last executing test programs: 13m14.130418967s ago: executing program 32 (id=719): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff2500000010000000070000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 12m46.118785582s ago: executing program 33 (id=1192): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x3}, 0x18) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000100850000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x280880f, &(0x7f0000000040), 0x3a, 0x527, &(0x7f0000000100)="$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") r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xa1}], 0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x8}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x8c, 0x2c, 0xd27, 0x31bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x10, 0x6}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x10655c, 0x2, 0x1ffffffe, 0x9, 0x800}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r9 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r9}, 0x20) 10m38.537916065s ago: executing program 34 (id=3282): syz_open_procfs(0x0, 0x0) socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='sched_switch\x00', r0}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/164, 0xa4}], 0x1}, 0x0) sendmsg$unix(r3, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)}], 0x1}, 0x200c8061) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x6d8c, 0x0, 0x1, 0x250}, &(0x7f00000000c0), &(0x7f0000000040)) 10m13.175261748s ago: executing program 35 (id=3999): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x18020, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x2, 0x8000000000000001}, 0x5108, 0x2, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) sendfile(r2, r3, 0x0, 0x104) 9m59.953273817s ago: executing program 36 (id=3962): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4cd9000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x4) 9m35.20042311s ago: executing program 37 (id=4526): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x81) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$caif_stream(0x25, 0x1, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB='\x00\x00']) 8m45.547642777s ago: executing program 38 (id=5078): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$inet_icmp(0x2, 0x2, 0x1) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3000000000080041007278650014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x24004000) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000080015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[], 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a9998500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioperm(0x0, 0x5, 0x6) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'bond0\x00', @ifru_names='gretap0\x00'}) process_madvise(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)='8', 0x1}], 0x20, 0x14, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3000010, &(0x7f0000000040)={[{@journal_dev={'journal_dev', 0x3d, 0xd353}}, {@auto_da_alloc}]}, 0x1, 0x512, &(0x7f0000000380)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000100)=ANY=[], 0x835, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) unshare(0x62040200) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000041401af5498ef76871536251800010000000000"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0x11, 0x148, 0x0, 0x0, 0x278, 0x2a8, 0x2a8, 0x278, 0x2a8, 0x3, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0xff000000, 'veth1_to_bond\x00', 'vlan0\x00', {0xff}, {0xff}, 0x88, 0x2, 0x4}, 0x0, 0x130, 0x178, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@physdev={{0x68}, {'ip_vti0\x00', {0xff}, 'xfrm0\x00', {}, 0x10, 0x11}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0500000004000000040000000a00000040000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 8m41.59008803s ago: executing program 39 (id=5273): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="17000000000000"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3fffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES64=r1, @ANYRESDEC=r2, @ANYBLOB="0366bd8fe6bfb1dc1ce71a777cb402000000000000000000000000000000004420b65f35b560c1c4f58641c3b20000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0xd, 0xc, &(0x7f0000000e80)=ANY=[@ANYBLOB="1800000000000000000020000000000018120000f950208d7100e3013a7f951c0db4901bb64133f095c9370917a5a38f5269e9a44e09252dcb335fa55496f38b622c7aff0de2abb53f977f4e9e95c298427a75e4cb6fb7e96dcf6becdf9c3f3ac65b6f2cd2eaab1eba92fdf84ee75a1c4ae1991d85481c5c1c98069a4f23b95a28560d01ec19c2d08914f54c01617b43774df6b06ca1b2514cf8f8253949b58e029c95267b7b", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000430000009500000000000000", @ANYRES64=r3], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="6583000000000000000001"], 0x1c}}, 0x20008890) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r8, @ANYBLOB="073d0000a1b98fbe"], 0x24}}, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0)=0x26, 0x4) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="74a0f8afb0b28ad28c24fd3ce0f36399a13f350550c62964360bc8045fc31d5e87ce7f2673974cdd08962500b7e5f442d60e7b6b9ef476ad037508a8ea2339e782840b6d7e16dc0e1abdf3822fd9772a12d876190a57bf0c66e33e3f5d905df1920546021f7dba9279", @ANYRES16=r7, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r8, @ANYRES8=r9], 0x74}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="a0000000", @ANYRESDEC=r8, @ANYBLOB="08002abd7000ffdbdf250c00000008000300", @ANYRES32=r8, @ANYRES64], 0xa0}}, 0x4801) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000880)="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", &(0x7f0000000d00)="acc729daba4e86ea208a93971a14f35cddcf73b717acde486f3a9bfa2f12c55b024c805207ab5a29e72630793f82d763809fa32fa8767328fdac5bf08e856668aefafd93c21e58fd5c7b15563d35035b0de5b74293142e20003a5fcb90fce2f18a7d7d3882e7ff2c54c277c8234a67690ceb5f987c1693b1ac461514457bf88c51b38851374311fa249a740ff2dbdc530b85cb99e1a76856e0b51778283513eb18935dc3a5efe481468e2e5d3e0bf02cc911", 0x4, r10}, 0x38) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES16, @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000007c0)='signal_deliver\x00'}, 0x18) r12 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r13 = syz_io_uring_setup(0x5c5, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x8003, 0xfffffffc}, &(0x7f0000000240)=0x0, &(0x7f0000000200)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r11, 0x0, 0xf, 0xa3, &(0x7f0000000680)="a9b709225ccaaf8412765ccb26d262", &(0x7f0000000b00)=""/163, 0x8, 0x0, 0xcb, 0x1000, &(0x7f0000000f80)="f030766e79c7fb68a47ac956bbfe14792043960bc7d69e71b7dffc853b3090c062e3d61fcd4178a310e9b0540b4f3387274b7030952a7a5907ce9aae37cbd160a75680b3572eca94ed6733d44e8f65cdca866bf368be438f7440b0663e19dd74d2744b2610a087b76c6f543c035f98b1712a3279fbbd7c1d780f85b857696e568691053e2f1ad7c680b888881c5abb162d1dc480dd8903312fdba250fedb6770e0c130e1be467d60b562c4431188a6432517b9f1cd6ad81b6a03a59aedf58e3f6fe03f21251f9cf04ac0a5", &(0x7f0000001ec0)="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", 0x6, 0x0, 0x10000}, 0x50) syz_memcpy_off$IO_URING_METADATA_GENERIC(r14, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340)={0x6}, 0x4) io_uring_enter(r13, 0x6e2, 0x600, 0x1, 0x0, 0xfffc) ioctl$SNDRV_TIMER_IOCTL_GINFO(r12, 0xc0f85403, 0x0) 7m38.953609053s ago: executing program 40 (id=6264): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 7m5.902994417s ago: executing program 41 (id=6569): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001", @ANYRESOCT=r0, @ANYRES16, @ANYRES16=r1], 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001", @ANYRESOCT=r0, @ANYRES16, @ANYRES16=r1], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5, 0x0, 0x400000000000000}, 0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) sendto$inet6(r4, &(0x7f0000000080)="be", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) shutdown(r4, 0x1) (async) shutdown(r4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) 6m57.578619599s ago: executing program 42 (id=6980): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f0000000040)=@v1={0x1000000, [{0x7, 0x5}]}, 0xc, 0x3) (async) r1 = getpid() (async) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvmmsg(r2, &(0x7f0000000740)=[{{&(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000100)=""/161, 0xa1}, {&(0x7f00000001c0)=""/208, 0xd0}, {&(0x7f00000002c0)=""/191, 0xbf}], 0x3}, 0x8b53}, {{&(0x7f00000003c0)=@nfc_llcp, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000440)=""/36, 0x24}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/27, 0x1b}, {&(0x7f0000000540)=""/144, 0x90}, {&(0x7f0000000600)=""/101, 0x65}, {&(0x7f0000000680)=""/60, 0x3c}], 0x6}, 0x80000001}], 0x2, 0x20, 0x0) getpeername(r0, &(0x7f00000007c0)=@generic, &(0x7f0000000840)=0x80) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000940)={0x60, 0x1, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x7, &(0x7f0000000880)=[{0x8, 0xf197, 0x9}, {0x0, 0x8, 0x9}, {0x4, 0x8}, {0x2a7f, 0xffffffffffffff7f, 0x10001}, {0x3, 0x4, 0x5}, {0x5, 0xffffffffffffffff, 0x3487}], 0x6, 0x8, 0x8, 0x1, 0x4, 0x6a}) (async) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000000, 0x12, 0xffffffffffffffff, 0x8000000) (async) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000009c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x18, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r4}}) splice(r0, &(0x7f0000000a00)=0xffff, r0, &(0x7f0000000a40)=0xb7, 0x1, 0x2) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r5 = mmap$IORING_OFF_SQES(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r3, r5, &(0x7f0000000ac0)=@IORING_OP_TIMEOUT={0xb, 0x8, 0x0, 0x0, 0x4, &(0x7f0000000a80), 0x1, 0x10, 0x0, {0x0, r4}}) (async) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) (async) r7 = epoll_create1(0x0) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r6, &(0x7f0000000b40)={r7, r0, 0x3}) prctl$PR_SET_NAME(0xf, &(0x7f0000000b80)='security.capability\x00') (async) read(r0, &(0x7f0000000bc0)=""/178, 0xb2) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x1c, 0x18, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x8}, [@generic={0x4d, 0x7, 0x7, 0x9}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xb}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0xffff}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x8}, @ringbuf_query]}, &(0x7f0000000d40)='syzkaller\x00', 0xa3, 0x7f, &(0x7f0000000d80)=""/127, 0x40e00, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000e00)={0x1, 0x8001}, 0x8, 0x10, &(0x7f0000000e40)={0x1, 0x5, 0xfffffffc, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000e80)=[0x1, r2, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0xe1c, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r8) (async) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000f80)=0x1, 0x4) (async) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000fc0)={0x4, 0x2, 0x6, 0xf, 0x1, 0x7f, 0x8, 0x1, 0x5, 0x7, 0x8, 0xdf, 0x3, 0x5}, 0xe) (async) pipe2(&(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) io_uring_enter(r11, 0x615d, 0xaeeb, 0x13, &(0x7f0000001040)={[0x1]}, 0x8) (async) fdatasync(r2) (async) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000001080)='syzkaller\x00') ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000001280)={'erspan0\x00', &(0x7f0000001180)={'ip_vti0\x00', 0x0, 0x1, 0x10, 0xd5, 0x3, {{0x35, 0x4, 0x0, 0x9, 0xd4, 0x64, 0x0, 0x7, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x17}, {[@cipso={0x86, 0x1e, 0x2, [{0x5, 0x10, "5748d8afa30e080ac1ca4689a701"}, {0x5, 0x8, "521ceb307391"}]}, @cipso={0x86, 0xf, 0x3, [{0x5, 0x9, "0bdb560f462bcb"}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x54, 0x92, 0x1, 0x1, [{@remote, 0x7ff}, {@private=0xa010100, 0x4861}, {@broadcast, 0x9}, {@loopback, 0x81}, {@broadcast, 0xa00}, {@private=0xa010101, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0xa595}, {@broadcast, 0x3}, {@rand_addr=0x64010102, 0xc425}]}, @ssrr={0x89, 0x17, 0xfb, [@dev={0xac, 0x14, 0x14, 0x2f}, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x33}, @local]}, @timestamp={0x44, 0x24, 0x43, 0x0, 0x5, [0x6, 0x5c3, 0x81, 0x9, 0x7, 0x2, 0x3cf, 0x200]}]}}}}}) 4m31.565276794s ago: executing program 43 (id=8543): r0 = socket$inet(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) bind$packet(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[], 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000a00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x40044) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x166, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c20000000180c200000086dd60119d0001303afffe880000000000000000030000000001ff020000000000000000000000000001"], 0x0) 4m31.342649998s ago: executing program 44 (id=8548): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 4m31.330275408s ago: executing program 45 (id=8549): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$cgroup_ro(r0, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) r2 = memfd_secret(0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r4, 0x0) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d3001000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9751f008554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a65f78238b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c505000000b8fab4d4d897db2c544c0e0895a9044f50c50b8eac8c63d2b1cd06a39702bd547f5ebaa69520bbb15f4f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564bd98a621483fb2a5ff221e0d831f24759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91e0eb18e21dfdab3c84ec11377fbb00000000848060962bcbc47cefd1a2a7bd3b646614bf7cd3495663de5b63f6b5910daee8ebb7ba84a8b5b6f2d1fbc22a51a500f94c871d5e1d31ab5d7a89965bbdbf355a8544e1688a61f459f3618b3a5416eb143180d3d2c5f4e0b1a556422038801703e109e23944e53f230a3537a5412c7d0bf278c6c1684dd8de90aaa33f47dc2c7b5e4f73784fd31aa2f9d1b1623734f9cf84718b2bad31f651e3607f3ac6c427cb6c0652d21ecd4b29e96c0a3781ee820faab71040768f6b08a69fdfd0b2b7be25f19500c1b8330994efb57a53c1a67bda909630f75738ab40e7ab63d527d6c1e8cf611f05c1b6d0da1ba84d405b4d834162c88022a4625a5f7c431c39f3f9a7789f9b668ec4da9f1a981086dcf4c5a940691f9638ce34dba904483f2ed4e7a713b7eac29c5e122f1b6acd6f1da2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r5, r2, 0x2e, 0x4608, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r6, 0x4) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRESOCT=r7, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r8, 0x0, 0x5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x17, 0x7ffc0002}]}) r9 = socket$netlink(0x10, 0x3, 0x14) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0xfffffedd, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0xfc4, &(0x7f00000023c0)={@random="91bd25f447c2", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0xfb6, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}, {[@timestamp_prespec={0x44, 0x4, 0x93, 0x3, 0x4}]}}, "dd9dec79219eb5499325e16c96335bc5ff0e043319357749084ca9d0ae1378f4e88112a2f7c10fd1523b9007773fd2b2bd0ebabccd2e5c35fb3baff587585840f2530c6f4d025f118440ac22a8b34da7b5e1e873bd429686be3ef84439e05fc0fefedb8b897b09445a9e10cf24aec2ff3ca6a86d94df0c4a928ed904dcfb02e6c6c5918a839d33cb9b55dfb3cd89d80eb18dc06415d313b4ea240a65eff4b941ac018e8f81de044239960271333255291b5fbfdcf8db25e175640f36986b859aeb3370ca17e6a20aeeb5c5d27eb097fc1fab796a7ff8fcbe119bbe4be2c8a5c58890191c59bea20bfe4edf9c5453e59f610d3bd1d6eb49b02e464aee0480187c5717936add1347b08cdf5b056adb941708e8a0498900419e98b75658c6dd00f88eebf8c9aaee2e38c80eafcf6ca08ea305da9c7050948ef78a1457a2e933287fe8d2e100cb00078ed829985f8812d543cc5cdb71521f4113829551efe915e4d6773f2d285cc1e8813919356ca5ef202b0d2b8a3d7de51e4635e761ffd7efe5d51dd1325596f0e4e1c0b1ce73240cb931227892d66f3629c9d152372d5790c1c25e2f6f850a5eb83654f423b84adbbf4169d472b2cddaa7137ff14c2944ade3a57613806810707a2e6c078beb4b87cf8cf39c9950bcb3f9bb42308bd5e68d81f7f4d9e528541703059787f5e342be8ebb9841d587f7455b409115d511c130d9641fc74391228bda52d2fa58e2ca74b26583e73e2cfb881945d8ecbc77eb35e783057f6c35ba06b7f639ec516ee54bf3645f6ec436ba859e22ed480a862285aa21f3d5cd3734dde388a7f8920c4a6b4a952f830e0d2811f2f2714e660e961de0b3e0b8d5fd1007690a61e414e82245dbe4e47c73465ed40af1cee2eae4801ee408ad1fce81ff8db77082c5efd93fa9a1a3e3d78eff84f326df1c6fa656cc7d4dab842fe8e0d9ce47ad0a7e74dfe1a53776a346a22dc7a0e476754d385d99aa9cbd3f445ffb2ed61e01b28fc071d706ad204b1e8014481dba0cbc460b67e64d6e955184271cedef7f951021e3595ebe9c3384b53efafb67cbed2aa1ede5d7fcff3a9d27d05766fb8894d7948609441759f4c4dfa33b6d486d4fb7e231f04d4f0f9e98f4b156129d9307fb9ebf3b278232062e7fe9ec2db7c4c991f83733368a107bf5798a1df45c919d71cce45ed907240c2f2fa6a4227e8e11cef2e7968c63e7a1adc3edec2170c17ed2cc54d0ea2b34e99b81015ffe51a501c2b73ddac5223e69d0dd451d358c0cd2ff7db256850ec1e9e349901f168d854284da68d80c68298a75c5d859008c82fe08b4cf2e68a2c0190760a03aff1be2c9425b6d5ef5c67bafb6d16fffeeb0211d90abbade4db9d6a9e9c981dde14c1d54e9138f9760bcdccbf17e7416042cfe7bbd8bba2f739f7f900ee45b965316b950e8474f3be92081fb63f43a4858b39e20e14d5a38c0973d680f2fda9e310d0e088523bdcbb728bcd0074447b4ace876da5642cd7d781cdb023a31446e0a0c59d5388674a5c8a97927e014a73d0330bd5c5187db79f1c546a8bcca008263509c23b246dea58fb36c44d373c1c92ffdd1600c27d4b10b3fc86b88ecefe8743bb59a6b8e443f06d2ae3a6908b6bc25b647deee13262225b8879dd79413ffa3d4aef91a0a04d4dc3030b5beb081c5fdf9152c3a17e6b24457fd580d84d3006af27ff44d6ec3664c4955a1d1dc5eb041682644ae564390a3d0aa602b2a18cdd3f8a1efff7b8f3afc31c283c9b74b806a98bd9f1ad8ecce410160c0a27f7ef90a2b0c1bea64e187adc04a04bff7c435659bc4c3ce5c2730e121972541062102e93d2a136e1aaaf3e25d547cad6e2b0874500fc098469494d2654808ee88588fd167f4332061a9b4cae6b22d87624e325e89a269f61ce0d26465ddfedc1f0fa2a5cf1ee7fe3e6cb375f1ff04cf8d22667debe574b8395023bde9a8302376af2e119c4c88433d1722011ade605f3a4201860742b0392ac96cc138d9ddb952f4e4742a7fd9d625465dac35347c1662b2085c357120c6ff69dedc013c5fe46555a4448b0be41e21ad73162bf9aa1cfb70f4702c7051c0a13fae918133f123d33c5c02e66ae8fceb3109b2e13a7a3e71484d59dfcba16db2d21549be1ba6cd5ad7610eefda427982384961f18bd6857ad97e868c2914d0ba934a296eda52646031c4504864061f3cba1df65cd04ef6b1050fb30b5abbbe28f8f7adb8073e452f4c0c5492a5f8d427ddf451ae303a86639e5dbccfe2b2bedb911d534a77c012e2f8a24917d98ab14557caf3e66040f21767685644f0003459762d4ab25a0e33a92b54748cf46a977505074b79b9b0746b2b5b168876a2ca10bb903edc1d1992a4a94c0ee0dd7b37add092163b5fbaf16090f8143187d060b19e3822f3def14717e41558f9582467a5a5f89148450fde235e7a5bb900e4e9d14e2147bfd2a52f84a115eb170bf3d3b9b3de9781960be4e53025c7dce005e1458140bb9cf9da8fa1124ac558fb220d57c23a7f120f5171eb2208d9e6ab7186ae457973da564f1fd45b241c15596035f55034c3995a587b4471068076839420df947f10ab2fc211732d768c135d63cc5eeda1bdfc780e7ed90855fa5a364e63f529703cd0f691b0b6a41232bfd1c1f61ef6b16ed3b9055ca888c8ebcd16a0623ede9e4e37b7d6175e3d0ddba8e7d87639eb8b0ba246131951a581575f1adf4c598a9f2f087d5eb2a0a5834d8cb12b0ad76d9381a838ccfbfcc20bbb970474c48677f10aa57be1d607d5b049d397178035f7f3393cd9000336c83218850ecd64142a22f7ae7e6a7e62013d6d105eb7c862e13979698681d44121ee9e2e552315d4d3913ff7bcd90d6bed72d50107a971a37d5a1d75efeebf03cc91239b7e427fba8df6b79674c15acd2093289fe6155063af81d85840abf4635f66083b3707d34b2149dfdf95cb4deb71e1574118c242b160c770347e6b1f135a985e89fe8e6d7f40281cfb6dc05cd8b9d4f6680c0863acb34516092acdf2bea67f54ab4282ba2d898287f34d9384e335b2ddbb87aaea8cadb8f0b397e99a68a7a214fae5a1f56c95bcd901534c23cd5cff3c168813d7fa1191dd7437c96b07324a7b21b48e205b859dcd080bd62ab7cca4bd7a73959218d0eeb21c887483201eaf3afb19efe1741b57332c5441685a7bb8324d9e85faafc785312b58aabef2eef6a8048663bf13db9ae9edd4b1dcebc99890693f11b354b1f1aad19b66251b4bcaed0daed73b87dedd140fd680e7d3355362844d1d7ba2ae6be7ffae59d7b3c679b890448b0de1acf591abfe6f3096794b7e142e0ac0862ab8cb76eb79b17d1138be3747f907c3f11c636a0f0e0d315d1ff05aab0ce62fbac03a2b4ddeac7ee192bba2da93b7a926271f6d594aa14de2c294ad0c77770a624d1ce24cc8d8f5e9b629604fa7897f0cbd641f76a85dc8df33b5715eb100e30e53b85110d2252c22575a7365eb08006b4d62d305e780101965094ce2aaad170df470870e687fb280b772d41ad5d470b71e256af3a0d2c02df95821d38f28cdff26fa7a3f6e920edbd3174d2d2bde854ef68dae8a0a4a63753c825930903a2ca75d4321bad0ad9ff6852f94dd04972a45bb9625b3726dfbcc959e85242f0d327b181aee0fdab7af064dd97151b131a5c4a51a66692cbbd9f1348a16470cedef1b255e172cd2b15184177ad43744de941869af884ff8e59ef0e63ac5e1b99c851e0f915359ce12d9c380bb6f9c2bc773267157afeda7abcc120a31a1b72af6662bff7f5f194dad00b4ebfdcbb4dfc39854412db1ae99b449d741f841239159ea467cf1e38b95bcb7603ebcb400cb31410b2a4e25126caade0019bf667cc998bc4582578da0f8a6268f6d114ccf9dd8379995e8be1b934bb5645d72f97e05628129a7d2bc548e08796341f43dc3c9fcbe89d8284dc6633bee0d17e99f600425f0172b6bc478f5117dadf15e36e850ecc0ca75664ef8e4877a44b4ffa22a6f1d6719f8d81f9937928caa0690b77406a3298aaf446e2f78343267399bb7f64c60f82bf5d07210281eaad09a3810790720c98a041332c809be7aea1480b9e5eb989085c23b4aee75143068def3e89d1c417b63321e68d340a1472d2504088c17cd75de0e700508c55a7246ca9a762cc50ca35cbcaa7dcf4ae3264c32ff2cd67566ed501fb8182b5f16c58295783f3b2b554b06aae700f198c71ad7519868c1e6fbeb0246569b04beeb8b71bcbb9af93372bee365efb1d7424689e8241b1dc346a73a84b5773487f388356b8dbec1a108846e3f8dc74865b156e8ad18b353efc4ad0b11412a381fec8f5d45678b4f8b680591be8077303e7aff71acf9052ae3b73e41e19668f9b53bfd75b778970831b6891a78ffe0d4863e62cbbf6cf8c085032864479cd3a250842984dcc2860f057f86c8e2d4d2afefb8a45b7d5b8c94e752f369a1b434c827cd26cd0276a8b40019a95ebe7c16de4c1ce8efbd5c70e0c507631818aa4fbc937d212e428aefa895069656babdbd921af974da32c49f4ca6d1e1e28319b427c8bad4d650809c673ec6073770b4097e5700a8071110fd07acbc5a59f8d7b0735a98fd40ce03718a9a93c035948859215c59f54343b08bfd95a35d73c5f09a9ebe63c509fe8443fa74e6efd0fd87defc7cb16725ce3c3d5f7664cfe253faf2cbeb307052dd2269b6266acdb31e2006b9355f673ca5c9cb907605ce071824254b139607a069531f9598f4040ddeb9cd018e9dfa1808032dfb65a4af0820da810a7b58fbb65ac8e65b017a40ec2d445a5c7b78d1f0e717b19427ef1fe6cc08c5e9da5a7d1d508fd939854589dcba8d75ff3d8d1c1fb28af1ed6900bcd4cedbe42fd6243c81264fe81be756bfd71ebcd4d96bd7ec50a676bc57e130bd8da21bb6e888eb6c8402516f6fe6dfe25be9a3e33f2cdbed9de00efb867cbe80ec2309458f41924b967d254166e5a0a5f776395214a67900d180704b9fb09f9c4c4c62fd382fcd5efe099e22d2c82f198a39d193f65b68e09454e2ab8f2d7413c64563742f1c34ca9285e501bff5efa30a0da946f875d23162eaa53c4008bed38e9a190b08ff8bfb6bfb91553c4c329fc73b8be308b00347dee2afdc08bab311c75386f452b706d1820c9038998924665010a548c09743a16167b0b09373b5cd2fb1da4f6c9ea5b1f1dd7775f6fcb23eab4fd1990364dacb2a1656b9bcf1c4866b7222872a3a3a03d397499222a3f31a35d3aeaf6a6d39f0fbee1e0f6e1e10ba0774f15f245d955cc8132d86c2d768f8a06274caa5a12c46e9e08ee556c1da49830f1e6c0a0c53a9ef1489c3fba0251c3e6839e891ac298108f3ed05066e48b8bda2c5f6e691c7a7425b7019e0a547f6560a0af41831a4a790c3a8eac9a3a9119da3eef85cb12f3f3115f04ae95534ac847b4ee2cc2fc43cdba382ecae7c4f499ce1be1ca1907313ff665c2fd7d4c8f36716f33b6861f5cf3f1c878feadfa9a664b8d629a16c750c466326a951efaa830e4f328270041f2ca0be49f0affe5806b94b027033f008957e83d167d6fe4168ec4fb79385cc06e257bba807ecfccaba56cf751dac996b7a347d36ec52b0f5d16425402416c735530bd7c545f8c753fb3b1054b82b"}}}}, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r10, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'macvlan0\x00', 0x2}, 0x18) pread64(r10, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000340)={0x3, &(0x7f0000000280)=[{0x84}, {0x30, 0x0, 0x2, 0x8}, {0x6, 0x0, 0x0, 0xffff0001}]}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) sendfile(r9, r1, 0x0, 0x17) 4m31.101971292s ago: executing program 46 (id=8550): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000010000906000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c0002800500010006"], 0x44}}, 0x0) 3m49.60329637s ago: executing program 47 (id=8866): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$igmp(0x2, 0x3, 0x2) pread64(r0, &(0x7f0000000200)=""/160, 0xa0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000040)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) r3 = syz_open_pts(r2, 0x0) r4 = dup(r3) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) dup3(r2, r4, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x5}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000340)={r6, @in={{0x2, 0x4e24, @multicast2}}, 0x4, 0x9}, 0x90) eventfd(0x9) r7 = dup3(r3, r2, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r8, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, @in={0x2, 0x0, @multicast2}], 0x2c) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0) ioctl$EVIOCGPROP(r9, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r9, &(0x7f0000000080)=[{&(0x7f0000000100)="39ac8469", 0x4}, {&(0x7f0000000340)}], 0x2, 0xffffffff, 0x4) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000100)={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0x5, "780d7d0000000078e2000000000000000200000000000000feff00", 0x3, 0x2, 0x20000009, 0x401}, 0x3c) setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, &(0x7f0000000040)={@remote, @dev={0xac, 0x14, 0x14, 0x39}, 0x1, "29c5e5a86c5ed6844cf01d572e7c110b8097ee278af4aa1b7defbb38709b75b3", 0xd662, 0x3, 0x8, 0xfffffc01}, 0x3c) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x710, &(0x7f0000000000)={[{@nodioread_nolock}, {@jqfmt_vfsv0}, {@abort}, {@jqfmt_vfsv0}]}, 0xff, 0x4a0, &(0x7f00000006c0)="$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") 3m31.074289444s ago: executing program 3 (id=9164): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000cc0)="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", 0x110) 