last executing test programs: 4m48.573644314s ago: executing program 32 (id=166): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000080)={0x0, 0x0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000003340)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x1000, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) splice(r3, &(0x7f00000003c0)=0x5, 0xffffffffffffffff, &(0x7f0000000400)=0xffffffffffffffff, 0x8, 0x9) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xfff3}, {0xfff1, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @qdisc_kind_options=@q_tbf={{0x8}, {0x4}}, @qdisc_kind_options=@q_pie={{0x8}, {0x24, 0x2, [@TCA_PIE_TARGET={0x8, 0x1, 0x5b}, @TCA_PIE_BETA={0x8, 0x5, 0x17}, @TCA_PIE_LIMIT={0x8, 0x2, 0x5}, @TCA_PIE_TARGET={0x8, 0x1, 0x9}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) stat(&(0x7f0000000300)='./bus\x00', &(0x7f0000000340)) r7 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x100) preadv2(r7, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x2, 0x0, 0x0, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c42) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f00000000c0)=ANY=[]) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @random="ada68a2f96c6"}) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[], 0x114}], 0x1, 0x0, 0x0, 0x4001}, 0x20000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) 4m27.258131123s ago: executing program 33 (id=476): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xf2}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xbe}, {&(0x7f00000006c0)=""/188, 0xbc}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f0000000540)=""/211, 0x120}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) recvmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 4m11.731442107s ago: executing program 34 (id=751): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1843, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'pim6reg0\x00', 0x1}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x7}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) write(r6, &(0x7f0000000280)="e8bd8a4c56281ba2ba42cfa5b9fe5fc6dcde2ee431f5595ceadb9a2c95e57f15ee4a83f9e7d78ea996f78bd588bedcdbc730d6d15df6d2a26ca4e55e97ed0522a190ce241a37bad3317fba7e4be3dbbfec5e2f401b5658cc8fda", 0xffffffe5) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000100)=0x7e) 4m11.701950617s ago: executing program 35 (id=753): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) r3 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r3, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='kmem_cache_free\x00', r4, 0x0, 0x6}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20300}}}}}}]}, 0x48}}, 0x4040004) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x101}, 0x14}}, 0x40) 4m11.539699188s ago: executing program 36 (id=755): mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x1041404, &(0x7f0000000000)=ANY=[]) 4m11.455399929s ago: executing program 37 (id=757): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'geneve0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="3605bfafb05d65571e583e7c88a8f90688a8", 0x12, 0x40080, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x13, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1ffffdc1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000ff0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r7}, 0x10) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100) io_setup(0x8f0, 0x0) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) 3m27.110765597s ago: executing program 38 (id=1444): r0 = socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x40) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xb6, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x3, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m26.978190268s ago: executing program 39 (id=1447): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c757466383d312c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c00ef5c3556"], 0xfd, 0x2a8, &(0x7f0000000280)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000540)='[\x00\x00\x00\x00', 0x5}], 0x1, 0x5405, 0xfffffffc, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000380)={0x3fffffffbfb, 0x5, 0x5}) connect$nfc_raw(r1, &(0x7f0000000000)={0x27, 0x0, 0xffffffffffffffff, 0x1}, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0xfffe, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000000c0)={r4, 0x1, 0x533d, 0x8}, 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000680)={r4, @in6={{0xa, 0x4e22, 0xa2, @empty, 0x7e}}, 0x3, 0x100, 0x9, 0x2, 0x4}, &(0x7f00000003c0)=0x98) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x374}, 0x1, 0x0, 0x0, 0x20000001}, 0x48c0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000940)='signal_generate\x00', r5}, 0x18) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000440)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {}]}, 0x3, 0x523, &(0x7f00000018c0)="$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") r7 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x300) r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r9, 0x6, 0xc, 0x0, &(0x7f0000004100)) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000005c0)) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r10, &(0x7f0000000340)="4f104c", 0x3) sendfile(r10, 0xffffffffffffffff, 0x0, 0x10001) 3m6.326934493s ago: executing program 40 (id=1481): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 2m12.673075668s ago: executing program 41 (id=2527): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "bc4a06", 0x44, 0x2f, 0x0, @remote, @mcast2, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x1}, {0x1}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x4, 0x10}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x3, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) socket$packet(0x11, 0xa, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) chroot(&(0x7f0000000180)='./file0\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r2, 0x0, 0x100000000}, 0x18) utimes(0x0, 0x0) socket$packet(0x11, 0xa, 0x300) chmod(0x0, 0x2c) setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240), &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x1015, 0x2) 1m47.961938147s ago: executing program 5 (id=3045): timer_create(0x0, &(0x7f0000000200)={0x0, 0x10, 0x2, @thr={&(0x7f0000000000)="d4fc7efc719a0f1ea4cc10b26b92629cd9bfda1abe9e8461ca7a13b2c0dcd7a969584ea1ec648ebc57d969e3c0d72d2c5dfeaf15ff30893f2185824d49451765cfb4feabdae9ed2c0610f2582dcef4fa4377af9221daa8fe372431a693bfcf10d37f7b3e6f8ecf87905ab97a7e8ff8bad7d13292e856971a3a8e9fc5b4f44c265b66578430517742f2ae05d0599c6351d33fbc748a08cc103fb15126426174f75f641b924cb449b69d1f49ce8df0e8e0664998f9883e909728044aad2c1986f243d676f9cb8156e268a8b2c9e45d", &(0x7f0000000100)="943b88b5935a7f302272dd1a81b321c5ee88f31ebac6e05a57bc60bca1658d385ede4950a5962d230979eef4b4ff95b4e816bd1260f37beae3845c4eda018095139f2266f4e3a4c94aa1e669d1844b980da182798e0edcba00dfd631d763f782bab61731efae77488ed8179c15c0a252054c0b38b6435c6d351a4f3f62d7d26d931d9445dda90410536ffe378d930222f51fcf27bc42c9442915152b585624de0b04b30ae59d381b97309b1a35d2ae54f978777bd4bd07af36f3bd816ebdecb8e9223dad663dd2dd5b6712170d615221f8add95d78362daf1b5814d219cd3884ea7e9d7ea4569cbff87a9a"}}, &(0x7f0000000240)=0x0) timer_delete(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x400, 0x102) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@private0}}, &(0x7f0000000400)=0xe8) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r1, &(0x7f00000002c0)='./file0\x00', r3, r4, 0x1000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xdc8}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x4}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004094}, 0x4048800) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, '\x00', r2, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000840)={0x0, @broadcast, @private}, &(0x7f0000000880)=0xc) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000008c0)=0xffffffffffffffff, 0x4) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@bloom_filter={0x1e, 0x800, 0xfffffff9, 0x3, 0xa4c3, 0x1, 0x400, '\x00', r2, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x7}, 0x50) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x50) r12 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a80), 0x8203, 0x0) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000ac0)={0xffffffffffffffff, 0x7, 0x18}, 0xc) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7ff, '\x00', r2, 0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x50) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b80)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3309, '\x00', r2}, 0x50) r16 = open(&(0x7f0000000c00)='./file0\x00', 0x1, 0x0) r17 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x17, 0x14, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x981, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x81}, @exit, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000780)='syzkaller\x00', 0x10, 0x66, &(0x7f00000007c0)=""/102, 0x83f00, 0x32, '\x00', r7, @cgroup_sysctl=0x12, r8, 0x8, &(0x7f0000000900)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000c40)=[r9, r10, r11, r12, r13, r14, r15, r16], &(0x7f0000000c80)=[{0x2, 0x1, 0x2, 0x1}, {0x2, 0x2, 0x5, 0xa}, {0x0, 0x2, 0xf, 0x7}, {0x4, 0x1, 0xb, 0x7}], 0x10, 0x3}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000dc0)=@generic={&(0x7f0000000d80)='./file0\x00', 0x0, 0x18}, 0x18) r18 = ioctl$TIOCGPTPEER(r12, 0x5441, 0xfff) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r18, 0x8008f512, &(0x7f0000000e00)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001140)={r17, 0xe0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, &(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x97, &(0x7f0000000f40)=[{}], 0x8, 0x10, &(0x7f0000000f80), &(0x7f0000000fc0), 0x8, 0xd1, 0x8, 0x8, &(0x7f0000001000)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001180)=r19, 0x4) ioctl$AUTOFS_IOC_FAIL(r13, 0x9361, 0xffff) r20 = syz_genetlink_get_family_id$fou(&(0x7f0000001200), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r16, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x80, r20, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private0}, @FOU_ATTR_PEER_V6={0x14, 0x9, @remote}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x11}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x80}}, 0x8010) open(&(0x7f0000001340)='./file0\x00', 0x40, 0x4a) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001380), 0x4000, 0x0) 1m47.960928287s ago: executing program 5 (id=3048): bpf$PROG_LOAD(0x5, 0x0, 0x0) setitimer(0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x75, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x18) poll(0x0, 0x0, 0x101) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r7, {0xfff2, 0x4}, {}, {0xd, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5, 0x8}}}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054) 1m47.281906121s ago: executing program 5 (id=3060): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0)={[{@resuid}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@dioread_nolock}, {@grpjquota}, {@quota}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@minixdf}]}, 0x1, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000100)='./control\x00', 0x184) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00'], 0x5c, 0x0) 1m47.187402551s ago: executing program 5 (id=3063): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000340)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@user_xattr}, {@grpquota}, {@auto_da_alloc}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x5000) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r1, 0x0) ptrace(0x4208, r1) fallocate(r0, 0x0, 0x0, 0x8800000) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000240)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000340)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@user_xattr}, {@grpquota}, {@auto_da_alloc}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") (async) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x5000) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_pidfd_open(r1, 0x0) (async) ptrace(0x4208, r1) (async) fallocate(r0, 0x0, 0x0, 0x8800000) (async) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000240)) (async) 1m46.999115792s ago: executing program 5 (id=3065): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000001200000026bd7000ffdbdf2508060a014e244e23f8ffffff03000000060000000000000000040000090000000800000009000000", @ANYRES32=0x0, @ANYBLOB="010000000300000004000016474ac3000b009effae15cd649e6a6437eb"], 0x64}, 0x1, 0x0, 0x0, 0x4000004}, 0xf21580fa2b8220d0) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) write$selinux_validatetrans(r2, 0x0, 0x79) 1m45.87378018s ago: executing program 5 (id=3083): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) ptrace(0x10, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r4, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000280001801400040000000000000002000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000aa40)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4c2}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000180)='syzkaller\x00', 0xa00, 0x2c, &(0x7f0000000200)=""/44, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x1, 0x0, 0xfff, 0x2}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[0xffffffffffffffff, r8, 0x1, r9], &(0x7f0000000600)=[{0x1, 0x3, 0xb, 0x2}], 0x10, 0xf}, 0x94) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r12, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r13, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c40)=@delchain={0x84, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x50, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x89da}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xf}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x9}]}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m45.849891689s ago: executing program 42 (id=3083): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) ptrace(0x10, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r4, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000280001801400040000000000000002000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000aa40)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4c2}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000180)='syzkaller\x00', 0xa00, 0x2c, &(0x7f0000000200)=""/44, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x1, 0x0, 0xfff, 0x2}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[0xffffffffffffffff, r8, 0x1, r9], &(0x7f0000000600)=[{0x1, 0x3, 0xb, 0x2}], 0x10, 0xf}, 0x94) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r12, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r13, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c40)=@delchain={0x84, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x50, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x89da}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xf}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x9}]}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m7.894089669s ago: executing program 2 (id=3767): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x4}, 0x18) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='bbr', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000000007020000f8ffffffb703000048000000b704000000000000850000000100000095c87c6d9e50658f75caaff85fb8079f28720da8f8217fdcc08a405ca88c8b0be08ba78e350432ac764d67dd73ccd44175b7dbffe7704dd2bbe992949b0e46904c9f649498e3751cc604ed690dc105415a3b708f443843b7cdcfb190811321b82be3621e50dc31987cae51f6f5900565a9aa08e32079d756a3d590a7a7798f82e71743715866aadb65a766e0d1e2575bb96629ba0d6b3472174c43d50ce385490442171251aa3d3c2a787873b892a6f45a87c4ee245298ba5fa49367537b78136c26bccd3c5a05ec734b76ed31e12361df4a209b3ca7d4ec2b4657828728f4c840cbcebf4d347a00b394225d29160eca8012bd5dfbf2ab63c68908"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$caif_stream(0x25, 0x1, 0x0) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000800)="c7", 0x1}], 0x1) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r6}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x24, 0x60000000}, 0x2c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r8) 1m7.77953792s ago: executing program 2 (id=3770): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0), 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32], 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xa, &(0x7f00000008c0)=ANY=[@ANYRES16, @ANYBLOB="000000000000000066080000000001011800000000040000000000000000"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200"], 0x0, 0x26}, 0x28) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x101042, 0x0) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000e40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRESHEX], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) fdatasync(r6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) 1m7.546113741s ago: executing program 2 (id=3775): r0 = io_uring_setup(0x6b, &(0x7f0000000300)={0x0, 0x4, 0x80, 0x3, 0x100001a}) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x1c, 0x200000000000000, r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007910b6000000000005000000000000df9400000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 1m7.463560412s ago: executing program 2 (id=3776): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000004c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0x1, 0x8, 0x58, @dev={0xfe, 0x80, '\x00', 0x43}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x20, 0x6, 0x2}}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x18, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xea6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='module_free\x00', 0xffffffffffffffff, 0x0, 0x7f}, 0x18) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000004c0)='rpm_return_int\x00', r6}, 0x18) r7 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2000) ioctl$SG_GET_VERSION_NUM(r7, 0x2284, &(0x7f0000000080)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000280)='./file0/file0\x00', 0x3) splice(r8, 0x0, r9, 0x0, 0x10d00, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x7, 0x9, 0xf, 0x48820, r8, 0x0, '\x00', r2, r8, 0x2, 0x5, 0x0, 0x4, @value=r8}, 0x50) 1m6.593379157s ago: executing program 2 (id=3779): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = memfd_secret(0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d3001000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9751f008554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a65f78238b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c505000000b8fab4d4d897db2c544c0e0895a9044f50c50b8eac8c63d2b1cd06a39702bd547f5ebaa69520bbb15f4f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564bd98a621483fb2a5ff221e0d831f24759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91e0eb18e21dfdab3c84ec11377fbb00000000848060962bcbc47cefd1a2a7bd3b646614bf7cd3495663de5b63f6b5910daee8ebb7ba84a8b5b6f2d1fbc22a51a500f94c871d5e1d31ab5d7a89965bbdbf355a8544e1688a61f459f3618b3a5416eb143180d3d2c5f4e0b1a556422038801703e109e23944e53f230a3537a5412c7d0bf278c6c1684dd8de90aaa33f47dc2c7b5e4f73784fd31aa2f9d1b1623734f9cf84718b2bad31f651e3607f3ac6c427cb6c0652d21ecd4b29e96c0a3781ee820faab71040768f6b08a69fdfd0b2b7be25f19500c1b8330994efb57a53c1a67bda909630f75738ab40e7ab63d527d6c1e8cf611f05c1b6d0da1ba84d405b4d834162c88022a4625a5f7c431c39f3f9a7789f9b668ec4da9f1a981086dcf4c5a940691f9638ce34dba904483f2ed4e7a713b7eac29c5e122f1b6acd6f1da2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r3, r2, 0x2e, 0x4608, @void}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f00000004c0), &(0x7f0000001c40)=r5}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYRES16=r6, @ANYRES16=r8, @ANYBLOB="050000000000fcdbdf250f00000008000300", @ANYRES32, @ANYBLOB="4a000e001c"], 0xa0}}, 0x2084) cachestat(r2, &(0x7f0000000340)={0x9, 0x1}, &(0x7f0000000380), 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r9, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r9, 0x0, 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) sendmmsg(r9, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000640)="da", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000009c0)="a4", 