all slaves [ 219.044595][T12408] team0: Port device team_slave_0 added [ 219.061555][T12408] team0: Port device team_slave_1 added [ 219.110029][ T7689] veth1_macvtap: left promiscuous mode [ 219.132070][ T7689] veth0_macvtap: left promiscuous mode [ 219.137637][ T7689] veth1_vlan: left promiscuous mode [ 219.144238][ T7689] veth0_vlan: left promiscuous mode [ 219.225336][ T7689] team0 (unregistering): Port device team_slave_1 removed [ 219.237692][ T7689] team0 (unregistering): Port device team_slave_0 removed [ 219.269824][T12408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.276885][T12408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.303233][T12408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.306687][T12446] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2904'. [ 219.316546][T12408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.330127][T12408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.356315][T12408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.391855][T12408] hsr_slave_0: entered promiscuous mode [ 219.398024][T12408] hsr_slave_1: entered promiscuous mode [ 219.403998][T12408] debugfs: 'hsr0' already exists in 'hsr' [ 219.409872][T12408] Cannot create hsr debugfs directory [ 219.670239][T12097] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.685487][ T7689] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.766294][ T7689] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.793577][T12408] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 219.810241][T12408] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 219.824316][T12408] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 219.834981][T12408] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 219.847351][ T7689] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.900173][T12408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.917589][ T7689] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.946784][T12408] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.954275][T12472] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2909'. [ 219.963346][T12472] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2909'. [ 219.976853][ T7704] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.984145][ T7704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.995913][ T7704] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.003366][ T7704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.062040][ T7689] bridge_slave_1: left allmulticast mode [ 220.067811][ T7689] bridge_slave_1: left promiscuous mode [ 220.073667][ T7689] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.094444][ T7689] bridge_slave_0: left allmulticast mode [ 220.100501][ T7689] bridge_slave_0: left promiscuous mode [ 220.106318][ T7689] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.232018][ T7689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.242099][ T7689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.259629][ T7689] bond0 (unregistering): Released all slaves [ 220.311533][T12195] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.313677][T12408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.382784][ T7689] hsr_slave_0: left promiscuous mode [ 220.389716][ T7689] hsr_slave_1: left promiscuous mode [ 220.396808][ T7689] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.404436][ T7689] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.493072][ T7689] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.500657][ T7689] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.512593][ T7689] veth1_macvtap: left promiscuous mode [ 220.518207][ T7689] veth0_macvtap: left promiscuous mode [ 220.538726][ T7689] veth1_vlan: left promiscuous mode [ 220.544025][ T7689] veth0_vlan: left promiscuous mode [ 220.726073][ T7689] team0 (unregistering): Port device team_slave_1 removed [ 220.743305][ T7689] team0 (unregistering): Port device team_slave_0 removed [ 220.828307][T12454] chnl_net:caif_netlink_parms(): no params data found [ 220.913634][T12454] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.921008][T12454] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.932126][T12454] bridge_slave_0: entered allmulticast mode [ 220.945216][T12454] bridge_slave_0: entered promiscuous mode [ 220.963008][T12454] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.970199][T12454] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.999801][T12454] bridge_slave_1: entered allmulticast mode [ 221.013631][T12454] bridge_slave_1: entered promiscuous mode [ 221.052899][T12454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.063418][T12508] netlink: 'syz.8.2917': attribute type 30 has an invalid length. [ 221.090705][T12454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.132357][T12454] team0: Port device team_slave_0 added [ 221.149646][T12454] team0: Port device team_slave_1 added [ 221.224877][T12408] veth0_vlan: entered promiscuous mode [ 221.234584][T12454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.241650][T12454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.268309][T12454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.280658][T12454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.287704][T12454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.313988][T12454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.337626][T12408] veth1_vlan: entered promiscuous mode [ 221.368670][T12520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2919'. [ 221.407999][T12491] chnl_net:caif_netlink_parms(): no params data found [ 221.430824][ T7689] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.455618][T12454] hsr_slave_0: entered promiscuous mode [ 221.461556][ T29] kauditd_printk_skb: 193 callbacks suppressed [ 221.461574][ T29] audit: type=1326 audit(1759438799.284:16826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12526 comm="syz.8.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2f14eec9 code=0x7ffc0000 [ 221.469395][T12454] hsr_slave_1: entered promiscuous mode [ 221.491629][ T29] audit: type=1326 audit(1759438799.284:16827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12526 comm="syz.8.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7feb2f14eec9 code=0x7ffc0000 [ 221.499580][T12454] debugfs: 'hsr0' already exists in 'hsr' [ 221.521301][ T29] audit: type=1326 audit(1759438799.284:16828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12526 comm="syz.8.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2f14eec9 code=0x7ffc0000 [ 221.527029][T12454] Cannot create hsr debugfs directory [ 221.554182][ T29] audit: type=1326 audit(1759438799.284:16829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12526 comm="syz.8.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feb2f14eec9 code=0x7ffc0000 [ 221.581190][ T29] audit: type=1326 audit(1759438799.284:16830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12526 comm="syz.8.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2f14eec9 code=0x7ffc0000 [ 221.606309][ T29] audit: type=1326 audit(1759438799.284:16831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12526 comm="syz.8.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7feb2f14eec9 code=0x7ffc0000 [ 221.630183][ T29] audit: type=1326 audit(1759438799.284:16832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12526 comm="syz.8.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2f14eec9 code=0x7ffc0000 [ 221.654069][ T29] audit: type=1326 audit(1759438799.284:16833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12526 comm="syz.8.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7feb2f14eec9 code=0x7ffc0000 [ 221.677829][ T29] audit: type=1326 audit(1759438799.284:16834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12526 comm="syz.8.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2f14eec9 code=0x7ffc0000 [ 221.701951][ T29] audit: type=1326 audit(1759438799.284:16835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12526 comm="syz.8.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7feb2f14eec9 code=0x7ffc0000 [ 221.735528][T12408] veth0_macvtap: entered promiscuous mode [ 221.765636][ T7689] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.787951][T12408] veth1_macvtap: entered promiscuous mode [ 221.843052][ T7689] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.859356][T12491] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.866669][T12491] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.914424][T12491] bridge_slave_0: entered allmulticast mode [ 221.927174][T12491] bridge_slave_0: entered promiscuous mode [ 221.943360][T12491] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.950627][T12491] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.968381][T12491] bridge_slave_1: entered allmulticast mode [ 221.982554][T12491] bridge_slave_1: entered promiscuous mode [ 222.056956][ T7689] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.217685][T12408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.228393][T12491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.239189][T12408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.254548][ T7718] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.269887][T12491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.285752][ T7718] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.342743][ T7718] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.358816][T12491] team0: Port device team_slave_0 added [ 222.372287][ T7689] bridge_slave_1: left allmulticast mode [ 222.378100][ T7689] bridge_slave_1: left promiscuous mode [ 222.384028][ T7689] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.411051][ T7689] bridge_slave_0: left allmulticast mode [ 222.416896][ T7689] bridge_slave_0: left promiscuous mode [ 222.422920][ T7689] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.571959][ T7689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.583366][ T7689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.594664][ T7689] bond0 (unregistering): Released all slaves [ 222.635951][ T7718] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.659657][T12491] team0: Port device team_slave_1 added [ 222.695119][ T7689] hsr_slave_0: left promiscuous mode [ 222.701441][ T7689] hsr_slave_1: left promiscuous mode [ 222.709885][ T7689] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.717643][ T7689] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.756390][ T7689] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.764147][ T7689] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.783280][ T7689] veth1_macvtap: left promiscuous mode [ 222.791441][ T7689] veth0_macvtap: left promiscuous mode [ 222.799279][T12550] __nla_validate_parse: 2 callbacks suppressed [ 222.799300][T12550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2928'. [ 222.814963][T12550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2928'. [ 222.831425][ T7689] veth1_vlan: left promiscuous mode [ 222.837963][ T7689] veth0_vlan: left promiscuous mode [ 222.942609][ T7689] team0 (unregistering): Port device team_slave_1 removed [ 222.955991][ T7689] team0 (unregistering): Port device team_slave_0 removed [ 222.998032][T12556] netlink: 'syz.1.2931': attribute type 30 has an invalid length. [ 223.012907][T12491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.020395][T12491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.046926][T12491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.098474][T12491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.105570][T12491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.132307][T12491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.162391][T12491] hsr_slave_0: entered promiscuous mode [ 223.189734][T12491] hsr_slave_1: entered promiscuous mode [ 223.322608][T12454] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 223.332417][T12454] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 223.342434][T12454] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 223.354605][T12454] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 223.412766][T12454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.429975][T12454] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.439745][ T7722] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.447098][ T7722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.458386][ T7722] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.465654][ T7722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.507550][T12581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2937'. [ 223.512727][T12454] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 223.516980][T12581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2937'. [ 223.527325][T12454] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 