3m31.009233405s ago: executing program 3 (id=9167): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x3}, 0x18) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000100850000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x280880f, &(0x7f0000000040), 0x3a, 0x527, &(0x7f0000000100)="$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") r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xa1}], 0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x8}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x8c, 0x2c, 0xd27, 0x31bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x10, 0x6}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x10655c, 0x2, 0x1ffffffe, 0x9, 0x800}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 3m29.628150907s ago: executing program 3 (id=9185): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') 3m29.521879319s ago: executing program 3 (id=9187): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r3 = syz_open_dev$loop(0x0, 0x9, 0x12d600) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='fsi_slave_invalid_cfam\x00', r0, 0x0, 0x7ff}, 0x18) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000001000), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0155aaffffffffffff0300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}}) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file1\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_IP_PROTO={0x5, 0x1b, 0x3a}]}, 0x24}}, 0x0) sigaltstack(&(0x7f0000000080)={&(0x7f00000000c0)=""/4086, 0x0, 0xfffffffffffffeae}, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) waitid(0x0, r9, 0x0, 0x8, 0xfffffffffffffffd) waitid(0x1, r9, 0x0, 0x4, 0x0) sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@updsa={0x144, 0x10, 0x1, 0xfffffffd, 0x20001a, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, {@in=@private=0xa010102, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {r6, 0x4}}]}, 0x144}}, 0x0) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x6, 0x0}, 0x8) r12 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000340)='.log\x00', 0x40000, 0x41) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x17, 0x1b, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@exit, @printk={@lx}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x8}, @alu={0x7, 0x0, 0xa, 0x2, 0x5, 0xc, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x80, 0x49, &(0x7f00000001c0)=""/73, 0x41000, 0x8, '\x00', r6, @fallback=0x27, r10, 0x8, &(0x7f0000000240)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x0, 0x40, 0x4}, 0x10, r11, r12, 0x3, 0x0, &(0x7f0000000380)=[{0x2, 0x1, 0x9, 0x6}, {0x3, 0x4, 0xf, 0xc}, {0x1, 0x5, 0x0, 0x5}], 0x10, 0x6, @void, @value}, 0x94) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="38010000100001000000000100008000ffffff000000000000000000000000ff0100000000000000000000000000010000fffd000600"/63, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe0000001000004d56c000000fe80000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000feffffffffffffff00000000ffffffff000000002bbd700000000000020000002200000000000000480003006c7a7300"/240], 0x138}}, 0x0) 3m28.535745384s ago: executing program 3 (id=9202): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x56, 0x0, &(0x7f0000000080)="2b1cac7e7b75dc6fa4e060f5d2c340adcf6ab881eb98c349ba2b2a1270d1a6c95f4a608b2611d88e62702820beb8edc4b257c9116c3ac8f8e4c9b8ea0128b7ef31c84e11c1717e198f1271c44016313361fb61bf21dc", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3m27.879817064s ago: executing program 3 (id=9207): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) 3m27.703873287s ago: executing program 48 (id=9207): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) 2m23.635420681s ago: executing program 1 (id=9943): socket$nl_netfilter(0x10, 0x3, 0xc) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x9) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000300000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) dup3(r2, r1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) getsockopt$inet6_tcp_int(r7, 0x6, 0x2, 0x0, &(0x7f0000000380)) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000030605000000000000000000000000060500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_io_uring_submit(0x0, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20084, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='cpuhp_multi_enter\x00', r5, 0x0, 0x178}, 0x18) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) 2m23.315463316s ago: executing program 1 (id=9953): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x34000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce220000"], 0xfdef) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) 2m23.295471475s ago: executing program 1 (id=9954): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0xff}, 0xc) r2 = socket$inet(0x2, 0x3, 0x4) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xa, 0x1}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0x4}}]}, @TCA_RATE={0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x5, 0x0, r1, 0x4, '\x00', r4, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto, @func_proto]}}, 0x0, 0x32, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x13fd, @loopback}}) syz_open_dev$evdev(&(0x7f0000000040), 0x401, 0x40) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r7, 0x0, 0xfffffffffffffffd}, 0x18) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty=0xe00}}) 2m23.241653617s ago: executing program 1 (id=9956): r0 = socket$kcm(0x2, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2, &(0x7f00000002c0), 0x4) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x9, 0x2, 0xc447, 0x18, r1, 0x30, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2, 0xf, @void, @value, @void, @value}, 0x50) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x60281, 0x0) write$binfmt_aout(r6, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d3cd1b0f200002000fdf700071400"}) r7 = syz_open_pts(r6, 0x0) r8 = dup3(r7, r6, 0x0) ppoll(&(0x7f00000000c0)=[{r8, 0x4411}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x9, '\x00', r5, r8, 0x3, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r9], 0x20}}, 0x0) 2m22.708151375s ago: executing program 5 (id=9964): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x34000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce220000"], 0xfdef) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) 2m22.635862346s ago: executing program 5 (id=9965): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c7a1d79f0c1400000000c000000020000000000000000000004000000000000"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1333404, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) creat(&(0x7f0000000340)='./file1\x00', 0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) timerfd_create(0x9, 0x800) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYRES16=r4]) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x54, r1, 0xfe12482fe0801d67, 0x0, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x17bfffc}}]}, 0x54}}, 0x4000) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 2m22.634829096s ago: executing program 5 (id=9967): r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000040)={0x1, 0xffffffffffff2f15, 0x9}) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, @perf_config_ext={0x0, 0x1}, 0x115428, 0x0, 0x0, 0x0, 0x5f4d, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") creat(&(0x7f0000000200)='./file2\x00', 0x20) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0xfffffffd, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x45, 0x3ff, 0x10000, 0x3, 0x8, 0x4, 0xa0002, 0x5, 0x36, 0x59bc9fd6, 0x2, 0x2, 0x8000, 0x8, 0x22, 0x8, 0x2, 0x114b6000, 0xfffffffb, 0x2a70, 0xffff73cc, 0x81, 0x5, 0x0, 0xa, 0x3, 0x5, 0x101, 0x5, 0xba44, 0x3, 0x60c, 0x80000000, 0x800008, 0x4, 0x5, 0x3, 0xffff, 0x3, 0xfffffff8, 0x5, 0x6, 0x1a0055ee, 0x1, 0x1, 0xffff4226, 0x6, 0x4, 0x5, 0x101, 0x4, 0x1, 0x2, 0x800, 0xf9, 0x9, 0x9, 0x2, 0x8, 0x2f, 0xfffffff8, 0x0, 0x101, 0x9, 0x7, 0x0, 0x5, 0x3ff, 0x0, 0x6, 0x2, 0x5, 0x5, 0x2, 0x9b58, 0x4, 0xb, 0x4be, 0xe, 0xef, 0xa, 0xcaa, 0x9fa7, 0xfffeffff, 0x38, 0x400004, 0x0, 0x9, 0x44d, 0x6, 0x200, 0x8, 0xfffffff5, 0x7, 0x45, 0x3, 0x9, 0x0, 0x7, 0x6, 0x19, 0x3, 0x7, 0x4, 0x6, 0x7, 0x8002, 0x7, 0x6, 0x7, 0xc3c, 0x3, 0x28000000, 0x8, 0x9, 0xfad, 0x7, 0x8, 0x0, 0x5, 0x10, 0x400, 0xa97, 0x4, 0x422dd3f4, 0x4, 0xa, 0x2, 0x8, 0x10000, 0x8c1, 0x0, 0x45ba, 0x20009, 0x864b, 0x0, 0x7, 0x9, 0x1, 0x0, 0x82, 0x5, 0x800, 0x6, 0xffffff80, 0x41, 0xc22, 0x5, 0x6, 0x9, 0x9, 0x7fffffff, 0x2, 0x1, 0x6, 0xfffffffd, 0x7c1, 0x136, 0x6, 0x5, 0x4, 0x3ff, 0x4, 0xb, 0xfffffffe, 0x10001, 0x0, 0x6, 0x3, 0x404, 0x101, 0x2, 0x1b, 0xd589, 0xffffff7e, 0xffff0001, 0x4, 0x0, 0x300, 0x8, 0x60000000, 0xd39, 0x0, 0xfffffffe, 0x0, 0x81, 0x2, 0x55, 0x4000004, 0xbc6, 0x2, 0x8, 0x28a6a55, 0x1ff, 0xb, 0x7fff, 0x809, 0x2e4c20b9, 0xb, 0x4, 0x9, 0x7, 0x4, 0x8, 0x1004, 0x2, 0x8, 0x3, 0x7, 0x4, 0x9, 0x2000008, 0xfffffffa, 0x76e8e800, 0x800, 0x400, 0x6, 0x0, 0xcc6, 0xfffffffb, 0x8000, 0xffffff00, 0x894, 0x7, 0xe, 0x6, 0x6, 0x2, 0x6, 0xfffd, 0x9, 0xfffffffd, 0x8000, 0x5d, 0x1000000, 0x7, 0x1, 0x8, 0x7ffffffd, 0x384, 0x6, 0x58a, 0x80000000, 0xe08, 0x0, 0x1, 0x2c821159, 0x0, 0x9, 0x7, 0x0, 0x6, 0x0, 0x7f]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x2, 0x8, 0x0, 0xc}, {0xff, 0x1, 0x6, 0x5, 0x5e1d, 0x8}, 0x3ff, 0x101, 0x99}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4000050}, 0x20008840) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000872ab0a700000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) dup(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) poll(&(0x7f0000000000), 0x20000000000000ea, 0x7) r4 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {0xff}, {}, @raw32}, {0x0, 0x0, 0x0, 0x8, @time, {}, {}, @quote}], 0x38) 2m22.584106347s ago: executing program 5 (id=9968): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xbb) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xbb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) listen(r1, 0x3) (async) listen(r1, 0x3) socket$igmp6(0xa, 0x3, 0x2) (async) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x9, 0xc, 0x3, 0x6, 0x0, 0x4, 0x5300, 0xe, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6223, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x1010, 0xfffffffffffffe00, 0x9, 0x2, 0x7, 0xd, 0x5, 0x0, 0xbd74, 0x0, 0x8000000000000000}, 0x0, 0x1, r6, 0x3) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r5}) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) (async) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r7, 0x0, 0x9e, 0xe5, &(0x7f00000001c0)="bc44a0b803189f62ffd8845b1b21552e2ddafaca2580f375651eaf3e8ead1c1babb1749ea7e3271b98f3e9022432c727ba128429ba2d69e304049d50f22ddba519b7702f6c4e3931d00199bc94294c740f22d2aecc0794175bf839e8b1c029746203f48074dfff4bbc3a85fc65cacff9cfd1be8be8102bf1036ae3eb9cae532493cfeb642c5f85a1fe5b19a30b489378bd5fbadaa0d670b1fe19ae87d798", &(0x7f0000000280)=""/229, 0x7, 0x0, 0x5a, 0x55, &(0x7f0000000540)="f46e3b1e8d00dba439aff24759c9477d46f327ace725d958540171319ee841742e227e39f86a8cc7a73f7538afb416ab129e6d0348d3c3461a9f1067d5f9197de1b7450fd67047f7de39451e7bc37f836d5a7ebbca565164aa27", &(0x7f0000000640)="b0301074a9efd0d06a91b8acc435739fcaf37d7758047a4d4c70a91f476bad1559b5f956009b5e8fb5632ca4516fd79ed1fbf4242f1ab5daef7ed3515b8fc1eb4e3e84e95c6be8e03ffeef8890faffb81c5c5b93f0", 0x1, 0x0, 0x2}, 0x50) socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x80803, 0x87) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000000000000000000fe8000000000000000000000000000aa87"], 0x0) 2m22.497779139s ago: executing program 5 (id=9969): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) 2m22.480551519s ago: executing program 5 (id=9970): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = io_uring_setup(0x30d3, &(0x7f0000000080)={0x0, 0x5c00, 0x400, 0x3, 0xe5}) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @empty, 0xfffffffc}, 0x1c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000035000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xc080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0x0, 0x52e, &(0x7f0000000f00)="$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") syz_clone(0xd024100, 0x0, 0x0, 0x0, 0x0, 0x0) listen(r1, 0x20000005) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) accept4(r1, 0x0, 0x0, 0x800) close(r4) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) 2m22.293148312s ago: executing program 1 (id=9974): r0 = creat(0x0, 0x8) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x9}, 0x18) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000a40)={[{@delalloc}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@bsdgroups}, {@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@abort}, {@grpquota}, {@nobh}, {@user_xattr}, {@dioread_lock}, {@dioread_nolock}]}, 0x1, 0x567, &(0x7f0000000b00)="$eJzs3d9rW1UcAPDvTX/sp66DMVRECntwMpeurT8m+DAfRYcDfZ+hvSuj6TKadKx14PbgXnyRIYg4EN/13cfhP+BfMdDBkFH0wZfKTW+6dE3atMuaznw+cMM590fOPbn3nHxPTkIC6Fuj2UMh4uWI+CaJOBIRSb5tMPKNo6v7LT+6MZUtSaysfPpXUt8vyzeeq3HcoTzzUkT89lXEqcLGcquLS7Olcjmdz/NjtbmrY9XFpdOX50oz6Ux6ZWJy8uzbkxPvvftO1+r6xoV/vv/k3odnvz6x/N0vD47eSeJcHM63NddjZ4azh5vNa0ZjNH9NhuLcE3uPP11he07S6xNgRwbydj4UWR9wJAbyVg/8/30ZEStAn0rat/9IdvVMgN3ViAMaY/vNx8EvrqWaj32ePfxgdQC0sf6Dq5+NxP762OjgcrJuZJSNd0e6UH5Wxq9/3r2TLdGVzyEAOnPzVkScGRzc2P8lef+3c2dar97fnHmyDP0f7J57WfzzZqv4p7AW/0SL+OdQi7a7E1u3/8KDLhTTVhb/vd8y/l2btBoZyHMv1GO+oeTS5XJ6Jo+GT8bQviy/2XzO2eX7bWPl5vgvW7LyG7Fgfh4PBvetP2a6VCvVP7jrgoe3Il5pGf8ma9c/aXH9s9fjQodlHE/vvtZu29b1f7ZWfop4veX1fzyjlWw+PzlWvx/GGnfFRn/fPv57u/J7Xf/s+h/cvP4jSfN8bXX7Zfy4/9+03bZ19Y/O7//h5LN6ejhfd71Uq82PRwwnH29cP/H42Ea+sX9W/5MnNu//Wt3/ByLi8w7rf/vYz692VP8eXf/pbV3/7Sfuf/TFD+3K76z/e6ueOpmvqfd/W+j0BJ/mtQMAAAAAAIC9phARhyMpFNfShUKxuPr9jmNxsFCuVGunLlUWrkxH/beyIzFUaMx0H2n6PsR4/n3YRn7iifxkRByNiG8HDtTzxalKebrXlQcAAAAAAAAAAAAAAAAAAIA94lCb3/9n/hjo9dkBz5y//Ib+tWX778Y/PQF7kvd/6F/aP/Qv7R/6l/YP/Uv7h/61rv2b9Ie+4v0f+pf2DwAAAAAAAAAAAAAAAAAAAAAAAAAAAF114fz5bFlZfnRjKstPX1tcmK1cOz2dVmeLcwtTxanK/NXiTKUyU06LU5W5rZ6vXKlcHZ+IhetjtbRaG6suLl2cqyxcqV28PFeaSS+mQ7tSKwAAAAAAAAAAAAAAAAAAAHi+VBeXZkvlcjovIbGjxODeOA2JLid63TMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwGP/BQAA///oaTpO") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f00000001c0)) (async) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x8004587d, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}) 2m22.028153616s ago: executing program 1 (id=9977): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x80000003, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x7, 0x8, 0x101, 0x14}}}]}, 0x78}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000001100), r1) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x3c, r7, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00'}, @GTPA_MS_ADDR6={0x14, 0xc, @loopback}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8001) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r8, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x14) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="211d0000", @ANYRES16=r2, @ANYBLOB="040027bd7000fedbdf252700000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x324}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) unshare(0x22020400) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r11}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) read$hiddev(r12, &(0x7f00000000c0)=""/4092, 0xffc) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001200)={[{0x2d, 'net_cls'}, {0x2d, 'hugetlb'}, {0x2b, 'freezer'}, {0x2b, 'net_prio'}, {0x2b, 'memory'}, {0x0, 'io'}]}, 0x31) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r13}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2800128014000180090001006c617374000000000400028010000180060001006c6173740000000008000340000001"], 0xb4}}, 0x20050800) 2m6.016041509s ago: executing program 49 (id=9977): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x80000003, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x7, 0x8, 0x101, 0x14}}}]}, 0x78}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000001100), r1) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x3c, r7, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00'}, @GTPA_MS_ADDR6={0x14, 0xc, @loopback}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8001) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r8, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x14) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="211d0000", @ANYRES16=r2, @ANYBLOB="040027bd7000fedbdf252700000008000300", @ANYRES32=r6, @ANYBLOB="0c00990000000000280000000a000600505050505050000012003400fa229442cdfc0f5925228b97100a000004005f0006003600060000007e002a0071070100ff0101317e823644060008000000080211000000ff0f0000ffffffffffff00800300000000040205ffffffffffff0800000000ffffffffffffff0f0000040680090900f7ff75060000030088c8760609011c00ff002a1fa72b461f7082fb6e1aec30ce0c0b077b48e11728764dc78f1474e2ba0399e1000032012a006512b99e145c008e08021100000008021100000107f9611a31558e2cfef4da332347ed9207cc05dcfb49789f51bbdff80e071037a9732f29a4611bb80519a087fa56d23f5933fb530a74c919861a20cd4f5631b511ba9aae8d8c7ca3810106578dd8488cbd90807e9b42a90faccd80c457b3034be746a22727d2f2ed775eb0682c3ad1c7c724ceb811de46059a4445ae5c3913fbfa692be53317266744edd2dd7e36a4f3c74f4370ed5d618e87fd33d1f0bc1c77853242a45abdf6f229d79eacfd5a782873511cf1f32fa6cd82c02f2cd2d677de2dd6635acd3ee2770eca3680e6c49ce257cfeeae10d950faa87d498e94a73ef65332cf8cee9150156376bdf500da81b63254a329ecd9eed5673eabbd060802110000001001b9760603d1200004003c040108ac403c040108ae06000001012a0068048d3c080072060303030303033e0101831f000504ffffffffffff020000000800000009000000080211000000090000000602000026c5807909cf760edd029c481fcd52db5e5847ef7ce9d47e8cbbef5288172f8bae30a810cef60c0cf6565b3882d8eaf52e82bfe1dc3578290e408f74d68e0f6c9719480daba8c471e8b3758c52d161460f9efbb91ec41734e95fb598f16553a16149108af5e549e685d666bdc722592e29287aa89196e5523c7968301667e8d1619c996ac895e859f02733b3910c2e9191a259d55924bca3fd262341e4f049cf17c544cd0e41b0852dd4e70ca02bd42ca9a3a35d3a6226244177d0ecc25c8df5cd897b333b315a00000004005f0006003600020000000a0034000202020202020000"], 0x324}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) unshare(0x22020400) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r11}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) read$hiddev(r12, &(0x7f00000000c0)=""/4092, 0xffc) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001200)={[{0x2d, 'net_cls'}, {0x2d, 'hugetlb'}, {0x2b, 'freezer'}, {0x2b, 'net_prio'}, {0x2b, 'memory'}, {0x0, 'io'}]}, 0x31) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r13}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2800128014000180090001006c617374000000000400028010000180060001006c6173740000000008000340000001"], 0xb4}}, 0x20050800) 2m5.380404679s ago: executing program 50 (id=9970): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = io_uring_setup(0x30d3, &(0x7f0000000080)={0x0, 0x5c00, 0x400, 0x3, 0xe5}) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @empty, 0xfffffffc}, 0x1c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000035000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xc080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0x0, 0x52e, &(0x7f0000000f00)="$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") syz_clone(0xd024100, 0x0, 0x0, 0x0, 0x0, 0x0) listen(r1, 0x20000005) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) accept4(r1, 0x0, 0x0, 0x800) close(r4) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) 1m16.021509249s ago: executing program 9 (id=10561): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001780)={0x18, 0x7, &(0x7f0000001380)=ANY=[@ANYBLOB="1800000037455454000000000000000025900c00000000000510020002000d008510887bcdb9fff7a500feff000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x80682) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f00000000c0)=[0x611f, 0x236]) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) creat(&(0x7f00000004c0)='./file0\x00', 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r3}, 0x10) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x8001, 0x0) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f00000008c0)=@urb_type_iso={0x0, {}, 0x8, 0x6, &(0x7f00000006c0)="a618bfb4953359e31018c92a8be2eab21173e8922035b73ec0f61c12ddc4b052535a3db344fc126a6109610fe0b19d4c7b4d0a7dbc7c444974dfe4a722ec9ec7e3f2e8cf49e8e3f99cb674369b22f376c5077a11", 0x54, 0x3, 0x800, 0x6, 0x400, 0x2, &(0x7f0000000a00)="00c06d8c1184eaaeab5928826fecaffaba0ac7d91daf038aab8a63b0b28e9dd9bbbf3c1ed9e625f0c4d1572eb9a7a73d7dacdd795802da324a46f5a20ee71a2ee901847b7db7027d5784593b710e0cc3884e4a53a86bff22b35fc4bbd63aeca4c9b66a6c87b9d66c0c60466ae99fc3bf4c7f26d4a68f3bcfeb794177bda84bf05731341a3ea227d61af2ee2c128762fd8391fd4e25bc76f126204c9f5e867a36034f1dbd7ae4be0a0b5b8b089714d489a9cdb026714dcff31b5721e4bf70bcef82453d5ea8077c832fe4dbed798bcac8f2928ab5c2503343bc860d6f0ae6264a", [{0xe, 0xfffffff7, 0xfffffffd}, {0x6, 0x7, 0x8}, {0x9, 0x6, 0x9}, {0x3, 0x3ff, 0x1}, {0x9, 0x200, 0xa}, {0x6, 0x8, 0x7}]}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x12) setitimer(0x2, 0x0, 0x0) 1m15.867694841s ago: executing program 9 (id=10563): syz_io_uring_setup(0x3a, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x3, 0x203}, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'erspan0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x7, 0x700, 0x5, 0x1000, {{0x1d, 0x4, 0x2, 0x7, 0x74, 0x65, 0x0, 0x5, 0x29, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010102, {[@end, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x4c, 0x86, 0x3, 0x9, [{@empty, 0x9}, {@multicast2, 0x3}, {@multicast1, 0x101}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@remote, 0xfc}, {@private=0xa010100, 0x3f8507f9}, {@rand_addr=0x64010101, 0x7ff}, {@empty, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xd}]}, @ssrr={0x89, 0xb, 0x1c, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0xb, 0x3, "12"}]}}}}}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000040)={0x1d, r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10002, @void, @value}, 0x94) timer_create(0x3, 0x0, &(0x7f0000044000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r4, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r5}, 0x18) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e000100776972656775617264"], 0x40}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f00000000c0)=0x2, 0x4) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c) listen(r4, 0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r8, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000180)={&(0x7f0000000100)="72df1c", 0x3}, 0x1, 0x0, 0x0, 0x4008811}, 0x20008800) ioctl$sock_SIOCINQ(r8, 0x541b, &(0x7f0000001300)) listen(r7, 0x0) socket$netlink(0x10, 0x3, 0x4) 1m15.777585633s ago: executing program 9 (id=10566): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = inotify_init() creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r3, &(0x7f0000000240)='./file0\x00', 0x8c7) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff}}, './file0\x00'}) 1m15.718145164s ago: executing program 9 (id=10568): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3c8, 0xe8, 0x1d0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@remote, @multicast2, 0x0, 0x0, 0x7, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfc, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) write$nci(r0, 0x0, 0xfffffeea) 1m15.664962874s ago: executing program 9 (id=10569): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2a10700, &(0x7f0000000380), 0x0, 0x44a, &(0x7f0000000880)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xe, &(0x7f00000003c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @map_fd={0x18, 0x9, 0x1, 0x0, r1}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = dup2(r2, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 1m15.513148727s ago: executing program 9 (id=10574): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='kmem_cache_free\x00', r1}, 0x18) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x3c) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000900000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000000000bf090000000000005509010000000000852000000300000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), r4) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r8, 0x0, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r6, &(0x7f0000000240)={0xa, 0x4, 0xfa00, {r8}}, 0xc) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000011"], 0x24}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r10, &(0x7f0000000300)=ANY=[], 0x15) r11 = dup(r10) write$P9_RLERRORu(r11, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r11, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r11, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r11]) 1m15.487744937s ago: executing program 51 (id=10574): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='kmem_cache_free\x00', r1}, 0x18) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x3c) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000900000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000000000bf090000000000005509010000000000852000000300000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), r4) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r8, 0x0, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r6, &(0x7f0000000240)={0xa, 