0x1}], 0x1}}], 0x2, 0x15) r10 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r10, &(0x7f0000000240)=[{&(0x7f0000002140)=""/4088, 0xff8}], 0x4, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x89a0, &(0x7f0000000400)) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 1m6.384247178s ago: executing program 2 (id=3781): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_io_uring_setup(0xed9, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x1, 0x3}, &(0x7f0000000300)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) r4 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) io_uring_enter(r1, 0x48ce, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000140)={0x2, 0x1, {0x0, 0x1e, 0xd, 0x17, 0x1, 0x60, 0x4, 0x0, 0x1}}) 1m6.360317078s ago: executing program 43 (id=3781): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_io_uring_setup(0xed9, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x1, 0x3}, &(0x7f0000000300)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) r4 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) io_uring_enter(r1, 0x48ce, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000140)={0x2, 0x1, {0x0, 0x1e, 0xd, 0x17, 0x1, 0x60, 0x4, 0x0, 0x1}}) 30.384696326s ago: executing program 9 (id=4405): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0)={[{@resuid}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@dioread_nolock}, {@grpjquota}, {@quota}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@minixdf}]}, 0x1, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000100)='./control\x00', 0x184) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00'], 0x5c, 0x0) 30.200533557s ago: executing program 9 (id=4407): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x10, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="68b2582e7df21800000002000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffffef, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r4, 0x7000000) r5 = dup(r4) preadv2(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', r7}, 0x18) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r9, 0xc) connect$x25(r9, &(0x7f00000004c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) 29.916930759s ago: executing program 9 (id=4409): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000010008500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)='\x00', 0x1, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x80, 0x6, @local}, 0x14) 29.866364979s ago: executing program 9 (id=4410): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x2204080, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6f646f74732c73686f77657865632c6e6f646f74732c6e66733d6e6f7374616c655f726f2c0030a66d3a1127e03fc4ec7721f7c77d616ce2d9a9b0ef6cf77d486df06aac6920f6f13474bc77836cb851c86e0cc5dc8611db21e0dafe4caa2c5b34"], 0x1, 0x28d, &(0x7f0000000640)="$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") setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x6c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @chandef_params, @NL80211_ATTR_DURATION={0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7f73afef}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x172}]]}, 0x6c}}, 0x4000054) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 29.600459771s ago: executing program 9 (id=4411): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000340)=[@in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e24, @private=0xa010101}], 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r0, 0x0, 0x1034}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122", @ANYRES32, @ANYBLOB="f5ff0f"], 0x3c}}, 0x40000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1828, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xf, 0x0, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000580)='kmem_cache_free\x00', r4, 0x0, 0x8000000000000004}, 0x18) statfs(&(0x7f0000000200)='.\x00', &(0x7f0000000440)=""/137) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 29.312829773s ago: executing program 9 (id=4417): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8c}]}, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0xb}, 0x94) 29.312518803s ago: executing program 44 (id=4417): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8c}]}, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0xb}, 0x94) 17.453444394s ago: executing program 6 (id=4678): r0 = getpid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0xfffffffd, 0x5, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000380)={0x0, 0x0, 0x1f}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000100)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r5, 0x400, 0x0) fcntl$setlease(r5, 0x400, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sched_setscheduler(0x0, 0x6, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x18) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f00000005c0)='./file0\x00', 0x1a18e4b, &(0x7f00000003c0), 0x2a, 0x63f, &(0x7f00000013c0)="$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") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r8}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r9}, 0x20) symlinkat(0x0, 0xffffffffffffff9c, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 17.091070616s ago: executing program 6 (id=4686): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)='\x00', 0x1, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x80, 0x6, @local}, 0x14) 17.043402447s ago: executing program 6 (id=4687): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETTXFILTER(r5, 0x400454d1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r4) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r8) write$sndseq(r6, &(0x7f0000000080)=[{0x0, 0x47, 0x20, 0x0, @tick=0x10000000, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x1, 0x2c5d}}}, {0x0, 0x0, 0x0, 0x8, @tick=0x3, {}, {0x80, 0x10}, @addr={0xb4, 0xd}}], 0x38) 16.872076238s ago: executing program 6 (id=4689): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x400000000009, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xe, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x542, &(0x7f0000001a00)="$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") syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000000040)='./file7\x00', 0x200010, &(0x7f0000000140)=ANY=[], 0xfc, 0x2b0, &(0x7f0000000280)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000380), &(0x7f00000005c0)=r3}, 0x20) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) (async) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x185093, 0x0) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x185093, 0x0) r4 = open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000008080)='./file0\x00', r4, &(0x7f0000000180)='./file0\x00', 0x152) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000700)='spmi_write_end\x00', r0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x17) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r6}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r6}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$msdos(&(0x7f0000000840), &(0x7f0000000280)='./file1\x00', 0x8890d0, &(0x7f0000000780)=ANY=[@ANYBLOB="646f74732c6e66732c71756965742c6e6f646f74732c63686563633d7367726963742c6e66733d7374616c655f723d636f6e74696e7565008000000000000074732c00813d22260ef68aa0c82c9ec9c3799ec37b96b4fb68a30b6a1b8c7c07e14c46eaba50521a2b602c1fa51eb8843b568df0f448d8b1cdf3b4cd4dac4399ee01887e790e1860ee050907006998d29d26ba43abc31e80aeac75d68b600557faa43312967b6c069712d852c1eb5315d238"], 0x1, 0x23d, &(0x7f0000000300)="$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") (async) syz_mount_image$msdos(&(0x7f0000000840), &(0x7f0000000280)='./file1\x00', 0x8890d0, &(0x7f0000000780)=ANY=[@ANYBLOB="646f74732c6e66732c71756965742c6e6f646f74732c63686563633d7367726963742c6e66733d7374616c655f723d636f6e74696e7565008000000000000074732c00813d22260ef68aa0c82c9ec9c3799ec37b96b4fb68a30b6a1b8c7c07e14c46eaba50521a2b602c1fa51eb8843b568df0f448d8b1cdf3b4cd4dac4399ee01887e790e1860ee050907006998d29d26ba43abc31e80aeac75d68b600557faa43312967b6c069712d852c1eb5315d238"], 0x1, 0x23d, &(0x7f0000000300)="$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") r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r7) sendmsg$NL80211_CMD_LEAVE_MESH(r8, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="080028bd7000c6b7476553bbb77d2038fbdb", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x20000001) r10 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r11, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r10, &(0x7f0000000000), 0x4000, 0xa00}]) 16.807505408s ago: executing program 6 (id=4690): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000091462567be0d8eb98c702935e5f8502f86d0b71521e0c34c2682aee848642821b5b5c44be7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000eb88fa2b8500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d0000000401050000000000000000000000ffff00000000000000003300000002000000e00000020000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000003c0000000a000000fe8000000000000000000000000000aa0000000001000000000000000000000000000000ff010000000000000000000000000001000000002b0000000a000000fe8800000000000000000000000000010000000000000000000000000000000000000000ff020000000000000000000000000001000000003200000002000000fe8000000000000000000000000000000000000004"], 0x254}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x1, 0xdd, 0x9}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) 16.724614889s ago: executing program 6 (id=4692): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = io_uring_setup(0x359f, &(0x7f0000000140)={0x0, 0xc97, 0x8000, 0x0, 0x350}) io_uring_setup(0x36f5, &(0x7f0000000200)={0x0, 0x89c2, 0x1, 0x3, 0x3ad, 0x0, r2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) (async) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd, 0x3}, 0x12, 0x6, 0x7, 0x0, 0x4, 0x5}, 0x0, 0x2000000000000000, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='cpu>00\t&&') 16.713044199s ago: executing program 45 (id=4692): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = io_uring_setup(0x359f, &(0x7f0000000140)={0x0, 0xc97, 0x8000, 0x0, 0x350}) io_uring_setup(0x36f5, &(0x7f0000000200)={0x0, 0x89c2, 0x1, 0x3, 0x3ad, 0x0, r2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) (async) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd, 0x3}, 0x12, 0x6, 0x7, 0x0, 0x4, 0x5}, 0x0, 0x2000000000000000, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='cpu>00\t&&') 4.93695742s ago: executing program 4 (id=4871): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x20c, 0x17, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_FLOWTABLE_HOOK={0x1dc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14}, {0x14, 0x1, 'bridge_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'wg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'caif0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1000}]}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x20c}}, 0x8080) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000070900010073797a310000000014000000020a01020000000000000000010000031c000000000a0103000000000000000002000004080002400000000120000000050a01020000000000000000010000060900010073797a31"], 0x98}}, 0x200000d4) (rerun: 64) 4.85542474s ago: executing program 4 (id=4874): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000001940)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$eJzs3cFvHFcZAPBvNl7HSZzaBQ5QqaWiRUkF2Y1r2locSpEQnCohyj0Ye2NZWXste93GVgXrvwAJIUDiBBcuSPwBSCgSF44IKRKcQSoCIUhBggN00OzO2mY9a2/SjTde/37SZN6b2Znvexu/2Zmdp9kAzq3nI+KNiPggTdOXImImX17Kp2h1pux17z94dymbkkjTt/6WRJIv6+4ryedX8s2mIuJrX4n4ZnI07tbO7p3Fer22mderzbWN6tbO7o3VtcWV2kptfX5+7tWF1xZeWbg5lHZejYjXv/Sn73/np19+/ZeffeePt/5y/VtZWtP5+sPteEgTx63sNL18capng81HDPYkytpT7lYuDbbN3mPMBwCA/rJz/I9ExKci4qWYiQvHn84CAAAAZ1D6hen4TxKRFpvssxwAAAA4Q0rtMbBJqZKPBZiOUqlS6Yzh/VhcLtUbW83P3G5sry93xsrORrl0e7Veu5mPFZ6NcpLV59rlg/rLPfX5iHg6Ir43c6ldryw16suj/vIDAAAAzokrPdf//5zpXP8DAAAAY2Z21AkAAAAAj53rfwAAABh/rv8BAABgrH31zTezKe3+/vXy2zvbdxpv31iubd2prG0vVZYamxuVlUZjpf3MvrWT9ldvNDY+F+vbd6vN2lazenVn99ZaY3u9eWs1pk6lQQAAAMART3/y3u+TiGh9/lJ7ykyOOingVEzsl5J8XtD7//BUZ/7eKSUFnIoLA7zmvYvFy50nwNk20bugT18Hxk951AkAI5ecsL7v4J3fdGalIecDAAAM37VPFN//P/l8vuWUH844nRjOr577/+nMqBIBTl37/v+gA3mcLMBYKQ80AhAYZx/2/v/J0vShEgIAAIZuuj0lpUr+9d50lEqVSsTV9s8ClJPbq/XazYh4KiJ+N1O+mNXn2lsmJ14zAAAAAAAAAAAAAAAAAAAAAAAAAAAdaZpECgAAAIy1iNKfk191nuV/bebF6d7vByaTf7d/EngyIt750Vs/uLvYbG7OZcv/vr+8+cN8+cuj+AYDAAAA6NW9Tm/P/zXqbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYN+8/eHepOw3w8kvDivvXL0bEbFH8iZhqz6eiHBGX/5HExKHtkoi4MIT4rb2I+HhR/CRLaz9kUfxhvAmtvaSVthXGj9n8XSiKf2UI8eE8u5cdf94o6v+leL49L+5/ExH/V39U/Y9/sX/8u9Cn/18dMMYz939e7Rt/L+KZieLjXzd+0if+CwPG/8bXd3f7rUt/HHGt+/nTPuIdjnBQqjbXNqpbO7s3VtcWV2ortfX5+blXF15beGXhZvX2ar2W/1sY47vP/uKD49p/ufDzL8mz6d/+Fwv2V/SZ9N/7dx98tFtpHY1//YWC+L/+Sf6Ko/FLeZxP5+Vs/bVuudUpH/bcz3773HHtXz5of/lh/v+v99tpryMd5dlB/3QAgMdga2f3zmK9Xtsc20J2lf4EpPEohcl4ItIY38K3s8L9Ye0wTdM061MFq+5FxCD7SWLILS0V53NQ6HsEGPWRCQAAGLaDk/5RZwIAAAAAAAAAAAAAAAAAAADn12k8Za035sEjkJNhPEIbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAo/hcAAP//Yw3Xfw==") r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, 0x0, 0x0) r8 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc)) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r9, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) readv(r9, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/215, 0xd7}], 0x1) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) 4.785718871s ago: executing program 1 (id=4877): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) 4.684344331s ago: executing program 1 (id=4878): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$selinux_validatetrans(r2, 0x0, 0x79) 4.556379892s ago: executing program 1 (id=4879): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) io_setup(0xd3, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000004740)={0x0, 0x0, &(0x7f0000004700)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000000d06010408000000f117fee6000000000100000500000000000d0003006c6973743a736500"/56], 0x34}, 0x1, 0x0, 0x0, 0xc010}, 0x80) r2 = socket(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0x7, &(0x7f0000000500)=ANY=[@ANYBLOB="1800d7932b211f1d4e000000000000000064a0254f9d77ab00000000000018110000", @ANYRES32=r3, @ANYBLOB="303dc5d83ff20003000000000500b701f47ee20000005beb2891cf247a185366f30204f8388147b105a78c97af44f7eb11237ba4fa87ca2a6d95c9240000c2638f7038bf351e72f14f55738e62461e58e036581d7e2a389bb77d618ccdfb71593a5b098cf2178e912160957bea410a346755a4ded1d04f7f00"/133], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000000100"/20, @ANYRES32=0x0, @ANYBLOB="7b130000a4010200200012800b00010067656e65766500001000028005000a0000000000e7ff0500"], 0x40}}, 0x40800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(r8, 0x112, 0xf, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r7}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r9 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0xce342, 0x0) pwrite64(r9, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) 4.275152564s ago: executing program 1 (id=4882): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x0, &(0x7f0000000b00), 0x1, 0x24e, &(0x7f0000000340)="$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") symlink(&(0x7f0000000b00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendmmsg$inet(r2, &(0x7f0000002080)=[{{&(0x7f0000000080)={0x2, 0x4e1e, @multicast1}, 0x10, 0x0}}], 0x1, 0xc044) (async) sendmmsg$inet(r2, &(0x7f0000002080)=[{{&(0x7f0000000080)={0x2, 0x4e1e, @multicast1}, 0x10, 0x0}}], 0x1, 0xc044) write$binfmt_misc(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000000f00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000000f00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x18) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x4098, &(0x7f0000000080)={[{@nogrpid}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x66}}, {@nodioread_nolock}, {@nodiscard}, {@noquota}]}, 0x3, 0x438, &(0x7f0000000d80)="$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") openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2a5c0, 0x1c1}, 0x18) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2a5c0, 0x1c1}, 0x18) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x9, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a) (async) write$binfmt_register(r4, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x9, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a) r5 = creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x50) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x26) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r6}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r6}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000700)={r5, &(0x7f00000002c0)="f87773ea23c000a3c6f06dc87ca574f863a3d4254fabea1ffabe6a22ce853fa8de785cc66b489bec9644e92773ecfe4302372ee2f6a7df0474a86fd67df0073cc7ddb40e850aadd7e1abe1608d426aa81bca44ae1c8e3902", &(0x7f00000006c0)}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000700)={r5, &(0x7f00000002c0)="f87773ea23c000a3c6f06dc87ca574f863a3d4254fabea1ffabe6a22ce853fa8de785cc66b489bec9644e92773ecfe4302372ee2f6a7df0474a86fd67df0073cc7ddb40e850aadd7e1abe1608d426aa81bca44ae1c8e3902", &(0x7f00000006c0)}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 4.193369134s ago: executing program 1 (id=4884): socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r2 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000300)=""/164) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) 3.918822806s ago: executing program 4 (id=4890): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r2, 0xee00, 0xee01) keyctl$read(0xb, r2, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC=r2], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70400000800ab1f77", @ANYRES16=r2, @ANYBLOB="fb220250cbbbdfd00ab936dbeddd8b97491c8d3e93339e7a50266a491184bf51b35a9b9d4306cc51acf7de58c22eaad6b6b2586d5d57423b6315b0dcf72f0248c1ad71caf2faae1e6145688f073a6bcb3d21efaaefd54ff78e90472add456e14655c34ec46fcb4efd37d3a2806e091c55b26aad2eca1777999c2e4838ade3af63dc7a31f61864813f4d0d429", @ANYRESDEC=r1], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) pipe(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0xf3a, 0x0) close(r7) write$binfmt_script(r8, 0x0, 0xd9) write(r5, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000a00)=""/239, 0xef}], 0x1) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r9}, &(0x7f0000000300), &(0x7f0000000380)}, 0x20) r10 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r10, 0xa, 0x13) fcntl$setlease(r10, 0x400, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000b00)={'gre0\x00', 0x0, 0x8000, 0x700, 0x80000000, 0x8, {{0x19, 0x4, 0x3, 0x23, 0x64, 0x66, 0x0, 0x6, 0x29, 0x0, @private=0xa010101, @private=0xa010100, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @end, @timestamp_addr={0x44, 0xc, 0x16, 0x1, 0x5, [{@rand_addr=0x64010102, 0x5}]}, @lsrr={0x83, 0x17, 0x6, [@multicast1, @dev={0xac, 0x14, 0x14, 0x16}, @private=0x9, @loopback, @private=0xa010100]}, @end, @ra={0x94, 0x4}, @noop, @rr={0x7, 0x1b, 0x91, [@broadcast, @private=0xa010100, @private=0xa010100, @broadcast, @rand_addr=0x64010101, @remote]}]}}}}}) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r11, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000008a40)={0x0, 0x0, &(0x7f0000008a00)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000010701020000000000b90000000000030000000000000000000000e9389fcc229be5514f6b"], 0x2c}, 0x1, 0x0, 0x0, 0x40840}, 0x800) 3.21544793s ago: executing program 1 (id=4896): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x202682, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000004ec0)={0x0, 0x0, &(0x7f0000004e80)={&(0x7f0000004c00)=@delpolicy={0x58, 0x14, 0x1, 0x70bd2a, 0x25dfdbfd, {{@in6=@local, @in=@multicast2, 0x4e21, 0x3, 0x4e24, 0x3, 0x2, 0x20, 0x80, 0x2f}, 0x6e6bb7}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8000}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30c) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000440)={0x42, 0x3, 0x2}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=@newtfilter={0x34, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x893}, 