223.636101][T12491] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 223.649197][T12491] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 223.658381][T12491] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 223.668430][T12491] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 223.684125][T12454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.799649][T12491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.817548][T12491] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.836294][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.843661][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.869959][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.877243][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.914683][T12491] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 223.925516][T12491] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.004273][T12454] veth0_vlan: entered promiscuous mode [ 224.047739][T12627] netlink: 'syz.8.2944': attribute type 30 has an invalid length. [ 224.057776][T12454] veth1_vlan: entered promiscuous mode [ 224.093945][T12454] veth0_macvtap: entered promiscuous mode [ 224.103295][T12491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.113268][T12454] veth1_macvtap: entered promiscuous mode [ 224.132706][T12454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.159886][T12454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.183507][ T7722] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.237753][ T7722] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.319439][ T7722] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.337776][ T7722] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.419597][T12652] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2948'. [ 224.429124][T12652] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2948'. [ 224.473080][T12491] veth0_vlan: entered promiscuous mode [ 224.502665][T12491] veth1_vlan: entered promiscuous mode [ 224.512105][T12658] loop7: detected capacity change from 0 to 512 [ 224.522997][T12659] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2950'. [ 224.532646][T12491] veth0_macvtap: entered promiscuous mode [ 224.540923][T12658] EXT4-fs: Ignoring removed mblk_io_submit option [ 224.569996][T12658] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 224.580490][T12491] veth1_macvtap: entered promiscuous mode [ 224.599984][T12491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.620311][T12491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.634500][T12658] EXT4-fs (loop7): 1 truncate cleaned up [ 224.640820][T12658] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.663397][ T7722] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.676601][ T7722] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.688020][T12664] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2952'. [ 224.704565][ T7722] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.720269][ T7722] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.736843][T12666] netlink: 'syz.1.2953': attribute type 30 has an invalid length. [ 224.822598][T12675] loop5: detected capacity change from 0 to 512 [ 224.840524][T12675] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 224.862087][T12675] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.883949][T12675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 225.037503][T12684] loop5: detected capacity change from 0 to 512 [ 225.044657][T12684] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 225.110380][T12688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2960'. [ 225.189191][T12694] loop5: detected capacity change from 0 to 512 [ 225.281926][T12694] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.309167][T12694] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 225.356909][T12491] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.407904][T12454] EXT4-fs error (device loop7): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /3/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 225.434129][T12454] EXT4-fs error (device loop7): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 225.529352][T12454] EXT4-fs error (device loop7): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /3/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 225.607755][T12716] loop5: detected capacity change from 0 to 512 [ 225.625878][T12716] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 225.646841][T12454] EXT4-fs error (device loop7): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 225.692471][T12454] EXT4-fs error (device loop7): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /3/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 225.744161][T12727] netlink: 'syz.5.2977': attribute type 30 has an invalid length. [ 225.765031][T12454] EXT4-fs error (device loop7): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 225.791015][T12454] EXT4-fs error (device loop7): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /3/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 225.838137][T12454] EXT4-fs error (device loop7): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 225.883213][T12454] EXT4-fs error (device loop7): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /3/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 225.912018][T12454] EXT4-fs error (device loop7): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 226.112447][T12751] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2983'. [ 226.691282][T12764] lo speed is unknown, defaulting to 1000 [ 226.698100][T12764] lo speed is unknown, defaulting to 1000 [ 226.704770][T12764] lo speed is unknown, defaulting to 1000 [ 226.745002][T12764] infiniband sz1: set active [ 226.749949][T12764] infiniband sz1: added lo [ 226.754719][ T3406] lo speed is unknown, defaulting to 1000 [ 226.767693][T12764] RDS/IB: sz1: added [ 226.773028][T12764] smc: adding ib device sz1 with port count 1 [ 226.780878][T12764] smc: ib device sz1 port 1 has pnetid [ 226.786899][ T3406] lo speed is unknown, defaulting to 1000 [ 226.793819][T12764] lo speed is unknown, defaulting to 1000 [ 226.831679][T12764] lo speed is unknown, defaulting to 1000 [ 226.868474][T12764] lo speed is unknown, defaulting to 1000 [ 226.926815][ T29] kauditd_printk_skb: 503 callbacks suppressed [ 226.926833][ T29] audit: type=1326 audit(1759438804.744:17339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12771 comm="syz.5.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c300ceec9 code=0x7ffc0000 [ 226.934659][T12764] lo speed is unknown, defaulting to 1000 [ 226.957682][ T29] audit: type=1326 audit(1759438804.744:17340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12771 comm="syz.5.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c300ceec9 code=0x7ffc0000 [ 226.998489][ T29] audit: type=1326 audit(1759438804.784:17341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12771 comm="syz.5.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f1c300ceec9 code=0x7ffc0000 [ 227.022654][ T29] audit: type=1326 audit(1759438804.784:17342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12771 comm="syz.5.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c300ceec9 code=0x7ffc0000 [ 227.041704][T12764] lo speed is unknown, defaulting to 1000 [ 227.046626][ T29] audit: type=1326 audit(1759438804.784:17343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12771 comm="syz.5.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c300ceec9 code=0x7ffc0000 [ 227.076301][ T29] audit: type=1326 audit(1759438804.784:17344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12771 comm="syz.5.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c300ceec9 code=0x7ffc0000 [ 227.100853][ T29] audit: type=1326 audit(1759438804.784:17345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12771 comm="syz.5.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c300ceec9 code=0x7ffc0000 [ 227.125019][ T29] audit: type=1326 audit(1759438804.784:17346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12771 comm="syz.5.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1c300ceec9 code=0x7ffc0000 [ 227.148831][ T29] audit: type=1326 audit(1759438804.784:17347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12771 comm="syz.5.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c300ceec9 code=0x7ffc0000 [ 227.173125][ T29] audit: type=1326 audit(1759438804.784:17348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12771 comm="syz.5.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1c300ceec9 code=0x7ffc0000 [ 227.222151][T12782] loop5: detected capacity change from 0 to 512 [ 227.229542][T12782] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 227.246528][T12782] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.2999: invalid indirect mapped block 4294967295 (level 0) [ 227.287588][T12782] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.2999: invalid indirect mapped block 4294967295 (level 1) [ 227.334796][T12782] EXT4-fs (loop5): 1 orphan inode deleted [ 227.340732][T12782] EXT4-fs (loop5): 1 truncate cleaned up [ 227.378775][T12782] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.424174][T12491] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.502916][ T23] hid-generic 0000:3000000:0000.0030: unknown main item tag 0x4 [ 227.510801][ T23] hid-generic 0000:3000000:0000.0030: unknown main item tag 0x2 [ 227.524623][ T23] hid-generic 0000:3000000:0000.0030: unknown main item tag 0x3 [ 227.542710][ T23] hid-generic 0000:3000000:0000.0030: hidraw0: HID v0.00 Device [sy] on syz0 [ 227.564995][ T7718] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.580673][T12454] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.642376][ T7718] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.693593][ T7718] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.744083][ T7718] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.868437][ T7718] bridge_slave_1: left allmulticast mode [ 227.874444][ T7718] bridge_slave_1: left promiscuous mode [ 227.880402][ T7718] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.907297][ T7718] bridge_slave_0: left allmulticast mode [ 227.913063][ T7718] bridge_slave_0: left promiscuous mode [ 227.918899][ T7718] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.051645][ T7718] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.069288][ T7718] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.092276][ T7718] bond0 (unregistering): Released all slaves [ 228.191953][T12799] lo speed is unknown, defaulting to 1000 [ 228.230445][ T7718] hsr_slave_0: left promiscuous mode [ 228.242379][ T7718] hsr_slave_1: left promiscuous mode [ 228.255027][ T7718] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.262594][ T7718] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.286250][ T7718] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.293823][ T7718] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.318671][ T7718] veth1_macvtap: left promiscuous mode [ 228.326573][ T7718] veth0_macvtap: left promiscuous mode [ 228.335034][ T7718] veth1_vlan: left promiscuous mode [ 228.341418][ T7718] veth0_vlan: left promiscuous mode [ 228.440725][ T7718] team0 (unregistering): Port device team_slave_1 removed [ 228.454764][ T7718] team0 (unregistering): Port device team_slave_0 removed [ 228.494188][T12810] lo speed is unknown, defaulting to 1000 [ 228.500332][T12823] netlink: 'syz.5.3012': attribute type 30 has an invalid length. [ 228.555642][T12818] lo speed is unknown, defaulting to 1000 [ 228.676706][T12799] chnl_net:caif_netlink_parms(): no params data found [ 228.720337][T12799] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.727634][T12799] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.735382][T12799] bridge_slave_0: entered allmulticast mode [ 228.742517][T12799] bridge_slave_0: entered promiscuous mode [ 228.749754][T12799] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.756945][T12799] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.765084][T12799] bridge_slave_1: entered allmulticast mode [ 228.771810][T12799] bridge_slave_1: entered promiscuous mode [ 228.785584][T12836] netlink: 'syz.8.3022': attribute type 30 has an invalid length. [ 228.798334][T12799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.810369][T12837] __nla_validate_parse: 2 callbacks suppressed [ 228.810386][T12837] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3013'. [ 228.833013][T12799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.854433][T12799] team0: Port device team_slave_0 added [ 228.861455][T12799] team0: Port device team_slave_1 added [ 228.887692][T12799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.895444][T12799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.922001][T12799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.936758][T12799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.944065][T12799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.971064][T12799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.009470][T12799] hsr_slave_0: entered promiscuous mode [ 229.015775][T12799] hsr_slave_1: entered promiscuous mode [ 229.023317][T12799] debugfs: 'hsr0' already exists in 'hsr' [ 229.029191][T12799] Cannot create hsr debugfs directory [ 229.078685][T12850] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3016'. [ 229.415512][T12799] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 229.424745][T12799] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 229.435252][T12799] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 229.445051][T12799] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 229.464597][T12799] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.471900][T12799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.479362][T12799] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.486727][T12799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.516307][T12799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.532338][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.558153][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.578881][T12799] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.602706][ T7716] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.610276][ T7716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.625139][T12865] loop5: detected capacity change from 0 to 512 [ 229.635474][ T7722] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.642793][ T7722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.654586][T12865] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 229.666953][T12799] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 229.677908][T12799] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 229.691193][T12865] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.722030][T12865] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 229.787150][T12799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.852775][T12880] loop5: detected capacity change from 0 to 512 [ 229.929020][T12880] loop5: detected capacity change from 0 to 512 [ 229.945207][T12887] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3026'. [ 229.959632][T12880] EXT4-fs (loop5): orphan cleanup on readonly fs [ 229.969335][T12880] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3025: bg 0: block 248: padding at end of block bitmap is not set [ 229.987642][T12880] EXT4-fs error (device loop5): ext4_acquire_dquot:6943: comm syz.5.3025: Failed to acquire dquot type 1 [ 230.010713][T12880] EXT4-fs (loop5): 1 truncate cleaned up [ 230.076097][T12880] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 230.147269][T12799] veth0_vlan: entered promiscuous mode [ 230.154428][T12880] syz.5.3025 (12880) used greatest stack depth: 8720 bytes left [ 230.163479][T12799] veth1_vlan: entered promiscuous mode [ 230.173774][T12491] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.181342][T12900] lo speed is unknown, defaulting to 1000 [ 230.207313][T12799] veth0_macvtap: entered promiscuous mode [ 230.217798][T12902] loop5: detected capacity change from 0 to 512 [ 230.226154][T12799] veth1_macvtap: entered promiscuous mode [ 230.251152][T12902] loop5: detected capacity change from 0 to 512 [ 230.261787][T12902] EXT4-fs (loop5): orphan cleanup on readonly fs [ 230.261830][T12799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.271472][T12902] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3029: bg 0: block 248: padding at end of block bitmap is not set [ 230.280873][T12799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.300416][T12902] EXT4-fs error (device loop5): ext4_acquire_dquot:6943: comm syz.5.3029: Failed to acquire dquot type 1 [ 230.313897][T12902] EXT4-fs (loop5): 1 truncate cleaned up [ 230.320779][ T7716] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.332842][T12902] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 230.363296][ T7716] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.381184][ T7716] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.391888][ T7716] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.418367][T12908] loop6: detected capacity change from 0 to 512 [ 230.425732][T12908] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 230.433241][T12491] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.497350][T12914] FAULT_INJECTION: forcing a failure. [ 230.497350][T12914] name failslab, interval 1, probability 0, space 0, times 0 [ 230.510465][T12914] CPU: 1 UID: 0 PID: 12914 Comm: syz.5.3031 Not tainted syzkaller #0 PREEMPT(voluntary) [ 230.510500][T12914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 230.510516][T12914] Call Trace: [ 230.510524][T12914] [ 230.510533][T12914] __dump_stack+0x1d/0x30 [ 230.510609][T12914] dump_stack_lvl+0xe8/0x140 [ 230.510630][T12914] dump_stack+0x15/0x1b [ 230.510683][T12914] should_fail_ex+0x265/0x280 [ 230.510712][T12914] ? legacy_init_fs_context+0x31/0x80 [ 230.510814][T12914] should_failslab+0x8c/0xb0 [ 230.510837][T12914] __kmalloc_cache_noprof+0x4c/0x320 [ 230.510871][T12914] legacy_init_fs_context+0x31/0x80 [ 230.510992][T12914] alloc_fs_context+0x3ef/0x4e0 [ 230.511047][T12914] fs_context_for_mount+0x22/0x30 [ 230.511087][T12914] do_new_mount+0xe9/0x600 [ 230.511127][T12914] ? security_capable+0x83/0x90 [ 230.511160][T12914] path_mount+0x4a4/0xb30 [ 230.511199][T12914] ? user_path_at+0x109/0x130 [ 230.511234][T12914] __se_sys_mount+0x28f/0x2e0 [ 230.511339][T12914] ? fput+0x8f/0xc0 [ 230.511372][T12914] __x64_sys_mount+0x67/0x80 [ 230.511413][T12914] x64_sys_call+0x2b51/0x3000 [ 230.511532][T12914] do_syscall_64+0xd2/0x200 [ 230.511556][T12914] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 230.511587][T12914] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 230.511646][T12914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.511675][T12914] RIP: 0033:0x7f1c300ceec9 [ 230.511701][T12914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.511786][T12914] RSP: 002b:00007f1c2eb2f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 230.511810][T12914] RAX: ffffffffffffffda RBX: 00007f1c30325fa0 RCX: 00007f1c300ceec9 [ 230.511826][T12914] RDX: 0000200000000140 RSI: 00002000000000c0 RDI: 0000000000000000 [ 230.511841][T12914] RBP: 00007f1c2eb2f090 R08: 0000200000000240 R09: 0000000000000000 [ 230.511857][T12914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.511872][T12914] R13: 00007f1c30326038 R14: 00007f1c30325fa0 R15: 00007ffcf0a12208 [ 230.511896][T12914] [ 230.801992][T12923] loop5: detected capacity change from 0 to 512 [ 230.814938][T12923] EXT4-fs: Ignoring removed mblk_io_submit option [ 230.822268][T12923] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 230.840726][T12923] EXT4-fs (loop5): 1 truncate cleaned up [ 230.845187][T12929] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3036'. [ 230.856078][T12923] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.882982][T12930] loop6: detected capacity change from 0 to 512 [ 230.908845][T12930] EXT4-fs: Ignoring removed mblk_io_submit option [ 230.924362][T12930] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 230.951108][T12930] EXT4-fs (loop6): 1 truncate cleaned up [ 230.957827][T12930] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.016168][T12941] lo speed is unknown, defaulting to 1000 [ 231.131960][T12948] lo speed is unknown, defaulting to 1000 [ 231.245294][T12952] vhci_hcd: invalid port number 222 [ 231.250729][T12952] vhci_hcd: default hub control req: 8012 v0302 i00de l0 [ 231.390740][T12956] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3046'. [ 231.663285][T12491] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /27/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 231.701005][T12491] EXT4-fs error (device loop5): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 231.731260][T12491] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /27/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 231.757628][T12491] EXT4-fs error (device loop5): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 231.781526][T12491] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /27/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 231.807067][T12491] EXT4-fs error (device loop5): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 231.889589][T12491] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /27/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 231.923293][T12977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3055'. [ 231.932713][T12491] EXT4-fs error (device loop5): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 231.955447][T12491] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /27/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 231.978855][ T29] kauditd_printk_skb: 268 callbacks suppressed [ 231.978876][ T29] audit: type=1400 audit(1759438809.784:17613): avc: denied { ioctl } for pid=12972 comm="syz.2.3054" path="socket:[49670]" dev="sockfs" ino=49670 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 232.012694][T12491] EXT4-fs error (device loop5): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 232.050276][T12984] netlink: 'syz.2.3056': attribute type 30 has an invalid length. [ 232.062075][T12799] EXT4-fs error (device loop6): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /3/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 232.086720][T12799] EXT4-fs error (device loop6): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 232.111485][T12799] EXT4-fs error (device loop6): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /3/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 232.134651][T12799] EXT4-fs error (device loop6): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 232.162737][T12799] EXT4-fs error (device loop6): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /3/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 232.204578][T12799] EXT4-fs error (device loop6): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 232.243167][T12799] EXT4-fs error (device loop6): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /3/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 232.285927][T12799] EXT4-fs error (device loop6): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 232.327556][T12799] EXT4-fs error (device loop6): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /3/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 232.357065][T12799] EXT4-fs error (device loop6): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 232.397899][ T29] audit: type=1326 audit(1759438810.194:17614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12998 comm="syz.8.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2f14eec9 code=0x7ffc0000 [ 232.422022][ T29] audit: type=1326 audit(1759438810.194:17615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12998 comm="syz.8.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2f14eec9 code=0x7ffc0000 [ 232.446057][ T29] audit: type=1326 audit(1759438810.194:17616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12998 comm="syz.8.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7feb2f14eec9 code=0x7ffc0000 [ 232.470539][ T29] audit: type=1326 audit(1759438810.194:17617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12998 comm="syz.8.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2f14eec9 code=0x7ffc0000 [ 232.494470][ T29] audit: type=1326 audit(1759438810.194:17618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12998 comm="syz.8.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feb2f14eec9 code=0x7ffc0000 [ 232.518400][ T29] audit: type=1326 audit(1759438810.204:17619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12998 comm="syz.8.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2f14eec9 code=0x7ffc0000 [ 232.542373][ T29] audit: type=1326 audit(1759438810.204:17620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12998 comm="syz.8.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7feb2f14eec9 code=0x7ffc0000 [ 232.566705][ T29] audit: type=1326 audit(1759438810.204:17621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12998 comm="syz.8.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2f14eec9 code=0x7ffc0000 [ 232.590825][ T29] audit: type=1326 audit(1759438810.204:17622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12998 comm="syz.8.