0x4, 0xfa00, {r8}}, 0xc) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000011"], 0x24}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r10, &(0x7f0000000300)=ANY=[], 0x15) r11 = dup(r10) write$P9_RLERRORu(r11, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r11, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r11, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r11]) 36.360939995s ago: executing program 7 (id=11013): mknod(0x0, 0x1ffa, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0xe4}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x40, 0xa, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xced}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0xc800) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) chroot(&(0x7f0000000080)='./file0\x00') 36.319011206s ago: executing program 7 (id=11014): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) unshare(0x2a020400) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="52cf94c8101981d23180b9ce0926970d489377c46e8256c27be420b05b63352e6d74b57e79601feeec0b03e8246d108a55a08a714988eb67ab1cc54cb4988bb5c267224e67755d4970da1913d40068529ef28d9f515cd9e82548a2", @ANYRESHEX, @ANYBLOB=',k']) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, &(0x7f0000000040)=0x3ff, 0x4) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x7fffffff, 0x0, 0xfffffffd, 0x100000}}]}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x70}}, 0x0) r3 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) r4 = signalfd(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet_sctp(r4, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aae100"], 0x5000) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000300), 0x3}, 0x410a, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x20c, 0x6, 0x40a000, 0x401, 0x4, 0x6, r9}, &(0x7f00000001c0)=0x20) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f0000000240)={r9, 0x9}, 0x8) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) 35.943425302s ago: executing program 7 (id=11019): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f00000002c0)=0x7, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r1}, 0x18) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000ea00"/28], 0x34) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @exit], {0x95, 0x0, 0xff85}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$kcm(0x21, 0x2, 0x2) r4 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xefff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) recvmsg$unix(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x2002) sendmmsg$inet(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)='m\f', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000640)="e0", 0x1}], 0x1}}], 0x2, 0x4000001) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000480)={0xfffffffc, {{0xa, 0x4e21, 0xfffff801, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x1, 0x1, [{{0xa, 0x4e24, 0x3, @empty}}]}, 0x110) 34.974497267s ago: executing program 7 (id=11036): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400000008000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf6700000000000036000b000fff52004507000015300000d60600000ee6ff80bf050000000000003d63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070000000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999eef9d60bb39d0af449deaa27ea949e8f9000d885deea2783835e29eba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f26cac1c7b21bde7d1a55d6ebe700b3be005e47ef55e0dd81244b18590e000000000000356d82e43407a6d7fa94b21002f06cd247b126b6349ab62d7b07ba0a71a72145edade9941f49f300a8c8913e0e4ea9e4c77740ab3312edee62a4dc2fc85755d387d8a1bc8eb71fbe11b2216cc8d1f0160c237d929b49d828724b95555b459f4763c6222175c974be2f76fb5f330b015a68587a75c013000000000000000000000003000000000000d6ddc46e58eff8f4fbadfc6a3af8123b7f4240713a4c0cdc9d7820c4eb67cc0f8b5fe9258eeacb5776aebbab3d5c55020000006082778366dadfc36029633e0514cbcee1f3928970bde148c940434f33acd377cbad17673b2d30b6339255c98eba97efb4e9ac1f11be815dd6045592edcbee7f253ec74c7c1313505bd7ff8fd58b3a6569c91dbdef1df585aeaea7346a2a65caee5c85f9eddeeeee3c8a2e523c864ac430eb47cb4d0c8767b9d4125661b5a1a170c04b64da3a99ddb93bf14fae3ca2d1e882375b8dbac83978e136c34f90b33cc0eeb57debcfe26589efc08125d5d62a7e593c9738a50171adf051ea4f07e7e7e770c2016eeacbe8511afffffbea75759a1ea5404f5453c0b5c46c9700808c096cf8cf5223f341cbea3841b5cd224c1b381d56afebe9f99a00e3cd94dc0bb7af9e8709db487cc4d9b3b96723d69d512ddd57b0dee9b9f6ae80a502cce352098603e77f9ecced07fa25e99e9e415414c91f8bfd1c150570512f26c4ee34a64c131dce3800000000000000006c86287945bd8d258442870e000000000000000000000000f7e6a10de4bf7369b0d5b5373829b09bf5b7b34099b27ac7770fca449d4c4ca15f88b588b2429af2e1d1a4e1fa44cb80fcfae6e50d7e5b4675d7e0be706224f34e6eed553b40e2b897e73752fc7d1e4b0f4c5967eefd7448d5fde5841fa464a67267c631052bd7333769a4b8d19d4794357edce762e8136ab9d7ed34a72baffd849b90579b96b3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES32, @ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) modify_ldt$write(0x1, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0x400}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") truncate(&(0x7f0000000140)='./file2\x00', 0x5c00) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) lstat(&(0x7f0000000380)='./file2\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r7, r7, 0xee00) syz_clone(0x12000000, 0x0, 0xffffffffffffff55, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x34004044}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="60000000000103000000000000000000010000024c001980080001000109000008000100880000000002002008000008d15d88d6c35a79a9220c3c934288c18542e8ff40cd82d48800010040040000080001001900000008000100f02189700800010088000000080002008c12"], 0x60}, 0x1, 0x0, 0x0, 0x890}, 0x20040000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f6873720000000014000100766574"], 0xfc}}, 0x0) 34.020059342s ago: executing program 7 (id=11049): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 33.163660136s ago: executing program 7 (id=11054): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x250}}, 0x4c000) 33.097088537s ago: executing program 52 (id=11054): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x250}}, 0x4c000) 16.961570972s ago: executing program 0 (id=11234): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, 0x0, 0x0}, 0x20) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x209e, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x3, 0x0, r0, 0x0}]) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[], 0x5, 0x2b2, &(0x7f00000006c0)="$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") open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r2, 0x80080400) mlock(&(0x7f0000ffb000/0x1000)=nil, 0xffffffffdf004fff) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000010140)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@bsdgroups}]}, 0x1, 0x562, &(0x7f0000001080)="$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") r6 = open(&(0x7f0000000140)='./file1\x00', 0x64842, 0x21) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='napi_poll\x00', r8}, 0x18) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) r9 = epoll_create1(0x0) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000002100)) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r10, &(0x7f0000000000)={0x20000001}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000c85000)) socket$inet_dccp(0x2, 0x6, 0x0) 15.831356919s ago: executing program 0 (id=11246): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000002d00090027bd70000000000002"], 0x20}}, 0x84) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x30, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x100}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x30}}, 0x0) 15.476487525s ago: executing program 0 (id=11250): setreuid(0x0, 0xee00) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000280)={0x200000000000027d, &(0x7f0000000240)=[{0x8, 0x1a}, {0xe, 0x2, 0x2, 0x800}, {0x7, 0xfd, 0xd, 0x1}]}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup3(r1, r2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'erspan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYBLOB="5000000010000104001d80000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800600187893000000040012000500160002000000050017"], 0x50}}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) getpid() r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000400)="cf5f5b34e59ab691539f808de931eadd773b8dc1f50bb98d064ff99aab273017e14cd00220083b8a85480fadd6f453fd4d93f461e00c6d9583fd6b309c19d07d0547a2467c5ce8004c218f3f17ab6dd290bb1faa6ce55ba3b8c311b697b267e83f598a6370a979ada42a91519d3ea83a50a4b239f5ecd03db132a59db3ffd629ce240c2e3e728fa4b097790edec7a8e0d193e802973d5d65e592b96597f2a048c0de6d60994b1f8f721d272429b2b758d8a743a54a7c5413214e8e3e5bd0791c26e12a97f42e793f6d8988022fed3b3a70dbad9038c7689e7fb5db933b32db9d38c1d809b365cf9cbb", 0xe9) bind$inet6(r6, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @remote, 0x6}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000340)={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ff00", 0x50, 0x11, 0x0, @empty, @mcast2, {[@fragment={0x2f, 0x0, 0x7, 0x1, 0x0, 0x6, 0x67}], {0x0, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "b44cc4716e97d19ed749b03b33c3c0992cd418835f6bddec", "89248c8cf7f4b7c11c399779a33f4316f3a8514c7f65c5079cb5f432ea76670a"}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000feffffff889500000000000000000000e0ff000000c2000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', r5, @fallback=0x26, r0, 0x8, &(0x7f0000000000)={0x9}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 14.53272364s ago: executing program 0 (id=11256): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) setitimer(0x2, 0x0, 0x0) 14.451792971s ago: executing program 0 (id=11258): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {0x8}}, 0x1001, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r5, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r9}, 0x10) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x201c448, &(0x7f0000000080)=ANY=[@ANYBLOB='map=acorn,utf8,session=0x0000000000000004,session=0x0000000000000056,map=normal,session=0x000000000000003d,unhide,norock,block=0x0000000000000400,map=off,session=0x0000000000000001,uid=', @ANYRESDEC=0x0, @ANYRES16=0x0, @ANYRESDEC=0x0, @ANYRESOCT=r0], 0x1, 0xa84, &(0x7f0000000c40)="$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") fallocate(r8, 0x29, 0x7, 0x4) 13.655280264s ago: executing program 0 (id=11268): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x18020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380"], 0x44}}, 0x0) 12.824675097s ago: executing program 8 (id=11272): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x2a, 0x0, @empty}, 0x5, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x8, &(0x7f0000000040), 0x9, 0x52e, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJsnau02bLfQAqNClFBa0WjvxtlHVC+VUIVQJ6JHDNiROFMWOo9gpTdhD9sgdiZU4wYkzByQOSD1xR+IANy7lgFRgBWqKkDDy2E6cP07c3cTejX8/aeQ388b+3tvRvGd93swLYGzdiIjdiLgSEe9GxEzneNLZ4s321jrv44f3Fvce3ltMotl85x9JVt86Fj3vaXmm85n5iPj+WxE/TI4E/WNEfXtnbaFSKW92DhUb1Y1ifXvn9mp1YaW8Ul4vlebn5mdfv/Na6dz6+lL11x9djYjf/faLH/5h9xs/bjVrulPX24/z1O761H6clsmI+M5FBBuBiU5/rjzKmx/pTZynNCI+ExEvZ/f/TExkV/Oww5fpm0NsHQBwEZrNmWjO9O4DAJddmuXAkrTQyQVMR5oWCu0c3gtxLa3U6o1by7Wt9aV2rux6TKXLq5XybCdXeD2mkuXVyfJcVu7uV8qlI/t3IuL5iPhp7mq2X1isVZZG+cUHAMbYM0fm/3/n2vM/AHDJ5Q+KuVG2AwAYnvyoGwAADJ35HwDGj/kfAMaP+R8Axo/5HwDGj/kfAMbKd99+u7U19zrPv156b3trrfbe7aVyfa1Q3VosLNY2NwortdpK9sye6lmfV6nVNuZeja33i41yvVGsb+/crda21ht3s+d63y1PDaVXAMBpnn/pgz8nEbH7xtVsi57n/Z85V7940a0DLlI66gYAIzNxSt1/htgOYPiOr/YFjAv5eBhf/2s2m9Gzdm9E3N8v9TwMtO9/EXqwX/rke3Hkkw6k1g2FJ8/Nzz9G/h94qsn/w/g6Lf/fn+/ycBnI/8P4ajYTa/4DwJiR4wdO/NW+R+/v/7PNnp0HF9QgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeApMZ1uSFjprgU9HmhYKEc9GxPWYSpZXK+XZiHguIv6Um8q19uciwrpBAPA0S/+WdNb/ujnzyvTR2iu5T3LZa0T86Ofv/Oz9hUZjcy7iSvLP/eONB53jpVG0HwA4S3ee7s7jXR8/vLfY3YbZno++1V5ctBV3r7O1ayZjMnvNZ7mGa/9KOvttre8rE+cQf/d+RHzupP4nWW7kemfl06PxW7GfHWr89FD8NKtrv7b+LT57Dm2BcfNBa/x586T7L40b2evJ938+G6EeX3f82zs2/qX7499En/HvxqAxXv39t48dbM606+5HfGEyYq/74T3jTzd+0if+KwPG/8uLX3q5X13zFxE346T+J4diFRvVjWJ9e+f2anVhpbxSXi+V5ufmZ1+/81qpmOWoi91M9XF/f+PWc/3it/p/rU/8/Bn9/+qA/f/lf9/9wZdPif/1r5x8/V84JX5rTvzagPEXrv0m36+uFX+pT//Puv63Boz/4V93lgY8FQAYgvr2ztpCpVLefPxC/tRz0vMIMUAhidi94BAHhdyvfvLW2SfnhtaeRyxEv6qJJ6WFl6aQezKaMUBh1CMTcNEObvpRtwQAAAAAAAAAAAAAAOhnoL8HuvppTj5eGHEXAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuMT+HwAA//99VtW2") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000cc0)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x0, 0x43, 0xa0, 0x0, 0x98, 0x2d0, 0x178, 0x178, 0x2d0, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {0xff}, {}, 0x9}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}, @common=@unspec=@connbytes={{0x38}, {[{}, {0xe}]}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe0, 0x110, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x2, 0x0, 0x1ff}}, @common=@unspec=@connlimit={{0x40}, {[0xffffff00, 0xff, 0xffffff00, 0xff000000], 0x3, 0x1, {0x4413}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x5}, {0x1, 0x4, 0x5}, 0xb}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3c8) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000003b90178f71012505a332da7aea94e6c9a19cc3e5e31e6b1a7a8d6c7aad28aaedb2e51e1670dab90316034db35239c2ddde6b6c119b162e14d5389688f9461b94c60266a1b97c97e98dd7e55121f134b75336447ff42716566e8eb7f3c72b7a2aa2d1f807000792a9273ddd90b2275365e0506c3bed5ff993c7ebf1"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) r4 = syz_io_uring_setup(0x44f, &(0x7f00000002c0)={0x0, 0xfffffffe, 0x10100, 0x2}, 0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000100)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)='./cgroup/pids.max/../file0\x00', 0xffffffffffffffff, 0x0, 0x1}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f0000000440)='./file0\x00') readlink(&(0x7f00000012c0)='./file0/../file0\x00', &(0x7f0000001580)=""/84, 0x54) syz_io_uring_setup(0x1725, &(0x7f0000000080)={0x0, 0xfffffffe, 0x80, 0x400002, 0x379}, &(0x7f0000000100)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_submit(r7, 0x0, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x84, 0x0, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x100, &(0x7f0000000000)=0xffff, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) io_uring_enter(r4, 0x2dbe, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000140)) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r8, &(0x7f0000000080)="10", 0xffffff27, 0x8000c60) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000440)={0x41, 0x0}) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) madvise(&(0x7f0000ad2000/0x4000)=nil, 0x4000, 0x10) 12.263674506s ago: executing program 8 (id=11274): prctl$PR_SET_PTRACER(0x18, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x0, 0x0, 0x3}) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1d5) sendfile(r0, r0, 0x0, 0xfffe80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x9}, 0x18) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) 11.127757424s ago: executing program 8 (id=11281): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xe7a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='sched_switch\x00', r1, 0x0, 0x7ff}, 0x18) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) epoll_create(0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000002000000000000b70300000000000085000000720000009500000000000000000000005003000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) lsm_set_self_attr(0x64, &(0x7f0000000280)={0x64, 0x800, 0x20}, 0x20, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x64000600) r6 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) 3.913045418s ago: executing program 8 (id=11310): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x0, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0xc4d0}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x80, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x8510}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x4}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r2 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r2, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000004c0), 0x3e}, 0x0) 3.912411298s ago: executing program 6 (id=11311): r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000040)={0x1, 0xffffffffffff2f15, 0x9}) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, @perf_config_ext={0x0, 0x1}, 0x115428, 0x0, 0x0, 0x0, 0x5f4d, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") creat(&(0x7f0000000200)='./file2\x00', 0x20) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20008840) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000872ab0a700000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) dup(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) poll(&(0x7f0000000000), 0x20000000000000ea, 0x7) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {0xff}, {}, @raw32}, {0x0, 0x0, 0x0, 0x8, @time, {}, {}, @quote}], 0x38) 3.911795968s ago: executing program 8 (id=11312): r0 = socket$inet6(0xa, 0x3, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x7c, 0x4) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000a40)={[{@delalloc}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@bsdgroups}, {@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@abort}, {@grpquota}, {@nobh}, {@user_xattr}, {@dioread_lock}, {@dioread_nolock}]}, 0x1, 0x567, &(0x7f0000000b00)="$eJzs3d9rW1UcAPDvTX/sp66DMVRECntwMpeurT8m+DAfRYcDfZ+hvSuj6TKadKx14PbgXnyRIYg4EN/13cfhP+BfMdDBkFH0wZfKTW+6dE3atMuaznw+cMM590fOPbn3nHxPTkIC6Fuj2UMh4uWI+CaJOBIRSb5tMPKNo6v7LT+6MZUtSaysfPpXUt8vyzeeq3HcoTzzUkT89lXEqcLGcquLS7Olcjmdz/NjtbmrY9XFpdOX50oz6Ux6ZWJy8uzbkxPvvftO1+r6xoV/vv/k3odnvz6x/N0vD47eSeJcHM63NddjZ4azh5vNa0ZjNH9NhuLcE3uPP11he07S6xNgRwbydj4UWR9wJAbyVg/8/30ZEStAn0rat/9IdvVMgN3ViAMaY/vNx8EvrqWaj32ePfxgdQC0sf6Dq5+NxP762OjgcrJuZJSNd0e6UH5Wxq9/3r2TLdGVzyEAOnPzVkScGRzc2P8lef+3c2dar97fnHmyDP0f7J57WfzzZqv4p7AW/0SL+OdQi7a7E1u3/8KDLhTTVhb/vd8y/l2btBoZyHMv1GO+oeTS5XJ6Jo+GT8bQviy/2XzO2eX7bWPl5vgvW7LyG7Fgfh4PBvetP2a6VCvVP7jrgoe3Il5pGf8ma9c/aXH9s9fjQodlHE/vvtZu29b1f7ZWfop4veX1fzyjlWw+PzlWvx/GGnfFRn/fPv57u/J7Xf/s+h/cvP4jSfN8bXX7Zfy4/9+03bZ19Y/O7//h5LN6ejhfd71Uq82PRwwnH29cP/H42Ea+sX9W/5MnNu//Wt3/ByLi8w7rf/vYz692VP8eXf/pbV3/7Sfuf/TFD+3K76z/e6ueOpmvqfd/W+j0BJ/mtQMAAAAAAIC9phARhyMpFNfShUKxuPr9jmNxsFCuVGunLlUWrkxH/beyIzFUaMx0H2n6PsR4/n3YRn7iifxkRByNiG8HDtTzxalKebrXlQcAAAAAAAAAAAAAAAAAAIA94lCb3/9n/hjo9dkBz5y//Ib+tWX778Y/PQF7kvd/6F/aP/Qv7R/6l/YP/Uv7h/61rv2b9Ie+4v0f+pf2DwAAAAAAAAAAAAAAAAAAAAAAAAAAAF114fz5bFlZfnRjKstPX1tcmK1cOz2dVmeLcwtTxanK/NXiTKUyU06LU5W5rZ6vXKlcHZ+IhetjtbRaG6suLl2cqyxcqV28PFeaSS+mQ7tSKwAAAAAAAAAAAAAAAAAAAHi+VBeXZkvlcjovIbGjxODeOA2JLid63TMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwGP/BQAA///oaTpO") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0xfdef) 3.561937443s ago: executing program 6 (id=11313): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='setgroups\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x8031, 0xffffffffffffffff, 0xc6ed4000) syz_clone(0x80104000, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.14440835s ago: executing program 6 (id=11314): r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000040)={0x1, 0xffffffffffff2f15, 0x9}) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, @perf_config_ext={0x0, 0x1}, 0x115428, 0x0, 0x0, 0x0, 0x5f4d, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") creat(&(0x7f0000000200)='./file2\x00', 0x20) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0xfffffffd, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x45, 0x3ff, 0x10000, 0x3, 0x8, 0x4, 0xa0002, 0x5, 0x36, 0x59bc9fd6, 0x2, 0x2, 0x8000, 0x8, 0x22, 0x8, 0x2, 0x114b6000, 0xfffffffb, 0x2a70, 0xffff73cc, 0x81, 0x5, 0x0, 0xa, 0x3, 0x5, 0x101, 0x5, 0xba44, 0x3, 0x60c, 0x80000000, 0x800008, 0x4, 0x5, 0x3, 0xffff, 0x3, 0xfffffff8, 0x5, 0x6, 0x1a0055ee, 0x1, 0x1, 0xffff4226, 0x6, 0x4, 0x5, 0x101, 0x4, 0x1, 0x2, 0x800, 0xf9, 0x9, 0x9, 0x2, 0x8, 0x2f, 0xfffffff8, 0x0, 0x101, 0x9, 0x7, 0x0, 0x5, 0x3ff, 0x0, 0x6, 0x2, 0x5, 0x5, 0x2, 0x9b58, 0x4, 0xb, 0x4be, 0xe, 0xef, 0xa, 0xcaa, 0x9fa7, 0xfffeffff, 0x38, 0x400004, 0x0, 0x9, 0x44d, 0x6, 0x200, 0x8, 0xfffffff5, 0x7, 0x45, 0x3, 0x9, 0x0, 0x7, 0x6, 0x19, 0x3, 0x7, 0x4, 0x6, 0x7, 0x8002, 0x7, 0x6, 0x7, 0xc3c, 0x3, 0x28000000, 0x8, 0x9, 0xfad, 0x7, 0x8, 0x0, 0x5, 0x10, 0x400, 0xa97, 0x4, 0x422dd3f4, 0x4, 0xa, 0x2, 0x8, 0x10000, 0x8c1, 0x0, 0x45ba, 0x20009, 0x864b, 0x0, 0x7, 0x9, 0x1, 0x0, 0x82, 0x5, 0x800, 0x6, 0xffffff80, 0x41, 0xc22, 0x5, 0x6, 0x9, 0x9, 0x7fffffff, 0x2, 0x1, 0x6, 0xfffffffd, 0x7c1, 0x136, 0x6, 0x5, 0x4, 0x3ff, 0x4, 0xb, 0xfffffffe, 0x10001, 0x0, 0x6, 0x3, 0x404, 0x101, 0x2, 0x1b, 0xd589, 0xffffff7e, 0xffff0001, 0x4, 0x0, 0x300, 0x8, 0x60000000, 0xd39, 0x0, 0xfffffffe, 0x0, 0x81, 0x2, 0x55, 0x4000004, 0xbc6, 0x2, 0x8, 0x28a6a55, 0x1ff, 0xb, 0x7fff, 0x809, 0x2e4c20b9, 0xb, 0x4, 0x9, 0x7, 0x4, 0x8, 0x1004, 0x2, 0x8, 0x3, 0x7, 0x4, 0x9, 0x2000008, 0xfffffffa, 0x76e8e800, 0x800, 0x400, 0x6, 0x0, 0xcc6, 0xfffffffb, 0x8000, 0xffffff00, 0x894, 0x7, 0xe, 0x6, 0x6, 0x2, 0x6, 0xfffd, 0x9, 0xfffffffd, 0x8000, 0x5d, 0x1000000, 0x7, 0x1, 0x8, 0x7ffffffd, 0x384, 0x6, 0x58a, 0x80000000, 0xe08, 0x0, 0x1, 0x2c821159, 0x0, 0x9, 0x7, 0x0, 0x6, 0x0, 0x7f]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x2, 0x8, 0x0, 0xc}, {0xff, 0x1, 0x6, 0x5, 0x5e1d, 0x8}, 0x3ff, 0x101, 0x99}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4000050}, 0x20008840) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000872ab0a700000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) dup(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) poll(&(0x7f0000000000), 0x20000000000000ea, 0x7) r4 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {0xff}, {}, @raw32}, {0x0, 0x0, 0x0, 0x8, @time, {}, {}, @quote}], 0x38) 2.958104393s ago: executing program 6 (id=11315): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac141400000000001400000000000000000000000700000007038b01000000005e15f32aa9988e60da6af674011b2a455370163705ff6db8fe99e02d5c23fecd3922873c70484cf959be1be72e9341a96fb1aa0c825d8aa4d9b88e8108d7b4073aacafd32f94591c94ddb8ac0acc3aac8ac1960818c53bc0bca554f571a2a134f78b7d55c61c500139014cf38980f0ed12e5f086073d98727cfeb96c1caed1a11815ddb48dd3a6c091fb"], 0x38}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f00000013c0)=[{0x200000000006, 0x2, 0x6, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000040)) read(r9, 0x0, 0x38) pwrite64(r9, &(0x7f0000000340)="5da1", 0x4, 0x0) 2.633369338s ago: executing program 8 (id=11316): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffc}]}) unshare(0x20040600) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000140)='syzkaller\x00'}, 0x30) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000080000000950000000000000018180000", @ANYRES32, @ANYBLOB="00000000000000000000000010ffffff00b15b84000000000000001812f70df20f84a8", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085200000030000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x8f, &(0x7f00000000c0)=""/41, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0xa, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000001c0)=[{0x3, 0x1, 0x6, 0x3}, {0x2, 0x6, 0x5, 0x5}], 0x10, 0xffff, @void, @value}, 0x9f) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRES16=r0, @ANYBLOB="0000000000000000b71b0000000019000900f8a963b11900bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000395"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffff68) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f0000000200)=r3}, 0x20) setregid(0xffffffffffffffff, 0x0) 1.89837148s ago: executing program 4 (id=11319): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x310) 1.85034925s ago: executing program 6 (id=11320): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x200000000000024a, &(0x7f0000000400)=ANY=[@ANYRES8=r1], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$qrtr(0x2a, 0x2, 0x0) r4 = socket(0x2a, 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) fcntl$setsig(r3, 0xa, 0xa) memfd_secret(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='cdev_update\x00', r2}, 0x18) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r8, 0x0, 0x18, &(0x7f0000000000)=0x800, 0x4) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/reserved_size', 0x80001, 0xd1) msgget$private(0x0, 0x100) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'ipvlan1\x00', 0x200}) writev(r9, &(0x7f0000000940)=[{&(0x7f00000006c0)="ff", 0x1}], 0x1) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r11, 0x5452, &(0x7f00000001c0)=0x29f8) close_range(r11, 0xffffffffffffffff, 0x0) 1.701416763s ago: executing program 4 (id=11321): syslog(0x2, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="8b3326bd70000000000005"], 0x20}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x3, &(0x7f0000000000)=[{0x8001, 0x7f, 0xf0, 0x1}, {0xf12, 0x1, 0x8, 0x4}, {0x6, 0x2, 0xf6, 0xfffffffc}]}, 0x10) socket$kcm(0xa, 0x2, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x82) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) splice(r7, 0x0, r6, 0x0, 0x6, 0x0) tee(r5, 0xffffffffffffffff, 0x1004e, 0x2) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'team0\x00', @random="2b0100004ec6"}) 1.291713309s ago: executing program 6 (id=11322): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xe7a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='sched_switch\x00', r1, 0x0, 0x7ff}, 0x18) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) epoll_create(0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000002000000000000b70300000000000085000000720000009500000000000000000000005003000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) lsm_set_self_attr(0x64, &(0x7f0000000280)={0x64, 0x800, 0x20}, 0x20, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x64000600) r6 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) 1.117396492s ago: executing program 2 (id=11324): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d214", @ANYRES8=r2, @ANYRES32=r1, @ANYRES32=r1], 0x68}, 0x1, 0x0, 0x0, 0xc800}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x303}, "dd69ebb6bc9f15cd", "fc97a13e76b6d1d97d7df8a8bcb462f92125b4ff5adff012c53ff4c4d9877a0e", "bb654734", "d515191a63fdef2d"}, 0x38) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 1.079891833s ago: executing program 2 (id=11325): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = epoll_create(0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="180100000001000000f5ffffff03000000006d00000095c6a70bd37419a51a6a8abc904bfa18de7e4cebc467afd3e582b1bacb74576b34053fe6508d89e900626dd188d324bd3043be4aba6f1b47"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) close_range(r0, r1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x4000}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000580)='sys_enter\x00', r6, 0x0, 0x3}, 0x18) mknod(&(0x7f0000000040)='./file0\x00', 0x2, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000140)="24000000010006", 0x7) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703040008000000b70400000000000085000000016c18160d8b54082d2c7c5fd987fafae0404376840cc0df053998f4c2adcb661b9c9f254ed0ddce6b5ff5f9677258f543f52e5db7e32dd4b4c1dff7b91ce800e35c9a672a5f87bddf90945d57e0adfce6bf449247e7a378759c8c76539da2dfbe181a3e2a22eaff708165fdb7a948ab4459ee0dc12e31bc89c7c2ef794b1ba841837c0556cfbd2813"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r8}, &(0x7f0000001c00), &(0x7f0000001c40)=r9}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000600)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000000680)=[0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc4, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xeb, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f00000008c0)={&(0x7f0000000340), 0xc, &(0x7f0000000880)={&(0x7f0000000c80)=ANY=[@ANYBLOB="ff070000", @ANYRES16=0x0, @ANYBLOB="000229bd7000ffdbdf250d0000005000018008000100", @ANYRES32=0x0, @ANYBLOB="1400020077673000000000000000000000000000080003000100000014000200776731000000000000000000000000001400020076657468315f6d6163767461700000004c00018008000300010000001400020064766d72703000000000000000000000140002006970766c616e3000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030074622c5b08000100", @ANYRES32=0x0, @ANYBLOB="18000180140002006c6f000000000000000000000000000050000180140002007369743000000000000000000000000014000200697036677265300000000000000000000800030002000000080003000200000014000200767863616e31000000000000000000004000018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=r10, @ANYBLOB="080003000200000008000100", @ANYRES32=r11, @ANYBLOB="140002006272696467655f736c6176655f300000"], 0x158}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$evdev(&(0x7f0000000380), 0x80, 0x10c40) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 944.717595ms ago: executing program 2 (id=11326): r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000040)={0x1, 0xffffffffffff2f15, 0x9}) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, @perf_config_ext={0x0, 0x1}, 0x115428, 0x0, 0x0, 0x0, 0x5f4d, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") creat(&(0x7f0000000200)='./file2\x00', 0x20) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0xfffffffd, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x45, 0x3ff, 0x10000, 0x3, 0x8, 0x4, 0xa0002, 0x5, 0x36, 0x59bc9fd6, 0x2, 0x2, 0x8000, 0x8, 0x22, 0x8, 0x2, 0x114b6000, 0xfffffffb, 0x2a70, 0xffff73cc, 0x81, 0x5, 0x0, 0xa, 0x3, 0x5, 0x101, 0x5, 0xba44, 0x3, 0x60c, 0x80000000, 0x800008, 0x4, 0x5, 0x3, 0xffff, 0x3, 0xfffffff8, 0x5, 0x6, 0x1a0055ee, 0x1, 0x1, 0xffff4226, 0x6, 0x4, 0x5, 0x101, 0x4, 0x1, 0x2, 0x800, 0xf9, 0x9, 0x9, 0x2, 0x8, 0x2f, 0xfffffff8, 0x0, 0x101, 0x9, 0x7, 0x0, 0x5, 0x3ff, 0x0, 0x6, 0x2, 0x5, 0x5, 0x2, 0x9b58, 0x4, 0xb, 0x4be, 0xe, 0xef, 0xa, 0xcaa, 0x9fa7, 0xfffeffff, 0x38, 0x400004, 0x0, 0x9, 0x44d, 0x6, 0x200, 0x8, 0xfffffff5, 0x7, 0x45, 0x3, 0x9, 0x0, 0x7, 0x6, 0x19, 0x3, 0x7, 0x4, 0x6, 0x7, 0x8002, 0x7, 0x6, 0x7, 0xc3c, 0x3, 0x28000000, 0x8, 0x9, 0xfad, 0x7, 0x8, 0x0, 0x5, 0x10, 0x400, 0xa97, 0x4, 0x422dd3f4, 0x4, 0xa, 0x2, 0x8, 0x10000, 0x8c1, 0x0, 0x45ba, 0x20009, 0x864b, 0x0, 0x7, 0x9, 0x1, 0x0, 0x82, 0x5, 0x800, 0x6, 0xffffff80, 0x41, 0xc22, 0x5, 0x6, 0x9, 0x9, 0x7fffffff, 0x2, 0x1, 0x6, 0xfffffffd, 0x7c1, 0x136, 0x6, 0x5, 0x4, 0x3ff, 0x4, 0xb, 0xfffffffe, 0x10001, 0x0, 0x6, 0x3, 0x404, 0x101, 0x2, 0x1b, 0xd589, 0xffffff7e, 0xffff0001, 0x4, 0x0, 0x300, 0x8, 0x60000000, 0xd39, 0x0, 0xfffffffe, 0x0, 0x81, 0x2, 0x55, 0x4000004, 0xbc6, 0x2, 0x8, 0x28a6a55, 0x1ff, 0xb, 0x7fff, 0x809, 0x2e4c20b9, 0xb, 0x4, 0x9, 0x7, 0x4, 0x8, 0x1004, 0x2, 0x8, 0x3, 0x7, 0x4, 0x9, 0x2000008, 0xfffffffa, 0x76e8e800, 0x800, 0x400, 0x6, 0x0, 0xcc6, 0xfffffffb, 0x8000, 0xffffff00, 0x894, 0x7, 0xe, 0x6, 0x6, 0x2, 0x6, 0xfffd, 0x9, 0xfffffffd, 0x8000, 0x5d, 0x1000000, 0x7, 0x1, 0x8, 0x7ffffffd, 0x384, 0x6, 0x58a, 0x80000000, 0xe08, 0x0, 0x1, 0x2c821159, 0x0, 0x9, 0x7, 0x0, 0x6, 0x0, 0x7f]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x2, 0x8, 0x0, 0xc}, {0xff, 0x1, 0x6, 0x5, 0x5e1d, 0x8}, 0x3ff, 0x101, 0x99}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4000050}, 0x20008840) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000872ab0a700000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) dup(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) poll(&(0x7f0000000000), 0x20000000000000ea, 0x7) r4 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {0xff}, {}, @raw32}, {0x0, 0x0, 0x0, 0x8, @time, {}, {}, @quote}], 0x38) 788.095107ms ago: executing program 4 (id=11327): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)={0x2c, r1, 0x1, 0x0, 0x25dfdbfc, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x2c}}, 0x4000000) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) 726.705798ms ago: executing program 4 (id=11328): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) mlock(&(0x7f0000ffb000/0x1000)=nil, 0xffffffffdf004fff) 726.466058ms ago: executing program 4 (id=11329): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x9000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1d5) sendfile(r1, r1, 0x0, 0xfffe80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2, 0x0, 0x9}, 0x18) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) 705.704709ms ago: executing program 2 (id=11330): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x310) 652.047399ms ago: executing program 4 (id=11331): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x22020400) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x9, 0x0, 0x0) pause() r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x40000000000}, 0x18) unshare(0x2040600) r5 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r5, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="1813add6f45b05000000deffffffefbbea4511c9e6880000cb217efbff002b48381752423adc04c5eb3ce0e00786add41f25858e20a299a9d234bf995f32e73c3606ce813d9c304dc7921a7bf6373475d3dc648fd17467b67bd6cff246f4c12a3e9ce47e3af55f94abbbfc864d1df11b9e1422e5354be5577b6cfe0b93dee9a200b6f334906670c7370f1f15bc"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) ptrace(0x10, r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6}]}) ptrace(0x10, r2) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r7, r7, 0x0, 0xb) syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) 106.856698ms ago: executing program 2 (id=11332): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000000c0), 0xff, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x0, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0xc4d0}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x80, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x8510}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x4}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r2 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r2, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000004c0), 0x3e}, 0x0) 0s ago: executing program 2 (id=11333): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009900"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000500)={[{@quota}, {@jqfmt_vfsv0}, {@journal_checksum}, {@errors_remount}, {@nobarrier}]}, 0x1, 0x520, &(0x7f0000001300)="$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") fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) capset(&(0x7f0000000580)={0x19980330, r1}, &(0x7f00000005c0)={0x6, 0xfffffeff, 0x7, 0x4, 0x5eb, 0x1}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000140)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @rand_addr=' \x01\x00'}, {0xa, 0x0, 0x0, @dev, 0x20000}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c) socket$inet6_tcp(0xa, 0x1, 0x0) creat(0x0, 0xd931d3864d39dcca) inotify_add_watch(0xffffffffffffffff, 0x0, 0x8c7) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbf}]}) setpriority(0x0, 0x0, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) socket$key(0xf, 0x3, 0x2) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=ANY=[@ANYBLOB="38010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000e271974cc6b5c62332000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000048000200656362286369706865725f6e756c6c2900"/240], 0x138}, 0x1, 0xe}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001480)=ANY=[@ANYBLOB="38010000100013070000000000000000ac1e0001000000000000000000000000e00000010000000000000000000000000000000000000000020000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d432000000ac141400000000000000000000000000fdffffffffffffff000000000000000000000000000000000000000000000000da040000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000100000000000000000000000000000000000010000000000000002000100000000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) kernel console output (not intermixed with test programs): nded to keep mac addresses unique to avoid problems! [ 793.655607][ T2662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.667465][ T2662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.677428][ T2662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.689202][ T2662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.699135][ T2662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.710879][ T2662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.721006][ T2662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.732922][ T2662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.742769][ T2662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.754244][ T2662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.764131][ T2662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.775845][ T2662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.785682][ T2662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.797271][ T2662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.807232][ T2662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.818837][ T2662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.828712][ T2662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.840252][ T2662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.850147][ T2662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.861671][ T2662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.871513][ T2662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.883087][ T2662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.901554][ T2662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 793.921358][ T2662] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.930273][ T2662] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.939052][ T2662] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.949245][ T2662] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.080694][ T2839] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10625'. [ 794.091850][ T2839] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10625'. [ 794.116661][ T2839] bridge0: entered promiscuous mode [ 794.129212][ T2839] batadv_slave_1: entered promiscuous mode [ 794.143220][ T2835] loop0: detected capacity change from 0 to 512 [ 794.171668][ T2835] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 794.200917][ T2835] EXT4-fs (loop0): 1 truncate cleaned up [ 794.206819][ T2846] 9pnet_fd: Insufficient options for proto=fd [ 794.224637][ T2835] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 794.258767][ T2835] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2798: inode #15: comm syz.0.10575: corrupted xattr block 33: invalid header [ 794.292113][ T2835] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2962: inode #15: comm syz.0.10575: corrupted xattr block 33: invalid header [ 794.309259][ T2851] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10624'. [ 794.392182][ T2835] EXT4-fs warning (device loop0): ext4_evict_inode:279: xattr delete (err -117) [ 794.562616][ T2662] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 794.620292][ T2859] netlink: 'syz.0.10631': attribute type 4 has an invalid length. [ 794.859609][ T2862] loop0: detected capacity change from 0 to 512 [ 794.935368][ T2862] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 794.973904][ T2862] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 795.040730][ T2862] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 795.267768][ T2862] ref_ctr_offset mismatch. inode: 0x22 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xc [ 795.310263][ T2871] loop8: detected capacity change from 0 to 128 [ 795.337973][ T2871] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 795.384347][ T2871] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 795.671650][ T2893] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10643'. [ 795.936252][ T29] kauditd_printk_skb: 311 callbacks suppressed [ 795.936272][ T29] audit: type=1326 audit(2134217800.641:45363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2887 comm="syz.4.10640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9801f75127 code=0x7ffc0000 [ 795.967614][ T29] audit: type=1326 audit(2134217800.641:45364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2887 comm="syz.4.10640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9801f1a359 code=0x7ffc0000 [ 795.992423][ T29] audit: type=1326 audit(2134217800.641:45365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2887 comm="syz.4.10640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9801f75127 code=0x7ffc0000 [ 796.017454][ T29] audit: type=1326 audit(2134217800.641:45366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2887 comm="syz.4.10640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9801f1a359 code=0x7ffc0000 [ 796.042416][ T29] audit: type=1326 audit(2134217800.641:45367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2887 comm="syz.4.10640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9801f75127 code=0x7ffc0000 [ 796.067429][ T29] audit: type=1326 audit(2134217800.641:45368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2887 comm="syz.4.10640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9801f1a359 code=0x7ffc0000 [ 796.092275][ T29] audit: type=1326 audit(2134217800.641:45369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2887 comm="syz.4.10640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9801f75127 code=0x7ffc0000 [ 796.117628][ T29] audit: type=1326 audit(2134217800.641:45370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2887 comm="syz.4.10640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9801f1a359 code=0x7ffc0000 [ 796.142588][ T29] audit: type=1326 audit(2134217800.641:45371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2887 comm="syz.4.10640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9801f75127 code=0x7ffc0000 [ 796.167633][ T29] audit: type=1326 audit(2134217800.641:45372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2887 comm="syz.4.10640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9801f1a359 code=0x7ffc0000 [ 796.529830][ T2919] netlink: 'syz.0.10651': attribute type 11 has an invalid length. [ 796.539084][ T2919] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10651'. [ 796.584121][ T2926] FAULT_INJECTION: forcing a failure. [ 796.584121][ T2926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 796.597445][ T2926] CPU: 1 UID: 0 PID: 2926 Comm: syz.7.10653 Tainted: G W 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 796.597505][ T2926] Tainted: [W]=WARN [ 796.597513][ T2926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 796.597528][ T2926] Call Trace: [ 796.597535][ T2926] [ 796.597544][ T2926] dump_stack_lvl+0xf6/0x150 [ 796.597568][ T2926] dump_stack+0x15/0x1a [ 796.597587][ T2926] should_fail_ex+0x261/0x270 [ 796.597680][ T2926] should_fail+0xb/0x10 [ 796.597703][ T2926] should_fail_usercopy+0x1a/0x20 [ 796.597735][ T2926] _copy_from_user+0x1c/0xa0 [ 796.597845][ T2926] copy_msghdr_from_user+0x54/0x2b0 [ 796.597916][ T2926] ? __fget_files+0x186/0x1c0 [ 796.597944][ T2926] __sys_sendmmsg+0x1eb/0x4b0 [ 796.598004][ T2926] __x64_sys_sendmmsg+0x57/0x70 [ 796.598091][ T2926] x64_sys_call+0x2b53/0x2e10 [ 796.598118][ T2926] do_syscall_64+0xc9/0x1c0 [ 796.598154][ T2926] ? clear_bhb_loop+0x25/0x80 [ 796.598177][ T2926] ? clear_bhb_loop+0x25/0x80 [ 796.598242][ T2926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.598262][ T2926] RIP: 0033:0x7fc1efd3e169 [ 796.598279][ T2926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 796.598300][ T2926] RSP: 002b:00007fc1ee3a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 796.598320][ T2926] RAX: ffffffffffffffda RBX: 00007fc1eff65fa0 RCX: 00007fc1efd3e169 [ 796.598332][ T2926] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000006 [ 796.598344][ T2926] RBP: 00007fc1ee3a7090 R08: 0000000000000000 R09: 0000000000000000 [ 796.598428][ T2926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 796.598441][ T2926] R13: 0000000000000000 R14: 00007fc1eff65fa0 R15: 00007ffcb7ad7618 [ 796.598459][ T2926] [ 796.944578][ T2949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 796.956141][ T2949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.387898][ T2954] __nla_validate_parse: 2 callbacks suppressed [ 797.387912][ T2954] netlink: 168 bytes leftover after parsing attributes in process `syz.8.10665'. [ 797.542371][ T2964] netlink: 'syz.4.10668': attribute type 4 has an invalid length. [ 797.566642][ T2966] loop8: detected capacity change from 0 to 512 [ 797.574997][ T2966] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 797.660755][ T2975] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10672'. [ 797.700740][ T2966] EXT4-fs (loop8): 1 truncate cleaned up [ 797.708871][ T2966] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 797.761037][ T2966] EXT4-fs error (device loop8): ext4_expand_extra_isize_ea:2798: inode #15: comm syz.8.10670: corrupted xattr block 33: invalid header [ 797.781584][ T2966] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2962: inode #15: comm syz.8.10670: corrupted xattr block 33: invalid header [ 797.930866][ T2984] dummy0 speed is unknown, defaulting to 1000 [ 798.245692][ T2966] EXT4-fs warning (device loop8): ext4_evict_inode:279: xattr delete (err -117) [ 798.291556][ T2996] loop7: detected capacity change from 0 to 256 [ 798.314486][ T2998] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 798.314486][ T2998] program syz.2.10679 not setting count and/or reply_len properly [ 798.372681][T29095] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 798.382457][ T3004] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10682'. [ 798.399651][ T3002] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10681'. [ 798.410619][ T3002] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10681'. [ 798.425601][ T3007] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10684'. [ 798.436899][ T3007] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10684'. [ 798.446049][ T3002] wireguard9: entered promiscuous mode [ 798.452929][ T3002] wireguard9: entered allmulticast mode [ 798.597416][ T3025] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10687'. [ 799.014230][ T3098] No such timeout policy "syz0" [ 799.246948][ T3121] syzkaller0: entered promiscuous mode [ 799.252554][ T3121] syzkaller0: entered allmulticast mode [ 799.399490][ T3161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10699'. [ 799.410174][ T3161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10699'. [ 799.426987][ T3161] wireguard1: entered promiscuous mode [ 799.433873][ T3161] wireguard1: entered allmulticast mode [ 799.580637][ T3180] dvmrp5: entered allmulticast mode [ 799.589394][ T3180] dvmrp5: left allmulticast mode [ 799.708982][ T3191] wireguard2: entered promiscuous mode [ 799.716579][ T3191] wireguard2: entered allmulticast mode [ 800.036097][ T3220] syzkaller0: entered promiscuous mode [ 800.043009][ T3220] syzkaller0: entered allmulticast mode [ 800.274531][ T3224] netlink: 'syz.8.10724': attribute type 4 has an invalid length. [ 800.290380][ T3224] loop8: detected capacity change from 0 to 512 [ 800.297211][ T3224] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 800.313467][ T3224] EXT4-fs (loop8): 1 truncate cleaned up [ 800.321501][ T3224] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 800.392539][T29095] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 801.696266][ T3262] FAULT_INJECTION: forcing a failure. [ 801.696266][ T3262] name failslab, interval 1, probability 0, space 0, times 0 [ 801.710556][ T3262] CPU: 1 UID: 0 PID: 3262 Comm: syz.4.10735 Tainted: G W 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 801.710633][ T3262] Tainted: [W]=WARN [ 801.710641][ T3262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 801.710657][ T3262] Call Trace: [ 801.710665][ T3262] [ 801.710675][ T3262] dump_stack_lvl+0xf6/0x150 [ 801.710782][ T3262] dump_stack+0x15/0x1a [ 801.710802][ T3262] should_fail_ex+0x261/0x270 [ 801.710836][ T3262] should_failslab+0x8f/0xb0 [ 801.710920][ T3262] __kmalloc_cache_node_noprof+0x58/0x340 [ 801.710952][ T3262] ? __get_vm_area_node+0xfb/0x1c0 [ 801.710977][ T3262] ? __rcu_read_unlock+0x4e/0x70 [ 801.711005][ T3262] __get_vm_area_node+0xfb/0x1c0 [ 801.711116][ T3262] __vmalloc_node_range_noprof+0x285/0xe80 [ 801.711147][ T3262] ? bpf_prog_alloc_no_stats+0x49/0x390 [ 801.711171][ T3262] ? get_perf_callchain+0x447/0x540 [ 801.711213][ T3262] ? __bpf_get_stack+0x282/0x630 [ 801.711243][ T3262] ? pcpu_block_refresh_hint+0x12d/0x190 [ 801.711278][ T3262] ? bpf_prog_alloc_no_stats+0x49/0x390 [ 801.711321][ T3262] __vmalloc_noprof+0x5e/0x70 [ 801.711440][ T3262] ? bpf_prog_alloc_no_stats+0x49/0x390 [ 801.711484][ T3262] bpf_prog_alloc_no_stats+0x49/0x390 [ 801.711504][ T3262] ? bpf_prog_alloc+0x28/0x150 [ 801.711529][ T3262] bpf_prog_alloc+0x3a/0x150 [ 801.711629][ T3262] bpf_prog_create+0x69/0x120 [ 801.711659][ T3262] bpf_mt_check+0x93/0x110 [ 801.711708][ T3262] xt_check_match+0x265/0x4d0 [ 801.711727][ T3262] ? xt_find_match+0x1d2/0x210 [ 801.711762][ T3262] ? xt_find_match+0x1b3/0x210 [ 801.711796][ T3262] translate_table+0xb87/0x10b0 [ 801.711876][ T3262] ? _copy_from_user+0x89/0xa0 [ 801.711927][ T3262] do_ip6t_set_ctl+0x7bb/0x8c0 [ 801.711964][ T3262] ? kstrtouint+0x7b/0xc0 [ 801.711985][ T3262] ? __rcu_read_unlock+0x4e/0x70 [ 801.712020][ T3262] nf_setsockopt+0x195/0x1b0 [ 801.712047][ T3262] ipv6_setsockopt+0x10f/0x130 [ 801.712151][ T3262] udpv6_setsockopt+0x95/0xb0 [ 801.712172][ T3262] sock_common_setsockopt+0x64/0x80 [ 801.712190][ T3262] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 801.712209][ T3262] __sys_setsockopt+0x187/0x200 [ 801.712302][ T3262] __x64_sys_setsockopt+0x66/0x80 [ 801.712330][ T3262] x64_sys_call+0x2a09/0x2e10 [ 801.712351][ T3262] do_syscall_64+0xc9/0x1c0 [ 801.712418][ T3262] ? clear_bhb_loop+0x25/0x80 [ 801.712437][ T3262] ? clear_bhb_loop+0x25/0x80 [ 801.712456][ T3262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.712521][ T3262] RIP: 0033:0x7f9801f7e169 [ 801.712537][ T3262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 801.712556][ T3262] RSP: 002b:00007f98005e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 801.712575][ T3262] RAX: ffffffffffffffda RBX: 00007f98021a5fa0 RCX: 00007f9801f7e169 [ 801.712587][ T3262] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006 [ 801.712600][ T3262] RBP: 00007f98005e7090 R08: 00000000000005be R09: 0000000000000000 [ 801.712611][ T3262] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 801.712691][ T3262] R13: 0000000000000000 R14: 00007f98021a5fa0 R15: 00007ffcd79bf9a8 [ 801.712710][ T3262] [ 801.712717][ T3262] syz.4.10735: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null) [ 801.728111][ T3260] loop7: detected capacity