0x24040084) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00032dbd7000fedbdf2501000000000000000141000000200017000000100000000969623a76657468315f6d61637674617012000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 3.19626835s ago: executing program 46 (id=4896): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x202682, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000004ec0)={0x0, 0x0, &(0x7f0000004e80)={&(0x7f0000004c00)=@delpolicy={0x58, 0x14, 0x1, 0x70bd2a, 0x25dfdbfd, {{@in6=@local, @in=@multicast2, 0x4e21, 0x3, 0x4e24, 0x3, 0x2, 0x20, 0x80, 0x2f}, 0x6e6bb7}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8000}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30c) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000440)={0x42, 0x3, 0x2}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=@newtfilter={0x34, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x893}, 0x24040084) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00032dbd7000fedbdf2501000000000000000141000000200017000000100000000969623a76657468315f6d61637674617012000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 3.034338051s ago: executing program 4 (id=4898): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x14}}, 0xc) getsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000000)=""/130, &(0x7f0000695ffc)=0x82) fchdir(r2) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f00000000c0)=""/40, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f00000000c0), 0x4009, r0}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) rt_sigaction(0x40, &(0x7f0000000080)={&(0x7f0000000100)="2437460f1c2bc4a2f99c9022000000c4a2f10027460f38e741c44240f29a3b470000a5c43b3be5c436fe0d094e486ff5f5bb559a00000f75bed5370b1c2665d2950e000000dbf5", 0xc8000000, 0x0, {[0x5]}}, 0x0, 0x8, &(0x7f0000000540)) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='stat\x00') lseek(r6, 0x9, 0x0) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000080)=0x1) 2.797666043s ago: executing program 0 (id=4902): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e657400000000050005000a000000050004"], 0x60}}, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x9, &(0x7f0000000340)=@raw=[@map_val={0x18, 0x2, 0x2, 0x0, r2}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x80000, 0x57, &(0x7f00000003c0)=""/87, 0x41100, 0x31, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x3, 0xffff980f, 0xfff}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000640)=[r2], &(0x7f0000000680)=[{0x1, 0x4, 0x10}, {0x5, 0x1, 0x4, 0x7}], 0x10, 0xfffffff9}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000880)={@map=r2, 0x1, 0x0, 0xffff0001, &(0x7f0000000780)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000900)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)={@map=r2, r3, 0xe, 0x14, 0x0, @void, @value=r5, @void, @void, r4}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioprio_set$pid(0x3, 0x0, 0x6000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x545, &(0x7f0000001300)="$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") syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000001080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20c28, 0x0, 0x3, 0x0, &(0x7f0000000080)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000300)={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, 'erspan0\x00'}}, 0x1e) connect$pppoe(r8, &(0x7f0000000040)={0x18, 0x0, {0x0, @remote, 'pim6reg0\x00'}}, 0x1e) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r9}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14006eadb94f79fc775750930000100001000000000000000c0a010100000000000000fe060000016c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000002000800c00018026000100d10300000c00008008000340000000022c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a3100000000140000021100010000000000000000000100000a000000c318083740a14d6c267b2ee2edbd602beae39f5ce89946bcd1337ec1212b2063f9a8341094d4600a8abf4fb12a585d96453364d81da6c8457fb1d4a35cd9633f0e026773123aa0262ae18981869021ecd5b48a3e240401a540f42cfdd1eab2885ba5e7"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.720515073s ago: executing program 4 (id=4904): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xc8}, 0x0, 0x100000000000000, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000e4ffffff000000000000000080000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0x100000}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000380)={'pim6reg1\x00', @broadcast}) 2.461488255s ago: executing program 0 (id=4906): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace$peeksig(0x4209, r0, &(0x7f0000000000)={0x80000000, 0x0, 0x7}, &(0x7f0000000a00)=[{}, {}, {}, {}, {}, {}, {}]) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$lock(r2, 0x5, &(0x7f00000000c0)={0x1, 0x4, 0x7, 0x69709c8b, r0}) 2.328238386s ago: executing program 4 (id=4908): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@gettaction={0x54, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000240)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x0, 0xf, 0x10, 0x7fffffff}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYRES32=0x0, @ANYBLOB="1072696467650080180002000000000000000000000093caf7a40a"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$packet(0x11, 0xa, 0x300) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600), 0x4) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0, 0x1000000}, 0x32) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000040)=r8, 0x4) r9 = openat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000400)={0x28000, 0xa0, 0x3e}, 0x18) fsconfig$FSCONFIG_SET_FD(r9, 0x5, &(0x7f00000005c0)='({\x00', 0x0, r0) (async) syz_emit_ethernet(0x5e, &(0x7f0000000140)={@random="e33110495bfd", @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x15}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}}}}}}}, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @random="769363e4128b", @void, {@ipv4={0x800, @generic={{0xa, 0x4, 0x2, 0x13, 0x28, 0x67, 0x0, 0x2, 0x32, 0x0, @empty, @broadcast, {[@timestamp_prespec={0x44, 0x14, 0xe1, 0x3, 0x4, [{@multicast2, 0x1}, {@empty, 0xfff}]}]}}}}}}, 0x0) 2.040679837s ago: executing program 8 (id=4910): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_context(r3, &(0x7f0000000040)='system_u:object_r:tmpfs_t:s0\x00', 0x1d) r4 = openat$zero(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000080)={r4, r1}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) getitimer(0x0, 0x0) r6 = inotify_init() r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r8, 0x0) connect$unix(r7, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r7, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) close_range(r6, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580, 0xfffffffd, 0x400}, &(0x7f0000000100), &(0x7f00000003c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) timer_create(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000140)={0x20000000}) 2.040277307s ago: executing program 3 (id=4911): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) ftruncate(r1, 0x5) connect$bt_l2cap(r1, &(0x7f0000000280)={0x1f, 0xd, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3}, 0xe) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xa, 0x0, 0x0, 0x7995}, 0x846e, 0x0, 0x0, 0x48000000, 0x0, 0x5e, 0x0}) close_range(r3, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x5}, &(0x7f00000001c0)=0x8) ioctl$FS_IOC_ENABLE_VERITY(r6, 0x40806685, &(0x7f00000003c0)={0x1, 0x2, 0x1000, 0x6c, &(0x7f0000000300)="40e77310a8ef8f9b5d94a011dddd0863ca927c7b903a6511da7690eee218a974d7f3461eb0014fdc5c58ab0f619040726c58243b003516998d16d2bb6b8aac701489f25ab57fe3e5fd21a5f60bb360f93f153937b0fd3fc7df0d30d79005925124ce8e1abc73234a88ec98b4", 0x7, 0x0, &(0x7f0000000380)="ba6207159c0e22"}) sendmsg$inet_sctp(r6, &(0x7f00000002c0)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0xf, @private1, 0x2}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="d9296d62f5c8adedb51e1446dd0c27ac3481712628f433930aa3c8b09b67f37776b7f94ae5a0cfa5354e073fd35ca96901074f87b9f81096dcbb19cb3f23e85ef71d4463594439130257d65f414403e493ac31e7146afbce743746e0192ea99ab25a05ac5699563ad112e94a0c1cafabb682024cccc237f77e8a64978fc16aada2b194264425", 0x86}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="300000000000000084000000010000000000fbff0080000000000000ff0300000002000040000000ff7f0000", @ANYRES32=r7, @ANYBLOB="20000000000000008400000008000000fe8000000000000000000000840000000600000004000000000000d03b148db1ecb77d8c4310c0bdc70020000000000000008400000008000000fe80"], 0x88, 0x10}, 0x40000) 1.55944193s ago: executing program 0 (id=4912): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x401}, 0x11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x5, &(0x7f0000000200)={0x77359400}, 0x1, 0x4}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000140)={0x5, r2, 0x1c, {0x9, 0x1}, 0x6}, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xc805, &(0x7f0000000740), 0x1, 0x59d, &(0x7f0000000bc0)="$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") 1.492171571s ago: executing program 0 (id=4913): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703001008000000b704000000000000850059000000950000", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000"], 0x50) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 1.408661961s ago: executing program 0 (id=4914): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x45cab649}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r7, 0x4e, 0x0) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb) syz_emit_ethernet(0x6e, &(0x7f0000000880)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0300", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x2, 0x0, 0xfff, {0x0, 0x6, "55c0e4", 0x3, 0x2f, 0xff, @mcast2, @ipv4={'\x00', '\xff\xff', @broadcast}, [@srh={0x2b, 0x0, 0x4, 0x0, 0x7, 0x30, 0x9}]}}}}}}}, 0x0) 1.211543723s ago: executing program 8 (id=4915): setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x3}, 0x8) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x5, 0x2}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={r1, 0xffff, 0x5, [0x5, 0xfd, 0x81, 0x5, 0x3]}, 0x12) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.pending_reads\x00', 0x141, 0xaaf19e35096abdcb) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000140)) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000180)={r1, @in={{0x2, 0x4e23, @broadcast}}}, 0x84) r3 = open_tree(r2, &(0x7f0000000240)='./file0\x00', 0x80000) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000000580)={0x3, 0x1, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)=""/243, 0xf3}, {&(0x7f0000000380)=""/254, 0xfe}, {&(0x7f0000000480)=""/123, 0x7b}], &(0x7f0000000540)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10001}, [@exit]}, &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000640)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0x2, 0x4, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000006c0)=[r2, r2, 0xffffffffffffffff], &(0x7f0000000700)=[{0x0, 0x2, 0xf, 0x2}, {0x4, 0x2, 0x9, 0x9}, {0x1, 0x5, 0x2, 0x2}], 0x10, 0xa}, 0x94) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x3d}}}}, [@NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x4, 0xfff7, 0x3, 0x4, 0x7, 0x2, 0x6, 0x1ff, 0x126, 0x5, 0x3, 0x0, 0x400, 0x65, 0x4, 0x8]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040001}, 0x41) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x20000, 0x2) remap_file_pages(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x6, 0x4000000) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x48, 0x2, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40801}, 0x4000004) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000ac0)={'geneve0\x00'}) r5 = socket(0x15, 0x80000, 0x3) socket(0x18, 0x4, 0x81) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000b00)=@assoc_value={r1, 0x18}, &(0x7f0000000b40)=0x8) r6 = add_key$keyring(&(0x7f0000000c80), &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) add_key$fscrypt_v1(&(0x7f0000000b80), &(0x7f0000000bc0)={'fscrypt:', @desc3}, &(0x7f0000000c00)={0x0, "7a873e92854207894eba55e30e65c5df393756500e888e41040b5c0abda4f8307e727a7a08ecc3a9d9f3adec9b5333ef3e146cd6566bd05bf7f3775308799168", 0x1e}, 0x48, r6) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000d00)={'mangle\x00', 0x0, [0x4cbd0777, 0x718, 0x1, 0x465, 0x6]}, &(0x7f0000000d80)=0x54) r7 = socket(0x11, 0xa, 0x31) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000dc0)={'veth1_to_team\x00'}) write$char_usb(r3, &(0x7f0000000e00)="a1e4d481fee8356fc8dd0d1d69d4d65b2c3ad3ee135d3730166d5eab6c5c3ba6e9ddc78b7511319a380ffe7d7df49d8d9aaee4c426feb1673a86d9d19233b89251ea74362408e963f476578c2b1d9325e5c7cb12e0eaa956b3f205a72beea71a9bb35e3095fc1e2b01bd1e6a0fef424ddb946d0196535c25d5b96a5621f3a05a35d6879d748942b4d5580955082b0c02c385cb09fe7d025a64b3acce7039dcb60764fe9a21b1456cf827aa002e28ccd424b9fd56b77b752a19c1a7d1987b4961467067120736a7460ca5fa9968a2e269ca49b6639812454ba04a6fbe1193a99a37ac9059ea79d93c828d16e83403a5c53e0d31", 0xf3) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r8, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000f00)}, {&(0x7f0000000f40)=""/141, 0x8d}, {&(0x7f0000001000)=""/239, 0xef}, {&(0x7f0000001100)=""/28, 0x1c}, {&(0x7f0000001140)=""/51, 0x33}, {&(0x7f0000001180)=""/76, 0x4c}], 0x6, &(0x7f0000001280)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000002280)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002300)=""/109, 0x6d}, {&(0x7f0000002380)=""/156, 0x9c}], 0x2, &(0x7f0000002480)=""/55, 0x37}, 0x7}, {{&(0x7f00000024c0)=@rc, 0x80, &(0x7f0000003b00)=[{&(0x7f0000002540)=""/81, 0x51}, {&(0x7f00000025c0)=""/202, 0xca}, {&(0x7f00000026c0)=""/37, 0x25}, {&(0x7f0000002700)=""/251, 0xfb}, {&(0x7f0000002800)=""/166, 0xa6}, {&(0x7f00000028c0)=""/238, 0xee}, {&(0x7f00000029c0)=""/108, 0x6c}, {&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/182, 0xb6}], 0x9}, 0x7}, {{&(0x7f0000003bc0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000004f00)=[{&(0x7f0000003c40)=""/115, 0x73}, {&(0x7f0000003cc0)=""/4096, 0x1000}, {&(0x7f0000004cc0)=""/206, 0xce}, {&(0x7f0000004dc0)=""/48, 0x30}, {&(0x7f0000004e00)=""/217, 0xd9}], 0x5, &(0x7f0000004f80)=""/1, 0x1}, 0x1ff}, {{0x0, 0x0, &(0x7f0000005280)=[{&(0x7f0000004fc0)=""/234, 0xea}, {&(0x7f00000050c0)=""/56, 0x38}, {&(0x7f0000005100)=""/208, 0xd0}, {&(0x7f0000005200)=""/74, 0x4a}], 0x4, &(0x7f00000052c0)=""/4096, 0x1000}, 0xfffffff9}, {{&(0x7f00000062c0)=@nfc, 0x80, &(0x7f0000006440)=[{&(0x7f0000006340)=""/228, 0xe4}], 0x1}, 0x1}, {{&(0x7f0000006480)=@qipcrtr, 0x80, &(0x7f0000006600)=[{&(0x7f0000006500)=""/14, 0xe}, {&(0x7f0000006540)=""/163, 0xa3}], 0x2}, 0xa99b}, {{0x0, 0x0, &(0x7f0000006700)=[{&(0x7f0000006640)=""/164, 0xa4}], 0x1}, 0x9}, {{&(0x7f0000006740)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000006a80)=[{&(0x7f00000067c0)=""/243, 0xf3}, {&(0x7f00000068c0)=""/59, 0x3b}, {&(0x7f0000006900)=""/92, 0x5c}, {&(0x7f0000006980)=""/85, 0x55}, {&(0x7f0000006a00)=""/3, 0x3}, {&(0x7f0000006a40)=""/37, 0x25}], 0x6, &(0x7f0000006b00)=""/123, 0x7b}, 0x1}, {{0x0, 0x0, &(0x7f0000006dc0)=[{&(0x7f0000006b80)=""/221, 0xdd}, {&(0x7f0000006c80)=""/110, 0x6e}, {&(0x7f0000006d00)=""/156, 0x9c}], 0x3, &(0x7f0000006e00)=""/4096, 0x1000}, 0x401}], 0xa, 0x60, &(0x7f0000008080)={0x0, 0x3938700}) r9 = socket$pppoe(0x18, 0x1, 0x0) sendfile(r4, r9, 0x0, 0x6) ioctl$FITHAW(r8, 0xc0045878) 1.201177993s ago: executing program 3 (id=4916): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000040)=ANY=[], 0x0) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback, 0xa77}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000fc915e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r5, 0x0, 0x0, 0x8080c61) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x20) sendfile(r6, r6, 0x0, 0x800000009) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 1.120568613s ago: executing program 8 (id=4917): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xc8}, 0x0, 0x100000000000000, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000e4ffffff000000000000000080000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0x100000}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000380)={'pim6reg1\x00', @broadcast}) 1.020551283s ago: executing program 8 (id=4919): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xa}, 0x4, 0x2, 0xff, 0x0, 0x3ff, 0x400}, 0x20) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fremovexattr(r3, &(0x7f0000000040)=@known='system.posix_acl_default\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 986.638314ms ago: executing program 8 (id=4920): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x400002, 0x0) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000140)=@alg, 0x80, &(0x7f0000000880)=[{&(0x7f00000001c0)=""/170, 0xaa}, {&(0x7f0000000280)=""/129, 0x8e}, {&(0x7f0000000340)=""/241, 0xf1}, {0x0}, {0x0, 0xfffffffffffffe17}, {&(0x7f0000000780)=""/232, 0xe8}], 0x6, &(0x7f0000000900)=""/20, 0x14}, 0x40000103) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x4000000) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYRESOCT=0x0], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') syz_clone3(&(0x7f0000000340)={0x20220080, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) (async) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000800)='./file1\x00', 0x200800, &(0x7f0000001340)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c6769643d7e772dceb94d3df9f43a13d49131818c41fc46f90bcd57e210970fe2db764326ca741e625e47f2c6613303aa3df8c9020da9c2a2a3361e956e3692a42951a50dc89ce71bd9caef272987c2012cec97100406d42896a0d078e0f6d2f08f8d2a079366c2d35ab759d0735ae84190908bb94610bfc138500fa3b7b04cf09a5a294482700c683f337a2a575bdc4ae29f254dccb04c54d33ad5a727d145ab41b120a5168315530e87188a372c926b3c33fdd7b99f50", @ANYRESHEX=0x0, @ANYBLOB=',shortname=lower,shortname=winnt,check=strict,\x00'], 0x11, 0x305, &(0x7f0000002480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) (async) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=@deltaction={0x234, 0x31, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}]}, @TCA_ACT_TAB={0x74, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffd}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe3e8}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff2}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x209}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x78, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8f}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x751e2858}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x70}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffff3b5}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x3ffd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x20044081}, 0x8001) (async) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000500)={0x116, 0x9, &(0x7f0000000cc0)}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000710100000004b84ffec85f254db415672acca0863b302a979645fd6eb07159c8d8cf6ca4461b19991c0d58dfe6e7c1bd0edaf0f37d2ea9d447104c0a941f22f6b35296c3fb16f9c7d2fbefb9e65462251a7d3fc250b15ac52ceb44ad867ef4ba4af5644cda9d6d6df342f40c22ced2a13cb079e3c232ffb63eed0e6da9ee3d122d4399ee5e839e1dd47d6b932515b34d66ea7c7cac978"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) 616.340526ms ago: executing program 3 (id=4921): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async, rerun: 64) mq_open(&(0x7f00000002c0)='kfree\x00', 0x800, 0x0, &(0x7f0000000340)={0xffffffffffffff28, 0x8, 0x2, 0x4}) (async, rerun: 64) semget$private(0x0, 0x4000, 0x400) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) (async) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) (async, rerun: 32) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async, rerun: 32) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x65) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xb, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRESOCT, @ANYBLOB='_'], 0x48) (async) clock_settime(0x2, &(0x7f00000001c0)={0x0, 0x989680}) (async) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000200)=""/238) (async, rerun: 64) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x2) (async, rerun: 64) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="000000fa18b109", @ANYRESHEX=r1, @ANYBLOB="2c756e616d653dd0aedec1aa20ffd81d1bf89329217cb058a396eda2ab40a26d93dd083c0074dcab6cab21ae16c4cdf97bdc355f3b41d27b654301345cb3c4cec37953322d01beaa7257964fd30fe2d72f171da72e389f382dea3c8d91906aead5d5aeccc097ef1092ea987c2b00000000000000002c00"]) r7 = socket$inet6(0xa, 0x80003, 0xff) (async) r8 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r8, 0x29, 0x16, &(0x7f0000fcb000), 0x4) (async, rerun: 32) setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f0000fcb000)=0xfffffffc, 0x4) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) 560.557456ms ago: executing program 3 (id=4922): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x3, 0xff, 0x4e, 0x54, 0x0, 0xcb2, 0x89008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_config_ext={0x9de, 0x7ff}, 0x403a, 0x81, 0x800, 0x6, 0x8, 0x4002, 0x77c, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r4, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x800}}, 0x120) write$UHID_DESTROY(r4, &(0x7f0000000080), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)='\x00', 0x1, 0x0, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x80, 0x6, @local}, 0x14) 560.036266ms ago: executing program 0 (id=4923): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff6000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xfffffffffffff001}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000680)=@newtaction={0xa0, 0x30, 0x9, 0x2, 0x25dfdbfb, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x6, 0x4}, {0x35, 0x9, 0x5}, {0x0, 0x0, 0x3b}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x2}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa0}}, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0x2, 0x20002f9}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$pptp(0x18, 0x1, 0x2) r5 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='mm_page_free\x00', r3, 0x0, 0x2}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r6, 0x0, &(0x7f0000001700)=""/53}, 0x20) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r8}, 0x18) socket$netlink(0x10, 0x3, 0x14) socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f00000002c0)=0x10) 556.863217ms ago: executing program 3 (id=4924): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x946, 0x3, 0x0, 0x5, 0xfffffffe, 0x705}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffc}}]}}}]}, 0x58}}, 0x20000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_io_uring_complete(0x0) write$P9_RATTACH(r6, &(0x7f0000000100)={0x14, 0x69, 0x2, {0x10, 0x3, 0x4}}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000100000000000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000f0001000000"], 0x3c}}, 0x0) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x3, 0x13, 0x0, 0x70bd2d, 0x25dfdbfb, [@sadb_key={0x3, 0x8, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x4, @mcast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x9, @empty, 0x6}}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd29, 0x3503}]}, 0x98}, 0x1, 0x7}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x946, 0x3, 0x0, 0x5, 0xfffffffe, 0x705}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffc}}]}}}]}, 0x58}}, 0x20000000) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_io_uring_complete(0x0) (async) write$P9_RATTACH(r6, &(0x7f0000000100)={0x14, 0x69, 0x2, {0x10, 0x3, 0x4}}, 0x14) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) (async) sendmsg$nl_route(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000100000000000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000f0001000000"], 0x3c}}, 0x0) (async) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x3, 0x13, 0x0, 0x70bd2d, 0x25dfdbfb, [@sadb_key={0x3, 0x8, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x4, @mcast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x9, @empty, 0x6}}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd29, 0x3503}]}, 0x98}, 0x1, 0x7}, 0x0) (async) 446.417897ms ago: executing program 3 (id=4925): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_context(r3, &(0x7f0000000040)='system_u:object_r:tmpfs_t:s0\x00', 0x1d) r4 = openat$zero(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000080)={r4, r1}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) getitimer(0x0, 0x0) r6 = inotify_init() r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r8, 0x0) connect$unix(r7, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r7, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) close_range(r6, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = io_uring_setup(0x785a, &(0x7f0000000580)={0x0, 0xddf4, 0x400, 0xfffffdfe, 0x183}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) timer_create(0x0, 0x0, 0x0) close_range(r10, r10, 0x0) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x20000000}) 259.783688ms ago: executing program 7 (id=4926): unshare(0x22020600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a78000000060a010400000000000000000a0000050900010073797a31000000004c000480480001800a000100696e6e657200000038000280080004400000001714000580090001006d65966100000000040002800800034000000002080002400000008408000140000000000900020073797a3200"], 0xa0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x2000018, &(0x7f00000005c0)=ANY=[], 0x1, 0x73a, &(0x7f0000001a00)="$eJzs3U9v2+b9APCvHKd1/QOK4rehKLI0ZdMeEiB1JLl1YPQwaDLtsJVFg5SLBDsMRZMMQZ12aDZg8Q5dL9l22EvYode9ib6J3fYaeh8wYB5ISf4XW84c1w7Sz0ew+ZB8yOf7UAK/fmSKCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGt2lZrPViF7WX7+VHK67VOSrE9aP9/fdnsmEdiMa1U/MzMQbw0Vv/HRn9evVr8txcTh3MWaqyUxs/t/rr334k+mp8fYTAjoVDx9tfv7pxsbdr46z8b8fD3t38mGdmpW0n5V5ttpZSZOszJPFhYXm9ZvLZbKc9dLydjlIV5NukXYGeZFc6V5NWouL80k6dztf768sdXrpeOGN99rN5kLy0dxa2inKvH/9o7myezPr9bL+Sl2nWl3VuZH8+svi42yQDNLOapLcu79xd/6oIKtKraep1D6qUrvZbrda7XZr4YPFD240m9Pt5kzsWdDcJ/ZskjSb0+MXbbx2/Gf/H8fZiB/M1J65+OPkZ/ZkTtxwAqZG+T96kUU/1uNWJAc+urEUReSxesj6ke8i/lAXrqcT263y98wo/4+z/Bs7qy9Uvy7PjOYuHZb/D4nl9B4P41FsxufxaWzERtyNr848otN9rEQa/ciijDyyWI1OvSQZLUliOhZiIZrxq7gZy1FGEsuRRS/SKON2lDGItH5FdaOINDoxiDyKSOJKdONqJNGKxViM+Ugijbm4HXmsRz9WYik69V7uxf36uM9PiHG7UutpKrUnVBol8+qFV5t+4g+CZnN6tO6g/H9jO///rc4PD989heTE8+HcuHByJ294Rlvj/B9bW//Zqpx1RAAAAMBJa9TvvjcuvbQ9v5z10l+ecVQAAADASaovZbpYTc5XpTejUY3/mzsVXjq72AAAAICT0YhLo3cBZuOtYWn8SaimsT8AAAC8GOr//1+qJrNV6a1o7Br/j02dYYAAAADAM/vzzj32N+PAe+yWa9XwfzoiGt+s3Xq38aBT1es8ODfc7tz+PQ6WLzReHe2knixMj+a66cXG6O6X2zfB/H40uXfUvf4bRXH+WQPYeSfj7TvD6Z3tNXUrs8tZL53r5r0PW9HpvDo1SG8NfvfF/d9HVK3/pb/6aiPu3d+4O/fZlxt36li+qfbyzYPRHWEb/0Msv403h3XefDme6PFmNM7XH8QYtTs7bLe5u/+jvoy79MpTtPl4XOfy7HA6u7f/M1WbrbnDej/beHm0/TP1/PG48jtX3hlOdqKofuoo2hOiqI9Fe/fx33csniqKeOfQKLaPxfw4ip07Y+6NYv4ZowA4K/e2s9DevHt+O/8/kXePcZY7nez+OK4M61y5UJ9Ypy8ccEZvHphXts7ty7HHz25/j6vDOlfHlQ/LsVWf/7rdbqtu99tqg28PbbfsjQ/Ig9/E9alHm+/dr+ve/aLdnl9ovt9sftCO83U3RpMq0n/N7I/0lZB7AH7ULtfX/0/6jp2Da5zbSc2N9+PtavqzXaPqKidtZ7z/376kYC4+iy9jI+7EtfrTBvUVBwe2O7vrMoRrcXkU7MGj1tld3/By7YhR3bDu+G+Xp6k7/HoZAHiRXD4iD2/n//F38Y1r1Cl0OHa/tmvcPbMz7o7RCHNfLp88Ot6dyw91/gc4EADwI5IW3zdmB39qFNVMa3Gx1RncTJMi736cFNnSSppk/UFadG92+itpslbkg7yb96rCJ9lSWibl+tpaXgyS5bxI1vIyu/XzyHppMvrq9zJd7fQHWbdc66WdMk26eX/Q6Q6SpazsJmvrv+hl5ddbW1vVxuVa2s2Ws25nkOX9pMzXi246lyRlmo4q3kyLJFtK+4NsOauK/WStyF6O4nbySd5bX02TpbTsFtnaIC/qaMZtZf3lvFitdzt31gcbAJ4TDx9tfv7pxsbdrw4uzMShq+rCPydvPiycdR8BgL0mZeknrj4DAAAAAAAAAAAAAADOxBGf/zt+obFvyVRE/FBtvXCFra9Ppa3xBzzO7tk595wc8CcL3+5akpzgnl+JiOeig0cVzvjEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH+G8AAAD//27LS1k=") faccessat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x3, 0x300) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r1) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x0}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8982, &(0x7f0000000000)={0x7, 'batadv_slave_0\x00', {0xfffffffc}, 0x7}) setsockopt$IP_VS_SO_SET_DEL(r5, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) unshare(0x26040000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x7, &(0x7f0000000240)=0x8, 0x4) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000901101043cc255000000000000000000", @ANYRES32=0x0, @ANYBLOB="8dcdaf8800000000180016801400018010000200feffff7f29060000070000001400350076657468305f746f5f62726964676500"], 0x4c}, 0x1, 0x0, 0x0, 0x5}, 0x0) 164.461139ms ago: executing program 7 (id=4927): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) close(0xffffffffffffffff) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000000c0)=0x47ca, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) sendmsg$can_raw(r2, &(0x7f0000000340)={&(0x7f0000000080), 0x10, &(0x7f0000000000)={&(0x7f0000000100)=@can={{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "7fb2cefe2e7cac0d"}, 0x10}}, 0x20048980) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x12, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x816f65d6c6f0b95f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB=' \x00', @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2800}, 0x40084c0) (async) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) (async) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="ab020000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB], 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sync() (async) sync() r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000ec0)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1, 0x4b8, 0x1ff) (async) socket$kcm(0x29, 0xe, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xc805, &(0x7f0000000740), 0x1, 0x59d, &(0x7f0000000bc0)="$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") 158.747599ms ago: executing program 7 (id=4928): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000091462567be0d8eb98c702935e5f8502f86d0b71521e0c34c2682aee848642821b5b5c44be7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000eb88fa2b8500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) 107.831239ms ago: executing program 7 (id=4929): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'rose0\x00'}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000340)={@local, @loopback}, &(0x7f00000003c0)=0xc) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, 0x5120b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006970365f76746930000010000000000008000d00dd00000005001000060000000c002b80080003000d000000"], 0x50}, 0x1, 0x0, 0x0, 0x20008814}, 0x4004080) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xd, 0xfffffffffffffff8, 0x2, 0x8001, 0x8000059, 0x3ff}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000080)='kfree\x00', r9}, 0xffffffffffffffa4) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x2c0d, &(0x7f0000000400)={0x0, 0xc890, 0x4000, 0x2}, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'macvtap0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r11}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 48.50839ms ago: executing program 8 (id=4930): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup(r0) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, 0x0, &(0x7f0000000c40)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x200000, &(0x7f00000004c0)={[{@noblock_validity}, {@nojournal_checksum}, {@auto_da_alloc}, {@usrquota}, {@abort}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0xff, 0x572, &(0x7f0000000f40)="$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") r2 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) iopl(0x3) r3 = gettid() r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000200)=ANY=[], 0x8) setsockopt$inet6_buf(r4, 0x29, 0x6, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b3, 0x8031, r0, 0xb5196000) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r6, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1) fcntl$setpipe(r5, 0x407, 0x176) vmsplice(r6, &(0x7f0000000480)=[{&(0x7f00000000c0)='{', 0x1}], 0x1, 0xd) vmsplice(r5, &(0x7f0000002a80)=[{&(0x7f0000000340)="b9", 0x1}], 0x1, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="60000000020605000000000000000000000000000900020073797a3200000000050004000100000005000100060000001400078008000640000000000804134000000000050005000a00000014000300686173683a69702c706f72742c697000bcd7eabc455e2005d86985045bd74c649bec26653a567d409e69eaad2ac56cc6c20e54df0ec920ab7beb2d7cae413ddf2943560bce9b23031917907a6514a2c736541365c6cbb74c4e3b86731ef6e935cdc863bd78fd1625be30648e965ad1", @ANYRESHEX=0x0], 0x60}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000014c0)=ANY=[@ANYBLOB="64000000140001002bbd7000fddbdf25fe800000004a9e74849cd3db7e23acb4f1ab00000000000000000000aa00000000000000000000ffffac14141e4e2000", @ANYRESDEC=r1, @ANYBLOB="08cf3d137d3ffd0686a418419261d90e6ff250f53aa39b361e9b44e03c6ebcae2621c45f88c3c77d765fc6def519737099f2437d0e80f62f3a9c382bc4ef0ff498def26d042f305bcfba348965b6b5f4281ad0f88d2a8ef4e7d748d2abcfaf2d63cfd31747b3a1f4f18f189e5fd3d03266bdc715d498a1f17def173bbfb9a020d0d785dc37901d2087e16d005a0ebfd11ebeb216edf1f62ce0f2fc3f374cc5fbcbca611a756425ea631ddbacbb40e17d70a2d6eca7f41fdc6175eb46832baf941ac7ec6ff770254df3f363774a28cd7bd43c8b55e53aa949d7a5453322924b3065e6a49fc0d1edfd80a789b16a54d0400c3efd82be25c123b56af8f08cd2f0247ee1e6390e8cf6ef5ca23caea1198f787e1cfb55b6c61279cf3aa5ee7dccc0b9b3cab5cf2077d159ad7386216f6265a6e8dcf858092a71d49de250f17b6426e1431b912baa289102f456a3e95adede3d1583a30ec6f7b44ec3790f924269079a8ed28775bea64a1e7ef45b4800a0a7fb8aebb395e1c67476ff00533d5f1caabbeeac1be71bac0126f5d8c6639f5ba6c6850a2d021cd6f907ceb1a7dac61c1d13b02d87d3c269dc24a98f34391f60901c079a66851d8e7bb565c8317d73f194f4e2366d8d39f530a64f806bd47b51f4135193c50395b6a089dc8a4e34dd5d20c8e45e1d0b4c37673e94751acacff66dca54129a964be13976270c23cc4bc227091c85a150b1e879c0833dfef3faf2002f62a67633fe02e3ec241af3839d4679644bd1efb95350a78e4e6a28181c3acea8bb71f51430726b10da284a775471014e9ff682033894369cc6be6a1dada83e32023abb6edda84b857124554ccb612de70c5396204dc3fd3bf3dcbba2f41b78778ddfc7c1195adc69bac2d597b7bd4fce1c4f4a3c59a843ebd6c6df4956d28d44ad32292a6711dc3bc22e038a53af4f3fa5777832324d32c8c2033b0c917c11462e812515fe505dc3fbf162df08ce8ef4ecdbb2ae38be836d447e6691514324fbb1aa4c4225dae6ad9567bc2b8e1b71c4ead66ffd93b3d7276b498aa8439d2e3f8797740bfd4364473191b5511795f23994b62c0ffa71cc9d9303b8de0d2c3f98acf2724845d1c4db356e83811fa9861bf74f166ea4244fd6e087923dab6bc24da1d627d4f4fc9a7e33949d4aaa686a338e5f11b6e61e6fecb863dab4cc25b20e8d9c794028f9b8ec07beaef7f09dccbd14e873c9fbd498a827add3f6655adaab0408a94de75f3dcd7599ca386eb4d52b4143afe739ebb38adc40e444fa1c6337aa15a85467cb7ce1cd26b75aad7db3d05f3f5ed352f813d09266185e6931ec65c248863e29e69cf642d2967e7598179f18b5f7e4bc486fdbb857396280b0c919df9f719374ad35836d98bbc6adfcff13a7cd9167ee2700dc865cca5c8734e2f7cf18d98cd48dbba5d9132450c560b0df6c0f6b3774d9670dd765cad4b2a8b2f9d4fb3b4a9e75263165c4812cd0a12122cf1a80ab3e7577145ca143ffd213bdd7aebd52ac2444ae2c602ebc6f9bcc34a6abbee2740c5b3a2ef44e5e6d411832be4628f55d981f9497f8db302676f42fce942eed2b29a2ba3b2a05b2a8e9f0cd2e648a1c72ccdfc0bdc31b31703ddebf267df3c1fc9d8fed8b379eb1e7733c5c909d3657df5aa4fb8eb226b839b6fb6b032e2d18e0e89d67439f38446402ecafb50a1aae3b7c9e7e85f5e7b2e3c09618f8b95969d402272190d2fe748a9aed0fa47edf77113e98b22a9e8deef01fcf7fe5692adcca3bb8980b494de112983b40ac45d1f7f979ca62c30a89e71e0bd773886f474b0bd906567da8141fb5cdd6a6df6192246988d29d63ff3945d3a3419c9ed586a9740921e26bafcc55d26ff49dd3cc1c5ca68625220d7b18cdd11a44d8a8ae1ebbe65ffb6b1a76ead7ff0cc90cbb3d20cae0b771a36cbfa9a076033352c7757238efce64bd289ab1ba3d52b68cdbc0067732fced7defa9ad87d1526f0cc57e7af9c0961cb5a0455558dddcff2b60fda4c7b6f8370d211fd5e85c4fdd70ebf0aeed3dfeca91b4f18ddb855e680af89fa86e40daa08a6f024e2f3402cea9c39e7de4aa0f1547a533c9de183d9a421c0062a651343ff497299d37e23f6f1950e72ec7b0fcf2228e6b82d2e80d83072afa117e4396b899663201a88e8f4c0ca0eca3a54af28c9bf42922e8504ff73d36d0f58674f276fd994f3e93954de475be945876e0b1f7ae55ba389bc5846c5b7c3e461a1e213ea450036b9203cf6f0745a05e834acd8601a86946745405fd3ba7c087aa8f731aa1442d9a3b9c5fbda978caa9573eb91f7f7ad18a7e531eb52d26c2b0bdd665f59523ed1bdd8adf74d85cf541b2b5a87402da91edad5ae40f47ba82d0261d04454816ce01c5f3a910a6d71fe018d412336601707e432975819cb613e50c855d9361898f22b351798d379e278dd497e394dcb475b4f71825cffd0d4ebbf0b189d0d30bc064391bf6fdc0bf10c25e43e022ca2c35db84aa1e9c00b6873f0e2255f880d5b524bb88e47886365712f167e0fefb399e7766aa7a3f0216bb9adf22e9701291dcdb05a8e768f0f68f3aca889c1306cf97c3c92d835d89f49e0c69b57964214ce3a929bb950352c4a61a1156d6ba4aee9de57d2b3f0f1c4c169857fc152f490c3250647f2b7985aaef0c938496ca9849594d4f0872069d0a0bee12df1157827eb4165d2195ba5302ad6c25c6f8486145ef43ee4c7e7d47a57852e738dbca817ef25ebec89fbdb7f5d83db78619705fbe01a601d1bdb5cbe4f7e9c0d045b59f25aa11f4465dc84811294cd5dbe91abbfb3a496006080668f7a49ebfd18560848662fd85498831947b88487c86cd3f7018601941161b225dbe64d879577bed44e9021e38d3888f87f065747c0cece6ac726390a91af1ee7026dfc553cc086b6dfd87ceab68792402a0949f44ef373115455abaf443422a85f059368bfec790ab2f6ccfa6089c9cad712366bc65a79cf38ccfb692363e9c2d4cd6255da70e6f217def45730c774bb008f0bce34989b124732e1aa1b47769af56a0758185fb9363e788ece29dede8c4326281cfc4d7c0ad3db74fdce28df0379149c78a46059c9865b08247bdbc85c2e804fc9db4bedc73ebc467b2c4c5da64787d83cd2ba0bab58d583c42618f662e968d4e287aefc53071b0286413fb8aee0bc2e7223bd07f3da91617d43f7ae1635e3956546845873b15730f576a59d0ec174caf6581cc15563f1a250deb26c1fa7c9e7dac8b8ae1efb4674548ad5525469ad672f9da9f4d703b9417e223a7288d97b3b35c3660e420e2b27fe7d1377731515c8450cebf0a3cd6aa94d6eb4003e995b3b87a6c2092bde00bf17ac5a49d5334b03188115e2871a8b08b3e76afc4d3855fc88d3ea60aa8c0f455f0ee4b79616ba2d0deccb99b42014f34c3881c67603f916afe1d980163fbab511965fa76dd633ecc374828f80c90e7e10a71e5e0b5ddab5b1d6101508b364a2dae86cdd8d2d9805cf9b2e408e8a63b28e6de3d4b845384100764f538040edaa845b4672c7039859f2e39d17243e4870e4af9ce4f8d9b77e7ad1a8332c42dec056452bcc287dcb1208f2f32c7052d7331d7f72711c6c45503357ff12bd457e51bf7cba1f2a5f1655e4df24129079ac55c8ca5759d3670e7ac4de3f55b48ab85f41eeb29102031367384e297e46a82df38c86f03ccf2b999d80b1e0d30239cf0ebaaf10d9ec24e6e2c0ff559647bbfff43c502542b8db9a92d3d74f70a9ad5395aa530651feab24ab29495a91308308ea0bd6a124e1af60be7bf15fdcfe19dbb437706b2a258b9751d68c5ad4431d0cb5159b602a8e700c9fa32dfe41b85dc467917490e132d8c0308032bd122cd7a7cbe3a25d17de0c39563a68364097c17c1dcdd5e47eca125c9059502f759208cfbbc46339d2c5ed3bb546305f97eb0fa3464f0d8ea05e0d662022eb2b71c9775b033c221d87faa8bd94ed44d0ba6b2ca9426f59dd18c894347222ed63aa6b92d94287c8631d08832408dd83cb7719bb7c22a6f882f64a8f95709e71e6332045fc2593498cc8c6f59888adbca69d2fadd9237a2223fefe33f69ff59d834636f3dc2fed7d1b2071a60cb1ab899d74919e30447f11a279ac6642ba307ddc168462fec1c7d4d58f2b79d65a7e9f579c9f5baaf7572f5e144a0767b5bb57e2039a68b32912eb80a9c380b71f08988576b253cc14517fe5355dd9831510c900756c4366885f0c70de1988c549046a9367ae2c2d06cac869f33e8839373305f1fa70acb4b8465fac5a72b338fc7232e045a54ccde152240a97b8f9c9ff39d8bfd060f97dc3fd5d6b89fe38c31806330034352e1a35eb98ff9aa582be7d201b956f44deef37b0432e856e00e544f86230f3eb493d5dadde4b3a20a0ed16ec7aaaefb5623c50d233ed7bc0020e004246a502860f06427acf15b5369207917ba0e926f006e0f6a2eca3306b338429e7f4a0408bb5559bac979c357f980bf180df9c3dee3de3f91ec67b75e0aad107987fc380a13cb240b07a65d7924ed11ea8980dae44cd5f278e575c1d4fe3a4e877ac3ae44d69677dc823c56cceaa63881e5e3edd32a248086476b2ae10f86c56fc5049aa22cfe900eb655e6f893e33fe826f0bc3eaa71638ed7bfd5b92af36a52892d2f0044c50ec38b189c1d61a150f78dd072352a1f1e38cb24e9917b5997d2d282a783e35610f388e3e9e52be69535ab3452d0bece9fde848b0dd96dee8e8d5665c2d20b0fcad0d94c1f8a7ba914ea527e7c2fcbb0501b0d7a101276c6623573c1295ff68a87b6e50d43b89363230fb7dc86e79d11242748847005df426f4e65c5b54539949405070057bd49fb5b7174b9f0bd35507dd541fb494c89390e9855c56a5e95a608af191ccc605761b7f798ea2f3c6ad62558a3d333cdd2ac78ecb4f353d4c2df0c959b2564a513673aa75fae271e8299954ead3544712cb5c1f01abc2c06b72f6b72a06f06f0453a2acc4c876ce0d1191a0d5b0f489e96f88a29dea0b9b2f85ae7d583b8037530a54f20d0aa67d58c77573d7b95b4d429d391d980e53c9872ec6535361f7ac629adaaa362dad86bb94cdc00bb96c481728077dbdee1af35938e3b4c6423bff55c0061bfed750dcc9e579330ca9ff44abd0b71371856d9d1fcaac5725cb6f59fae16b900c071c838f6d2c95d8c9dad2744c5e3863fba1fd9c9416fdeb7422ec930c7157007bcba02332c109937f05637cb9e4ae19584f8a5500b2a5ab9f49e535a5ba7d54204c0c0815bb32ceef0d8cc813866dc62e812902dcffdd14afe279ded4cc432fb47635342d2493b60ce2b18dd5606b9f263b6e274db535ec7718c3df1eccecee9de9b0fe5f7c058d958cd119e56b3b1c984917facf62422b4b9886c8ca7e314aab8850688ebd2cc4b458d01b07e2dc9e37fee3e6c0353da79d2619f7a625477bd6eb966bcf373ada16001894dee1d70a7fd7c046a495a9256a28e5864b2699ecb9b2059a6f61c120c39dde9e9c753ebed1d765292ad1a1e4866bd56eb0e02fe088b8c04f11ae29097454871f946e88b8268f4ab8f06c651407583d90ed9fa8ebb928bdda8691ff469c41b9cb7bf556bd6ca8fc612fefdeae6577bd2e1e0889c6012b4c455a02737d5ca061419bd901b976b63b64b0811983a32a96c2fa4471db8e9d0b0a151f64655bb0406df5c9b2af8b08c9ce8d6d7513bb78c751438c77a73e320ec32f1b0945a11be1677ff842393543c30b6eea7da74a5b92572564e4b9bf8c1fc55d24ec7f6e8865b1904", @ANYRESOCT=r7], 