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7feb2f14eec9 code=0x7ffc0000 [ 232.685064][T13007] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3065'. [ 232.710224][T12491] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.741312][ T7716] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.776793][T13009] lo speed is unknown, defaulting to 1000 [ 232.815635][ T7716] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.897592][ T7716] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.957564][ T7716] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.001556][T13024] netlink: zone id is out of range [ 233.006808][T13024] netlink: zone id is out of range [ 233.012137][T13024] netlink: zone id is out of range [ 233.017294][T13024] netlink: zone id is out of range [ 233.022552][T13024] netlink: zone id is out of range [ 233.028778][T13024] netlink: zone id is out of range [ 233.033935][T13024] netlink: zone id is out of range [ 233.039425][T13024] netlink: zone id is out of range [ 233.045065][T13024] netlink: zone id is out of range [ 233.078575][T13016] lo speed is unknown, defaulting to 1000 [ 233.078603][T13024] netlink: zone id is out of range [ 233.113087][ T7716] bridge_slave_1: left allmulticast mode [ 233.119113][ T7716] bridge_slave_1: left promiscuous mode [ 233.124843][ T7716] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.138517][ T7716] bridge_slave_0: left allmulticast mode [ 233.144280][ T7716] bridge_slave_0: left promiscuous mode [ 233.149991][ T7716] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.229539][T13044] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3079'. [ 233.272616][ T7716] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.283304][ T7716] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.294738][ T7716] bond0 (unregistering): Released all slaves [ 233.420144][T13016] chnl_net:caif_netlink_parms(): no params data found [ 233.445995][ T7716] hsr_slave_0: left promiscuous mode [ 233.454731][ T7716] hsr_slave_1: left promiscuous mode [ 233.469927][ T7716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.477563][ T7716] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.488012][ T7716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.496218][ T7716] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.517620][ T7716] veth1_macvtap: left promiscuous mode [ 233.524632][ T7716] veth0_macvtap: left promiscuous mode [ 233.530666][ T7716] veth1_vlan: left promiscuous mode [ 233.535914][ T7716] veth0_vlan: left promiscuous mode [ 233.626067][ T7716] team0 (unregistering): Port device team_slave_1 removed [ 233.636335][ T7716] team0 (unregistering): Port device team_slave_0 removed [ 233.689739][T13057] lo speed is unknown, defaulting to 1000 [ 233.768161][T12799] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.814953][T13016] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.822446][T13016] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.831761][T13016] bridge_slave_0: entered allmulticast mode [ 233.839357][T13016] bridge_slave_0: entered promiscuous mode [ 233.852531][T13016] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.860176][T13016] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.877807][T13016] bridge_slave_1: entered allmulticast mode [ 233.892119][T13016] bridge_slave_1: entered promiscuous mode [ 233.926046][T13016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.940600][T13016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.956126][T13079] netlink: 'syz.8.3089': attribute type 2 has an invalid length. [ 233.986669][T13073] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 233.997214][T13072] delete_channel: no stack [ 234.000238][T13016] team0: Port device team_slave_0 added [ 234.018342][T13016] team0: Port device team_slave_1 added [ 234.029366][T13079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.038723][T13079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.057905][T13016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.065289][T13016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.092098][T13016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.104733][T13016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.112003][T13016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.138355][T13016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.157620][T13070] lo speed is unknown, defaulting to 1000 [ 234.190892][T13016] hsr_slave_0: entered promiscuous mode [ 234.198495][T13016] hsr_slave_1: entered promiscuous mode [ 234.220126][T13088] netlink: 'syz.1.3091': attribute type 2 has an invalid length. [ 234.244668][ T7716] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.289979][T13090] netlink: 'syz.1.3091': attribute type 16 has an invalid length. [ 234.346066][ T7716] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.383411][ T7716] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.395928][T13070] chnl_net:caif_netlink_parms(): no params data found [ 234.439113][T13070] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.446357][T13070] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.453765][T13070] bridge_slave_0: entered allmulticast mode [ 234.460702][T13070] bridge_slave_0: entered promiscuous mode [ 234.467643][T13070] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.474885][T13070] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.482375][T13070] bridge_slave_1: entered allmulticast mode [ 234.490875][T13070] bridge_slave_1: entered promiscuous mode [ 234.505757][ T7716] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.525770][T13070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.536810][T13070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.557750][T13070] team0: Port device team_slave_0 added [ 234.565723][T13070] team0: Port device team_slave_1 added [ 234.608749][T13070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.615941][T13070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.642081][T13070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.653675][T13070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.660926][T13070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.687268][T13070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.701707][ T7716] bridge_slave_1: left allmulticast mode [ 234.707462][ T7716] bridge_slave_1: left promiscuous mode [ 234.713307][ T7716] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.721873][ T7716] bridge_slave_0: left allmulticast mode [ 234.727567][ T7716] bridge_slave_0: left promiscuous mode [ 234.733648][ T7716] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.851196][ T7716] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.861613][ T7716] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.979750][ T7716] bond0 (unregistering): Released all slaves [ 235.148348][T13070] hsr_slave_0: entered promiscuous mode [ 235.160718][T13070] hsr_slave_1: entered promiscuous mode [ 235.169517][T13070] debugfs: 'hsr0' already exists in 'hsr' [ 235.175282][T13070] Cannot create hsr debugfs directory [ 235.184615][T13110] lo speed is unknown, defaulting to 1000 [ 235.383548][T13016] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 235.397156][ T7716] hsr_slave_0: left promiscuous mode [ 235.410067][ T7716] hsr_slave_1: left promiscuous mode [ 235.415984][ T7716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.423456][ T7716] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.450533][ T7716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.458026][ T7716] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.471323][ T7716] veth1_macvtap: left promiscuous mode [ 235.484657][ T7716] veth0_macvtap: left promiscuous mode [ 235.495020][ T7716] veth1_vlan: left promiscuous mode [ 235.500363][ T7716] veth0_vlan: left promiscuous mode [ 235.576218][T13118] FAULT_INJECTION: forcing a failure. [ 235.576218][T13118] name failslab, interval 1, probability 0, space 0, times 0 [ 235.589197][T13118] CPU: 0 UID: 0 PID: 13118 Comm: syz.2.3098 Not tainted syzkaller #0 PREEMPT(voluntary) [ 235.589268][T13118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 235.589281][T13118] Call Trace: [ 235.589286][T13118] [ 235.589293][T13118] __dump_stack+0x1d/0x30 [ 235.589316][T13118] dump_stack_lvl+0xe8/0x140 [ 235.589358][T13118] dump_stack+0x15/0x1b [ 235.589417][T13118] should_fail_ex+0x265/0x280 [ 235.589440][T13118] ? __se_sys_mount+0xef/0x2e0 [ 235.589533][T13118] should_failslab+0x8c/0xb0 [ 235.589572][T13118] __kmalloc_cache_noprof+0x4c/0x320 [ 235.589602][T13118] ? memdup_user+0x99/0xd0 [ 235.589629][T13118] __se_sys_mount+0xef/0x2e0 [ 235.589711][T13118] ? fput+0x8f/0xc0 [ 235.589743][T13118] ? ksys_write+0x192/0x1a0 [ 235.589796][T13118] __x64_sys_mount+0x67/0x80 [ 235.589837][T13118] x64_sys_call+0x2b51/0x3000 [ 235.589885][T13118] do_syscall_64+0xd2/0x200 [ 235.589902][T13118] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 235.589931][T13118] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 235.589973][T13118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.590075][T13118] RIP: 0033:0x7f874f7beec9 [ 235.590095][T13118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.590113][T13118] RSP: 002b:00007f874e227038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 235.590132][T13118] RAX: ffffffffffffffda RBX: 00007f874fa15fa0 RCX: 00007f874f7beec9 [ 235.590146][T13118] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 235.590162][T13118] RBP: 00007f874e227090 R08: 0000200000000080 R09: 0000000000000000 [ 235.590177][T13118] R10: 0000000002004000 R11: 0000000000000246 R12: 0000000000000001 [ 235.590225][T13118] R13: 00007f874fa16038 R14: 00007f874fa15fa0 R15: 00007fff7feddd68 [ 235.590247][T13118] [ 235.594006][ T7716] team0 (unregistering): Port device team_slave_1 removed [ 235.806933][ T7716] team0 (unregistering): Port device team_slave_0 removed [ 235.849076][T13016] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 235.858102][T13016] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 235.898965][T13016] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 235.948499][T13133] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3101'. [ 235.965636][T13133] netlink: 160 bytes leftover after parsing attributes in process `syz.8.3101'. [ 235.982388][T13016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.996457][T13016] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.008264][ T7704] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.015735][ T7704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.038737][ T7704] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.045930][ T7704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.064236][T13138] lo speed is unknown, defaulting to 1000 [ 236.124316][T13146] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3105'. [ 236.218162][T13016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.398404][T13070] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 236.420157][T13070] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 236.482529][T13070] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 236.497153][T13070] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 236.516979][T13168] netlink: 'syz.1.3110': attribute type 30 has an invalid length. [ 236.555815][T13170] lo speed is unknown, defaulting to 1000 [ 236.657315][T13070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.686859][T13070] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.710458][ T7718] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.717718][ T7718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.759666][ T7726] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.767103][ T7726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.844423][T13016] veth0_vlan: entered promiscuous mode [ 236.869823][T13016] veth1_vlan: entered promiscuous mode [ 236.893399][T13070] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 236.903977][T13070] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 236.941051][T13016] veth0_macvtap: entered promiscuous mode [ 236.949087][T13016] veth1_macvtap: entered promiscuous mode [ 236.959986][T13016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.998877][ T29] kauditd_printk_skb: 305 callbacks suppressed [ 236.998895][ T29] audit: type=1400 audit(1759438814.824:17926): avc: denied { write } for pid=13191 comm="syz.1.3115" path="socket:[51889]" dev="sockfs" ino=51889 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 237.035427][ T29] audit: type=1400 audit(1759438814.824:17927): avc: denied { map_create } for pid=13200 comm="syz.8.3118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 237.035470][ T29] audit: type=1400 audit(1759438814.824:17928): avc: denied { bpf } for pid=13200 comm="syz.8.3118" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 237.035503][ T29] audit: type=1400 audit(1759438814.824:17929): avc: denied { map_read map_write } for pid=13200 comm="syz.8.3118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 237.035637][ T29] audit: type=1400 audit(1759438814.824:17930): avc: denied { prog_load } for pid=13200 comm="syz.8.3118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 237.035659][ T29] audit: type=1400 audit(1759438814.824:17931): avc: denied { perfmon } for pid=13200 comm="syz.8.3118" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 237.060583][T13016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.064052][ T7722] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.064145][ T7722] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.064254][ T29] audit: type=1400 audit(1759438814.884:17932): avc: denied { module_request } for pid=13070 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 237.066715][ T7718] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.066759][ T7718] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.075445][T13191] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 237.077816][ T29] audit: type=1400 audit(1759438814.894:17933): avc: denied { sys_module } for pid=13070 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 237.090828][ T29] audit: type=1400 audit(1759438814.904:17934): avc: denied { prog_run } for pid=13202 comm="syz.2.3117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 237.284596][ T29] audit: type=1400 audit(1759438814.934:17935): avc: denied { read write } for pid=13202 comm="syz.2.3117" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 237.326046][T13209] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 237.334054][T13209] syz_tun: entered promiscuous mode [ 237.369968][T13209] vlan2: entered promiscuous mode [ 237.404718][T13070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.425125][T13217] lo speed is unknown, defaulting to 1000 [ 237.508738][T13223] lo speed is unknown, defaulting to 1000 [ 237.619792][T13236] netlink: 'syz.2.3124': attribute type 30 has an invalid length. [ 237.714587][T13070] veth0_vlan: entered promiscuous mode [ 237.731269][T13070] veth1_vlan: entered promiscuous mode [ 237.741653][T13243] netlink: 'syz.4.3126': attribute type 1 has an invalid length. [ 237.751168][T13243] 9pnet_fd: Insufficient options for proto=fd [ 237.823045][T13253] lo speed is unknown, defaulting to 1000 [ 237.890384][T13255] netlink: 'syz.8.3129': attribute type 2 has an invalid length. [ 237.899460][T13070] veth0_macvtap: entered promiscuous mode [ 237.917093][T13255] netlink: 'syz.8.3129': attribute type 16 has an invalid length. [ 237.962025][T13070] veth1_macvtap: entered promiscuous mode [ 237.989597][T13070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.001480][T13070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.013105][ T3380] hid-generic 0000:3000000:0000.0031: unknown main item tag 0x4 [ 238.020896][ T3380] hid-generic 0000:3000000:0000.0031: unknown main item tag 0x2 [ 238.060963][ T3380] hid-generic 0000:3000000:0000.0031: unknown main item tag 0x3 [ 238.104325][ T3380] hid-generic 0000:3000000:0000.0031: hidraw0: HID v0.00 Device [sy] on syz0 [ 238.122335][ T7718] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.140904][ T7718] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.159142][ T7718] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.182055][ T7718] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.538217][T13283] loop4: detected capacity change from 0 to 512 [ 238.544948][T13283] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 238.593990][T13285] lo speed is unknown, defaulting to 1000 [ 238.665661][T13290] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3137'. [ 238.734323][T13294] lo speed is unknown, defaulting to 1000 [ 238.830903][T13298] netlink: 'syz.4.3141': attribute type 10 has an invalid length. [ 238.842353][T13298] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3141'. [ 238.865833][T13298] dummy0: entered promiscuous mode [ 238.879946][T13298] bridge0: port 3(dummy0) entered blocking state [ 238.888910][T13298] bridge0: port 3(dummy0) entered disabled state [ 238.913498][T13298] dummy0: entered allmulticast mode [ 238.972391][T13298] bridge0: port 3(dummy0) entered blocking state [ 238.979713][T13298] bridge0: port 3(dummy0) entered forwarding state [ 239.179983][T13327] FAULT_INJECTION: forcing a failure. [ 239.179983][T13327] name failslab, interval 1, probability 0, space 0, times 0 [ 239.193143][T13327] CPU: 0 UID: 0 PID: 13327 Comm: syz.8.3151 Not tainted syzkaller #0 PREEMPT(voluntary) [ 239.193178][T13327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 239.193274][T13327] Call Trace: [ 239.193281][T13327] [ 239.193290][T13327] __dump_stack+0x1d/0x30 [ 239.193317][T13327] dump_stack_lvl+0xe8/0x140 [ 239.193341][T13327] dump_stack+0x15/0x1b [ 239.193356][T13327] should_fail_ex+0x265/0x280 [ 239.193379][T13327] should_failslab+0x8c/0xb0 [ 239.193404][T13327] kmem_cache_alloc_noprof+0x50/0x310 [ 239.193434][T13327] ? audit_log_start+0x342/0x720 [ 239.193473][T13327] audit_log_start+0x342/0x720 [ 239.193516][T13327] ? kstrtouint+0x76/0xc0 [ 239.193561][T13327] audit_seccomp+0x48/0x100 [ 239.193595][T13327] ? __seccomp_filter+0x82d/0x1250 [ 239.193620][T13327] __seccomp_filter+0x83e/0x1250 [ 239.193650][T13327] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 239.193700][T13327] ? vfs_write+0x7e8/0x960 [ 239.193732][T13327] ? __rcu_read_unlock+0x4f/0x70 [ 239.193823][T13327] ? __fget_files+0x184/0x1c0 [ 239.193852][T13327] __secure_computing+0x82/0x150 [ 239.193882][T13327] syscall_trace_enter+0xcf/0x1e0 [ 239.193961][T13327] do_syscall_64+0xac/0x200 [ 239.193979][T13327] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 239.194049][T13327] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 239.194231][T13327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.194254][T13327] RIP: 0033:0x7feb2f14eec9 [ 239.194328][T13327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.194351][T13327] RSP: 002b:00007feb2db96038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.194372][T13327] RAX: ffffffffffffffda RBX: 00007feb2f3a6090 RCX: 00007feb2f14eec9 [ 239.194384][T13327] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 239.194397][T13327] RBP: 00007feb2db96090 R08: 0000000000000000 R09: 0000000000000000 [ 239.194461][T13327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.194473][T13327] R13: 00007feb2f3a6128 R14: 00007feb2f3a6090 R15: 00007ffc33d50e58 [ 239.194543][T13327] [ 239.686946][ T10] hid-generic 0000:3000000:0000.0032: unknown main item tag 0x4 [ 239.694788][ T10] hid-generic 0000:3000000:0000.0032: unknown main item tag 0x2 [ 239.704826][ T10] hid-generic 0000:3000000:0000.0032: unknown main item tag 0x3 [ 239.719658][ T10] hid-generic 0000:3000000:0000.0032: hidraw0: HID v0.00 Device [sy] on syz0 [ 240.241491][T13324] syz.9.3150 (13324) used greatest stack depth: 7248 bytes left [ 240.260775][T13347] loop9: detected capacity change from 0 to 512 [ 240.268072][T13347] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 240.360443][T13344] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 240.414518][T13351] pim6reg1: entered promiscuous mode [ 240.420242][T13351] pim6reg1: entered allmulticast mode [ 240.524169][ T10] hid-generic 0000:3000000:0000.0033: unknown main item tag 0x4 [ 240.532131][ T10] hid-generic 0000:3000000:0000.0033: unknown main item tag 0x2 [ 240.542224][ T10] hid-generic 0000:3000000:0000.0033: unknown main item tag 0x3 [ 240.552471][ T10] hid-generic 0000:3000000:0000.0033: hidraw0: HID v0.00 Device [sy] on syz0 [ 240.712525][T13365] netlink: 'syz.4.3165': attribute type 30 has an invalid length. [ 240.779232][T13367] lo speed is unknown, defaulting to 1000 [ 241.057961][T13374] capability: warning: `syz.2.3169' uses deprecated v2 capabilities in a way that may be insecure [ 241.071248][T13379] netlink: 'syz.4.3170': attribute type 10 has an invalid length. [ 241.084802][T13379] bridge0: port 3(dummy0) entered disabled state [ 241.092186][T13374] program syz.2.3169 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.104444][T13379] dummy0: left allmulticast mode [ 241.123452][T13379] dummy0: left promiscuous mode [ 241.128578][T13379] bridge0: port 3(dummy0) entered disabled state [ 241.142382][T13379] team0: Failed to send options change via netlink (err -105) [ 241.150222][T13379] team0: Port device dummy0 added [ 241.244893][T13378] loop9: detected capacity change from 0 to 128 [ 241.259470][ T2952] lo speed is unknown, defaulting to 1000 [ 241.288054][T13384] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 241.345576][T13394] lo speed is unknown, defaulting to 1000 [ 241.418343][T13391] netlink: 'syz.4.3177': attribute type 30 has an invalid length. [ 241.475355][T13404] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3182'. [ 241.529631][T13409] lo speed is unknown, defaulting to 1000 [ 241.623952][T13404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=13404 comm=syz.9.3182 [ 241.696914][T13420] netlink: 'syz.9.3186': attribute type 1 has an invalid length. [ 241.806549][ T29] kauditd_printk_skb: 636 callbacks suppressed [ 241.806567][ T29] audit: type=1400 audit(1759439587.858:18570): avc: denied { watch watch_reads } for pid=13425 comm="syz.9.3190" path="/12" dev="tmpfs" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 241.851084][T13402] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=13402 comm=syz.2.3181 [ 241.855555][ T29] audit: type=1326 audit(1759439587.890:18571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13401 comm="syz.2.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f874f7beec9 code=0x7ffc0000 [ 241.887870][ T29] audit: type=1326 audit(1759439587.890:18572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13401 comm="syz.2.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874f7beec9 code=0x7ffc0000 [ 241.912329][ T29] audit: type=1326 audit(1759439587.890:18573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13401 comm="syz.2.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874f7beec9 code=0x7ffc0000 [ 241.936638][ T29] audit: type=1326 audit(1759439587.890:18574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13401 comm="syz.2.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f874f7beec9 code=0x7ffc0000 [ 241.960865][ T29] audit: type=1326 audit(1759439587.890:18575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13401 comm="syz.2.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874f7beec9 code=0x7ffc0000 [ 241.984849][ T29] audit: type=1326 audit(1759439587.890:18576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13401 comm="syz.2.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874f7beec9 code=0x7ffc0000 [ 242.008652][ T29] audit: type=1326 audit(1759439587.890:18577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13401 comm="syz.2.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f874f7beec9 code=0x7ffc0000 [ 242.032933][ T29] audit: type=1326 audit(1759439587.890:18578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13401 comm="syz.2.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874f7beec9 code=0x7ffc0000 [ 242.057233][ T29] audit: type=1326 audit(1759439587.890:18579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13401 comm="syz.2.