change from 0 to 1024 [ 801.732252][ T3262] ,cpuset=syz4,mems_allowed=0 [ 801.732288][ T3262] CPU: 1 UID: 0 PID: 3262 Comm: syz.4.10735 Tainted: G W 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 801.732371][ T3262] Tainted: [W]=WARN [ 801.732378][ T3262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 801.732390][ T3262] Call Trace: [ 801.732396][ T3262] [ 801.732406][ T3262] dump_stack_lvl+0xf6/0x150 [ 801.732433][ T3262] dump_stack+0x15/0x1a [ 801.732451][ T3262] warn_alloc+0x145/0x1b0 [ 801.732549][ T3262] ? __rcu_read_unlock+0x4e/0x70 [ 801.732646][ T3262] __vmalloc_node_range_noprof+0x2aa/0xe80 [ 801.732736][ T3262] ? get_perf_callchain+0x447/0x540 [ 801.732764][ T3262] ? __bpf_get_stack+0x282/0x630 [ 801.732801][ T3262] ? pcpu_block_refresh_hint+0x12d/0x190 [ 801.732842][ T3262] ? bpf_prog_alloc_no_stats+0x49/0x390 [ 801.732877][ T3262] __vmalloc_noprof+0x5e/0x70 [ 801.732907][ T3262] ? bpf_prog_alloc_no_stats+0x49/0x390 [ 801.732939][ T3262] bpf_prog_alloc_no_stats+0x49/0x390 [ 801.732965][ T3262] ? bpf_prog_alloc+0x28/0x150 [ 801.732994][ T3262] bpf_prog_alloc+0x3a/0x150 [ 801.733045][ T3262] bpf_prog_create+0x69/0x120 [ 801.733078][ T3262] bpf_mt_check+0x93/0x110 [ 801.733185][ T3262] xt_check_match+0x265/0x4d0 [ 801.733209][ T3262] ? xt_find_match+0x1d2/0x210 [ 801.733277][ T3262] ? xt_find_match+0x1b3/0x210 [ 801.733355][ T3262] translate_table+0xb87/0x10b0 [ 801.733403][ T3262] ? _copy_from_user+0x89/0xa0 [ 801.733470][ T3262] do_ip6t_set_ctl+0x7bb/0x8c0 [ 801.733506][ T3262] ? kstrtouint+0x7b/0xc0 [ 801.733533][ T3262] ? __rcu_read_unlock+0x4e/0x70 [ 801.733575][ T3262] nf_setsockopt+0x195/0x1b0 [ 801.733640][ T3262] ipv6_setsockopt+0x10f/0x130 [ 801.733675][ T3262] udpv6_setsockopt+0x95/0xb0 [ 801.733703][ T3262] sock_common_setsockopt+0x64/0x80 [ 801.733780][ T3262] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 801.733892][ T3262] __sys_setsockopt+0x187/0x200 [ 801.733932][ T3262] __x64_sys_setsockopt+0x66/0x80 [ 801.733966][ T3262] x64_sys_call+0x2a09/0x2e10 [ 801.734072][ T3262] do_syscall_64+0xc9/0x1c0 [ 801.734179][ T3262] ? clear_bhb_loop+0x25/0x80 [ 801.734249][ T3262] ? clear_bhb_loop+0x25/0x80 [ 801.734275][ T3262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.734352][ T3262] RIP: 0033:0x7f9801f7e169 [ 801.734370][ T3262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 801.734393][ T3262] RSP: 002b:00007f98005e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 801.734456][ T3262] RAX: ffffffffffffffda RBX: 00007f98021a5fa0 RCX: 00007f9801f7e169 [ 801.734472][ T3262] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006 [ 801.734486][ T3262] RBP: 00007f98005e7090 R08: 00000000000005be R09: 0000000000000000 [ 801.734562][ T3262] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 801.734577][ T3262] R13: 0000000000000000 R14: 00007f98021a5fa0 R15: 00007ffcd79bf9a8 [ 801.734602][ T3262] [ 801.734610][ T3262] Mem-Info: [ 801.775651][ T3260] EXT4-fs: Ignoring removed bh option [ 801.779681][ T3262] active_anon:26990 inactive_anon:6 isolated_anon:0 [ 801.779681][ T3262] active_file:14965 inactive_file:12797 isolated_file:0 [ 801.779681][ T3262] unevictable:0 dirty:412 writeback:0 [ 801.779681][ T3262] slab_reclaimable:13133 slab_unreclaimable:409729 [ 801.779681][ T3262] mapped:37439 shmem:19779 pagetables:1518 [ 801.779681][ T3262] sec_pagetables:0 bounce:0 [ 801.779681][ T3262] kernel_misc_reclaimable:0 [ 801.779681][ T3262] free:1431681 free_pcp:9031 free_cma:0 [ 801.885549][ T3260] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 801.888077][ T3262] Node 0 active_anon:108076kB inactive_anon:24kB active_file:59860kB inactive_file:51188kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:149756kB dirty:1648kB writeback:0kB shmem:79116kB writeback_tmp:0kB kernel_stack:6800kB pagetables:6072kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 802.480252][ T3262] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 802.508293][ T3262] lowmem_reserve[]: 0 2882 7860 7860 [ 802.513625][ T3262] Node 0 DMA32 free:2947792kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951320kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 802.543331][ T3262] lowmem_reserve[]: 0 0 4978 4978 [ 802.548444][ T3262] Node 0 Normal free:2763572kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB active_anon:107960kB inactive_anon:24kB active_file:59860kB inactive_file:51188kB unevictable:0kB writepending:1648kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:32396kB local_pcp:5596kB free_cma:0kB [ 802.580292][ T3262] lowmem_reserve[]: 0 0 0 0 [ 802.584949][ T3262] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 802.598929][ T3262] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947792kB [ 802.615230][ T3262] Node 0 Normal: 7*4kB (E) 1*8kB (E) 3*16kB (UME) 259*32kB (UM) 284*64kB (ME) 129*128kB (UME) 73*256kB (UM) 67*512kB (UM) 81*1024kB (UM) 22*2048kB (UM) 620*4096kB (UME) = 2763572kB [ 802.634345][ T3262] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 802.643665][ T3262] 47462 total pagecache pages [ 802.648416][ T3262] 7 pages in swap cache [ 802.653951][ T3262] Free swap = 124452kB [ 802.658099][ T3262] Total swap = 124996kB [ 802.662320][ T3262] 2097051 pages RAM [ 802.666135][ T3262] 0 pages HighMem/MovableOnly [ 802.670894][ T3262] 80820 pages reserved [ 802.676191][ T3262] xt_bpf: check failed: parse error [ 802.699670][T30113] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 802.764371][ T3279] __nla_validate_parse: 9 callbacks suppressed [ 802.764386][ T3279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10740'. [ 802.786958][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 802.786972][ T29] audit: type=1400 audit(2134217807.077:45664): avc: denied { create } for pid=3276 comm="syz.2.10740" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 803.384934][ T3289] dummy0 speed is unknown, defaulting to 1000 [ 803.812698][ T3292] loop8: detected capacity change from 0 to 1024 [ 803.851684][ T29] audit: type=1400 audit(2134217808.059:45665): avc: denied { unlink } for pid=816 comm="syz-executor" name="file0" dev="tmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 803.878299][ T3292] EXT4-fs: inline encryption not supported [ 803.885191][ T3292] EXT4-fs: Ignoring removed bh option [ 803.902281][ T3292] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 803.948712][ T3299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10746'. [ 803.960827][ T3299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10746'. [ 803.980482][ T29] audit: type=1400 audit(2134217808.162:45666): avc: denied { listen } for pid=3298 comm="syz.0.10746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 804.006763][ T3302] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10745'. [ 804.016704][ T3302] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10745'. [ 804.029145][ T3302] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10745'. [ 804.109764][ T3307] loop0: detected capacity change from 0 to 2048 [ 804.167044][ T3307] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 804.179381][ T29] audit: type=1326 audit(2134217808.358:45667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3287 comm="syz.8.10743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f726831e169 code=0x7ffc0000 [ 804.180981][ T29] audit: type=1326 audit(2134217808.377:45668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3287 comm="syz.8.10743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f726831e169 code=0x7ffc0000 [ 804.216266][ T3307] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 804.236300][ T29] audit: type=1326 audit(2134217808.377:45669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3287 comm="syz.8.10743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f726831e169 code=0x7ffc0000 [ 804.268002][ T29] audit: type=1326 audit(2134217808.377:45670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3287 comm="syz.8.10743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f726831e169 code=0x7ffc0000 [ 804.295714][ T29] audit: type=1326 audit(2134217808.377:45671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3287 comm="syz.8.10743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f726831e169 code=0x7ffc0000 [ 804.323262][ T29] audit: type=1326 audit(2134217808.377:45672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3287 comm="syz.8.10743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f726831e169 code=0x7ffc0000 [ 804.350960][ T29] audit: type=1326 audit(2134217808.377:45673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3287 comm="syz.8.10743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f726831e169 code=0x7ffc0000 [ 804.454387][T29095] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 804.468924][ T3323] bond1: entered promiscuous mode [ 804.474065][ T3323] bond1: entered allmulticast mode [ 804.482167][ T3323] 8021q: adding VLAN 0 to HW filter on device bond1 [ 804.507450][ T3323] bond1 (unregistering): Released all slaves [ 804.531583][ T2662] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 804.594311][ T3330] loop8: detected capacity change from 0 to 512 [ 804.614095][ T3330] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 804.665771][ T3330] EXT4-fs (loop8): 1 truncate cleaned up [ 804.688110][ T3330] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 804.790299][ T3347] loop7: detected capacity change from 0 to 512 [ 804.801967][ T3347] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 804.813068][ T3330] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 804.819448][ T3350] bond1: entered promiscuous mode [ 804.828077][ T3350] bond1: entered allmulticast mode [ 804.837311][ T3350] 8021q: adding VLAN 0 to HW filter on device bond1 [ 804.845702][ T3346] loop0: detected capacity change from 0 to 1024 [ 804.855561][ T3346] EXT4-fs: Ignoring removed oldalloc option [ 804.862308][ T3346] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 804.873276][ T3347] EXT4-fs (loop7): 1 truncate cleaned up [ 804.881962][ T3347] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 804.882929][ T3350] bond1 (unregistering): Released all slaves [ 804.915071][ T3346] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 804.921442][ T3347] EXT4-fs error (device loop7): ext4_expand_extra_isize_ea:2798: inode #15: comm syz.7.10761: corrupted xattr block 33: invalid header [ 804.945303][ T3347] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2962: inode #15: comm syz.7.10761: corrupted xattr block 33: invalid header [ 804.963075][ T3347] EXT4-fs warning (device loop7): ext4_evict_inode:279: xattr delete (err -117) [ 804.987481][ T3366] netlink: 'syz.8.10764': attribute type 2 has an invalid length. [ 805.027493][T30113] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 805.062906][ T2662] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 805.346818][ T3392] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10768'. [ 805.358081][ T3392] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10768'. [ 805.382299][ T3392] gretap1: entered promiscuous mode [ 805.389113][ T3392] gretap1: entered allmulticast mode [ 805.831247][ T3412] loop0: detected capacity change from 0 to 512 [ 805.844573][ T3412] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 805.878010][ T3412] EXT4-fs (loop0): 1 truncate cleaned up [ 805.894429][ T3412] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 805.927649][ T3412] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2798: inode #15: comm syz.0.10777: corrupted xattr block 33: invalid header [ 805.951994][ T3412] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2962: inode #15: comm syz.0.10777: corrupted xattr block 33: invalid header [ 805.976531][ T3412] EXT4-fs warning (device loop0): ext4_evict_inode:279: xattr delete (err -117) [ 806.066675][ T2662] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 806.246734][ T3435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10785'. [ 806.251305][ T3433] netlink: 'syz.7.10784': attribute type 4 has an invalid length. [ 806.374783][ T3436] dummy0 speed is unknown, defaulting to 1000 [ 806.637243][ T3433] loop7: detected capacity change from 0 to 512 [ 806.778381][ T3433] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 806.871854][ T3433] EXT4-fs (loop7): 1 truncate cleaned up [ 806.903441][ T3433] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 807.001964][ T3454] Invalid logical block size (5) [ 807.039901][T30113] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 807.232677][ T3475] FAULT_INJECTION: forcing a failure. [ 807.232677][ T3475] name failslab, interval 1, probability 0, space 0, times 0 [ 807.245426][ T3475] CPU: 1 UID: 0 PID: 3475 Comm: syz.0.10796 Tainted: G W 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 807.245460][ T3475] Tainted: [W]=WARN [ 807.245467][ T3475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 807.245482][ T3475] Call Trace: [ 807.245568][ T3475] [ 807.245576][ T3475] dump_stack_lvl+0xf6/0x150 [ 807.245605][ T3475] dump_stack+0x15/0x1a [ 807.245642][ T3475] should_fail_ex+0x261/0x270 [ 807.245673][ T3475] should_failslab+0x8f/0xb0 [ 807.245740][ T3475] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 807.245768][ T3475] ? __alloc_skb+0x10d/0x320 [ 807.245796][ T3475] __alloc_skb+0x10d/0x320 [ 807.245880][ T3475] netlink_alloc_large_skb+0xad/0xe0 [ 807.245903][ T3475] netlink_sendmsg+0x3da/0x720 [ 807.245939][ T3475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 807.245992][ T3475] __sock_sendmsg+0x140/0x180 [ 807.246012][ T3475] ____sys_sendmsg+0x350/0x4e0 [ 807.246087][ T3475] __sys_sendmsg+0x1a0/0x240 [ 807.246142][ T3475] __x64_sys_sendmsg+0x46/0x50 [ 807.246175][ T3475] x64_sys_call+0x26f3/0x2e10 [ 807.246200][ T3475] do_syscall_64+0xc9/0x1c0 [ 807.246334][ T3475] ? clear_bhb_loop+0x25/0x80 [ 807.246366][ T3475] ? clear_bhb_loop+0x25/0x80 [ 807.246423][ T3475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.246449][ T3475] RIP: 0033:0x7fb7fbf4e169 [ 807.246466][ T3475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 807.246503][ T3475] RSP: 002b:00007fb7fa5b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 807.246525][ T3475] RAX: ffffffffffffffda RBX: 00007fb7fc175fa0 RCX: 00007fb7fbf4e169 [ 807.246540][ T3475] RDX: 0000000000000884 RSI: 0000200000000a40 RDI: 0000000000000004 [ 807.246555][ T3475] RBP: 00007fb7fa5b7090 R08: 0000000000000000 R09: 0000000000000000 [ 807.246611][ T3475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 807.246623][ T3475] R13: 0000000000000000 R14: 00007fb7fc175fa0 R15: 00007ffe1b0f1048 [ 807.246646][ T3475] [ 808.578738][ T29] kauditd_printk_skb: 197 callbacks suppressed [ 808.578751][ T29] audit: type=1400 audit(2268435542.492:45871): avc: denied { create } for pid=3491 comm="syz.0.10803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 808.639766][ T3499] loop0: detected capacity change from 0 to 164 [ 808.649225][ T3499] Unable to read rock-ridge attributes [ 808.655022][ T3500] loop8: detected capacity change from 0 to 512 [ 808.665052][ T29] audit: type=1400 audit(2268435542.576:45872): avc: denied { mount } for pid=3491 comm="syz.0.10803" name="/" dev="loop0" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 808.665154][ T3492] Unable to read rock-ridge attributes [ 808.843611][ T3502] dummy0 speed is unknown, defaulting to 1000 [ 809.095710][ T3500] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 809.165454][ T29] audit: type=1400 audit(2268435542.978:45873): avc: denied { bind } for pid=3497 comm="syz.2.10805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 809.186700][ T29] audit: type=1400 audit(2268435542.988:45874): avc: denied { read write } for pid=3497 comm="syz.2.10805" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 809.211769][ T29] audit: type=1400 audit(2268435542.988:45875): avc: denied { open } for pid=3497 comm="syz.2.10805" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 809.249437][ T3500] EXT4-fs (loop8): can't mount with journal_checksum, fs mounted w/o journal [ 809.302394][ T3506] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10807'. [ 809.416581][ T29] audit: type=1400 audit(2268435543.268:45876): avc: denied { unmount } for pid=2662 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 809.626189][ T29] audit: type=1326 audit(2268435543.474:45877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3522 comm="syz.0.10813" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb7fbf4e169 code=0x0 [ 809.675105][ T36] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 809.682914][ T36] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 809.692272][ T36] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 809.797864][ T3536] dummy0 speed is unknown, defaulting to 1000 [ 810.062649][ T36] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 810.071899][ T36] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 810.079736][ T36] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 810.087530][ T36] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 810.096643][ T36] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 810.104426][ T36] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 810.113667][ T36] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 810.121406][ T36] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 810.129236][ T36] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 810.138623][ T36] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 810.146533][ T36] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 810.233438][ T36] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 810.241389][ T36] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 810.249208][ T36] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 810.258418][ T36] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 810.266242][ T36] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 810.275502][ T36] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 810.283360][ T36] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 810.291163][ T36] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 810.300372][ T36] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 810.306631][ T29] audit: type=1326 audit(2268435544.091:45878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3543 comm="syz.7.10819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1efd3e169 code=0x7ffc0000 [ 810.308170][ T36] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 810.340756][ T36] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 810.348556][ T36] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 810.356341][ T36] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 810.365479][ T36] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 810.373299][ T36] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 810.421977][ T29] audit: type=1326 audit(2268435544.194:45879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3543 comm="syz.7.10819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fc1efd3e169 code=0x7ffc0000 [ 810.447036][ T29] audit: type=1326 audit(2268435544.194:45880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3543 comm="syz.7.10819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1efd3e169 code=0x7ffc0000 [ 810.559486][ T3556] loop8: detected capacity change from 0 to 512 [ 810.600050][ T3556] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 810.642998][ T3556] EXT4-fs (loop8): can't mount with journal_checksum, fs mounted w/o journal [ 810.646903][ T3562] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10826'. [ 810.723348][ T36] hid-generic 0000:0000:20000000.002B: hidraw0: HID v0.01 Device [syz0] on syz1 [ 810.744630][ T3570] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10829'. [ 810.792988][ T3562] loop0: detected capacity change from 0 to 8192 [ 810.805841][ T3562] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 811.018885][ T3578] loop7: detected capacity change from 0 to 512 [ 811.027808][ T3578] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 811.057712][ T3578] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 811.070351][ T3578] ext4 filesystem being mounted at /350/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 811.115264][T30113] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 811.186160][ T3591] loop0: detected capacity change from 0 to 512 [ 811.198077][ T3591] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 811.222923][ T3591] EXT4-fs (loop0): 1 truncate cleaned up [ 811.242246][ T3591] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 811.267362][ T3591] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2798: inode #15: comm syz.0.10838: corrupted xattr block 33: invalid header [ 811.283306][ T3591] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2962: inode #15: comm syz.0.10838: corrupted xattr block 33: invalid header [ 811.311976][ T3591] EXT4-fs warning (device loop0): ext4_evict_inode:279: xattr delete (err -117) [ 811.422126][ T3607] loop7: detected capacity change from 0 to 512 [ 811.430862][ T3607] EXT4-fs: Ignoring removed bh option [ 811.436304][ T3607] EXT4-fs: Ignoring removed mblk_io_submit option [ 811.453846][ T2662] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 811.465034][ T3607] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 811.490104][ T3607] ext4 filesystem being mounted at /353/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 811.663895][ T3620] loop0: detected capacity change from 0 to 512 [ 811.682251][ T3620] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 811.710789][T30113] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 811.773864][ T3620] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 811.796239][ T3620] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 811.833310][ T3629] loop8: detected capacity change from 0 to 512 [ 811.840624][ T3629] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 811.855485][ T3629] EXT4-fs (loop8): can't mount with journal_checksum, fs mounted w/o journal [ 811.943897][ T3634] dummy0 speed is unknown, defaulting to 1000 [ 812.261018][ T3636] loop7: detected capacity change from 0 to 512 [ 812.279865][ T3636] EXT4-fs (loop7): orphan cleanup on readonly fs [ 812.289144][ T3636] EXT4-fs error (device loop7): ext4_orphan_get:1416: comm syz.7.10851: bad orphan inode 13 [ 812.308541][ T3636] ext4_test_bit(bit=12, block=18) = 1 [ 812.313968][ T3636] is_bad_inode(inode)=0 [ 812.319528][ T3636] NEXT_ORPHAN(inode)=2130706432 [ 812.324397][ T3636] max_ino=32 [ 812.327869][ T3636] i_nlink=1 [ 812.337966][ T2662] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.353706][ T3636] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 812.376940][ T3636] netlink: 428 bytes leftover after parsing attributes in process `syz.7.10851'. [ 812.411718][ T3642] loop0: detected capacity change from 0 to 512 [ 812.418978][ T3642] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 812.453144][ T3642] EXT4-fs (loop0): 1 truncate cleaned up [ 812.459319][ T3642] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 812.492358][ T3636] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.497389][ T3646] pim6reg1: entered promiscuous mode [ 812.685939][ T3654] netlink: 188 bytes leftover after parsing attributes in process `syz.4.10858'. [ 812.696511][ T2662] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.738989][ T3660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10859'. [ 812.951789][ T3670] loop7: detected capacity change from 0 to 2048 [ 813.192462][ T5314] unregister_netdevice: waiting for batadv0 to become free. Usage count = 3 [ 813.339649][ T3687] loop7: detected capacity change from 0 to 128 [ 813.677492][ T3708] netlink: 'syz.7.10878': attribute type 4 has an invalid length. [ 813.773091][ T3721] loop7: detected capacity change from 0 to 164 [ 813.789215][ T3708] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 813.831174][ T3730] loop8: detected capacity change from 0 to 512 [ 813.849048][ T3730] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 813.887748][ T3736] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10889'. [ 813.906130][ T3730] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 813.910257][ T3741] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10890'. [ 813.922484][ T3730] ext4 filesystem being mounted at /502/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 813.929287][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 813.929304][ T29] audit: type=1400 audit(2268435547.496:46057): avc: denied { mount } for pid=3729 comm="syz.8.10887" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 813.929689][ T3735] loop7: detected capacity change from 0 to 128 [ 813.948640][ T29] audit: type=1400 audit(2268435547.515:46058): avc: denied { mount } for pid=3733 comm="syz.7.10888" name="/" dev="loop7" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 813.966798][ T3743] netlink: 'syz.0.10891': attribute type 4 has an invalid length. [ 813.997769][ T3733] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 814.019634][ T3733] FAT-fs (loop7): Filesystem has been set read-only [ 814.032049][T29095] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.041212][ T3743] loop0: detected capacity change from 0 to 512 [ 814.046273][ T3743] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 814.058601][ T3733] syz.7.10888: attempt to access beyond end of device [ 814.058601][ T3733] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 814.058716][ T3733] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 814.058735][ T3733] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 814.063775][ T3735] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 814.082088][ T29] audit: type=1400 audit(2268435547.590:46059): avc: denied { setopt } for pid=3740 comm="syz.2.10890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 814.096351][ T3735] syz.7.10888: attempt to access beyond end of device [ 814.096351][ T3735] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 814.102049][ T29] audit: type=1400 audit(2268435547.590:46060): avc: denied { create } for pid=3740 comm="syz.2.10890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 814.102078][ T29] audit: type=1400 audit(2268435547.590:46061): avc: denied { unmount } for pid=29095 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 814.102118][ T29] audit: type=1326 audit(2268435547.618:46062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3733 comm="syz.7.10888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1efd3e169 code=0x7ffc0000 [ 814.102149][ T29] audit: type=1326 audit(2268435547.618:46063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3733 comm="syz.7.10888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1efd3e169 code=0x7ffc0000 [ 814.102177][ T29] audit: type=1326 audit(2268435547.618:46064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3733 comm="syz.7.10888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1efd3e169 code=0x7ffc0000 [ 814.102320][ T29] audit: type=1326 audit(2268435547.618:46065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3733 comm="syz.7.10888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1efd3e169 code=0x7ffc0000 [ 814.102350][ T29] audit: type=1326 audit(2268435547.618:46066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3733 comm="syz.7.10888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1efd3e169 code=0x7ffc0000 [ 814.128361][ T3743] EXT4-fs (loop0): 1 truncate cleaned up [ 814.142829][ T3735] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 814.170275][ T3743] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 814.186326][ T3735] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 814.236248][ T3743] 9pnet_fd: Insufficient options for proto=fd [ 814.371519][ T3735] syz.7.10888: attempt to access beyond end of device [ 814.371519][ T3735] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 814.372577][ T2662] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.385078][ T3735] syz.7.10888: attempt to access beyond end of device [ 814.385078][ T3735] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 814.415296][ T3735] syz.7.10888: attempt to access beyond end of device [ 814.415296][ T3735] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 814.429584][ T3735] syz.7.10888: attempt to access beyond end of device [ 814.429584][ T3735] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 814.874474][ T3772] loop8: detected capacity change from 0 to 1024 [ 814.920632][ T3772] EXT4-fs: Ignoring removed nomblk_io_submit option [ 814.970718][ T3772] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 815.068255][ T3772] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 815.091436][ T3772] System zones: 0-1, 3-36 [ 815.113495][ T3772] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 815.223453][T29095] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.576994][ T3790] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10909'. [ 815.586165][ T3790] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10909'. [ 815.616775][ T3790] wireguard4: entered promiscuous mode [ 815.624109][ T3790] wireguard4: entered allmulticast mode [ 815.695078][ T3794] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10910'. [ 815.708144][ T3794] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10910'. [ 815.740285][ T3794] wireguard5: entered promiscuous mode [ 815.745807][ T3794] wireguard5: entered allmulticast mode [ 816.151559][ T3812] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10912'. [ 816.322512][ T3820] netlink: 44 bytes leftover after parsing attributes in process `syz.8.10918'. [ 816.380306][ T3824] netlink: 332 bytes leftover after parsing attributes in process `syz.8.10919'. [ 816.390318][ T3824] netlink: 'syz.8.10919': attribute type 9 has an invalid length. [ 816.399626][ T3824] netlink: 108 bytes leftover after parsing attributes in process `syz.8.10919'. [ 816.408816][ T3824] netlink: 32 bytes leftover after parsing attributes in process `syz.8.10919'. [ 816.503613][ T3829] netlink: 'syz.7.10921': attribute type 4 has an invalid length. [ 816.524726][ T3829] loop7: detected capacity change from 0 to 512 [ 816.535532][ T3829] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 816.562458][ T3829] EXT4-fs (loop7): 1 truncate cleaned up [ 816.577018][ T3829] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 816.684952][T30113] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 817.027403][ T3849] netlink: 'syz.4.10928': attribute type 4 has an invalid length. [ 817.550252][ T3874] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10939'. [ 818.122881][ T3901] loop7: detected capacity change from 0 to 512 [ 818.178187][ T3901] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 818.306170][ T3901] EXT4-fs (loop7): 1 truncate cleaned up [ 818.313909][ T3901] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 818.358989][ T3901] EXT4-fs error (device loop7): ext4_expand_extra_isize_ea:2798: inode #15: comm syz.7.10948: corrupted xattr block 33: invalid header [ 818.383166][ T3901] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2962: inode #15: comm syz.7.10948: corrupted xattr block 33: invalid header [ 818.423163][ T3901] EXT4-fs warning (device loop7): ext4_evict_inode:279: xattr delete (err -117) [ 818.467810][ T3913] FAULT_INJECTION: forcing a failure. [ 818.467810][ T3913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 818.481027][ T3913] CPU: 1 UID: 0 PID: 3913 Comm: syz.8.10954 Tainted: G W 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 818.481062][ T3913] Tainted: [W]=WARN [ 818.481071][ T3913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 818.481085][ T3913] Call Trace: [ 818.481092][ T3913] [ 818.481100][ T3913] dump_stack_lvl+0xf6/0x150 [ 818.481238][ T3913] dump_stack+0x15/0x1a [ 818.481290][ T3913] should_fail_ex+0x261/0x270 [ 818.481322][ T3913] should_fail+0xb/0x10 [ 818.481349][ T3913] should_fail_usercopy+0x1a/0x20 [ 818.481415][ T3913] _copy_to_user+0x20/0xa0 [ 818.481453][ T3913] btf_new_fd+0x3a8/0x7c0 [ 818.481483][ T3913] bpf_btf_load+0x115/0x130 [ 818.481506][ T3913] __sys_bpf+0x695/0x800 [ 818.481569][ T3913] __x64_sys_bpf+0x43/0x50 [ 818.481590][ T3913] x64_sys_call+0x23da/0x2e10 [ 818.481614][ T3913] do_syscall_64+0xc9/0x1c0 [ 818.481642][ T3913] ? clear_bhb_loop+0x25/0x80 [ 818.481663][ T3913] ? clear_bhb_loop+0x25/0x80 [ 818.481701][ T3913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.481725][ T3913] RIP: 0033:0x7f726831e169 [ 818.481741][ T3913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 818.481819][ T3913] RSP: 002b:00007f7266987038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 818.481835][ T3913] RAX: ffffffffffffffda RBX: 00007f7268545fa0 RCX: 00007f726831e169 [ 818.481848][ T3913] RDX: 0000000000000028 RSI: 00002000000003c0 RDI: 0000000000000012 [ 818.481860][ T3913] RBP: 00007f7266987090 R08: 0000000000000000 R09: 0000000000000000 [ 818.481906][ T3913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 818.481920][ T3913] R13: 0000000000000001 R14: 00007f7268545fa0 R15: 00007ffcfb5f3d78 [ 818.481942][ T3913] [ 818.667507][ T3915] syz.0.10952 (3915): /proc/3914/oom_adj is deprecated, please use /proc/3914/oom_score_adj instead. [ 818.788012][T30113] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 819.090041][ T3952] netlink: 'syz.8.10968': attribute type 9 has an invalid length. [ 819.272237][ T3956] loop8: detected capacity change from 0 to 512 [ 819.293167][ T3956] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 819.326186][ T3956] EXT4-fs (loop8): 1 truncate cleaned up [ 819.353069][ T3956] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 819.482958][ T3954] EXT4-fs error (device loop8): ext4_expand_extra_isize_ea:2798: inode #15: comm syz.8.10969: corrupted xattr block 33: invalid header [ 819.540200][ T3954] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2962: inode #15: comm syz.8.10969: corrupted xattr block 33: invalid header [ 819.548003][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 819.548027][ T29] audit: type=1400 audit(2268435552.744:46218): avc: denied { create } for pid=3958 comm="syz.2.10970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 819.570125][ T3954] EXT4-fs warning (device loop8): ext4_evict_inode:279: xattr delete (err -117) [ 819.614724][ T29] audit: type=1400 audit(2268435552.809:46219): avc: denied { write } for pid=3958 comm="syz.2.10970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 819.842991][ T3961] loop7: detected capacity change from 0 to 512 [ 819.849907][ T3961] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 819.871115][ T3961] EXT4-fs (loop7): 1 truncate cleaned up [ 819.879919][ T3961] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 819.910328][ T3961] EXT4-fs error (device loop7): ext4_expand_extra_isize_ea:2798: inode #15: comm syz.7.10972: corrupted xattr block 33: invalid header [ 819.931427][ T3961] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2962: inode #15: comm syz.7.10972: corrupted xattr block 33: invalid header [ 819.950090][ T3961] EXT4-fs warning (device loop7): ext4_evict_inode:279: xattr delete (err -117) [ 826.104320][T29095] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.204223][T30113] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.230436][ T29] audit: type=1400 audit(2268435558.992:46220): avc: denied { nlmsg_read } for pid=3971 comm="syz.7.10976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 826.289841][ T3977] loop8: detected capacity change from 0 to 4096 [ 826.321445][ T3977] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 826.369689][ T3980] loop7: detected capacity change from 0 to 8192 [ 826.379764][ T3977] EXT4-fs error (device loop8): ext4_do_update_inode:5211: inode #15: comm syz.8.10979: corrupted inode contents [ 826.397064][ T3977] EXT4-fs error (device loop8): ext4_dirty_inode:6103: inode #15: comm syz.8.10979: mark_inode_dirty error [ 826.409065][ T29] audit: type=1400 audit(2268435559.179:46221): avc: denied { load_policy } for pid=3984 comm="syz.4.10980" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 826.414467][ T3985] SELinux: ebitmap: truncated map [ 826.444002][ T3980] loop7: p2 p3 [ 826.451850][ T3985] SELinux: failed to load policy [ 826.466220][ T3980] __nla_validate_parse: 6 callbacks suppressed [ 826.466235][ T3980] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10978'. [ 826.472611][ T3977] EXT4-fs error (device loop8): ext4_do_update_inode:5211: inode #15: comm syz.8.10979: corrupted inode contents [ 826.472847][ T3977] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #15: comm syz.8.10979: mark_inode_dirty error [ 826.473024][ T3977] EXT4-fs error (device loop8): ext4_do_update_inode:5211: inode #15: comm syz.8.10979: corrupted inode contents [ 826.473112][ T3977] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #15: comm syz.8.10979: mark_inode_dirty error [ 826.473245][ T3977] EXT4-fs error (device loop8): ext4_do_update_inode:5211: inode #15: comm syz.8.10979: corrupted inode contents [ 826.473425][ T3977] EXT4-fs error (device loop8): ext4_truncate:4255: inode #15: comm syz.8.10979: mark_inode_dirty error [ 826.473595][ T3977] EXT4-fs error (device loop8) in ext4_setattr:5628: Corrupt filesystem [ 826.523386][ T3977] EXT4-fs error (device loop8): ext4_do_update_inode:5211: inode #15: comm syz.8.10979: corrupted inode contents [ 826.568473][ T29] audit: type=1400 audit(2268435559.217:46222): avc: denied { create } for pid=3979 comm="syz.7.10978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 826.568522][ T29] audit: type=1400 audit(2268435559.282:46223): avc: denied { read } for pid=3976 comm="syz.8.10979" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 826.572489][ T29] audit: type=1400 audit(2268435559.320:46224): avc: denied { connect } for pid=3979 comm="syz.7.10978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 826.650009][ T29] audit: type=1400 audit(2268435559.320:46225): avc: denied { name_connect } for pid=3979 comm="syz.7.10978" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 826.675751][ T3988] netlink: 197276 bytes leftover after parsing attributes in process `syz.8.10979'. [ 826.680496][ T29] audit: type=1400 audit(2268435559.338:46226): avc: denied { listen } for pid=3979 comm="syz.7.10978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 826.706956][ T29] audit: type=1400 audit(2268435559.338:46227): avc: denied { accept } for pid=3979 comm="syz.7.10978" lport=47805 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 826.728992][ T29] audit: type=1400 audit(2268435559.348:46228): avc: denied { ioctl } for pid=3979 comm="syz.7.10978" path="socket:[126807]" dev="sockfs" ino=126807 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 826.798493][T29095] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.841452][ T29] audit: type=1400 audit(2268435559.563:46229): avc: denied { read } for pid=3995 comm="syz.4.10983" lport=8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 826.908758][ T4010] netlink: 132 bytes leftover after parsing attributes in process `syz.8.10987'. [ 826.988200][ T4020] loop8: detected capacity change from 0 to 512 [ 826.998891][ T4020] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 827.049424][ T4016] dummy0 speed is unknown, defaulting to 1000 [ 827.090588][ T4020] EXT4-fs (loop8): 1 truncate cleaned up [ 827.110996][ T4020] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 827.151805][ T4020] EXT4-fs error (device loop8): ext4_expand_extra_isize_ea:2798: inode #15: comm syz.8.10995: corrupted xattr block 33: invalid header [ 827.178394][ T4020] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2962: inode #15: comm syz.8.10995: corrupted xattr block 33: invalid header [ 827.211021][ T4041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11004'. [ 827.221691][ T4032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11000'. [ 827.281275][ T4020] EXT4-fs warning (device loop8): ext4_evict_inode:279: xattr delete (err -117) [ 827.425136][T29095] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 828.164895][ T4028] Set syz1 is full, maxelem 65536 reached [ 828.967719][ T4075] FAULT_INJECTION: forcing a failure. [ 828.967719][ T4075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 828.982276][ T4075] CPU: 1 UID: 0 PID: 4075 Comm: syz.2.11015 Tainted: G W 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 828.982307][ T4075] Tainted: [W]=WARN [ 828.982316][ T4075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 828.982331][ T4075] Call Trace: [ 828.982340][ T4075] [ 828.982421][ T4075] dump_stack_lvl+0xf6/0x150 [ 828.982443][ T4075] dump_stack+0x15/0x1a [ 828.982459][ T4075] should_fail_ex+0x261/0x270 [ 828.982485][ T4075] should_fail+0xb/0x10 [ 828.982534][ T4075] should_fail_usercopy+0x1a/0x20 [ 828.982703][ T4075] _copy_from_user+0x1c/0xa0 [ 828.982793][ T4075] copy_msghdr_from_user+0x54/0x2b0 [ 828.982836][ T4075] ? __fget_files+0x186/0x1c0 [ 828.982910][ T4075] __sys_sendmsg+0x141/0x240 [ 828.982986][ T4075] __x64_sys_sendmsg+0x46/0x50 [ 828.983016][ T4075] x64_sys_call+0x26f3/0x2e10 [ 828.983070][ T4075] do_syscall_64+0xc9/0x1c0 [ 828.983152][ T4075] ? clear_bhb_loop+0x25/0x80 [ 828.983195][ T4075] ? clear_bhb_loop+0x25/0x80 [ 828.983217][ T4075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.983241][ T4075] RIP: 0033:0x7f52872fe169 [ 828.983257][ T4075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 828.983275][ T4075] RSP: 002b:00007f5285967038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 828.983295][ T4075] RAX: ffffffffffffffda RBX: 00007f5287525fa0 RCX: 00007f52872fe169 [ 828.983310][ T4075] RDX: 000000000000c800 RSI: 00002000000003c0 RDI: 0000000000000003 [ 828.983325][ T4075] RBP: 00007f5285967090 R08: 0000000000000000 R09: 0000000000000000 [ 828.983339][ T4075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 828.983353][ T4075] R13: 0000000000000000 R14: 00007f5287525fa0 R15: 00007ffd67ccc038 [ 828.983377][ T4075] [ 829.220032][ T4078] netlink: 'syz.2.11017': attribute type 4 has an invalid length. [ 829.854398][ T4112] loop8: detected capacity change from 0 to 512 [ 829.873537][ T4112] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 829.875789][ T4110] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11029'. [ 829.892618][ T4110] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11029'. [ 829.901725][ T4110] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11029'. [ 829.908738][ T4112] EXT4-fs (loop8): can't mount with journal_checksum, fs mounted w/o journal [ 830.056000][ T4122] xt_hashlimit: max too large, truncated to 1048576 [ 830.087427][ T4124] loop8: detected capacity change from 0 to 128 [ 830.107390][ T4124] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 830.132985][ T4124] ext4 filesystem being mounted at /543/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 830.161425][T29095] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 830.341019][ T4132] loop8: detected capacity change from 0 to 512 [ 830.355446][ T4132] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 830.370193][ T4132] EXT4-fs (loop8): 1 truncate cleaned up [ 830.378418][ T4132] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 830.491150][ T4132] EXT4-fs error (device loop8): ext4_expand_extra_isize_ea:2798: inode #15: comm syz.8.11037: corrupted xattr block 33: invalid header [ 830.576682][ T4132] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2962: inode #15: comm syz.8.11037: corrupted xattr block 33: invalid header [ 830.728170][ T4132] EXT4-fs warning (device loop8): ext4_evict_inode:279: xattr delete (err -117) [ 830.803259][T29095] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 830.833468][ T4149] loop7: detected capacity change from 0 to 8192 [ 830.862374][ T4155] loop8: detected capacity change from 0 to 2048 [ 830.888249][ T4151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11043'. [ 830.899539][ T4130] syz.7.11036: attempt to access beyond end of device [ 830.899539][ T4130] loop7: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 830.924919][ T4130] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 830.932166][ T4155] loop8: p1 < > p4 [ 830.934195][ T4130] FAT-fs (loop7): Filesystem has been set read-only [ 830.939593][ T4155] loop8: p4 size 8388608 extends beyond EOD, truncated [ 830.951839][ T4130] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 830.952086][ T4130] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 831.069464][ T4155] netlink: 'syz.8.11044': attribute type 10 has an invalid length. [ 831.078745][ T4155] netlink: 40 bytes leftover after parsing attributes in process `syz.8.11044'. [ 831.206265][ T4155] geneve1: entered promiscuous mode [ 831.219443][ T4155] team0: Port device geneve1 added [ 831.321112][ T4168] dummy0 speed is unknown, defaulting to 1000 [ 831.767531][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 831.767547][ T29] audit: type=1326 audit(2268435564.184:46364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4179 comm="syz.8.11053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f726831e169 code=0x7ffc0000 [ 831.809559][ T29] audit: type=1326 audit(2268435564.184:46365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4179 comm="syz.8.11053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f726831e169 code=0x7ffc0000 [ 831.892239][ T29] audit: type=1326 audit(2268435564.259:46366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4179 comm="syz.8.11053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f726831e169 code=0x7ffc0000 [ 831.919227][ T29] audit: type=1326 audit(2268435564.259:46367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4179 comm="syz.8.11053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f726831e169 code=0x7ffc0000 [ 831.946818][ T29] audit: type=1326 audit(2268435564.259:46368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4179 comm="syz.8.11053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f726831e169 code=0x7ffc0000 [ 831.973924][ T29] audit: type=1326 audit(2268435564.259:46369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4179 comm="syz.8.11053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f726831e169 code=0x7ffc0000 [ 832.110982][ T29] audit: type=1326 audit(2268435564.502:46370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4179 comm="syz.8.11053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f726831e169 code=0x7ffc0000 [ 832.256935][ T29] audit: type=1400 audit(2268435564.642:46371): avc: denied { mounton } for pid=4192 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 832.295249][ T4197] netlink: 'syz.8.11059': attribute type 4 has an invalid length. [ 832.320640][ T4197] loop8: detected capacity change from 0 to 512 [ 832.338164][ T4197] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 832.349371][ T4206] xt_bpf: check failed: parse error [ 832.355398][ T29] audit: type=1400 audit(2268435564.726:46372): avc: denied { getopt } for pid=4205 comm="syz.4.11062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 832.401255][ T29] audit: type=1400 audit(2268435564.754:46373): avc: denied { setopt } for pid=4205 comm="syz.4.11062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 832.403393][ T4197] EXT4-fs (loop8): 1 truncate cleaned up [ 832.435160][ T4197] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 832.462806][ T4192] dummy0 speed is unknown, defaulting to 1000 [ 832.548974][T29095] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 832.578017][ T4218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11066'. [ 832.592621][ T4218] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.620085][ T4218] bridge_slave_1 (unregistering): left allmulticast mode [ 832.628648][ T4218] bridge_slave_1 (unregistering): left promiscuous mode [ 832.635623][ T4218] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.694637][ T4222] dummy0 speed is unknown, defaulting to 1000 [ 833.003754][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 833.077304][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.084439][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.093119][ T4192] bridge_slave_0: entered allmulticast mode [ 833.101408][ T4192] bridge_slave_0: entered promiscuous mode [ 833.108650][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.115806][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.124383][ T4192] bridge_slave_1: entered allmulticast mode [ 833.132887][ T4192] bridge_slave_1: entered promiscuous mode [ 833.208357][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 833.232540][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 833.283199][ T4192] team0: Port device team_slave_0 added [ 833.373136][ T4261] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.380494][ T4261] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.482369][ T4263] dummy0 speed is unknown, defaulting to 1000 [ 833.664744][ T4192] team0: Port device team_slave_1 added [ 833.818764][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 833.827354][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 833.854590][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 833.902327][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 833.909960][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 833.939336][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 834.014918][ T4192] hsr_slave_0: entered promiscuous mode [ 834.030318][ T4192] hsr_slave_1: entered promiscuous mode [ 834.042108][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 834.054924][ T4192] Cannot create hsr debugfs directory [ 834.145104][ T4285] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.188210][ T4287] loop8: detected capacity change from 0 to 512 [ 834.195372][ T4287] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 834.245550][ T4287] EXT4-fs (loop8): can't mount with journal_checksum, fs mounted w/o journal [ 834.330546][ T4285] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.371345][ T4192] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.422257][ T4285] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.536522][ T4192] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.563625][ T4292] dummy0 speed is unknown, defaulting to 1000 [ 834.607464][ T4285] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.735816][ T4192] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.842900][ T4311] dummy0 speed is unknown, defaulting to 1000 [ 834.961041][ T4285] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.996821][ T4192] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.041003][ T4285] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.105338][ T4285] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.188984][ T4285] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.374467][ T4192] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 835.390351][ T4295] Set syz1 is full, maxelem 65536 reached [ 835.409340][ T4192] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 835.451661][ T4192] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 835.483805][ T4192] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 835.625179][ T4330] SELinux: policydb version 336744327 does not match my version range 15-34 [ 835.667630][ T4330] SELinux: failed to load policy [ 835.705210][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 835.756948][ T4322] dummy0 speed is unknown, defaulting to 1000 [ 835.777021][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 835.798417][ T5342] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.805509][ T5342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 835.867973][ T5342] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.875060][ T5342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 835.928900][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 836.121945][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 836.276998][ T4368] dummy0 speed is unknown, defaulting to 1000 [ 836.737899][ T4192] veth0_vlan: entered promiscuous mode [ 836.756024][ T4192] veth1_vlan: entered promiscuous mode [ 836.793681][ T4192] veth0_macvtap: entered promiscuous mode [ 836.807699][ T4192] veth1_macvtap: entered promiscuous mode [ 836.856487][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 836.870319][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.880972][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 836.891518][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.905039][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 836.916221][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.928737][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 836.939311][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.953478][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 836.964600][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.978521][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 836.991821][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.002494][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 837.016231][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.026889][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 837.039452][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.050423][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 837.060712][ T4395] loop8: detected capacity change from 0 to 1024 [ 837.064065][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.076661][ T4395] EXT4-fs: Ignoring removed nobh option [ 837.079791][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 837.094334][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.099543][ T4395] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 837.108473][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 837.130451][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.131064][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 837.131133][ T29] audit: type=1400 audit(2268435569.207:46408): avc: denied { append } for pid=4394 comm="syz.8.11126" path="/564/file1/memory.numa_stat" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 837.142162][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 837.185405][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.197872][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 837.208926][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.221374][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 837.231814][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.253346][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 837.265049][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 837.276204][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.289307][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 837.301619][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.313244][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 837.324851][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.337466][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 837.349276][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.360904][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 837.375082][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.386283][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 837.398669][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.410350][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 837.422827][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.433888][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 837.446923][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.458220][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 837.472331][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.482376][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 837.495892][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.506455][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 837.519876][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.529745][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 837.544060][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.553973][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 837.568474][ T4401] netlink: 'syz.0.11127': attribute type 13 has an invalid length. [ 837.577130][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.578440][ T29] audit: type=1400 audit(2268435569.609:46409): avc: denied { ioctl } for pid=4400 comm="syz.0.11127" path="/dev/mISDNtimer" dev="devtmpfs" ino=249 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 837.590016][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 837.628396][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.638412][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 837.655229][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.667004][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 837.679904][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.699131][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 837.730825][ T4192] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.741618][ T4192] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.752532][ T4192] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.762758][ T4192] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.819667][ T4406] EXT4-fs (loop8): shut down requested (0) [ 837.845546][ T4393] binfmt_misc: register: failed to install interpreter file ./file0 [ 837.990961][ T4401] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 838.178762][ T29] audit: type=1400 audit(2268435569.843:46410): avc: denied { ioctl } for pid=4394 comm="syz.8.11126" path="/564/file1/memory.numa_stat" dev="loop8" ino=18 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 838.205682][ T29] audit: type=1400 audit(2268435570.105:46411): avc: denied { mounton } for pid=4192 comm="syz-executor" path="/root/syzkaller.wRZ6Nl/syz-tmp" dev="sda1" ino=2010 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 838.231560][ T29] audit: type=1400 audit(2268435570.105:46412): avc: denied { mount } for pid=4192 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 838.255160][ T29] audit: type=1400 audit(2268435570.114:46413): avc: denied { mount } for pid=4192 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 838.278452][ T29] audit: type=1400 audit(2268435570.114:46414): avc: denied { mounton } for pid=4192 comm="syz-executor" path="/root/syzkaller.wRZ6Nl/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 838.306670][ T29] audit: type=1400 audit(2268435570.114:46415): avc: denied { mounton } for pid=4192 comm="syz-executor" path="/root/syzkaller.wRZ6Nl/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=129038 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 838.344638][ T29] audit: type=1400 audit(2268435570.329:46416): avc: denied { mounton } for pid=4192 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 838.374128][T29095] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 838.375393][ T29] audit: type=1400 audit(2268435570.329:46417): avc: denied { mount } for pid=4192 comm="syz-executor" name="/" dev="gadgetfs" ino=2960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 839.134093][ T4442] dummy0 speed is unknown, defaulting to 1000 [ 840.122553][ T4468] sock: sock_timestamping_bind_phc: sock not bind to device [ 840.197920][ T4472] loop8: detected capacity change from 0 to 512 [ 840.290502][ T4472] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 840.322420][ T4472] EXT4-fs (loop8): 1 truncate cleaned up [ 840.328737][ T4472] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 840.375626][ T4472] EXT4-fs error (device loop8): ext4_expand_extra_isize_ea:2798: inode #15: comm syz.8.11149: corrupted xattr block 33: invalid header [ 840.394207][ T4472] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2962: inode #15: comm syz.8.11149: corrupted xattr block 33: invalid header [ 840.408287][ T4472] EXT4-fs warning (device loop8): ext4_evict_inode:279: xattr delete (err -117) [ 840.501680][T29095] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 840.519283][ T4488] sd 0:0:1:0: device reset [ 840.620059][ T4494] loop8: detected capacity change from 0 to 512 [ 840.637846][ T4494] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 840.663352][ T4494] EXT4-fs (loop8): 1 truncate cleaned up [ 840.674501][ T4494] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 840.699844][ T4494] EXT4-fs error (device loop8): ext4_expand_extra_isize_ea:2798: inode #15: comm syz.8.11158: corrupted xattr block 33: invalid header [ 840.715240][ T4494] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2962: inode #15: comm syz.8.11158: corrupted xattr block 33: invalid header [ 840.729128][ T4494] EXT4-fs warning (device loop8): ext4_evict_inode:279: xattr delete (err -117) [ 840.781627][T29095] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 840.806760][ T4498] syzkaller1: entered promiscuous mode [ 840.812264][ T4498] syzkaller1: entered allmulticast mode [ 840.821114][ T4498] FAULT_INJECTION: forcing a failure. [ 840.821114][ T4498] name failslab, interval 1, probability 0, space 0, times 0 [ 840.833816][ T4498] CPU: 1 UID: 0 PID: 4498 Comm: syz.8.11159 Tainted: G W 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 840.833842][ T4498] Tainted: [W]=WARN [ 840.833849][ T4498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 840.833865][ T4498] Call Trace: [ 840.833873][ T4498] [ 840.833881][ T4498] dump_stack_lvl+0xf6/0x150 [ 840.833910][ T4498] dump_stack+0x15/0x1a [ 840.834006][ T4498] should_fail_ex+0x261/0x270 [ 840.834065][ T4498] should_failslab+0x8f/0xb0 [ 840.834091][ T4498] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 840.834111][ T4498] ? __alloc_skb+0x10d/0x320 [ 840.834131][ T4498] __alloc_skb+0x10d/0x320 [ 840.834189][ T4498] ? avc_has_perm+0xd6/0x150 [ 840.834213][ T4498] alloc_skb_with_frags+0x80/0x460 [ 840.834297][ T4498] ? selinux_file_open+0x356/0x3c0 [ 840.834317][ T4498] ? should_fail_ex+0xd7/0x270 [ 840.834408][ T4498] sock_alloc_send_pskb+0x437/0x500 [ 840.834445][ T4498] tun_get_user+0x9b8/0x2640 [ 840.834481][ T4498] ? _parse_integer+0x27/0x30 [ 840.834509][ T4498] ? __kfifo_from_user+0x19/0x100 [ 840.834536][ T4498] ? ref_tracker_alloc+0x1ff/0x310 [ 840.834639][ T4498] tun_chr_write_iter+0x188/0x240 [ 840.834678][ T4498] vfs_write+0x79b/0x950 [ 840.834713][ T4498] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 840.834747][ T4498] ksys_write+0xeb/0x1b0 [ 840.834827][ T4498] __x64_sys_write+0x42/0x50 [ 840.834862][ T4498] x64_sys_call+0x2a45/0x2e10 [ 840.834929][ T4498] do_syscall_64+0xc9/0x1c0 [ 840.834955][ T4498] ? clear_bhb_loop+0x25/0x80 [ 840.834973][ T4498] ? clear_bhb_loop+0x25/0x80 [ 840.835039][ T4498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.835057][ T4498] RIP: 0033:0x7f726831e169 [ 840.835069][ T4498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 840.835083][ T4498] RSP: 002b:00007f7266987038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 840.835136][ T4498] RAX: ffffffffffffffda RBX: 00007f7268545fa0 RCX: 00007f726831e169 [ 840.835147][ T4498] RDX: 000000000000008b RSI: 0000200000000080 RDI: 0000000000000006 [ 840.835157][ T4498] RBP: 00007f7266987090 R08: 0000000000000000 R09: 0000000000000000 [ 840.835178][ T4498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 840.835188][ T4498] R13: 0000000000000000 R14: 00007f7268545fa0 R15: 00007ffcfb5f3d78 [ 840.835254][ T4498] [ 841.156871][ T4504] FAULT_INJECTION: forcing a failure. [ 841.156871][ T4504] name failslab, interval 1, probability 0, space 0, times 0 [ 841.171110][ T4504] CPU: 1 UID: 0 PID: 4504 Comm: syz.6.11162 Tainted: G W 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 841.171141][ T4504] Tainted: [W]=WARN [ 841.171147][ T4504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 841.171159][ T4504] Call Trace: [ 841.171165][ T4504] [ 841.171189][ T4504] dump_stack_lvl+0xf6/0x150 [ 841.171266][ T4504] dump_stack+0x15/0x1a [ 841.171286][ T4504] should_fail_ex+0x261/0x270 [ 841.171334][ T4504] should_failslab+0x8f/0xb0 [ 841.171395][ T4504] __kvmalloc_node_noprof+0x12c/0x520 [ 841.171420][ T4504] ? traverse+0x9f/0x3c0 [ 841.171463][ T4504] traverse+0x9f/0x3c0 [ 841.171490][ T4504] ? terminate_walk+0x271/0x290 [ 841.171523][ T4504] seq_read_iter+0x89f/0x970 [ 841.171554][ T4504] seq_read+0x1fa/0x240 [ 841.171666][ T4504] ? __pfx_seq_read+0x10/0x10 [ 841.171694][ T4504] proc_reg_read+0x13f/0x1d0 [ 841.171719][ T4504] vfs_readv+0x3e5/0x660 [ 841.171739][ T4504] ? __pfx_proc_reg_read+0x10/0x10 [ 841.171810][ T4504] __x64_sys_preadv+0xf9/0x1c0 [ 841.171914][ T4504] x64_sys_call+0x1410/0x2e10 [ 841.171941][ T4504] do_syscall_64+0xc9/0x1c0 [ 841.171979][ T4504] ? clear_bhb_loop+0x25/0x80 [ 841.172063][ T4504] ? clear_bhb_loop+0x25/0x80 [ 841.172084][ T4504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.172107][ T4504] RIP: 0033:0x7f590739e169 [ 841.172124][ T4504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 841.172146][ T4504] RSP: 002b:00007f5905a07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 841.172168][ T4504] RAX: ffffffffffffffda RBX: 00007f59075c5fa0 RCX: 00007f590739e169 [ 841.172225][ T4504] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 841.172240][ T4504] RBP: 00007f5905a07090 R08: 0000000000000000 R09: 0000000000000000 [ 841.172254][ T4504] R10: 000000000000005e R11: 0000000000000246 R12: 0000000000000001 [ 841.172268][ T4504] R13: 0000000000000000 R14: 00007f59075c5fa0 R15: 00007fff1bd060e8 [ 841.172292][ T4504] [ 841.452366][ T4512] $Hÿ: renamed from bond0 (while UP) [ 841.498570][ T4512] $Hÿ: entered promiscuous mode [ 841.503783][ T4512] bond_slave_0: entered promiscuous mode [ 841.509559][ T4512] bond_slave_1: entered promiscuous mode [ 841.657361][ T4518] tc_dump_action: action bad kind [ 841.967145][ T4528] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.084484][ T4538] tipc: Started in network mode [ 842.091565][ T4538] tipc: Node identity 4, cluster identity 4711 [ 842.097844][ T4538] tipc: Node number set to 4 [ 842.115931][ T4527] dummy0 speed is unknown, defaulting to 1000 [ 842.125919][ T4528] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.221396][ T4528] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.441525][ T4528] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.541411][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 842.541430][ T29] audit: type=1400 audit(2268435574.258:46493): avc: denied { append } for pid=4549 comm="syz.6.11181" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 842.602960][ T4528] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.738047][ T4528] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.750260][ T4528] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.763991][ T4528] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.884748][ T4558] dummy0 speed is unknown, defaulting to 1000 [ 843.129575][ T4563] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11186'. [ 843.193650][ T29] audit: type=1400 audit(2268435574.875:46494): avc: denied { connect } for pid=4564 comm="syz.0.11185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 843.217558][ T29] audit: type=1400 audit(2268435574.875:46495): avc: denied { write } for pid=4564 comm="syz.0.11185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 844.049126][ T4584] dummy0 speed is unknown, defaulting to 1000 [ 844.252201][ T4603] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11197'. [ 844.270003][ T29] audit: type=1400 audit(2268435575.876:46496): avc: denied { write } for pid=4599 comm="syz.0.11198" name="001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 844.298323][ T4600] block device autoloading is deprecated and will be removed. [ 844.316855][ T4600] syz.4.11196: attempt to access beyond end of device [ 844.316855][ T4600] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 844.336744][ T4603] loop8: detected capacity change from 0 to 512 [ 844.355708][ T29] audit: type=1400 audit(2268435575.914:46497): avc: denied { map } for pid=4599 comm="syz.0.11198" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 844.381440][ T29] audit: type=1400 audit(2268435575.932:46498): avc: denied { connect } for pid=4601 comm="syz.8.11197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 844.455853][ T4603] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.11197: invalid indirect mapped block 256 (level 2) [ 844.548601][ T4611] netlink: 'syz.4.11200': attribute type 4 has an invalid length. [ 844.565046][ T4606] dummy0 speed is unknown, defaulting to 1000 [ 844.580146][ T4603] EXT4-fs (loop8): 2 truncates cleaned up [ 844.586437][ T4603] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 844.642267][ T4603] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.11197: bg 0: block 5: invalid block bitmap [ 844.678089][ T4603] EXT4-fs warning (device loop8): ext4_block_to_path:107: block 3355443200 > max in inode 15 [ 844.738861][ T4603] EXT4-fs warning (device loop8): ext4_block_to_path:107: block 3355443201 > max in inode 15 [ 844.761562][ T29] audit: type=1400 audit(2268435576.335:46499): avc: denied { write } for pid=4601 comm="syz.8.11197" path="socket:[129442]" dev="sockfs" ino=129442 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 844.916102][T29095] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 844.999505][ T29] audit: type=1326 audit(2268435576.559:46500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4618 comm="syz.8.11202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f726831e169 code=0x7ffc0000 [ 845.024537][ T29] audit: type=1326 audit(2268435576.559:46501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4618 comm="syz.8.11202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f726831e169 code=0x7ffc0000 [ 845.050286][ T29] audit: type=1326 audit(2268435576.559:46502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4618 comm="syz.8.11202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f726831e169 code=0x7ffc0000 [ 845.116647][ T4620] dummy0 speed is unknown, defaulting to 1000 [ 845.934794][ T4649] netlink: 'syz.2.11211': attribute type 4 has an invalid length. [ 846.204460][ T4635] dummy0 speed is unknown, defaulting to 1000 [ 846.298390][ T4658] SELinux: security_context_str_to_sid (aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.) failed with errno=-22 [ 846.714821][ T4670] dummy0 speed is unknown, defaulting to 1000 [ 846.806844][ T3382] IPVS: starting estimator thread 0... [ 846.878479][ T4680] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11220'. [ 846.913469][ T4683] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11220'. [ 846.977602][ T4681] IPVS: using max 2592 ests per chain, 129600 per kthread [ 847.065473][ T1039] hid-generic 0000:007F:FFFFFFFE.002C: unknown main item tag 0x0 [ 847.073435][ T1039] hid-generic 0000:007F:FFFFFFFE.002C: unknown main item tag 0x0 [ 847.084248][ T1039] hid-generic 0000:007F:FFFFFFFE.002C: unknown main item tag 0x0 [ 847.092054][ T1039] hid-generic 0000:007F:FFFFFFFE.002C: unknown main item tag 0x0 [ 847.100573][ T1039] hid-generic 0000:007F:FFFFFFFE.002C: unknown main item tag 0x0 [ 847.111548][ T1039] hid-generic 0000:007F:FFFFFFFE.002C: unknown main item tag 0x0 [ 847.119323][ T1039] hid-generic 0000:007F:FFFFFFFE.002C: unknown main item tag 0x0 [ 847.130509][ T4690] bond0: entered promiscuous mode [ 847.130524][ T4690] batadv0: entered promiscuous mode [ 847.141332][ T1039] hid-generic 0000:007F:FFFFFFFE.002C: unknown main item tag 0x0 [ 847.152698][ T1039] hid-generic 0000:007F:FFFFFFFE.002C: unknown main item tag 0x0 [ 847.152736][ T1039] hid-generic 0000:007F:FFFFFFFE.002C: unknown main item tag 0x0 [ 847.152764][ T1039] hid-generic 0000:007F:FFFFFFFE.002C: unknown main item tag 0x0 [ 847.152793][ T1039] hid-generic 0000:007F:FFFFFFFE.002C: unknown main item tag 0x0 [ 847.152873][ T1039] hid-generic 0000:007F:FFFFFFFE.002C: unknown main item tag 0x0 [ 847.152968][ T1039] hid-generic 0000:007F:FFFFFFFE.002C: unknown main item tag 0x0 [ 847.153060][ T1039] hid-generic 0000:007F:FFFFFFFE.002C: unknown main item tag 0x0 [ 847.153089][ T1039] hid-generic 0000:007F:FFFFFFFE.002C: unknown main item tag 0x0 [ 847.153117][ T1039] hid-generic 0000:007F:FFFFFFFE.002C: unknown main item tag 0x0 [ 847.153145][ T1039] hid-generic 0000:007F:FFFFFFFE.002C: unknown main item tag 0x0 [ 847.153172][ T1039] hid-generic 0000:007F:FFFFFFFE.002C: unknown main item tag 0x0 [ 847.153257][ T1039] hid-generic 0000:007F:FFFFFFFE.002C: unknown main item tag 0x0 [ 847.153312][ T1039] hid-generic 0000:007F:FFFFFFFE.002C: unknown main item tag 0x0 [ 847.153338][ T1039] hid-generic 0000:007F:FFFFFFFE.002C: unknown main item tag 0x0 [ 847.285381][ T1039] hid-generic 0000:007F:FFFFFFFE.002C: unknown main item tag 0x0 [ 847.285404][ T1039] hid-generic 0000:007F:FFFFFFFE.002C: unknown main item tag 0x0 [ 847.285425][ T1039] hid-generic 0000:007F:FFFFFFFE.002C: unknown main item tag 0x0 [ 847.285451][ T1039] hid-generic 0000:007F:FFFFFFFE.002C: unknown main item tag 0x0 [ 847.285475][ T1039] hid-generic 0000:007F:FFFFFFFE.002C: unknown main item tag 0x0 [ 847.285502][ T1039] hid-generic 0000:007F:FFFFFFFE.002C: unknown main item tag 0x0 [ 847.285522][ T1039] hid-generic 0000:007F:FFFFFFFE.002C: unknown main item tag 0x0 [ 847.285545][ T1039] hid-generic 0000:007F:FFFFFFFE.002C: unknown main item tag 0x0 [ 847.285568][ T1039] hid-generic 0000:007F:FFFFFFFE.002C: unknown main item tag 0x0 [ 847.285657][ T1039] hid-generic 0000:007F:FFFFFFFE.002C: unknown main item tag 0x0 [ 847.285684][ T1039] hid-generic 0000:007F:FFFFFFFE.002C: unknown main item tag 0x0 [ 847.285710][ T1039] hid-generic 0000:007F:FFFFFFFE.002C: unknown main item tag 0x0 [ 847.285768][ T1039] hid-generic 0000:007F:FFFFFFFE.002C: unknown main item tag 0x0 [ 847.285794][ T1039] hid-generic 0000:007F:FFFFFFFE.002C: unknown main item tag 0x0 [ 847.285830][ T1039] hid-generic 0000:007F:FFFFFFFE.002C: unknown main item tag 0x0 [ 847.285857][ T1039] hid-generic 0000:007F:FFFFFFFE.002C: unknown main item tag 0x0 [ 847.285939][ T1039] hid-generic 0000:007F:FFFFFFFE.002C: unknown main item tag 0x0 [ 847.285965][ T1039] hid-generic 0000:007F:FFFFFFFE.002C: unknown main item tag 0x0 [ 847.286001][ T1039] hid-generic 0000:007F:FFFFFFFE.002C: unknown main item tag 0x0 [ 847.286028][ T1039] hid-generic 0000:007F:FFFFFFFE.002C: unknown main item tag 0x0 [ 847.286055][ T1039] hid-generic 0000:007F:FFFFFFFE.002C: unknown main item tag 0x0 [ 847.299543][ T1039] hid-generic 0000:007F:FFFFFFFE.002C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 847.601028][ T4640] Set syz1 is full, maxelem 65536 reached [ 847.984768][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 847.984859][ T29] audit: type=1400 audit(2268435579.347:46576): avc: denied { read } for pid=4713 comm="syz.0.11232" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 848.021385][ T4716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11232'. [ 848.030656][ T4712] dummy0 speed is unknown, defaulting to 1000 [ 848.082953][ T4720] netlink: 'syz.8.11233': attribute type 4 has an invalid length. [ 848.127671][ T29] audit: type=1400 audit(2268435579.384:46577): avc: denied { open } for pid=4713 comm="syz.0.11232" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 848.152781][ T29] audit: type=1400 audit(2268435579.431:46578): avc: denied { read } for pid=4719 comm="syz.8.11233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 848.174303][ T29] audit: type=1400 audit(2268435579.431:46579): avc: denied { ioctl } for pid=4713 comm="syz.0.11232" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 848.281221][ T4720] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11233'. [ 848.337883][ T4720] loop8: detected capacity change from 0 to 764 [ 848.372460][ T29] audit: type=1400 audit(2268435579.711:46580): avc: denied { unmount } for pid=29095 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 848.394008][ T29] audit: type=1400 audit(2268435579.711:46581): avc: denied { block_suspend } for pid=4722 comm="syz.0.11234" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 848.397097][ T4725] dummy0 speed is unknown, defaulting to 1000 [ 848.446261][ T4729] loop8: detected capacity change from 0 to 512 [ 848.474315][ T4729] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 848.549558][ T4729] EXT4-fs (loop8): 1 truncate cleaned up [ 848.555884][ T4729] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 848.586105][ T4729] EXT4-fs error (device loop8): ext4_expand_extra_isize_ea:2798: inode #15: comm syz.8.11236: corrupted xattr block 33: invalid header [ 848.659132][ T4729] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2962: inode #15: comm syz.8.11236: corrupted xattr block 33: invalid header [ 848.709706][ T4729] EXT4-fs warning (device loop8): ext4_evict_inode:279: xattr delete (err -117) [ 848.923923][T29095] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 849.001416][ T4749] loop8: detected capacity change from 0 to 512 [ 849.023780][ T4749] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 849.114926][ T4749] EXT4-fs (loop8): 1 truncate cleaned up [ 849.126373][ T4749] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 849.258638][ T4749] EXT4-fs error (device loop8): ext4_expand_extra_isize_ea:2798: inode #15: comm syz.8.11242: corrupted xattr block 33: invalid header [ 849.311529][ T4749] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2962: inode #15: comm syz.8.11242: corrupted xattr block 33: invalid header [ 849.326864][ T4725] Set syz1 is full, maxelem 65536 reached [ 849.363842][ T4749] EXT4-fs warning (device loop8): ext4_evict_inode:279: xattr delete (err -117) [ 849.423021][ T4760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11246'. [ 849.565593][ T4758] dummy0 speed is unknown, defaulting to 1000 [ 849.593955][T29095] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 849.819389][ T29] audit: type=1326 audit(2268435581.068:46582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4764 comm="syz.0.11250" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb7fbf4e169 code=0x0 [ 850.062325][ T4776] dummy0 speed is unknown, defaulting to 1000 [ 850.226109][ T4787] dummy0 speed is unknown, defaulting to 1000 [ 850.763787][ T4793] loop8: detected capacity change from 0 to 2048 [ 850.857557][ T29] audit: type=1326 audit(2268435582.041:46583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4799 comm="syz.2.11260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52872fe169 code=0x7ffc0000 [ 850.874965][ T4801] smc: net device bond0 applied user defined pnetid SYZ0 [ 850.885184][ T29] audit: type=1326 audit(2268435582.041:46584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4799 comm="syz.2.11260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52872fe169 code=0x7ffc0000 [ 850.983706][ T4793] Alternate GPT is invalid, using primary GPT. [ 850.990189][ T4793] loop8: p2 p3 p7 [ 851.027686][ T29] audit: type=1326 audit(2268435582.041:46585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4799 comm="syz.2.11260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f52872fe169 code=0x7ffc0000 [ 851.058636][ T4793] netlink: 104 bytes leftover after parsing attributes in process `syz.8.11257'. [ 851.174216][ T4798] dummy0 speed is unknown, defaulting to 1000 [ 851.299121][ T4814] loop8: detected capacity change from 0 to 128 [ 851.329635][ T4814] vfat: Unknown parameter '00000000000000000003' [ 851.508281][ T4814] loop8: detected capacity change from 0 to 512 [ 851.522646][ T4814] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 852.455320][ T4833] loop8: detected capacity change from 0 to 512 [ 852.514036][ T4833] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 852.542754][ T4833] ext4 filesystem being mounted at /594/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 852.628462][ T4833] xt_connbytes: Forcing CT accounting to be enabled [ 852.636401][ T4833] Cannot find del_set index 1 as target [ 853.024518][T29095] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 853.196047][ T4846] netlink: 'syz.2.11276': attribute type 10 has an invalid length. [ 853.203991][ T4846] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11276'. [ 853.552767][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 853.552783][ T29] audit: type=1400 audit(2268435584.557:46637): avc: denied { mount } for pid=4854 comm="syz.4.11279" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 853.621261][ T29] audit: type=1326 audit(2268435584.604:46638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4854 comm="syz.4.11279" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9801f7e169 code=0x0 [ 853.712047][ T4864] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11279'. [ 854.940619][ T4877] netlink: 'syz.2.11284': attribute type 4 has an invalid length. [ 855.123443][ T29] audit: type=1400 audit(2268435586.035:46639): avc: denied { write } for pid=4878 comm="syz.4.11285" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 855.430590][ T29] audit: type=1400 audit(2268435586.325:46640): avc: denied { listen } for pid=4888 comm="syz.4.11288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 855.458861][ T4889] syz_tun: refused to change device tx_queue_len [ 855.621198][ T4894] FAULT_INJECTION: forcing a failure. [ 855.621198][ T4894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 855.635785][ T4894] CPU: 1 UID: 0 PID: 4894 Comm: syz.4.11299 Tainted: G W 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 855.635827][ T4894] Tainted: [W]=WARN [ 855.635836][ T4894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 855.635878][ T4894] Call Trace: [ 855.635885][ T4894] [ 855.635894][ T4894] dump_stack_lvl+0xf6/0x150 [ 855.635924][ T4894] dump_stack+0x15/0x1a [ 855.635945][ T4894] should_fail_ex+0x261/0x270 [ 855.635980][ T4894] should_fail+0xb/0x10 [ 855.636035][ T4894] should_fail_usercopy+0x1a/0x20 [ 855.636133][ T4894] _copy_from_user+0x1c/0xa0 [ 855.636172][ T4894] copy_from_sockptr+0x65/0xb0 [ 855.636201][ T4894] do_tcp_getsockopt+0x91b/0x1ab0 [ 855.636249][ T4894] ? exc_page_fault+0x32e/0x6a0 [ 855.636288][ T4894] tcp_getsockopt+0x73/0xe0 [ 855.636319][ T4894] sock_common_getsockopt+0x5b/0x70 [ 855.636343][ T4894] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 855.636369][ T4894] do_sock_getsockopt+0x1fc/0x290 [ 855.636543][ T4894] __x64_sys_getsockopt+0x191/0x210 [ 855.636581][ T4894] x64_sys_call+0x128f/0x2e10 [ 855.636679][ T4894] do_syscall_64+0xc9/0x1c0 [ 855.636716][ T4894] ? clear_bhb_loop+0x25/0x80 [ 855.636741][ T4894] ? clear_bhb_loop+0x25/0x80 [ 855.636854][ T4894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.636880][ T4894] RIP: 0033:0x7f9801f7e169 [ 855.636897][ T4894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 855.636920][ T4894] RSP: 002b:00007f98005e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 855.636942][ T4894] RAX: ffffffffffffffda RBX: 00007f98021a5fa0 RCX: 00007f9801f7e169 [ 855.636957][ T4894] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000004 [ 855.636971][ T4894] RBP: 00007f98005e7090 R08: 0000200000000000 R09: 0000000000000000 [ 855.636986][ T4894] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 855.637036][ T4894] R13: 0000000000000000 R14: 00007f98021a5fa0 R15: 00007ffcd79bf9a8 [ 855.637060][ T4894] [ 856.091288][ T4823] dummy0 speed is unknown, defaulting to 1000 [ 856.642588][ T29] audit: type=1326 audit(2268435587.447:46641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4903 comm="syz.2.11291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52872fe169 code=0x7ffc0000 [ 856.667831][ T29] audit: type=1326 audit(2268435587.447:46642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4903 comm="syz.2.11291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52872fe169 code=0x7ffc0000 [ 856.692904][ T29] audit: type=1326 audit(2268435587.447:46643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4903 comm="syz.2.11291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52872fe169 code=0x7ffc0000 [ 856.718334][ T29] audit: type=1326 audit(2268435587.513:46644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4903 comm="syz.2.11291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52872fe169 code=0x7ffc0000 [ 856.743275][ T29] audit: type=1326 audit(2268435587.513:46645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4903 comm="syz.2.11291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52872fe169 code=0x7ffc0000 [ 856.768354][ T29] audit: type=1326 audit(2268435587.513:46646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4903 comm="syz.2.11291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52872fe169 code=0x7ffc0000 [ 856.949082][ T4906] netlink: 76 bytes leftover after parsing attributes in process `syz.2.11292'. [ 857.253602][ T4916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11296'. [ 857.438486][ T4834] dummy0 speed is unknown, defaulting to 1000 [ 857.570009][ T4868] dummy0 speed is unknown, defaulting to 1000 [ 857.613994][ T4924] syz_tun: entered allmulticast mode [ 857.620008][ T4923] syz_tun: left allmulticast mode [ 857.630143][ T4898] dummy0 speed is unknown, defaulting to 1000 [ 857.666942][ T4927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11302'. [ 858.192759][ T4936] usb usb1: usbfs: process 4936 (syz.2.11305) did not claim interface 0 before use [ 858.292698][ T4936] dummy0 speed is unknown, defaulting to 1000 [ 860.648981][ T4941] netlink: 'syz.6.11307': attribute type 10 has an invalid length. [ 860.788179][ T4941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 860.822122][ T4941] batadv0: entered promiscuous mode [ 860.840880][ T4941] $Hÿ: (slave batadv0): Enslaving as an active interface with an up link [ 860.951601][ T4947] FAULT_INJECTION: forcing a failure. [ 860.951601][ T4947] name failslab, interval 1, probability 0, space 0, times 0 [ 860.965775][ T4947] CPU: 1 UID: 0 PID: 4947 Comm: syz.6.11309 Tainted: G W 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 860.965814][ T4947] Tainted: [W]=WARN [ 860.965823][ T4947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 860.965838][ T4947] Call Trace: [ 860.965919][ T4947] [ 860.965927][ T4947] dump_stack_lvl+0xf6/0x150 [ 860.965955][ T4947] dump_stack+0x15/0x1a [ 860.965977][ T4947] should_fail_ex+0x261/0x270 [ 860.966011][ T4947] should_failslab+0x8f/0xb0 [ 860.966050][ T4947] __kvmalloc_node_noprof+0x12c/0x520 [ 860.966143][ T4947] ? simple_xattr_set+0x6e/0x2a0 [ 860.966175][ T4947] ? __rcu_read_unlock+0x4e/0x70 [ 860.966212][ T4947] simple_xattr_set+0x6e/0x2a0 [ 860.966237][ T4947] ? strlen+0x19/0x30 [ 860.966275][ T4947] shmem_xattr_handler_set+0x129/0x220 [ 860.966355][ T4947] ? __pfx_shmem_xattr_handler_set+0x10/0x10 [ 860.966381][ T4947] __vfs_setxattr+0x2e5/0x310 [ 860.966459][ T4947] __vfs_setxattr_noperm+0xed/0x420 [ 860.966584][ T4947] __vfs_setxattr_locked+0x1af/0x1d0 [ 860.966628][ T4947] vfs_setxattr+0x142/0x290 [ 860.966702][ T4947] file_setxattr+0x139/0x1b0 [ 860.966745][ T4947] path_setxattrat+0x2c8/0x320 [ 860.966794][ T4947] __x64_sys_fsetxattr+0x6d/0x80 [ 860.966863][ T4947] x64_sys_call+0x2bad/0x2e10 [ 860.966906][ T4947] do_syscall_64+0xc9/0x1c0 [ 860.966954][ T4947] ? clear_bhb_loop+0x25/0x80 [ 860.967053][ T4947] ? clear_bhb_loop+0x25/0x80 [ 860.967078][ T4947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.967097][ T4947] RIP: 0033:0x7f590739e169 [ 860.967113][ T4947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 860.967133][ T4947] RSP: 002b:00007f5905a07038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 860.967154][ T4947] RAX: ffffffffffffffda RBX: 00007f59075c5fa0 RCX: 00007f590739e169 [ 860.967208][ T4947] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 860.967222][ T4947] RBP: 00007f5905a07090 R08: 0000000000000000 R09: 0000000000000000 [ 860.967235][ T4947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 860.967247][ T4947] R13: 0000000000000000 R14: 00007f59075c5fa0 R15: 00007fff1bd060e8 [ 860.967266][ T4947] [ 861.355561][ T4952] loop8: detected capacity change from 0 to 1024 [ 861.377478][ T4952] EXT4-fs: Ignoring removed nobh option [ 861.417200][ T4952] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 862.278606][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 862.278678][ T29] audit: type=1326 audit(2268435592.723:46667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4967 comm="syz.6.11315" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f590739e169 code=0x0 [ 862.335565][ T29] audit: type=1400 audit(2268435592.770:46668): avc: denied { setopt } for pid=4967 comm="syz.6.11315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 862.483972][ T29] audit: type=1400 audit(2268435592.910:46669): avc: denied { read } for pid=4967 comm="syz.6.11315" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 862.618802][T29095] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 862.675333][ T29] audit: type=1326 audit(2268435593.088:46670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4972 comm="syz.8.11316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f726831e169 code=0x7ffc0000 [ 862.700599][ T29] audit: type=1326 audit(2268435593.088:46671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4972 comm="syz.8.11316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f726831e169 code=0x7ffc0000 [ 862.783291][ T29] audit: type=1326 audit(2268435593.144:46672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4972 comm="syz.8.11316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f726831e169 code=0x7ffc0000 [ 862.810879][ T29] audit: type=1326 audit(2268435593.144:46673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4972 comm="syz.8.11316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f726831e169 code=0x7ffc0000 [ 862.838863][ T29] audit: type=1326 audit(2268435593.144:46674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4972 comm="syz.8.11316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f726831e169 code=0x7ffc0000 [ 862.865468][ T29] audit: type=1326 audit(2268435593.144:46675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4972 comm="syz.8.11316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f726831e169 code=0x7ffc0000 [ 862.893130][ T29] audit: type=1326 audit(2268435593.144:46676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4972 comm="syz.8.11316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f726831e169 code=0x7ffc0000 [ 863.419079][ T4987] batman_adv: batadv0: Adding interface: dummy0 [ 863.425370][ T4987] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 863.476924][ T4987] batman_adv: batadv0: Interface activated: dummy0 [ 863.557356][ T4989] batadv0: mtu less than device minimum [ 863.563508][ T4989] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 863.574345][ T4989] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 863.585081][ T4989] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 863.595834][ T4989] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 863.606593][ T4989] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 863.617269][ T4989] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 863.628026][ T4989] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 863.638946][ T4989] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 863.649670][ T4989] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 863.720093][ T4994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11321'. [ 864.074124][ T4975] dummy0 speed is unknown, defaulting to 1000 [ 864.205432][ T5006] netlink: 'syz.2.11325': attribute type 10 has an invalid length. [ 864.215369][ T5006] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11325'. [ 864.416948][ T4998] dummy0 speed is unknown, defaulting to 1000 [ 864.451356][ T5011] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11327'. [ 865.282217][ T1039] ================================================================== [ 865.290312][ T1039] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 865.297331][ T1039] [ 865.299683][ T1039] read-write to 0xffff888237d299a4 of 4 bytes by task 21791 on cpu 1: [ 865.307822][ T1039] wq_worker_running+0x98/0x130 [ 865.312664][ T1039] schedule_preempt_disabled+0x10/0x20 [ 865.318128][ T1039] __mutex_lock+0x420/0xa00 [ 865.322623][ T1039] __mutex_lock_slowpath+0xa/0x10 [ 865.327640][ T1039] mutex_lock+0x2d/0x40 [ 865.331794][ T1039] synchronize_rcu_expedited+0x18d/0x790 [ 865.337426][ T1039] synchronize_rcu+0x4a/0x320 [ 865.342101][ T1039] xfrm_state_gc_task+0x96/0x110 [ 865.347044][ T1039] process_scheduled_works+0x4de/0xa20 [ 865.352529][ T1039] worker_thread+0x52c/0x710 [ 865.357115][ T1039] kthread+0x4b7/0x540 [ 865.361177][ T1039] ret_from_fork+0x4b/0x60 [ 865.365582][ T1039] ret_from_fork_asm+0x1a/0x30 [ 865.370340][ T1039] [ 865.372663][ T1039] read to 0xffff888237d299a4 of 4 bytes by task 1039 on cpu 0: [ 865.380201][ T1039] kick_pool+0x4d/0x2c0 [ 865.384345][ T1039] __queue_work+0x8f8/0xbb0 [ 865.388838][ T1039] queue_work_on+0xdf/0x190 [ 865.393349][ T1039] wg_queue_enqueue_per_peer_tx+0x124/0x270 [ 865.399249][ T1039] wg_packet_encrypt_worker+0x9ee/0xb90 [ 865.404792][ T1039] process_scheduled_works+0x4de/0xa20 [ 865.410253][ T1039] worker_thread+0x52c/0x710 [ 865.414850][ T1039] kthread+0x4b7/0x540 [ 865.418926][ T1039] ret_from_fork+0x4b/0x60 [ 865.423343][ T1039] ret_from_fork_asm+0x1a/0x30 [ 865.428116][ T1039] [ 865.430422][ T1039] value changed: 0x00000000 -> 0x00000001 [ 865.436131][ T1039] [ 865.438450][ T1039] Reported by Kernel Concurrency Sanitizer on: [ 865.444623][ T1039] CPU: 0 UID: 0 PID: 1039 Comm: kworker/0:2 Tainted: G W 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 865.458679][ T1039] Tainted: [W]=WARN [ 865.462471][ T1039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 865.472522][ T1039] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 865.479030][ T1039] ================================================================== [ 865.657321][ T4975] chnl_net:caif_netlink_parms(): no params data found [ 865.847728][ T4975] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.856323][ T4975] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.872018][ T4975] bridge_slave_0: entered allmulticast mode [ 865.906172][ T4975] bridge_slave_0: entered promiscuous mode [ 865.915277][ T4975] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.923609][ T4975] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.933606][ T4975] bridge_slave_1: entered allmulticast mode [ 865.991162][ T4975] bridge_slave_1: entered promiscuous mode [ 866.205444][ T4975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 866.233855][ T4975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 866.324862][ T4975] team0: Port device team_slave_0 added [ 866.332346][ T4975] team0: Port device team_slave_1 added [ 866.587572][ T4975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 866.597268][ T4975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 866.627274][ T4975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 866.648931][ T4975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 866.656687][ T4975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 866.686196][ T4975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 866.829427][ T4975] hsr_slave_0: entered promiscuous mode [ 866.836154][ T4975] hsr_slave_1: entered promiscuous mode [ 866.867113][ T4975] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 866.886952][ T4975] Cannot create hsr debugfs directory [ 867.229690][ T4975] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.279984][ T4975] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.395930][ T4975] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.546224][ T4975] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.678954][ T4975] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 867.707396][ T4975] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 867.731061][ T4975] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 867.762174][ T4975] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 867.841362][ T4975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 867.871030][ T4975] 8021q: adding VLAN 0 to HW filter on device team0 [ 867.894307][ T5315] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.901411][ T5315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 867.925866][ T5342] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.933098][ T5342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 868.080753][ T4975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 868.285075][ T4975] veth0_vlan: entered promiscuous mode [ 868.325080][ T4975] veth1_vlan: entered promiscuous mode [ 868.347765][ T4975] veth0_macvtap: entered promiscuous mode [ 868.365344][ T4975] veth1_macvtap: entered promiscuous mode [ 868.388059][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 868.399908][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.409868][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 868.421709][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.431549][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 868.443251][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.453152][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 868.465035][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.475036][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 868.487104][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.497050][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 868.508820][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.518704][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 868.530473][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.540309][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 868.552434][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.562297][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 868.574167][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.583987][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 868.595825][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.605686][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 868.617559][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.627432][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 868.639333][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.649221][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 868.661082][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.670979][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 868.682857][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.692698][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 868.704592][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.736440][ T4975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 868.760439][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.770920][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.782385][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.793665][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.804168][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.815322][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.825914][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.837065][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.847630][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.858750][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.869225][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.880310][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.891066][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.902272][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.912894][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.924206][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.934746][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.945891][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.956459][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.967531][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.978165][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.989404][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.999833][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 869.010984][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.021456][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 869.032545][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.043089][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 869.054300][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.064831][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 869.075927][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.086502][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 869.097714][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.108224][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 869.119360][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.168339][ T4975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 869.192369][ T4975] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.202703][ T4975] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.211503][ T4975] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.220255][ T4975] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0