0x64}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r9 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SG_IO(r9, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x10, @scatter={0x0, 0xcc, 0x0}, &(0x7f0000000240)="128db2cf0800", 0x0, 0x0, 0x0, 0xffffffff, 0x0}) fallocate(r2, 0x0, 0x0, 0x1001f0) socket$kcm(0xa, 0x3, 0x3a) r10 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r10, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) 40.159459ms ago: executing program 7 (id=4931): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe281713919cf2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x72051052ae3513ca}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/7, 0x7, 0x1, &(0x7f0000000100)=""/9, 0x9}, &(0x7f0000000280)=0x40) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2, 0x110, r0, 0x6aac4000) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0xb, &(0x7f0000000480)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0x6}, @map_val={0x18, 0xb, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}], &(0x7f0000000500)='GPL\x00', 0x6, 0xaf, &(0x7f0000000600)=""/175, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x3, 0x4, 0x8}, 0x10, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000700)=[r1, r1, r1], &(0x7f0000000800)=[{0x0, 0x3, 0xc, 0x1}, {0x3, 0x2, 0xe, 0x1}, {0x0, 0x5, 0x1, 0x9}, {0x3, 0x5, 0x8, 0x4}, {0x1, 0x4, 0x6, 0x7}, {0x0, 0x1, 0x4, 0xa}, {0x3, 0x5, 0xb, 0x2}, {0x5, 0x3, 0x3, 0xa}, {0x3, 0x3, 0xb, 0x7}, {0x1, 0x3, 0xd, 0xb}], 0x10, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000040)='GPL\x00', 0xe9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0, 0xffff0000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={0x0, @l2tp={0x2, 0x0, @broadcast, 0x1}, @llc={0x1a, 0x104, 0xc, 0x1, 0x2e, 0x6, @remote}, @llc={0x1a, 0x301, 0x5, 0x1, 0xde, 0x7, @broadcast}, 0xf, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x20000000, 0x2}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu<\t\t') 0s ago: executing program 7 (id=4932): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffa, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="c4000000190001000000000000000000e0000002000000000000000000000000ff02000000000000000000000000000100000000200000000a00000087000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000082000000000000000000000fbffffffffffffff0000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000c0015"], 0xc4}}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001500010000000000fddbdf25fe88000000000000040000000000010100000000000000000000000000000001000000004e2300000a"], 0xb8}}, 0x0) kernel console output (not intermixed with test programs): d=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19008 comm="syz.3.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d3c62efc9 code=0x7ffc0000 [ 289.401375][T19028] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4265'. [ 289.410429][ T29] audit: type=1326 audit(545.070:25974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19008 comm="syz.3.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3c62efc9 code=0x7ffc0000 [ 289.422736][T19028] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4265'. [ 289.565318][T19044] ieee802154 phy0 wpan0: encryption failed: -22 [ 289.573323][T19066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.587463][T19066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.631820][T19071] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19071 comm=syz.0.4271 [ 289.829323][T19108] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 290.607634][T19219] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19219 comm=syz.0.4282 [ 290.785844][T19224] syzkaller0: Caught tx_queue_len zero misconfig [ 291.407342][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 291.496337][T19236] lo speed is unknown, defaulting to 1000 [ 291.529478][T19236] lo speed is unknown, defaulting to 1000 [ 291.716123][T19255] ref_ctr increment failed for inode: 0xc31 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8881392fae00 [ 291.836065][T19259] netlink: 'syz.6.4294': attribute type 8 has an invalid length. [ 291.951456][T19256] lo speed is unknown, defaulting to 1000 [ 292.011976][T19256] lo speed is unknown, defaulting to 1000 [ 292.082173][T19268] __nla_validate_parse: 5 callbacks suppressed [ 292.082188][T19268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4296'. [ 292.103068][T19266] SELinux: Context system_u:object_r:pam_exec_t:s0 is not valid (left unmapped). [ 292.348243][T19297] netlink: 'syz.6.4304': attribute type 13 has an invalid length. [ 292.356089][T19297] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4304'. [ 292.576859][T19305] Process accounting resumed [ 292.649758][T19318] geneve4: entered promiscuous mode [ 292.654999][T19318] geneve4: entered allmulticast mode [ 292.663933][T15139] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 292.672646][T15139] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 292.681079][T15139] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 292.690826][T15139] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 292.730917][T19322] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4313'. [ 292.776601][T19328] wg2: entered promiscuous mode [ 292.781555][T19328] wg2: entered allmulticast mode [ 292.819085][T19328] bond0: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 292.828693][T19328] bond0: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 292.841130][T19336] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4319'. [ 292.925878][T19346] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 292.945367][T19346] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 292.957740][T19356] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4326'. [ 292.974502][T19356] xt_recent: Unsupported userspace flags (000000b1) [ 292.974528][T19346] siw: device registration error -23 [ 292.991221][T19356] sd 0:0:1:0: device reset [ 293.039131][T19362] atomic_op ffff888123cacd28 conn xmit_atomic 0000000000000000 [ 293.079784][T19369] pim6reg: entered allmulticast mode [ 293.098811][T19369] pim6reg: left allmulticast mode [ 293.190715][T19373] lo speed is unknown, defaulting to 1000 [ 293.224197][T19385] netlink: 'syz.3.4335': attribute type 3 has an invalid length. [ 293.232116][T19385] netlink: 'syz.3.4335': attribute type 3 has an invalid length. [ 293.239902][T19385] netlink: 'syz.3.4335': attribute type 3 has an invalid length. [ 293.277179][T19373] lo speed is unknown, defaulting to 1000 [ 293.448719][T19387] lo speed is unknown, defaulting to 1000 [ 293.540847][T19387] lo speed is unknown, defaulting to 1000 [ 293.596542][T19408] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19408 comm=syz.6.4343 [ 293.642352][T19410] loop4: detected capacity change from 0 to 512 [ 293.655905][T19410] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 293.722876][T19410] EXT4-fs (loop4): 1 truncate cleaned up [ 293.734235][T19418] FAULT_INJECTION: forcing a failure. [ 293.734235][T19418] name failslab, interval 1, probability 0, space 0, times 1 [ 293.746930][T19418] CPU: 1 UID: 0 PID: 19418 Comm: syz.6.4345 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 293.746980][T19418] Tainted: [W]=WARN [ 293.746986][T19418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 293.746997][T19418] Call Trace: [ 293.747003][T19418] [ 293.747010][T19418] __dump_stack+0x1d/0x30 [ 293.747146][T19418] dump_stack_lvl+0xe8/0x140 [ 293.747163][T19418] dump_stack+0x15/0x1b [ 293.747177][T19418] should_fail_ex+0x265/0x280 [ 293.747197][T19418] should_failslab+0x8c/0xb0 [ 293.747232][T19418] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 293.747270][T19418] ? dup_task_struct+0x70/0x6b0 [ 293.747292][T19418] dup_task_struct+0x70/0x6b0 [ 293.747328][T19418] ? freezing_slow_path+0xf1/0x100 [ 293.747358][T19418] copy_process+0x399/0x2000 [ 293.747384][T19418] ? kstrtouint+0x76/0xc0 [ 293.747479][T19418] ? kstrtouint_from_user+0x9f/0xf0 [ 293.747498][T19418] ? __rcu_read_unlock+0x4f/0x70 [ 293.747526][T19418] kernel_clone+0x16c/0x5c0 [ 293.747575][T19418] ? vfs_write+0x7e8/0x960 [ 293.747597][T19418] __x64_sys_clone+0xe6/0x120 [ 293.747631][T19418] x64_sys_call+0x119c/0x3000 [ 293.747682][T19418] do_syscall_64+0xd2/0x200 [ 293.747699][T19418] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 293.747723][T19418] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 293.747820][T19418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.747882][T19418] RIP: 0033:0x7f1932f6efc9 [ 293.747896][T19418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.747913][T19418] RSP: 002b:00007f19319d6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 293.747933][T19418] RAX: ffffffffffffffda RBX: 00007f19331c5fa0 RCX: 00007f1932f6efc9 [ 293.748009][T19418] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 293.748020][T19418] RBP: 00007f19319d7090 R08: 0000000000000000 R09: 0000000000000000 [ 293.748030][T19418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.748042][T19418] R13: 00007f19331c6038 R14: 00007f19331c5fa0 R15: 00007ffd2fef8478 [ 293.748062][T19418] [ 293.847725][T19410] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.995478][T19420] xt_hashlimit: size too large, truncated to 1048576 [ 294.086726][ T29] kauditd_printk_skb: 327 callbacks suppressed [ 294.086749][ T29] audit: type=1400 audit(550.120:26302): avc: denied { setattr } for pid=19409 comm="syz.4.4344" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 294.089957][T19427] netlink: 'syz.9.4347': attribute type 10 has an invalid length. [ 294.134781][T19410] loop4: detected capacity change from 512 to 0 [ 294.141398][T19426] EXT4-fs error (device loop4): ext4_get_inode_loc:4970: inode #2: block 5: comm syz.4.4344: unable to read itable block [ 294.147365][ C1] I/O error, dev loop4, sector 12 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 294.159077][T19431] netlink: 'syz.9.4347': attribute type 10 has an invalid length. [ 294.182309][T19426] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 294.218492][T19426] EXT4-fs (loop4): I/O error while writing superblock [ 294.225302][T19426] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: IO failure [ 294.242227][T19431] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 294.270369][T19426] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 294.279146][T19427] bond0: (slave dummy0): Releasing backup interface [ 294.305775][T19426] EXT4-fs (loop4): I/O error while writing superblock [ 294.315334][T19427] team0: Port device dummy0 added [ 294.339812][T17369] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.350134][T17369] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 294.392491][T17369] EXT4-fs (loop4): I/O error while writing superblock [ 294.437862][ T29] audit: type=1400 audit(550.490:26303): avc: denied { unmount } for pid=17369 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 294.475843][T19454] FAULT_INJECTION: forcing a failure. [ 294.475843][T19454] name failslab, interval 1, probability 0, space 0, times 0 [ 294.488573][T19454] CPU: 0 UID: 0 PID: 19454 Comm: syz.6.4356 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 294.488609][T19454] Tainted: [W]=WARN [ 294.488618][T19454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 294.488628][T19454] Call Trace: [ 294.488635][T19454] [ 294.488642][T19454] __dump_stack+0x1d/0x30 [ 294.488735][T19454] dump_stack_lvl+0xe8/0x140 [ 294.488751][T19454] dump_stack+0x15/0x1b [ 294.488766][T19454] should_fail_ex+0x265/0x280 [ 294.488786][T19454] should_failslab+0x8c/0xb0 [ 294.488811][T19454] __kmalloc_cache_node_noprof+0x54/0x4a0 [ 294.488871][T19454] ? __get_vm_area_node+0x106/0x1d0 [ 294.488966][T19454] __get_vm_area_node+0x106/0x1d0 [ 294.488995][T19454] __vmalloc_node_range_noprof+0x28c/0xed0 [ 294.489024][T19454] ? copy_process+0x399/0x2000 [ 294.489053][T19454] ? obj_cgroup_charge_account+0xba/0x1a0 [ 294.489155][T19454] __vmalloc_node_noprof+0x89/0xc0 [ 294.489184][T19454] ? copy_process+0x399/0x2000 [ 294.489213][T19454] ? copy_process+0x399/0x2000 [ 294.489268][T19454] dup_task_struct+0x433/0x6b0 [ 294.489290][T19454] ? freezing_slow_path+0xf1/0x100 [ 294.489399][T19454] copy_process+0x399/0x2000 [ 294.489423][T19454] ? kstrtouint+0x76/0xc0 [ 294.489452][T19454] ? kstrtouint_from_user+0x9f/0xf0 [ 294.489531][T19454] ? __rcu_read_unlock+0x4f/0x70 [ 294.489554][T19454] kernel_clone+0x16c/0x5c0 [ 294.489576][T19454] ? vfs_write+0x7e8/0x960 [ 294.489598][T19454] __x64_sys_clone+0xe6/0x120 [ 294.489651][T19454] x64_sys_call+0x119c/0x3000 [ 294.489669][T19454] do_syscall_64+0xd2/0x200 [ 294.489729][T19454] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 294.489755][T19454] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 294.489799][T19454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.489816][T19454] RIP: 0033:0x7f1932f6efc9 [ 294.489829][T19454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.489848][T19454] RSP: 002b:00007f19319d6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 294.489867][T19454] RAX: ffffffffffffffda RBX: 00007f19331c5fa0 RCX: 00007f1932f6efc9 [ 294.489880][T19454] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 294.489893][T19454] RBP: 00007f19319d7090 R08: 0000000000000000 R09: 0000000000000000 [ 294.489927][T19454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.489998][T19454] R13: 00007f19331c6038 R14: 00007f19331c5fa0 R15: 00007ffd2fef8478 [ 294.490013][T19454] [ 294.490020][T19454] syz.6.4356: vmalloc error: size 16384, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 294.575429][T19446] netlink: 'syz.9.4354': attribute type 5 has an invalid length. [ 294.576065][T19454] ,cpuset=/,mems_allowed=0 [ 294.760318][T19454] CPU: 0 UID: 0 PID: 19454 Comm: syz.6.4356 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 294.760351][T19454] Tainted: [W]=WARN [ 294.760357][T19454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 294.760375][T19454] Call Trace: [ 294.760419][T19454] [ 294.760426][T19454] __dump_stack+0x1d/0x30 [ 294.760447][T19454] dump_stack_lvl+0xe8/0x140 [ 294.760464][T19454] dump_stack+0x15/0x1b [ 294.760478][T19454] warn_alloc+0x12b/0x1a0 [ 294.760507][T19454] __vmalloc_node_range_noprof+0x2b1/0xed0 [ 294.760551][T19454] ? obj_cgroup_charge_account+0xba/0x1a0 [ 294.760595][T19454] __vmalloc_node_noprof+0x89/0xc0 [ 294.760622][T19454] ? copy_process+0x399/0x2000 [ 294.760647][T19454] ? copy_process+0x399/0x2000 [ 294.760741][T19454] dup_task_struct+0x433/0x6b0 [ 294.760767][T19454] ? freezing_slow_path+0xf1/0x100 [ 294.760840][T19454] copy_process+0x399/0x2000 [ 294.760861][T19454] ? kstrtouint+0x76/0xc0 [ 294.760934][T19454] ? kstrtouint_from_user+0x9f/0xf0 [ 294.760953][T19454] ? __rcu_read_unlock+0x4f/0x70 [ 294.760975][T19454] kernel_clone+0x16c/0x5c0 [ 294.761020][T19454] ? vfs_write+0x7e8/0x960 [ 294.761056][T19454] __x64_sys_clone+0xe6/0x120 [ 294.761090][T19454] x64_sys_call+0x119c/0x3000 [ 294.761112][T19454] do_syscall_64+0xd2/0x200 [ 294.761137][T19454] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 294.761163][T19454] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 294.761192][T19454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.761210][T19454] RIP: 0033:0x7f1932f6efc9 [ 294.761279][T19454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.761296][T19454] RSP: 002b:00007f19319d6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 294.761316][T19454] RAX: ffffffffffffffda RBX: 00007f19331c5fa0 RCX: 00007f1932f6efc9 [ 294.761329][T19454] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 294.761342][T19454] RBP: 00007f19319d7090 R08: 0000000000000000 R09: 0000000000000000 [ 294.761352][T19454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.761363][T19454] R13: 00007f19331c6038 R14: 00007f19331c5fa0 R15: 00007ffd2fef8478 [ 294.761409][T19454] [ 294.761415][T19454] Mem-Info: [ 294.984684][T19454] active_anon:12472 inactive_anon:8471 isolated_anon:0 [ 294.984684][T19454] active_file:13592 inactive_file:12778 isolated_file:0 [ 294.984684][T19454] unevictable:0 dirty:120 writeback:0 [ 294.984684][T19454] slab_reclaimable:4114 slab_unreclaimable:59142 [ 294.984684][T19454] mapped:29174 shmem:13794 pagetables:1592 [ 294.984684][T19454] sec_pagetables:0 bounce:0 [ 294.984684][T19454] kernel_misc_reclaimable:0 [ 294.984684][T19454] free:1686634 free_pcp:72050 free_cma:0 [ 295.030184][T19454] Node 0 active_anon:49888kB inactive_anon:33884kB active_file:54368kB inactive_file:51112kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116696kB dirty:480kB writeback:0kB shmem:55176kB kernel_stack:4992kB pagetables:6484kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 295.057862][T19454] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 295.087537][T19454] lowmem_reserve[]: 0 2881 7859 7859 [ 295.092864][T19454] Node 0 DMA32 free:2946744kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950272kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 295.124252][T19454] lowmem_reserve[]: 0 0 4978 4978 [ 295.129363][T19454] Node 0 Normal free:3784432kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:49888kB inactive_anon:33884kB active_file:54368kB inactive_file:51112kB unevictable:0kB writepending:480kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:284332kB local_pcp:127100kB free_cma:0kB [ 295.162896][T19454] lowmem_reserve[]: 0 0 0 0 [ 295.167491][T19454] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 295.180248][T19454] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 6*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946744kB [ 295.196570][T19454] Node 0 Normal: 2916*4kB (UM) 2098*8kB (UME) 1195*16kB (UME) 1090*32kB (UME) 533*64kB (ME) 547*128kB (UME) 350*256kB (UM) 140*512kB (UME) 82*1024kB (UME) 21*2048kB (UME) 808*4096kB (UM) = 3784400kB [ 295.205464][T19471] loop4: detected capacity change from 0 to 2048 [ 295.216200][T19454] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 295.216221][T19454] 40681 total pagecache pages [ 295.216228][T19454] 303 pages in swap cache [ 295.216234][T19454] Free swap = 74704kB [ 295.244888][T19454] Total swap = 124996kB [ 295.249244][T19454] 2097051 pages RAM [ 295.253082][T19454] 0 pages HighMem/MovableOnly [ 295.257899][T19454] 81083 pages reserved [ 295.264460][T19446] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4354'. [ 295.281712][T19471] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.298576][T19464] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4354'. [ 295.333113][ T29] audit: type=1400 audit(551.380:26304): avc: denied { add_name } for pid=19469 comm="syz.4.4360" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 295.353480][ T29] audit: type=1400 audit(551.380:26305): avc: denied { create } for pid=19469 comm="syz.4.4360" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 295.373702][ T29] audit: type=1400 audit(551.420:26306): avc: denied { read write } for pid=19469 comm="syz.4.4360" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 295.396306][ T29] audit: type=1400 audit(551.420:26307): avc: denied { open } for pid=19469 comm="syz.4.4360" path="/70/file0/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 295.422390][T19471] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4360: bg 0: block 345: padding at end of block bitmap is not set [ 295.447075][T19471] EXT4-fs (loop4): Remounting filesystem read-only [ 295.453806][T15177] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 295.456145][T19490] loop9: detected capacity change from 0 to 1024 [ 295.480838][ T29] audit: type=1400 audit(551.520:26308): avc: denied { ioctl } for pid=19485 comm="syz.6.4364" path="socket:[68831]" dev="sockfs" ino=68831 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 295.506133][T19490] EXT4-fs: Ignoring removed nobh option [ 295.511816][T19490] EXT4-fs: Ignoring removed bh option [ 