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874f7beec9 code=0x7ffc0000 [ 242.124161][T13438] lo speed is unknown, defaulting to 1000 [ 242.212177][ T10] hid-generic 0000:3000000:0000.0034: unknown main item tag 0x4 [ 242.221606][ T10] hid-generic 0000:3000000:0000.0034: hidraw0: HID v0.00 Device [sy] on syz0 [ 242.308762][T13451] FAULT_INJECTION: forcing a failure. [ 242.308762][T13451] name failslab, interval 1, probability 0, space 0, times 0 [ 242.321843][T13451] CPU: 0 UID: 0 PID: 13451 Comm: syz.2.3197 Not tainted syzkaller #0 PREEMPT(voluntary) [ 242.321880][T13451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 242.321897][T13451] Call Trace: [ 242.321903][T13451] [ 242.321912][T13451] __dump_stack+0x1d/0x30 [ 242.321939][T13451] dump_stack_lvl+0xe8/0x140 [ 242.321964][T13451] dump_stack+0x15/0x1b [ 242.321986][T13451] should_fail_ex+0x265/0x280 [ 242.322023][T13451] ? legacy_init_fs_context+0x31/0x80 [ 242.322085][T13451] should_failslab+0x8c/0xb0 [ 242.322111][T13451] __kmalloc_cache_noprof+0x4c/0x320 [ 242.322145][T13451] legacy_init_fs_context+0x31/0x80 [ 242.322178][T13451] alloc_fs_context+0x3ef/0x4e0 [ 242.322252][T13451] fs_context_for_mount+0x22/0x30 [ 242.322357][T13451] do_new_mount+0xe9/0x600 [ 242.322468][T13451] ? security_capable+0x83/0x90 [ 242.322489][T13451] path_mount+0x4a4/0xb30 [ 242.322586][T13451] ? user_path_at+0x109/0x130 [ 242.322641][T13451] __se_sys_mount+0x28f/0x2e0 [ 242.322739][T13451] ? fput+0x8f/0xc0 [ 242.322766][T13451] __x64_sys_mount+0x67/0x80 [ 242.322797][T13451] x64_sys_call+0x2b51/0x3000 [ 242.322870][T13451] do_syscall_64+0xd2/0x200 [ 242.322947][T13451] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 242.322977][T13451] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 242.323019][T13451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.323047][T13451] RIP: 0033:0x7f874f7beec9 [ 242.323066][T13451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.323100][T13451] RSP: 002b:00007f874e227038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 242.323188][T13451] RAX: ffffffffffffffda RBX: 00007f874fa15fa0 RCX: 00007f874f7beec9 [ 242.323201][T13451] RDX: 00002000000002c0 RSI: 0000200000000300 RDI: 0000000000000000 [ 242.323213][T13451] RBP: 00007f874e227090 R08: 00002000000005c0 R09: 0000000000000000 [ 242.323224][T13451] R10: 0000000000200480 R11: 0000000000000246 R12: 0000000000000001 [ 242.323236][T13451] R13: 00007f874fa16038 R14: 00007f874fa15fa0 R15: 00007fff7feddd68 [ 242.323334][T13451] [ 242.623556][T13447] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3196'. [ 242.641293][T13447] bridge_slave_1: left allmulticast mode [ 242.647113][T13447] bridge_slave_1: left promiscuous mode [ 242.652959][T13447] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.683228][T13447] bridge_slave_0: left allmulticast mode [ 242.689200][T13447] bridge_slave_0: left promiscuous mode [ 242.695203][T13447] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.822190][T13473] lo speed is unknown, defaulting to 1000 [ 243.102027][T13491] tipc: Started in network mode [ 243.107177][T13491] tipc: Node identity 6ad5270315c1, cluster identity 4711 [ 243.114607][T13491] tipc: Enabled bearer , priority 0 [ 243.141286][T13495] netlink: 830 bytes leftover after parsing attributes in process `syz.9.3215'. [ 243.153004][T13490] tipc: Disabling bearer [ 243.334437][T13503] lo speed is unknown, defaulting to 1000 [ 243.502408][T13510] loop4: detected capacity change from 0 to 512 [ 243.548212][T13510] EXT4-fs warning (device loop4): ext4_enable_quotas:7178: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 243.569953][T13510] EXT4-fs (loop4): mount failed [ 243.994752][T13534] netlink: 830 bytes leftover after parsing attributes in process `syz.8.3228'. [ 244.135580][T13537] netlink: 'syz.2.3229': attribute type 30 has an invalid length. [ 244.501319][T13552] lo speed is unknown, defaulting to 1000 [ 244.852400][T13560] loop4: detected capacity change from 0 to 512 [ 244.862567][T13560] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.954347][T13016] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.054873][T13573] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3241'. [ 245.123554][T13576] loop9: detected capacity change from 0 to 512 [ 245.159757][T13576] loop9: detected capacity change from 0 to 512 [ 245.170178][T13576] EXT4-fs (loop9): orphan cleanup on readonly fs [ 245.177800][T13576] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3242: bg 0: block 248: padding at end of block bitmap is not set [ 245.194724][T13576] EXT4-fs error (device loop9): ext4_acquire_dquot:6943: comm syz.9.3242: Failed to acquire dquot type 1 [ 245.209306][T13576] EXT4-fs (loop9): 1 truncate cleaned up [ 245.216787][T13576] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 245.296562][T13070] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.393884][T13595] loop9: detected capacity change from 0 to 512 [ 245.434025][T13595] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.637279][T13070] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.894500][T13619] lo speed is unknown, defaulting to 1000 [ 245.907653][T13619] lo speed is unknown, defaulting to 1000 [ 245.920634][T13619] lo speed is unknown, defaulting to 1000 [ 245.935136][T13619] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 245.962530][T13619] lo speed is unknown, defaulting to 1000 [ 245.978413][T13619] lo speed is unknown, defaulting to 1000 [ 245.991446][T13619] lo speed is unknown, defaulting to 1000 [ 246.007145][T13619] lo speed is unknown, defaulting to 1000 [ 246.019939][T13619] lo speed is unknown, defaulting to 1000 [ 246.118431][T13622] tipc: Started in network mode [ 246.123610][T13622] tipc: Node identity 967e62730e13, cluster identity 4711 [ 246.130895][T13622] tipc: Enabled bearer , priority 0 [ 246.319778][T13625] loop4: detected capacity change from 0 to 512 [ 246.348459][T13625] loop4: detected capacity change from 0 to 512 [ 246.426400][T13625] EXT4-fs (loop4): orphan cleanup on readonly fs [ 246.433601][T13625] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3258: bg 0: block 248: padding at end of block bitmap is not set [ 246.480176][T13625] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.3258: Failed to acquire dquot type 1 [ 246.510905][T13625] EXT4-fs (loop4): 1 truncate cleaned up [ 246.537317][T13625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 246.593237][ T29] kauditd_printk_skb: 499 callbacks suppressed [ 246.593255][ T29] audit: type=1326 audit(1759439592.877:19074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13633 comm="syz.9.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145bdeeec9 code=0x7ffc0000 [ 246.662074][T13636] netlink: 'syz.1.3262': attribute type 30 has an invalid length. [ 246.686947][T13016] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.698674][ T29] audit: type=1326 audit(1759439592.919:19075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13633 comm="syz.9.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f145bdeeec9 code=0x7ffc0000 [ 246.722584][ T29] audit: type=1326 audit(1759439592.919:19076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13633 comm="syz.9.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145bdeeec9 code=0x7ffc0000 [ 246.746542][ T29] audit: type=1326 audit(1759439592.919:19077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13633 comm="syz.9.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f145bdeeec9 code=0x7ffc0000 [ 246.770309][ T29] audit: type=1326 audit(1759439592.919:19078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13633 comm="syz.9.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145bdeeec9 code=0x7ffc0000 [ 246.794438][ T29] audit: type=1326 audit(1759439592.919:19079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13633 comm="syz.9.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f145bdeeec9 code=0x7ffc0000 [ 246.818375][ T29] audit: type=1326 audit(1759439592.919:19080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13633 comm="syz.9.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145bdeeec9 code=0x7ffc0000 [ 246.842413][ T29] audit: type=1326 audit(1759439592.919:19081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13633 comm="syz.9.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f145bdeeec9 code=0x7ffc0000 [ 246.866180][ T29] audit: type=1326 audit(1759439592.919:19082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13633 comm="syz.9.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145bdeeec9 code=0x7ffc0000 [ 246.889866][ T29] audit: type=1326 audit(1759439592.919:19083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13633 comm="syz.9.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f145bdeeec9 code=0x7ffc0000 [ 246.924914][T13621] tipc: Resetting bearer [ 246.961120][T13621] tipc: Disabling bearer [ 247.205206][T13654] netlink: 'syz.8.3268': attribute type 1 has an invalid length. [ 247.244482][T13664] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3273'. [ 247.652156][T13690] netlink: 'syz.9.3282': attribute type 30 has an invalid length. [ 247.962394][T13698] loop9: detected capacity change from 0 to 512 [ 248.014515][T13698] EXT4-fs: Ignoring removed mblk_io_submit option [ 248.031673][T13698] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 248.056793][T13698] EXT4-fs (loop9): 1 truncate cleaned up [ 248.098711][T13698] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.138793][T13704] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3287'. [ 248.399465][T13720] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3294'. [ 248.449940][T13723] loop4: detected capacity change from 0 to 512 [ 248.504892][T13723] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 248.617585][T13725] lo speed is unknown, defaulting to 1000 [ 248.654319][T13725] lo speed is unknown, defaulting to 1000 [ 248.906194][T13733] netlink: 19 bytes leftover after parsing attributes in process `syz.8.3299'. [ 249.024991][T13070] EXT4-fs error (device loop9): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /38/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 249.049805][T13070] EXT4-fs error (device loop9): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 249.101746][T13070] EXT4-fs error (device loop9): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /38/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 249.127210][T13070] EXT4-fs error (device loop9): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 249.149719][T13070] EXT4-fs error (device loop9): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /38/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 249.173256][T13070] EXT4-fs error (device loop9): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 249.195677][T13070] EXT4-fs error (device loop9): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /38/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 249.221278][T13070] EXT4-fs error (device loop9): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 249.243356][T13070] EXT4-fs error (device loop9): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /38/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 249.266485][T13070] EXT4-fs error (device loop9): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 249.404155][T13741] net_ratelimit: 14 callbacks suppressed [ 249.404165][T13741] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 249.425454][ T3406] lo speed is unknown, defaulting to 1000 [ 249.448238][T13741] tipc: Enabled bearer , priority 0 [ 249.457163][T13741] tipc: Disabling bearer [ 249.537146][ T37] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.549541][T13070] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.617989][ T37] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.660639][T13757] lo speed is unknown, defaulting to 1000 [ 249.699276][T13757] lo speed is unknown, defaulting to 1000 [ 249.710463][T13762] netlink: 'syz.8.3308': attribute type 1 has an invalid length. [ 249.737429][ T37] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.776132][T13772] FAULT_INJECTION: forcing a failure. [ 249.776132][T13772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.789434][T13772] CPU: 1 UID: 0 PID: 13772 Comm: syz.8.3313 Not tainted syzkaller #0 PREEMPT(voluntary) [ 249.789467][T13772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 249.789484][T13772] Call Trace: [ 249.789491][T13772] [ 249.789498][T13772] __dump_stack+0x1d/0x30 [ 249.789522][T13772] dump_stack_lvl+0xe8/0x140 [ 249.789543][T13772] dump_stack+0x15/0x1b [ 249.789645][T13772] should_fail_ex+0x265/0x280 [ 249.789675][T13772] should_fail+0xb/0x20 [ 249.789699][T13772] should_fail_usercopy+0x1a/0x20 [ 249.789723][T13772] _copy_from_iter+0xd2/0xe80 [ 249.789752][T13772] ? alloc_pages_mpol+0x201/0x250 [ 249.789836][T13772] copy_page_from_iter+0x178/0x2a0 [ 249.789867][T13772] tun_get_user+0x679/0x26e0 [ 249.790027][T13772] ? ref_tracker_alloc+0x1f2/0x2f0 [ 249.790056][T13772] tun_chr_write_iter+0x15e/0x210 [ 249.790096][T13772] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 249.790129][T13772] vfs_write+0x52a/0x960 [ 249.790245][T13772] ksys_write+0xda/0x1a0 [ 249.790285][T13772] __x64_sys_write+0x40/0x50 [ 249.790317][T13772] x64_sys_call+0x2802/0x3000 [ 249.790421][T13772] do_syscall_64+0xd2/0x200 [ 249.790439][T13772] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 249.790488][T13772] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 249.790529][T13772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.790552][T13772] RIP: 0033:0x7feb2f14d97f [ 249.790571][T13772] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 249.790627][T13772] RSP: 002b:00007feb2dbb7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 249.790659][T13772] RAX: ffffffffffffffda RBX: 00007feb2f3a5fa0 RCX: 00007feb2f14d97f [ 249.790675][T13772] RDX: 0000000000000036 RSI: 0000200000000340 RDI: 00000000000000c8 [ 249.790750][T13772] RBP: 00007feb2dbb7090 R08: 0000000000000000 R09: 0000000000000000 [ 249.790766][T13772] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 249.790841][T13772] R13: 00007feb2f3a6038 R14: 00007feb2f3a5fa0 R15: 00007ffc33d50e58 [ 249.790859][T13772] [ 250.036853][ T37] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.132830][T13786] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3314'. [ 250.278273][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.289895][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.300829][ T37] bond0 (unregistering): Released all slaves [ 250.314398][T13760] lo speed is unknown, defaulting to 1000 [ 250.374045][T13760] lo speed is unknown, defaulting to 1000 [ 250.385306][T13815] lo speed is unknown, defaulting