295.582135][T17369] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.609992][T19490] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.645040][ T29] audit: type=1400 audit(551.690:26309): avc: denied { create } for pid=19489 comm="syz.9.4365" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 295.669456][ T29] audit: type=1400 audit(551.710:26310): avc: denied { mounton } for pid=19504 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 295.701378][T17107] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.728912][T19499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4369'. [ 295.751367][ T29] audit: type=1400 audit(551.800:26311): avc: denied { remount } for pid=19506 comm="syz.6.4372" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 295.781975][T19522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4375'. [ 295.800231][T19514] ref_ctr_offset mismatch. inode: 0x257 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 295.824378][T19518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4374'. [ 295.855233][T19518] loop4: detected capacity change from 0 to 1024 [ 295.872143][T19518] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 295.907720][T19518] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 295.915906][T19518] EXT4-fs (loop4): orphan cleanup on readonly fs [ 295.929322][T19518] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz.4.4374: Invalid inode table block 0 in block_group 0 [ 295.944293][T19518] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 295.953100][T19504] lo speed is unknown, defaulting to 1000 [ 295.953840][T19518] EXT4-fs error (device loop4): ext4_quota_write:7334: inode #3: comm syz.4.4374: mark_inode_dirty error [ 295.971162][T19518] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.4374: Failed to acquire dquot type 0 [ 295.982919][T19518] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz.4.4374: Invalid inode table block 0 in block_group 0 [ 295.986308][T19504] lo speed is unknown, defaulting to 1000 [ 296.032852][T19518] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 296.042641][T19518] EXT4-fs error (device loop4): ext4_ext_truncate:4475: inode #15: comm syz.4.4374: mark_inode_dirty error [ 296.054670][T19518] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz.4.4374: Invalid inode table block 0 in block_group 0 [ 296.067502][T19518] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 296.077243][T19518] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 296.086137][T19518] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz.4.4374: Invalid inode table block 0 in block_group 0 [ 296.106719][T19518] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 296.113951][T19504] chnl_net:caif_netlink_parms(): no params data found [ 296.117095][T19518] EXT4-fs error (device loop4): ext4_truncate:4637: inode #15: comm syz.4.4374: mark_inode_dirty error [ 296.137337][T19518] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 296.149262][T19518] EXT4-fs (loop4): 1 truncate cleaned up [ 296.155479][T19518] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 296.213009][T19504] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.220164][T19504] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.253797][T19504] bridge_slave_0: entered allmulticast mode [ 296.265533][T17369] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.268044][T19504] bridge_slave_0: entered promiscuous mode [ 296.291162][T19532] lo speed is unknown, defaulting to 1000 [ 296.300102][T19504] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.307168][T19504] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.316233][T19504] bridge_slave_1: entered allmulticast mode [ 296.355289][T19504] bridge_slave_1: entered promiscuous mode [ 296.362242][T19532] lo speed is unknown, defaulting to 1000 [ 296.398136][T19504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.427486][T19504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.483868][T19504] team0: Port device team_slave_0 added [ 296.506954][T19504] team0: Port device team_slave_1 added [ 296.530670][T19553] FAULT_INJECTION: forcing a failure. [ 296.530670][T19553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.543776][T19553] CPU: 0 UID: 0 PID: 19553 Comm: syz.6.4381 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 296.543875][T19553] Tainted: [W]=WARN [ 296.543881][T19553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 296.543891][T19553] Call Trace: [ 296.543898][T19553] [ 296.543905][T19553] __dump_stack+0x1d/0x30 [ 296.543966][T19553] dump_stack_lvl+0xe8/0x140 [ 296.543983][T19553] dump_stack+0x15/0x1b [ 296.543997][T19553] should_fail_ex+0x265/0x280 [ 296.544053][T19553] should_fail+0xb/0x20 [ 296.544069][T19553] should_fail_usercopy+0x1a/0x20 [ 296.544093][T19553] _copy_from_user+0x1c/0xb0 [ 296.544115][T19553] memdup_user_nul+0x5f/0xe0 [ 296.544137][T19553] sel_write_validatetrans+0x19c/0x370 [ 296.544158][T19553] ? __pfx_sel_write_validatetrans+0x10/0x10 [ 296.544227][T19553] vfs_write+0x269/0x960 [ 296.544246][T19553] ? __rcu_read_unlock+0x4f/0x70 [ 296.544283][T19553] ? __fget_files+0x184/0x1c0 [ 296.544339][T19553] ksys_write+0xda/0x1a0 [ 296.544363][T19553] __x64_sys_write+0x40/0x50 [ 296.544414][T19553] x64_sys_call+0x2802/0x3000 [ 296.544434][T19553] do_syscall_64+0xd2/0x200 [ 296.544452][T19553] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 296.544474][T19553] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 296.544559][T19553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.544579][T19553] RIP: 0033:0x7f1932f6efc9 [ 296.544594][T19553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.544610][T19553] RSP: 002b:00007f19319d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 296.544630][T19553] RAX: ffffffffffffffda RBX: 00007f19331c5fa0 RCX: 00007f1932f6efc9 [ 296.544650][T19553] RDX: 0000000000000079 RSI: 0000000000000000 RDI: 0000000000000006 [ 296.544662][T19553] RBP: 00007f19319d7090 R08: 0000000000000000 R09: 0000000000000000 [ 296.544674][T19553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.544762][T19553] R13: 00007f19331c6038 R14: 00007f19331c5fa0 R15: 00007ffd2fef8478 [ 296.544848][T19553] [ 296.760069][T19555] loop4: detected capacity change from 0 to 1024 [ 296.775185][T19504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.782217][T19504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.808117][T19504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.823200][T19555] EXT4-fs: Ignoring removed nobh option [ 296.828889][T19555] EXT4-fs: Ignoring removed bh option [ 296.859956][T19504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.867025][T19504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.892989][T19504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.908440][T19555] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.943629][T17369] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.985330][T19504] hsr_slave_0: entered promiscuous mode [ 296.994683][T19504] hsr_slave_1: entered promiscuous mode [ 297.019681][T19504] debugfs: 'hsr0' already exists in 'hsr' [ 297.025548][T19504] Cannot create hsr debugfs directory [ 297.223216][T19592] loop4: detected capacity change from 0 to 1024 [ 297.230137][T19592] EXT4-fs: Ignoring removed nobh option [ 297.235758][T19592] EXT4-fs: Ignoring removed bh option [ 297.252992][T19579] lo speed is unknown, defaulting to 1000 [ 297.276091][T19592] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.292363][T19594] __nla_validate_parse: 1 callbacks suppressed [ 297.292377][T19594] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4395'. [ 297.321555][T19594] loop9: detected capacity change from 0 to 512 [ 297.328022][T19579] lo speed is unknown, defaulting to 1000 [ 297.334741][T17369] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.360300][T19594] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.411227][T19602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4396'. [ 297.475843][T19504] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 297.491519][T19606] tipc: Enabled bearer , priority 0 [ 297.503531][T19504] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 297.534082][T19605] tipc: Enabling of bearer rejected, already enabled [ 297.543885][T19504] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 297.568859][T19504] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 297.584003][T19610] loop4: detected capacity change from 0 to 1024 [ 297.602450][T19610] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 297.630174][T19610] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.4398: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 0, max 0(0), depth 0(0) [ 297.678455][T19610] EXT4-fs error (device loop4): ext4_quota_enable:7139: comm syz.4.4398: Bad quota inode: 3, type: 0 [ 297.694254][T19504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.711374][T19610] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 297.738589][T19504] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.748459][T15177] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.755581][T15177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.767357][T19610] EXT4-fs (loop4): mount failed [ 297.780082][ T3551] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.787283][ T3551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.859710][T19504] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 297.964202][T19504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.991648][T17107] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.035044][T19633] loop9: detected capacity change from 0 to 256 [ 298.065473][T19633] msdos: Bad value for 'nfs' [ 298.072347][T19639] loop4: detected capacity change from 0 to 512 [ 298.110011][T19633] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4402'. [ 298.141148][T19504] veth0_vlan: entered promiscuous mode [ 298.168747][T19504] veth1_vlan: entered promiscuous mode [ 298.183207][T19647] loop9: detected capacity change from 0 to 1024 [ 298.207291][T19647] EXT4-fs: Ignoring removed nobh option [ 298.212707][T19504] veth0_macvtap: entered promiscuous mode [ 298.212954][T19647] EXT4-fs: Ignoring removed bh option [ 298.245629][T19504] veth1_macvtap: entered promiscuous mode [ 298.270555][T19647] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.291646][T19504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.327803][T19504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.390444][ T3551] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.402473][T17107] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.420480][ T3551] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.439675][T19653] loop4: detected capacity change from 0 to 2048 [ 298.458207][T15177] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.475088][T15177] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.488235][T19653] loop4: p1 p2 p3 [ 298.696568][T19660] loop4: detected capacity change from 0 to 2048 [ 298.765388][T19660] Alternate GPT is invalid, using primary GPT. [ 298.771749][T19660] loop4: p1 p2 p3 [ 298.775476][T19660] loop4: partition table partially beyond EOD, truncated [ 298.799481][T19667] loop9: detected capacity change from 0 to 512 [ 298.990820][T19621] syz.6.4400 (19621) used greatest stack depth: 6136 bytes left [ 299.098106][ T29] kauditd_printk_skb: 754 callbacks suppressed [ 299.098172][ T29] audit: type=1400 audit(555.150:27064): avc: denied { create } for pid=19679 comm="syz.0.4415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 299.127447][T19608] tipc: Disabling bearer [ 299.136465][T19682] netlink: 'syz.6.4414': attribute type 39 has an invalid length. [ 299.142321][ T29] audit: type=1400 audit(555.170:27065): avc: denied { getopt } for pid=19679 comm="syz.0.4415" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 299.164097][ T29] audit: type=1400 audit(555.170:27066): avc: denied { ioctl } for pid=19679 comm="syz.0.4415" path="socket:[69047]" dev="sockfs" ino=69047 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 299.188454][ T29] audit: type=1400 audit(555.180:27067): avc: denied { create } for pid=19677 comm="syz.6.4414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 299.207921][ T29] audit: type=1400 audit(555.180:27068): avc: denied { setopt } for pid=19677 comm="syz.6.4414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 299.227527][ T29] audit: type=1400 audit(555.180:27069): avc: denied { bind } for pid=19677 comm="syz.6.4414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 299.281397][T15177] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.354159][ T29] audit: type=1400 audit(555.400:27070): avc: denied { mounton } for pid=19689 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 299.389951][T15177] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.415986][ T29] audit: type=1400 audit(555.460:27071): avc: denied { mount } for pid=19687 comm="syz.0.4418" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 299.491493][T15177] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.518879][ T29] audit: type=1400 audit(555.560:27072): avc: denied { shutdown } for pid=19698 comm="syz.6.4419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 299.538119][ T29] audit: type=1400 audit(555.560:27073): avc: denied { getopt } for pid=19698 comm="syz.6.4419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 299.584453][T15177] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.673093][T19709] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 299.676324][T19719] loop4: detected capacity change from 0 to 1024 [ 299.696499][T19719] EXT4-fs: Ignoring removed nobh option [ 299.702202][T19719] EXT4-fs: Ignoring removed bh option [ 299.714145][T19719] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.755449][T17369] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.806125][T19733] loop4: detected capacity change from 0 to 512 [ 299.814367][T15177] bond0 (unregistering): Released all slaves [ 299.820479][T19733] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 299.822265][T19733] EXT4-fs (loop4): 1 truncate cleaned up [ 299.836947][T19733] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.877179][T19689] lo speed is unknown, defaulting to 1000 [ 299.887368][T19733] loop4: detected capacity change from 512 to 0 [ 299.894708][T19733] EXT4-fs error (device loop4): ext4_get_inode_loc:4970: inode #2: block 5: comm syz.4.4432: unable to read itable block [ 299.913244][T19733] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 299.921700][T19733] EXT4-fs (loop4): I/O error while writing superblock [ 299.928538][T19733] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: IO failure [ 299.937251][T19733] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 299.948486][T19733] EXT4-fs (loop4): I/O error while writing superblock [ 299.956849][T19689] lo speed is unknown, defaulting to 1000 [ 299.984420][T19739] tipc: Failed to remove unknown binding: 66,1,1/0:1985311949/1985311951 [ 299.993306][T19739] tipc: Failed to remove unknown binding: 66,1,1/0:1985311949/1985311951 [ 300.001900][T19739] tipc: Failed to remove unknown binding: 66,1,1/0:1985311949/1985311951 [ 300.010947][T17369] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.047614][T17369] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 300.072782][T17369] EXT4-fs (loop4): I/O error while writing superblock [ 300.135142][T15177] hsr_slave_0: left promiscuous mode [ 300.155610][T15177] hsr_slave_1: left promiscuous mode [ 300.175953][T15177] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 300.183071][T15177] batman_adv: batadv0: Removing interface: veth1_vlan [ 300.216022][T19764] block device autoloading is deprecated and will be removed. [ 300.224319][T15177] veth1_macvtap: left promiscuous mode [ 300.235172][T15177] veth0_macvtap: left promiscuous mode [ 300.241214][T15177] veth1_vlan: left promiscuous mode [ 300.246539][T15177] veth0_vlan: left promiscuous mode [ 300.347484][T15177] team0 (unregistering): Port device dummy0 removed [ 300.359465][T19777] loop4: detected capacity change from 0 to 128 [ 300.374488][T19777] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 300.386648][ T10] lo speed is unknown, defaulting to 1000 [ 300.392450][ T10] infiniband syz2: ib_query_port failed (-19) [ 300.410073][T19689] chnl_net:caif_netlink_parms(): no params data found [ 300.549995][T19689] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.557235][T19689] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.572060][T19689] bridge_slave_0: entered allmulticast mode [ 300.586246][T19689] bridge_slave_0: entered promiscuous mode [ 300.613469][T19689] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.616930][T19791] loop0: detected capacity change from 0 to 512 [ 300.620583][T19689] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.641357][T19689] bridge_slave_1: entered allmulticast mode [ 300.671096][T19791] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.674023][T19689] bridge_slave_1: entered promiscuous mode [ 300.705372][T19791] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 300.752588][T15177] IPVS: stop unused estimator thread 0... [ 300.852132][T19689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.862725][T19689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.891245][T19504] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.902790][T19689] team0: Port device team_slave_0 added [ 300.909887][T19689] team0: Port device team_slave_1 added [ 300.927933][T19803] ip6_vti0 speed is unknown, defaulting to 1000 [ 300.948736][T19689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.955683][T19689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.981683][T19689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.993326][T19803] ip6_vti0 speed is unknown, defaulting to 1000 [ 300.994193][T19689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.006543][T19689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.033032][T19689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.050257][T19803] ip6_vti0 speed is unknown, defaulting to 1000 [ 301.065165][T19689] hsr_slave_0: entered promiscuous mode [ 301.071303][T19689] hsr_slave_1: entered promiscuous mode [ 301.077433][T19689] debugfs: 'hsr0' already exists in 'hsr' [ 301.083206][T19689] Cannot create hsr debugfs directory [ 301.135255][T19803] infiniband syz2: set down [ 301.139814][T19803] infiniband syz2: added ip6_vti0 [ 301.146591][ T10] ip6_vti0 speed is unknown, defaulting to 1000 [ 301.185589][T19816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4455'. [ 301.187550][T19803] RDS/IB: syz2: added [ 301.198662][T19803] smc: adding ib device syz2 with port count 1 [ 301.204824][T19803] smc: ib device syz2 port 1 has pnetid S (user defined) [ 301.215178][ T10] ip6_vti0 speed is unknown, defaulting to 1000 [ 301.248612][T19803] ip6_vti0 speed is unknown, defaulting to 1000 [ 301.333325][T19803] ip6_vti0 speed is unknown, defaulting to 1000 [ 301.461948][T19803] ip6_vti0 speed is unknown, defaulting to 1000 [ 301.489549][T19822] bond1: entered promiscuous mode [ 301.494650][T19822] bond1: entered allmulticast mode [ 301.505466][T19822] 8021q: adding VLAN 0 to HW filter on device bond1 [ 301.515999][T19822] bond1 (unregistering): Released all slaves [ 301.528276][T19689] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 301.541386][T19689] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 301.551558][T19803] ip6_vti0 speed is unknown, defaulting to 1000 [ 301.558299][T19689] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 301.583177][T19689] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 301.628953][T19803] ip6_vti0 speed is unknown, defaulting to 1000 [ 301.680778][T19689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.704348][T19689] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.714509][T19803] ip6_vti0 speed is unknown, defaulting to 1000 [ 301.723744][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.730820][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.768885][ T3549] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.775975][ T3549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.787540][T19849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4462'. [ 301.797000][T19803] ip6_vti0 speed is unknown, defaulting to 1000 [ 301.889082][T19857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.934265][T19857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.974003][T19689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.018671][T19853] lo speed is unknown, defaulting to 1000 [ 302.095531][T19853] ip6_vti0 speed is unknown, defaulting to 1000 [ 302.190203][T19883] vlan4: entered promiscuous mode [ 302.195314][T19883] geneve1: entered promiscuous mode [ 302.200631][T19883] vlan4: entered allmulticast mode [ 302.205790][T19883] geneve1: entered allmulticast mode [ 302.232462][T19689] veth0_vlan: entered promiscuous mode [ 302.243402][T19689] veth1_vlan: entered promiscuous mode [ 302.261144][T19689] veth0_macvtap: entered promiscuous mode [ 302.269717][T19689] veth1_macvtap: entered promiscuous mode [ 302.281891][T19689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.294306][T19689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.306991][ T58] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.319985][ T58] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.331395][ T58] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.343016][ T58] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.451569][T19894] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 302.458575][T17163] IPVS: starting estimator thread 0... [ 302.476059][T19896] xt_CT: You must specify a L4 protocol and not use inversions on it [ 302.491786][T19896] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4471'. [ 302.559575][T19898] IPVS: using max 2832 ests per chain, 141600 per kthread [ 302.635458][T19915] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4479'. [ 302.992029][T19921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4481'. [ 303.023272][T19940] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4484'. [ 303.032290][T19940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4484'. [ 303.149793][T19948] loop8: detected capacity change from 0 to 1024 [ 303.190253][T19952] 9pnet_fd: Insufficient options for proto=fd [ 303.203628][T19948] ext4: Unknown parameter 'smackfsroot' [ 303.213718][T19948] loop8: detected capacity change from 0 to 128 [ 303.223433][T19948] bio_check_eod: 1046 callbacks suppressed [ 303.223447][T19948] syz.8.4491: attempt to access beyond end of device [ 303.223447][T19948] loop8: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 303.254126][T19957] xt_limit: Overflow, try lower: 0/0 [ 303.301141][T19957] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 303.589196][T19981] loop8: detected capacity change from 0 to 512 [ 303.621868][T19981] EXT4-fs (loop8): 1 orphan inode deleted [ 303.632901][T19981] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.740428][T19689] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.848153][T19991] 9pnet_fd: Insufficient options for proto=fd [ 303.868299][T19991] loop8: detected capacity change from 0 to 256 [ 303.876020][T19991] vfat: Bad value for 'check' [ 304.057782][T20008] team0: Port device team_slave_0 removed [ 304.078641][T20011] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4507'. [ 304.087669][T20011] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4507'. [ 304.132644][T20001] lo speed is unknown, defaulting to 1000 [ 304.164773][T20001] ip6_vti0 speed is unknown, defaulting to 1000 [ 304.253566][T20019] loop8: detected capacity change from 0 to 1024 [ 304.271469][T20019] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.287941][T20019] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 304.297033][ T29] kauditd_printk_skb: 699 callbacks suppressed [ 304.297047][ T29] audit: type=1400 audit(560.340:27773): avc: denied { setattr } for pid=20018 comm="syz.8.4512" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 304.354862][ T29] audit: type=1326 audit(560.400:27774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20022 comm="syz.0.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4b8cefc9 code=0x7ffc0000 [ 304.379372][T20023] lo speed is unknown, defaulting to 1000 [ 304.400409][ T29] audit: type=1326 audit(560.400:27775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20022 comm="syz.0.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7faa4b8cefc9 code=0x7ffc0000 [ 304.423472][ T29] audit: type=1326 audit(560.400:27776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20022 comm="syz.0.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4b8cefc9 code=0x7ffc0000 [ 304.446568][ T29] audit: type=1326 audit(560.400:27777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20022 comm="syz.0.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7faa4b8cefc9 code=0x7ffc0000 [ 304.469741][ T29] audit: type=1326 audit(560.400:27778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20022 comm="syz.0.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4b8cefc9 code=0x7ffc0000 [ 304.492766][ T29] audit: type=1326 audit(560.400:27779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20022 comm="syz.0.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4b8cefc9 code=0x7ffc0000 [ 304.515736][ T29] audit: type=1326 audit(560.400:27780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20022 comm="syz.0.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa4b8cefc9 code=0x7ffc0000 [ 304.538720][ T29] audit: type=1326 audit(560.400:27781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20022 comm="syz.0.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4b8cefc9 code=0x7ffc0000 [ 304.561675][ T29] audit: type=1326 audit(560.410:27782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20022 comm="syz.0.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4b8cefc9 code=0x7ffc0000 [ 304.562701][T20013] loop4: detected capacity change from 0 to 512 [ 304.586402][T19689] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.601754][T20023] ip6_vti0 speed is unknown, defaulting to 1000 [ 304.619081][T20013] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.4510: bad orphan inode 11862016 [ 304.630466][T20013] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 304.828852][T20051] loop8: detected capacity change from 0 to 128 [ 304.951454][T17369] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 305.138169][T20080] loop0: detected capacity change from 0 to 8192 [ 305.160092][T20093] loop4: detected capacity change from 0 to 256 [ 305.167954][T20095] netlink: 140 bytes leftover after parsing attributes in process `syz.6.4534'. [ 305.181723][T20080] loop0: p1 < > p2 < p5 p6 > p3 p4 [ 305.186982][T20080] loop0: partition table partially beyond EOD, truncated [ 305.195758][T20101] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4536'. [ 305.196030][T20080] loop0: p1 start 67108864 is beyond EOD, truncated [ 305.213251][T20101] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4536'. [ 305.217333][T20080] loop0: p3 start 100859904 is beyond EOD, truncated [ 305.228927][T20080] loop0: p4 size 393216 extends beyond EOD, truncated [ 305.236293][T20080] loop0: p5 start 100859904 is beyond EOD, truncated [ 305.243019][T20080] loop0: p6 size 393216 extends beyond EOD, truncated [ 305.305177][T20110] loop4: detected capacity change from 0 to 2048 [ 305.331367][T20117] loop8: detected capacity change from 0 to 2048 [ 305.349449][T20110] Alternate GPT is invalid, using primary GPT. [ 305.355885][T20110] loop4: p1 p2 p3 [ 305.360221][T20117] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.389080][T20110] team_slave_1: Caught tx_queue_len zero misconfig [ 305.462770][T20138] loop4: detected capacity change from 0 to 512 [ 305.471839][T20138] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.4546: bg 0: block 5: invalid block bitmap [ 305.484744][T20138] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 305.494672][T20138] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.4546: invalid indirect mapped block 3 (level 2) [ 305.512553][T20138] EXT4-fs (loop4): 1 orphan inode deleted [ 305.518379][T20138] EXT4-fs (loop4): 1 truncate cleaned up [ 305.525035][T20138] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.538752][T19689] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.585768][T17369] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.618705][T20150] loop8: detected capacity change from 0 to 512 [ 305.627415][T20150] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.4547: error while reading EA inode 32 err=-116 [ 305.627605][T20150] EXT4-fs (loop8): Remounting filesystem read-only [ 305.646700][T20150] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 305.657210][T20150] EXT4-fs (loop8): 1 orphan inode deleted [ 305.663895][T20150] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.722859][T20160] netlink: 'syz.3.4551': attribute type 1 has an invalid length. [ 305.759849][T20160] bond3: (slave bridge2): making interface the new active one [ 305.769858][T20160] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 305.786720][T20160] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 306.399599][T19689] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.481388][T20198] loop8: detected capacity change from 0 to 1024 [ 306.492387][T20198] EXT4-fs: Ignoring removed orlov option [ 306.499644][T20200] loop4: detected capacity change from 0 to 512 [ 306.510964][T20198] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.636067][T20214] loop4: detected capacity change from 0 to 128 [ 306.643011][T20214] vfat: Unknown parameter 'ÿÿÿÿÿ0177777777777777777777701777777777777777777777184467440737095516150xffffffffffffffff' [ 306.695307][T20215] loop4: detected capacity change from 0 to 128 [ 306.701956][T20215] vfat: Unknown parameter 'ÿÿÿÿÿ0177777777777777777777701777777777777777777777184467440737095516150xffffffffffffffff' [ 306.772264][T20217] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 306.851820][T20224] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.862268][T20224] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.058139][T20224] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.068498][T20224] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.187460][T20232] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20232 comm=syz.0.4570 [ 307.200105][T20232] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20232 comm=syz.0.4570 [ 307.216163][T20224] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.226566][T20224] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.280185][T20224] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.291200][T20224] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.320182][T19689] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.352287][ T3525] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.360619][ T3525] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.384772][T20257] loop0: detected capacity change from 0 to 1024 [ 307.392711][ T3525] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.400982][ T3525] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.411781][ T3525] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.420032][ T3525] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.428443][ T3525] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.436608][ T3525] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.446076][T20257] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.514908][T20257] netlink: 'syz.0.4580': attribute type 13 has an invalid length. [ 307.594172][T20285] __nla_validate_parse: 19 callbacks suppressed [ 307.594186][T20285] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4585'. [ 307.602622][T20257] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.616834][T20257] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.741229][T20257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.752992][T20257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.839126][ T3551] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.859137][ T3551] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.890326][ T3551] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.910423][T20317] netlink: 'syz.4.4588': attribute type 3 has an invalid length. [ 307.919478][ T3551] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.950159][T20319] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4589'. [ 307.959952][T19504] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.008360][T20324] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4593'. [ 308.022376][T20284] lo speed is unknown, defaulting to 1000 [ 308.035794][T20302] hid_parser_main: 33 callbacks suppressed [ 308.035812][T20302] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 308.049248][T20302] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 308.056699][T20302] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 308.064256][T20302] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 308.071725][T20302] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 308.079126][T20302] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 308.086513][T20302] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 308.092109][T20284] ip6_vti0 speed is unknown, defaulting to 1000 [ 308.093939][T20302] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 308.107608][T20302] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 308.114988][T20302] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 308.130125][T20337] sit0: Caught tx_queue_len zero misconfig [ 308.130458][T20302] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 308.202801][T20343] loop4: detected capacity change from 0 to 1024 [ 308.216829][T20339] netlink: 'syz.6.4596': attribute type 30 has an invalid length. [ 308.233434][T20343] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 308.258681][T20343] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 308.259656][T20350] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4600'. [ 308.278906][T20343] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 308.298596][T20343] EXT4-fs (loop4): orphan cleanup on readonly fs [ 308.308740][T20343] EXT4-fs error (device loop4): ext4_read_inode_bitmap:167: comm syz.4.4597: Inode bitmap for bg 0 marked uninitialized [ 308.322739][T20343] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 308.341102][T20357] loop8: detected capacity change from 0 to 512 [ 308.359746][T20343] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (32298!=35945) [ 308.385673][T20357] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 308.406548][T20357] EXT4-fs (loop8): 1 truncate cleaned up [ 308.427858][T20357] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.460627][T20369] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4604'. [ 308.469571][T20369] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4604'. [ 308.478473][T20369] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4604'. [ 308.541079][T20357] loop8: detected capacity change from 512 to 0 [ 308.547705][T20376] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4607'. [ 308.547876][T20369] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4604'. [ 308.556664][T20376] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4607'. [ 308.568760][T20357] EXT4-fs error (device loop8): ext4_get_inode_loc:4970: inode #2: block 5: comm syz.8.4603: unable to read itable block [ 308.588251][T20359] tipc: Enabling of bearer rejected, failed to enable media [ 308.603199][T20359] tipc: Enabling of bearer rejected, failed to enable media [ 308.614955][T20357] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 308.628924][T20357] EXT4-fs (loop8): I/O error while writing superblock [ 308.635745][T20357] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6313: IO failure [ 308.645545][T20357] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 308.655730][T20357] EXT4-fs (loop8): I/O error while writing superblock [ 308.663121][T17369] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.709360][T19689] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.719681][T19689] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 308.735947][T20392] loop4: detected capacity change from 0 to 1024 [ 308.744823][T20392] EXT4-fs: Ignoring removed nobh option [ 308.748019][T19689] EXT4-fs (loop8): I/O error while writing superblock [ 308.750413][T20392] EXT4-fs: Ignoring removed bh option [ 308.772208][T20392] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.828206][T17369] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.890758][T20400] lo speed is unknown, defaulting to 1000 [ 308.976023][T20400] ip6_vti0 speed is unknown, defaulting to 1000 [ 309.072855][T20432] IPVS: Error connecting to the multicast addr [ 309.107530][T20432] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2048 sclass=netlink_tcpdiag_socket pid=20432 comm=syz.6.4624 [ 309.109036][T20436] loop4: detected capacity change from 0 to 1024 [ 309.131013][T20432] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=5124 sclass=netlink_tcpdiag_socket pid=20432 comm=syz.6.4624 [ 309.156540][T20436] EXT4-fs: Ignoring removed nobh option [ 309.162195][T20436] EXT4-fs: Ignoring removed bh option [ 309.212354][T20436] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.233802][T20446] pim6reg1: entered promiscuous mode [ 309.239133][T20446] pim6reg1: entered allmulticast mode [ 309.256182][T17369] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.293064][T20455] team0: Port device team_slave_1 removed [ 309.315253][T20463] loop4: detected capacity change from 0 to 512 [ 309.331138][T20463] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 309.356019][T20463] EXT4-fs (loop4): orphan cleanup on readonly fs [ 309.377991][T20463] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.4634: corrupted inode contents [ 309.412333][T20463] EXT4-fs (loop4): Remounting filesystem read-only [ 309.442755][T20482] netlink: 'syz.3.4638': attribute type 10 has an invalid length. [ 309.451284][T20463] EXT4-fs (loop4): 1 truncate cleaned up [ 309.457032][ T58] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 309.467650][ T58] __quota_error: 500 callbacks suppressed [ 309.467664][ T58] Quota error (device loop4): write_blk: dquota write failed [ 309.480772][ T58] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 309.490794][ T58] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 309.501364][ T58] Quota error (device loop4): write_blk: dquota write failed [ 309.508896][ T58] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list [ 309.528324][ T58] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 309.538609][ T58] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 309.553107][T20482] team0: Port device dummy0 added [ 309.562099][ T58] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 309.572707][T20463] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 309.589584][ T29] audit: type=1400 audit(309.642:28283): avc: denied { read } for pid=20449 comm="syz.6.4629" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 309.621905][ T29] audit: type=1400 audit(309.642:28284): avc: denied { open } for pid=20449 comm="syz.6.4629" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 309.630303][T20490] IPVS: Error connecting to the multicast addr [ 309.647927][T17369] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.678042][ T29] audit: type=1400 audit(309.732:28285): avc: denied { ioctl } for pid=20449 comm="syz.6.4629" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 309.722520][T20490] loop8: detected capacity change from 0 to 1024 [ 309.731240][ T29] audit: type=1326 audit(309.752:28286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20496 comm="syz.4.4641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb39ebefc9 code=0x7ffc0000 [ 309.731448][T20490] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 309.767391][T20490] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 309.775891][T20504] loop4: detected capacity change from 0 to 1024 [ 309.782361][T20490] EXT4-fs (loop8): failed to initialize system zone (-117) [ 309.790093][T20490] EXT4-fs (loop8): mount failed [ 309.797786][T20504] EXT4-fs: Ignoring removed nobh option [ 309.803390][T20504] EXT4-fs: Ignoring removed bh option [ 309.835638][T20490] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2048 sclass=netlink_tcpdiag_socket pid=20490 comm=syz.8.4640 [ 