to 1000 [ 250.425940][T13815] lo speed is unknown, defaulting to 1000 [ 250.469059][ T37] hsr_slave_0: left promiscuous mode [ 250.477423][ T37] hsr_slave_1: left promiscuous mode [ 250.483475][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.491165][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.500486][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.508233][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.519926][ T37] veth1_macvtap: left promiscuous mode [ 250.525826][ T37] veth0_macvtap: left promiscuous mode [ 250.531854][ T37] veth1_vlan: left promiscuous mode [ 250.537230][ T37] veth0_vlan: left promiscuous mode [ 250.602882][ T37] team0 (unregistering): Port device team_slave_1 removed [ 250.612762][ T37] team0 (unregistering): Port device team_slave_0 removed [ 250.667314][T13760] chnl_net:caif_netlink_parms(): no params data found [ 250.680771][T13824] sch_fq: defrate 4294967295 ignored. [ 250.716654][T13834] loop4: detected capacity change from 0 to 512 [ 250.729945][T13760] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.737354][T13760] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.744676][T13760] bridge_slave_0: entered allmulticast mode [ 250.751211][T13760] bridge_slave_0: entered promiscuous mode [ 250.758331][T13760] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.765606][T13760] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.773045][T13760] bridge_slave_1: entered allmulticast mode [ 250.780583][T13760] bridge_slave_1: entered promiscuous mode [ 250.791556][T13834] loop4: detected capacity change from 0 to 512 [ 250.799462][T13834] EXT4-fs (loop4): orphan cleanup on readonly fs [ 250.808294][T13834] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3330: bg 0: block 248: padding at end of block bitmap is not set [ 250.825549][T13834] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.3330: Failed to acquire dquot type 1 [ 250.838148][T13834] EXT4-fs (loop4): 1 truncate cleaned up [ 250.838301][T13760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.855109][T13834] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 250.858407][T13760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.893644][T13760] team0: Port device team_slave_0 added [ 250.900686][T13760] team0: Port device team_slave_1 added [ 250.918857][T13016] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.929319][T13760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.936423][T13760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.962924][T13760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.974460][T13760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.981479][T13760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.007923][T13760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.067513][T13847] FAULT_INJECTION: forcing a failure. [ 251.067513][T13847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.075888][T13760] hsr_slave_0: entered promiscuous mode [ 251.080940][T13847] CPU: 1 UID: 0 PID: 13847 Comm: syz.2.3335 Not tainted syzkaller #0 PREEMPT(voluntary) [ 251.080977][T13847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 251.080995][T13847] Call Trace: [ 251.081003][T13847] [ 251.081013][T13847] __dump_stack+0x1d/0x30 [ 251.081043][T13847] dump_stack_lvl+0xe8/0x140 [ 251.081081][T13847] dump_stack+0x15/0x1b [ 251.081105][T13847] should_fail_ex+0x265/0x280 [ 251.081136][T13847] should_fail+0xb/0x20 [ 251.081221][T13847] should_fail_usercopy+0x1a/0x20 [ 251.081255][T13847] _copy_to_user+0x20/0xa0 [ 251.081295][T13847] simple_read_from_buffer+0xb5/0x130 [ 251.081340][T13847] proc_fail_nth_read+0x10e/0x150 [ 251.081443][T13847] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 251.081555][T13847] vfs_read+0x1a8/0x770 [ 251.081598][T13847] ? __rcu_read_unlock+0x4f/0x70 [ 251.081632][T13847] ? __fget_files+0x184/0x1c0 [ 251.081655][T13847] ? __pfx_br_ioctl_stub+0x10/0x10 [ 251.081752][T13847] ksys_read+0xda/0x1a0 [ 251.081798][T13847] __x64_sys_read+0x40/0x50 [ 251.081886][T13847] x64_sys_call+0x27c0/0x3000 [ 251.081928][T13847] do_syscall_64+0xd2/0x200 [ 251.081953][T13847] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 251.082034][T13847] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 251.082078][T13847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.082166][T13847] RIP: 0033:0x7f874f7bd8dc [ 251.082189][T13847] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 251.082213][T13847] RSP: 002b:00007f874e227030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 251.082239][T13847] RAX: ffffffffffffffda RBX: 00007f874fa15fa0 RCX: 00007f874f7bd8dc [ 251.082257][T13847] RDX: 000000000000000f RSI: 00007f874e2270a0 RDI: 0000000000000004 [ 251.082274][T13847] RBP: 00007f874e227090 R08: 0000000000000000 R09: 0000000000000000 [ 251.082290][T13847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.082332][T13847] R13: 00007f874fa16038 R14: 00007f874fa15fa0 R15: 00007fff7feddd68 [ 251.082360][T13847] [ 251.288158][T13854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3338'. [ 251.293836][T13760] hsr_slave_1: entered promiscuous mode [ 251.310843][T13760] debugfs: 'hsr0' already exists in 'hsr' [ 251.317306][T13760] Cannot create hsr debugfs directory [ 251.328177][T13854] team0 (unregistering): Port device team_slave_0 removed [ 251.337808][T13854] team0 (unregistering): Port device team_slave_1 removed [ 251.348533][T13854] team0 (unregistering): Port device dummy0 removed [ 251.359051][T13856] FAULT_INJECTION: forcing a failure. [ 251.359051][T13856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.367112][ T29] kauditd_printk_skb: 1461 callbacks suppressed [ 251.367134][ T29] audit: type=1326 audit(1759439597.885:20543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13844 comm="syz.8.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2f14eec9 code=0x50000 [ 251.372523][T13856] CPU: 0 UID: 0 PID: 13856 Comm: syz.1.3339 Not tainted syzkaller #0 PREEMPT(voluntary) [ 251.372637][T13856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 251.372654][T13856] Call Trace: [ 251.372661][T13856] [ 251.372672][T13856] __dump_stack+0x1d/0x30 [ 251.372701][T13856] dump_stack_lvl+0xe8/0x140 [ 251.372784][T13856] dump_stack+0x15/0x1b [ 251.372815][T13856] should_fail_ex+0x265/0x280 [ 251.372847][T13856] should_fail+0xb/0x20 [ 251.372873][T13856] should_fail_usercopy+0x1a/0x20 [ 251.372907][T13856] _copy_from_user+0x1c/0xb0 [ 251.373009][T13856] ___sys_sendmsg+0xc1/0x1d0 [ 251.373101][T13856] __x64_sys_sendmsg+0xd4/0x160 [ 251.373209][T13856] x64_sys_call+0x191e/0x3000 [ 251.373286][T13856] do_syscall_64+0xd2/0x200 [ 251.373312][T13856] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 251.373350][T13856] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 251.373454][T13856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.373486][T13856] RIP: 0033:0x7f36edfdeec9 [ 251.373507][T13856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.373533][T13856] RSP: 002b:00007f36eca47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.373634][T13856] RAX: ffffffffffffffda RBX: 00007f36ee235fa0 RCX: 00007f36edfdeec9 [ 251.373651][T13856] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 251.373669][T13856] RBP: 00007f36eca47090 R08: 0000000000000000 R09: 0000000000000000 [ 251.373712][T13856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.373727][T13856] R13: 00007f36ee236038 R14: 00007f36ee235fa0 R15: 00007ffcd3d2bbb8 [ 251.373816][T13856] [ 251.665728][ T29] audit: type=1326 audit(1759439597.990:20544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13844 comm="syz.8.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2f14eec9 code=0x50000 [ 251.671866][T13860] loop4: detected capacity change from 0 to 512 [ 251.689942][ T29] audit: type=1326 audit(1759439597.990:20545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13844 comm="syz.8.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2f14eec9 code=0x50000 [ 251.719857][ T29] audit: type=1326 audit(1759439597.990:20546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13844 comm="syz.8.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2f14eec9 code=0x50000 [ 251.743619][ T29] audit: type=1326 audit(1759439597.990:20547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13844 comm="syz.8.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2f14eec9 code=0x50000 [ 251.767406][ T29] audit: type=1326 audit(1759439597.990:20548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13844 comm="syz.8.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2f14eec9 code=0x50000 [ 251.784555][T13860] loop4: detected capacity change from 0 to 512 [ 251.791024][ T29] audit: type=1326 audit(1759439597.990:20549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13844 comm="syz.8.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2f14eec9 code=0x50000 [ 251.821420][ T29] audit: type=1326 audit(1759439597.990:20550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13844 comm="syz.8.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2f14eec9 code=0x50000 [ 251.845052][ T29] audit: type=1326 audit(1759439597.990:20551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13844 comm="syz.8.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2f14eec9 code=0x50000 [ 251.869448][ T29] audit: type=1326 audit(1759439597.990:20552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13844 comm="syz.8.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2f14eec9 code=0x50000 [ 251.904531][T13860] EXT4-fs (loop4): orphan cleanup on readonly fs [ 251.931331][T13860] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3342: bg 0: block 248: padding at end of block bitmap is not set [ 252.026772][T13860] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.3342: Failed to acquire dquot type 1 [ 252.122015][T13860] EXT4-fs (loop4): 1 truncate cleaned up [ 252.129161][T13860] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 252.171722][T13016] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.386619][T13868] lo speed is unknown, defaulting to 1000 [ 252.469490][T13760] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 252.492391][T13760] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 252.512662][T13868] lo speed is unknown, defaulting to 1000 [ 252.513513][T13760] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 252.533597][T13870] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3345'. [ 252.545332][T13760] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 252.562148][T13870] hsr_slave_0: left promiscuous mode [ 252.568142][T13870] hsr_slave_1: left promiscuous mode [ 252.588096][T13873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3345'. [ 252.617825][T13873] team0 (unregistering): Port device team_slave_0 removed [ 252.633205][T13873] team0 (unregistering): Port device team_slave_1 removed [ 252.750967][T13760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.776039][T13760] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.785708][ T7722] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.792852][ T7722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.800785][T13884] FAULT_INJECTION: forcing a failure. [ 252.800785][T13884] name failslab, interval 1, probability 0, space 0, times 0 [ 252.813917][T13884] CPU: 0 UID: 0 PID: 13884 Comm: syz.1.3349 Not tainted syzkaller #0 PREEMPT(voluntary) [ 252.813980][T13884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 252.813993][T13884] Call Trace: [ 252.813999][T13884] [ 252.814007][T13884] __dump_stack+0x1d/0x30 [ 252.814029][T13884] dump_stack_lvl+0xe8/0x140 [ 252.814049][T13884] dump_stack+0x15/0x1b [ 252.814066][T13884] should_fail_ex+0x265/0x280 [ 252.814152][T13884] should_failslab+0x8c/0xb0 [ 252.814172][T13884] kmem_cache_alloc_noprof+0x50/0x310 [ 252.814273][T13884] ? sk_prot_alloc+0x3f/0x190 [ 252.814359][T13884] sk_prot_alloc+0x3f/0x190 [ 252.814385][T13884] sk_alloc+0x34/0x360 [ 252.814482][T13884] unix_create1+0xa5/0x430 [ 252.814510][T13884] unix_stream_connect+0x196/0xa00 [ 252.814536][T13884] ? selinux_netlbl_socket_connect+0x115/0x130 [ 252.814650][T13884] ? selinux_socket_connect+0x57/0x70 [ 252.814678][T13884] ? __pfx_unix_stream_connect+0x10/0x10 [ 252.814710][T13884] __sys_connect+0x1f2/0x2b0 [ 252.814739][T13884] __x64_sys_connect+0x3f/0x50 [ 252.814798][T13884] x64_sys_call+0x2c0c/0x3000 [ 252.814820][T13884] do_syscall_64+0xd2/0x200 [ 252.814838][T13884] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 252.814900][T13884] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 252.814981][T13884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.815004][T13884] RIP: 0033:0x7f36edfdeec9 [ 252.815019][T13884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.815038][T13884] RSP: 002b:00007f36eca47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 252.815058][T13884] RAX: ffffffffffffffda RBX: 00007f36ee235fa0 RCX: 00007f36edfdeec9 [ 252.815071][T13884] RDX: 000000000000006e RSI: 0000200000000200 RDI: 0000000000000003 [ 252.815146][T13884] RBP: 00007f36eca47090 R08: 0000000000000000 R09: 0000000000000000 [ 252.815158][T13884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.815170][T13884] R13: 00007f36ee236038 R14: 00007f36ee235fa0 R15: 00007ffcd3d2bbb8 [ 252.815190][T13884] [ 253.076676][T13760] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 253.087303][T13760] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 253.184307][ T7718] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.191741][ T7718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.339115][T13760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.465997][T13760] veth0_vlan: entered promiscuous mode [ 253.483349][T13760] veth1_vlan: entered promiscuous mode [ 253.513316][T13760] veth0_macvtap: entered promiscuous mode [ 253.541838][T13760] veth1_macvtap: entered promiscuous mode [ 253.555037][T13760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.581032][T13760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.620145][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.646461][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.656191][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.685841][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.764551][T13916] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3307'. [ 253.795417][T13915] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3355'. [ 253.945086][T13918] loop4: detected capacity change from 0 to 2048 [ 253.952176][T13918] ext4: Bad value for 'mb_optimize_scan' [ 253.962704][T13920] FAULT_INJECTION: forcing a failure. [ 253.962704][T13920] name failslab, interval 1, probability 0, space 0, times 0 [ 253.975793][T13920] CPU: 1 UID: 0 PID: 13920 Comm: syz.0.3357 Not tainted syzkaller #0 PREEMPT(voluntary) [ 253.975895][T13920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 253.975908][T13920] Call Trace: [ 253.975913][T13920] [ 253.975921][T13920] __dump_stack+0x1d/0x30 [ 253.975945][T13920] dump_stack_lvl+0xe8/0x140 [ 253.975970][T13920] dump_stack+0x15/0x1b [ 253.976068][T13920] should_fail_ex+0x265/0x280 [ 253.976091][T13920] ? sctp_auth_asoc_copy_shkeys+0xfa/0x330 [ 253.976162][T13920] should_failslab+0x8c/0xb0 [ 253.976186][T13920] __kmalloc_cache_noprof+0x4c/0x320 [ 253.976347][T13920] sctp_auth_asoc_copy_shkeys+0xfa/0x330 [ 253.976381][T13920] sctp_association_new+0xde5/0x1200 [ 253.976419][T13920] sctp_connect_new_asoc+0x1a8/0x3a0 [ 253.976455][T13920] sctp_sendmsg+0xf10/0x18d0 [ 253.976485][T13920] ? selinux_socket_sendmsg+0x111/0x1b0 [ 253.976585][T13920] ? __pfx_sctp_sendmsg+0x10/0x10 [ 253.976612][T13920] inet_sendmsg+0xc2/0xd0 [ 253.976670][T13920] __sock_sendmsg+0x102/0x180 [ 253.976715][T13920] ____sys_sendmsg+0x345/0x4e0 [ 253.976754][T13920] ___sys_sendmsg+0x17b/0x1d0 [ 253.976873][T13920] __sys_sendmmsg+0x178/0x300 [ 253.976911][T13920] __x64_sys_sendmmsg+0x57/0x70 [ 253.976948][T13920] x64_sys_call+0x1c4a/0x3000 [ 253.976976][T13920] do_syscall_64+0xd2/0x200 [ 253.976996][T13920] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 253.977023][T13920] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 253.977060][T13920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.977160][T13920] RIP: 0033:0x7ff72f2beec9 [ 253.977177][T13920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.977267][T13920] RSP: 002b:00007ff72dd27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 253.977292][T13920] RAX: ffffffffffffffda RBX: 00007ff72f515fa0 RCX: 00007ff72f2beec9 [ 253.977309][T13920] RDX: 0000000000000002 RSI: 0000200000000900 RDI: 0000000000000003 [ 253.977324][T13920] RBP: 00007ff72dd27090 R08: 0000000000000000 R09: 0000000000000000 [ 253.977346][T13920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.977363][T13920] R13: 00007ff72f516038 R14: 00007ff72f515fa0 R15: 00007ffd40018908 [ 253.977453][T13920] [ 254.347306][T13929] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 254.357370][T13929] block device autoloading is deprecated and will be removed. [ 254.398979][T13941] loop0: detected capacity change from 0 to 128 [ 254.471687][T13949] FAULT_INJECTION: forcing a failure. [ 254.471687][T13949] name failslab, interval 1, probability 0, space 0, times 0 [ 254.484543][T13949] CPU: 1 UID: 0 PID: 13949 Comm: syz.1.3368 Not tainted syzkaller #0 PREEMPT(voluntary) [ 254.484619][T13949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 254.484637][T13949] Call Trace: [ 254.484645][T13949] [ 254.484655][T13949] __dump_stack+0x1d/0x30 [ 254.484677][T13949] dump_stack_lvl+0xe8/0x140 [ 254.484701][T13949] dump_stack+0x15/0x1b [ 254.484722][T13949] should_fail_ex+0x265/0x280 [ 254.484751][T13949] should_failslab+0x8c/0xb0 [ 254.484782][T13949] kmem_cache_alloc_node_noprof+0x57/0x320 [ 254.484812][T13949] ? __alloc_skb+0x101/0x320 [ 254.484835][T13949] __alloc_skb+0x101/0x320 [ 254.484903][T13949] alloc_skb_with_frags+0x7d/0x470 [ 254.484934][T13949] ? selinux_file_open+0x2df/0x330 [ 254.485119][T13949] sock_alloc_send_pskb+0x430/0x4e0 [ 254.485157][T13949] ? mntput+0x4b/0x80 [ 254.485182][T13949] tun_get_user+0x9b3/0x26e0 [ 254.485209][T13949] ? ref_tracker_alloc+0x1f2/0x2f0 [ 254.485321][T13949] ? selinux_file_permission+0x2f0/0x320 [ 254.485373][T13949] tun_chr_write_iter+0x15e/0x210 [ 254.485424][T13949] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 254.485461][T13949] vfs_write+0x52a/0x960 [ 254.485581][T13949] ksys_write+0xda/0x1a0 [ 254.485624][T13949] __x64_sys_write+0x40/0x50 [ 254.485726][T13949] x64_sys_call+0x2802/0x3000 [ 254.485747][T13949] do_syscall_64+0xd2/0x200 [ 254.485825][T13949] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 254.485883][T13949] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 254.485924][T13949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.485945][T13949] RIP: 0033:0x7f36edfdd97f [ 254.486016][T13949] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 254.486035][T13949] RSP: 002b:00007f36eca47000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 254.486053][T13949] RAX: ffffffffffffffda RBX: 00007f36ee235fa0 RCX: 00007f36edfdd97f [ 254.486125][T13949] RDX: 00000000ffffffa8 RSI: 0000000000000000 RDI: 00000000000000c8 [ 254.486141][T13949] RBP: 00007f36eca47090 R08: 0000000000000000 R09: 0000000000000000 [ 254.486173][T13949] R10: ffffffffffffffa8 R11: 0000000000000293 R12: 0000000000000001 [ 254.486188][T13949] R13: 00007f36ee236038 R14: 00007f36ee235fa0 R15: 00007ffcd3d2bbb8 [ 254.486212][T13949] [ 254.767319][T13947] syzkaller0: entered promiscuous mode [ 254.773017][T13947] syzkaller0: entered allmulticast mode [ 254.867022][T13966] netlink: 'syz.4.3375': attribute type 3 has an invalid length. [ 254.918796][T13973] loop4: detected capacity change from 0 to 512 [ 254.940548][T13977] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3380'. [ 254.951654][T13973] EXT4-fs: Ignoring removed mblk_io_submit option [ 254.968603][T13973] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 255.030122][T13973] EXT4-fs (loop4): 1 truncate cleaned up [ 255.036796][T13982] lo speed is unknown, defaulting to 1000 [ 255.046783][T13973] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.066503][T13985] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3381'. [ 255.163776][T13988] ================================================================== [ 255.172106][T13988] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 255.180230][T13988] [ 255.182591][T13988] write to 0xffff888119d736ac of 4 bytes by task 13973 on cpu 1: [ 255.188079][T13982] lo speed is unknown, defaulting to 1000 [ 255.190515][T13988] xas_set_mark+0x12b/0x140 [ 255.190561][T13988] tag_pages_for_writeback+0xc2/0x290 [ 255.190588][T13988] ext4_do_writepages+0x6b2/0x2750 [ 255.211990][T13988] ext4_writepages+0x176/0x300 [ 255.217075][T13988] do_writepages+0x1c3/0x310 [ 255.221733][T13988] filemap_write_and_wait_range+0x144/0x340 [ 255.227742][T13988] filemap_invalidate_pages+0xa4/0x1a0 [ 255.233583][T13988] kiocb_invalidate_pages+0x6e/0x80 [ 255.238846][T13988] __iomap_dio_rw+0x5d1/0x1240 [ 255.243677][T13988] iomap_dio_rw+0x40/0x90 [ 255.248312][T13988] ext4_file_write_iter+0xad9/0xf00 [ 255.253636][T13988] iter_file_splice_write+0x666/0xa60 [ 255.259144][T13988] direct_splice_actor+0x156/0x2a0 [ 255.264362][T13988] splice_direct_to_actor+0x312/0x680 [ 255.269869][T13988] do_splice_direct+0xda/0x150 [ 255.274678][T13988] do_sendfile+0x380/0x650 [ 255.279231][T13988] __x64_sys_sendfile64+0x105/0x150 [ 255.284491][T13988] x64_sys_call+0x2bb4/0x3000 [ 255.289220][T13988] do_syscall_64+0xd2/0x200 [ 255.293849][T13988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.299789][T13988] [ 255.302148][T13988] read to 0xffff888119d736ac of 4 bytes by task 13988 on cpu 0: [ 255.309832][T13988] file_write_and_wait_range+0x10e/0x2c0 [ 255.315644][T13988] generic_buffers_fsync_noflush+0x45/0x120 [ 255.321682][T13988] ext4_sync_file+0x1ab/0x690 [ 255.326581][T13988] vfs_fsync_range+0x10a/0x130 [ 255.331404][T13988] ext4_buffered_write_iter+0x34f/0x3c0 [ 255.337095][T13988] ext4_file_write_iter+0xdbf/0xf00 [ 255.342344][T13988] iter_file_splice_write+0x666/0xa60 [ 255.347770][T13988] direct_splice_actor+0x156/0x2a0 [ 255.353105][T13988] splice_direct_to_actor+0x312/0x680 [ 255.358534][T13988] do_splice_direct+0xda/0x150 [ 255.363443][T13988] do_sendfile+0x380/0x650 [ 255.367901][T13988] __x64_sys_sendfile64+0x105/0x150 [ 255.373141][T13988] x64_sys_call+0x2bb4/0x3000 [ 255.378317][T13988] do_syscall_64+0xd2/0x200 [ 255.382866][T13988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.388802][T13988] [ 255.391244][T13988] value changed: 0x02000021 -> 0x04000021 [ 255.397024][T13988] [ 255.399422][T13988] Reported by Kernel Concurrency Sanitizer on: [ 255.405686][T13988] CPU: 0 UID: 0 PID: 13988 Comm: syz.4.3378 Not tainted syzkaller #0 PREEMPT(voluntary) [ 255.415611][T13988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 255.426166][T13988] ================================================================== [ 255.770909][T13016] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /59/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 255.794388][T13016] EXT4-fs error (device loop4): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 255.845604][T13016] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /59/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 255.870461][T13016] EXT4-fs error (device loop4): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 255.892032][T13016] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /59/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 255.916674][T13016] EXT4-fs error (device loop4): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 255.938063][T13016] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /59/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 255.961408][T13016] EXT4-fs error (device loop4): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 255.982745][T13016] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /59/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 256.006199][T13016] EXT4-fs error (device loop4): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 256.256747][T13016] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.270002][ T7704] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.343637][ T7704] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.401038][ T7704] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.448985][ T7704] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.538656][ T7704] bridge_slave_1: left allmulticast mode [ 256.544539][ T7704] bridge_slave_1: left promiscuous mode [ 256.550378][ T7704] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.578275][ T7704] bridge_slave_0: left allmulticast mode [ 256.584741][ T7704] bridge_slave_0: left promiscuous mode [ 256.590605][ T7704] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.712745][ T7704] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.724018][ T7704] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.741166][ T7704] bond0 (unregistering): Released all slaves [ 256.828986][ T7704] hsr_slave_0: left promiscuous mode [ 256.836500][ T7704] hsr_slave_1: left promiscuous mode [ 256.855570][ T7704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.863000][ T7704] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.885955][ T7704] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.893501][ T7704] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.914752][ T7704] veth1_macvtap: left promiscuous mode [ 256.920357][ T7704] veth0_macvtap: left promiscuous mode [ 256.942316][ T7704] veth1_vlan: left promiscuous mode [ 256.947692][ T7704] veth0_vlan: left promiscuous mode