309.837220][T20504] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.887405][T20490] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=5124 sclass=netlink_tcpdiag_socket pid=20490 comm=syz.8.4640 [ 309.907289][T17369] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.957769][T20486] lo speed is unknown, defaulting to 1000 [ 310.009445][T20527] loop8: detected capacity change from 0 to 4096 [ 310.016070][T20527] EXT4-fs: Ignoring removed nomblk_io_submit option [ 310.041300][T20486] ip6_vti0 speed is unknown, defaulting to 1000 [ 310.048493][T20527] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.114671][T19689] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.137622][T20541] usb usb8: usbfs: process 20541 (syz.0.4653) did not claim interface 0 before use [ 310.208597][T20545] loop8: detected capacity change from 0 to 512 [ 310.215012][T20543] loop4: detected capacity change from 0 to 512 [ 310.232090][T20543] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 310.235089][T20547] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 310.253264][T20545] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 310.254665][T20543] EXT4-fs (loop4): 1 truncate cleaned up [ 310.288076][T20543] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.326283][T20545] EXT4-fs error (device loop8): ext4_orphan_get:1418: comm syz.8.4654: bad orphan inode 131083 [ 310.387407][T20543] loop4: detected capacity change from 512 to 0 [ 310.394585][T20555] EXT4-fs error (device loop4): ext4_get_inode_loc:4970: inode #2: block 5: comm syz.4.4655: unable to read itable block [ 310.443499][T20545] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.506234][T20555] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 310.534521][T20545] EXT4-fs error (device loop8): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.8.4654: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 310.561807][T20555] EXT4-fs (loop4): I/O error while writing superblock [ 310.568779][T20555] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: IO failure [ 310.587638][T20575] usb usb8: usbfs: process 20575 (syz.6.4664) did not claim interface 0 before use [ 310.625351][T20555] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 310.639546][T20545] EXT4-fs error (device loop8) in ext4_delete_entry:2739: Corrupt filesystem [ 310.651925][T20555] EXT4-fs (loop4): I/O error while writing superblock [ 310.681257][T20310] IPVS: starting estimator thread 0... [ 310.697688][T20545] EXT4-fs warning (device loop8): ext4_rename_delete:3731: inode #2: comm syz.8.4654: Deleting old file: nlink 5, error=-117 [ 310.717945][T17369] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.743655][T17369] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 310.767385][T20583] IPVS: using max 2736 ests per chain, 136800 per kthread [ 310.774603][T17369] EXT4-fs (loop4): I/O error while writing superblock [ 310.867405][T20599] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20599 comm=syz.4.4668 [ 311.048432][T19689] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.182632][T20624] loop8: detected capacity change from 0 to 512 [ 311.189552][T20624] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 311.200886][T20624] EXT4-fs (loop8): 1 truncate cleaned up [ 311.201376][T20624] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.329656][T20624] loop8: detected capacity change from 512 to 0 [ 311.330795][T20624] EXT4-fs error (device loop8): ext4_get_inode_loc:4970: inode #2: block 5: comm syz.8.4679: unable to read itable block [ 311.376174][T20624] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 311.376197][T20624] EXT4-fs (loop8): I/O error while writing superblock [ 311.376273][T20624] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6313: IO failure [ 311.376402][T20624] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 311.376414][T20624] EXT4-fs (loop8): I/O error while writing superblock [ 311.429148][T19689] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.430333][T19689] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 311.472323][T19689] EXT4-fs (loop8): I/O error while writing superblock [ 311.564318][T20644] wg2: entered promiscuous mode [ 311.564335][T20644] wg2: entered allmulticast mode [ 311.639083][T20647] sg_write: data in/out 268435420/14 bytes for SCSI command 0x0-- guessing data in; [ 311.639083][T20647] program syz.6.4687 not setting count and/or reply_len properly [ 311.998668][T20663] 9pnet_fd: Insufficient options for proto=fd [ 312.088706][T20673] netlink: 'syz.8.4696': attribute type 10 has an invalid length. [ 312.110475][T20673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.136780][T20674] netlink: 'syz.8.4696': attribute type 10 has an invalid length. [ 312.168822][T20673] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 312.177899][T20674] batadv0: entered promiscuous mode [ 312.183113][T20674] batadv0: entered allmulticast mode [ 312.194709][T20674] bond0: (slave batadv0): Releasing backup interface [ 312.209069][T20674] bridge0: port 3(batadv0) entered blocking state [ 312.216432][T20674] bridge0: port 3(batadv0) entered disabled state [ 312.247413][ T3519] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 312.256692][ T3519] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 312.316897][T20683] bond1: option updelay: invalid value (18446744073709531912) [ 312.324439][T20683] bond1: option updelay: allowed values 0 - 2147483647 [ 312.334973][T20683] bond1 (unregistering): Released all slaves [ 312.343757][T20657] lo speed is unknown, defaulting to 1000 [ 312.395289][T20657] ip6_vti0 speed is unknown, defaulting to 1000 [ 312.436843][T20635] syz.3.4684 (20635) used greatest stack depth: 6016 bytes left [ 312.589190][T20705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.589205][T20705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.589693][T20705] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 312.610928][T20705] batman_adv: batadv0: Removing interface: veth1_vlan [ 312.677172][T20657] chnl_net:caif_netlink_parms(): no params data found [ 312.763492][T20657] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.763522][T20657] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.763678][T20657] bridge_slave_0: entered allmulticast mode [ 312.764148][T20657] bridge_slave_0: entered promiscuous mode [ 312.769682][T20657] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.797285][T20657] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.797636][T20657] bridge_slave_1: entered allmulticast mode [ 312.798129][T20657] bridge_slave_1: entered promiscuous mode [ 312.843108][T20657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.844343][T20657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.893476][T20721] 9pnet_fd: Insufficient options for proto=fd [ 312.908645][T20657] team0: Port device team_slave_0 added [ 312.915645][T20657] team0: Port device team_slave_1 added [ 312.968791][T20657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.968804][T20657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.968920][T20657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.975849][T20657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.019915][T20657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.020015][T20657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.021740][ T3549] bridge_slave_1: left allmulticast mode [ 313.063819][ T3549] bridge_slave_1: left promiscuous mode [ 313.069530][ T3549] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.097044][T20727] netlink: 'syz.4.4712': attribute type 39 has an invalid length. [ 313.106268][ T3549] bridge_slave_0: left allmulticast mode [ 313.106288][ T3549] bridge_slave_0: left promiscuous mode [ 313.106419][ T3549] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.125206][T15177] smc: removing ib device syz2 [ 313.321740][T20734] loop8: detected capacity change from 0 to 4096 [ 313.336093][T20734] EXT4-fs: Ignoring removed nomblk_io_submit option [ 313.355494][T20734] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.376642][T20734] __nla_validate_parse: 115 callbacks suppressed [ 313.376656][T20734] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4714'. [ 313.410292][T19689] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.421886][ T3549] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.431552][ T3549] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.440880][ T3549] bond0 (unregistering): Released all slaves [ 313.449497][ T3549] bond1 (unregistering): Released all slaves [ 313.511490][T20657] hsr_slave_0: entered promiscuous mode [ 313.512004][T20743] usb usb8: usbfs: process 20743 (syz.0.4717) did not claim interface 0 before use [ 313.518507][T20657] hsr_slave_1: entered promiscuous mode [ 313.542699][T20657] debugfs: 'hsr0' already exists in 'hsr' [ 313.548500][T20657] Cannot create hsr debugfs directory [ 313.554049][ T3549] tipc: Disabling bearer [ 313.559129][ T3549] tipc: Left network mode [ 313.687441][ T3549] hsr_slave_0: left promiscuous mode [ 313.701942][ T3549] hsr_slave_1: left promiscuous mode [ 313.707667][ T3549] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.715290][ T3549] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.857762][ T3549] team0 (unregistering): Port device team_slave_1 removed [ 313.858508][T20763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4722'. [ 313.858523][T20763] IPv6: NLM_F_CREATE should be specified when creating new route [ 313.868011][ T3549] team0 (unregistering): Port device team_slave_0 removed [ 313.877361][T15177] smc: removing ib device syû [ 313.940328][ T3549] team0 (unregistering): Port device dummy0 removed [ 314.216448][T20657] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 314.228741][T20657] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 314.241895][T20657] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 314.252083][ T3549] IPVS: stop unused estimator thread 0... [ 314.252448][T20657] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 314.356468][T20657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.392206][T20657] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.403550][T15177] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.403600][T15177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.405045][T15177] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.405077][T15177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.520060][T20657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.529612][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 314.529625][ T29] audit: type=1400 audit(314.582:28408): avc: denied { ioctl } for pid=20791 comm="syz.3.4724" path="socket:[74588]" dev="sockfs" ino=74588 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 314.578622][T20800] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4730'. [ 314.587413][T20794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4724'. [ 314.589084][T20657] veth0_vlan: entered promiscuous mode [ 314.612383][ T29] audit: type=1400 audit(314.622:28409): avc: denied { bind } for pid=20791 comm="syz.3.4724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 314.632080][T20793] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4724'. [ 314.652442][T20657] veth1_vlan: entered promiscuous mode [ 314.678181][T20657] veth0_macvtap: entered promiscuous mode [ 314.691957][T20657] veth1_macvtap: entered promiscuous mode [ 314.696435][T20657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.713722][T20812] usb usb8: usbfs: process 20812 (syz.8.4732) did not claim interface 0 before use [ 314.714576][T20657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.725921][T20814] loop4: detected capacity change from 0 to 512 [ 314.738693][ T3551] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.738774][ T3546] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.738850][ T3546] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.738878][ T3546] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.740356][T20814] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.4741: inode has both inline data and extents flags [ 314.740676][T20814] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.4741: couldn't read orphan inode 15 (err -117) [ 314.741586][T20814] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.749670][ T29] audit: type=1400 audit(314.792:28410): avc: denied { append } for pid=20813 comm="syz.4.4741" path="/149/file0/cpu.stat" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 314.751352][T20814] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 314.751623][ T29] audit: type=1400 audit(314.802:28411): avc: denied { ioctl } for pid=20813 comm="syz.4.4741" path="/149/file0/cpu.stat" dev="loop4" ino=18 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 314.797175][T17369] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.834052][T20821] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4693'. [ 314.867745][T20819] loop8: detected capacity change from 0 to 512 [ 314.947613][T20823] lo speed is unknown, defaulting to 1000 [ 314.953640][T20823] lo speed is unknown, defaulting to 1000 [ 314.963313][T20829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4737'. [ 314.972852][T20823] lo speed is unknown, defaulting to 1000 [ 314.978665][T20819] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 314.989528][T20823] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 314.998270][T20829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4737'. [ 315.009817][T20823] lo speed is unknown, defaulting to 1000 [ 315.015667][T20819] EXT4-fs (loop8): 1 truncate cleaned up [ 315.021253][T20823] lo speed is unknown, defaulting to 1000 [ 315.022119][T20819] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.027913][T20823] lo speed is unknown, defaulting to 1000 [ 315.051487][T20823] lo speed is unknown, defaulting to 1000 [ 315.057667][T20823] lo speed is unknown, defaulting to 1000 [ 315.064048][T20823] lo speed is unknown, defaulting to 1000 [ 315.070649][T20823] lo speed is unknown, defaulting to 1000 [ 315.076633][T20835] loop1: detected capacity change from 0 to 512 [ 315.089118][T20819] loop8: detected capacity change from 512 to 0 [ 315.097037][T20819] EXT4-fs error (device loop8): ext4_get_inode_loc:4970: inode #2: block 5: comm syz.8.4733: unable to read itable block [ 315.123173][T20819] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 315.141509][T20835] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.147035][T20819] EXT4-fs (loop8): I/O error while writing superblock [ 315.160834][T20819] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6313: IO failure [ 315.168849][T20835] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #4: comm syz.1.4738: corrupted inode contents [ 315.186372][T20819] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 315.187937][T15177] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 315.195083][T20835] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #4: comm syz.1.4738: mark_inode_dirty error [ 315.209457][T15177] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 315.215323][T20819] EXT4-fs (loop8): I/O error while writing superblock [ 315.232596][T20835] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #4: comm syz.1.4738: corrupted inode contents [ 315.244507][T15177] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 315.254177][T20835] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #4: comm syz.1.4738: mark_inode_dirty error [ 315.254477][ T3546] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 315.265619][T20835] Quota error (device loop1): write_blk: dquota write failed [ 315.281824][T20835] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 315.291890][T20835] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.4738: Failed to acquire dquot type 1 [ 315.311541][T20843] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #4: comm syz.1.4738: corrupted inode contents [ 315.331864][T20843] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #4: comm syz.1.4738: mark_inode_dirty error [ 315.347874][T19689] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.364019][T19689] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 315.377958][T19689] EXT4-fs (loop8): I/O error while writing superblock [ 315.381088][T20843] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #4: comm syz.1.4738: corrupted inode contents [ 315.396777][T20843] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #4: comm syz.1.4738: mark_inode_dirty error [ 315.409092][T20843] Quota error (device loop1): write_blk: dquota write failed [ 315.416491][T20843] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 315.428415][T20843] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 315.445974][T20843] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.4738: Failed to acquire dquot type 1 [ 315.475934][ T29] audit: type=1326 audit(315.522:28412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20858 comm="syz.3.4745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3c62efc9 code=0x7ffc0000 [ 315.502913][T20859] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4745'. [ 315.518604][T20657] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.546776][T20867] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4747'. [ 315.566734][T20867] netlink: 'syz.3.4747': attribute type 1 has an invalid length. [ 315.566812][T20867] netlink: 'syz.3.4747': attribute type 1 has an invalid length. [ 315.582263][T20869] loop1: detected capacity change from 0 to 4096 [ 315.582561][T20869] EXT4-fs: Ignoring removed nomblk_io_submit option [ 315.607683][T20869] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.636755][T20657] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.806761][T20894] usb usb8: usbfs: process 20894 (syz.4.4755) did not claim interface 0 before use [ 315.881617][T20900] loop4: detected capacity change from 0 to 128 [ 315.951915][T20902] lo speed is unknown, defaulting to 1000 [ 316.000914][T20902] lo speed is unknown, defaulting to 1000 [ 316.232376][T20910] loop1: detected capacity change from 0 to 1024 [ 316.239568][T20910] EXT4-fs: Ignoring removed nobh option [ 316.239642][T20910] EXT4-fs: Ignoring removed bh option [ 316.260374][T20910] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.297316][T20657] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.365048][T20915] lo speed is unknown, defaulting to 1000 [ 316.402370][T20915] lo speed is unknown, defaulting to 1000 [ 316.464988][T20916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.473917][T20916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.500325][T20924] netlink: 'syz.0.4762': attribute type 7 has an invalid length. [ 316.619975][T20934] usb usb8: usbfs: process 20934 (syz.0.4766) did not claim interface 0 before use [ 316.671585][T20932] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=20932 comm=syz.8.4765 [ 316.729098][T20945] loop4: detected capacity change from 0 to 2048 [ 316.738747][T20945] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.768244][T17369] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.813748][T20949] loop4: detected capacity change from 0 to 1024 [ 316.906530][T20949] EXT4-fs: Ignoring removed nobh option [ 316.906555][T20949] EXT4-fs: Ignoring removed bh option [ 316.925196][T20949] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.947771][T17369] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.969547][T20959] loop4: detected capacity change from 0 to 512 [ 316.970144][T20959] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 317.299689][T20962] netlink: 'syz.1.4774': attribute type 4 has an invalid length. [ 317.361087][T20959] EXT4-fs (loop4): 1 truncate cleaned up [ 317.361368][T20959] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.407741][T20959] loop4: detected capacity change from 512 to 0 [ 317.424749][T17369] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.426060][T17369] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 317.443367][T17369] EXT4-fs (loop4): I/O error while writing superblock [ 317.456726][T20969] SELinux: failed to load policy [ 317.456957][T20969] ip6tnl0: Caught tx_queue_len zero misconfig [ 317.500859][T20976] usb usb8: usbfs: process 20976 (syz.0.4778) did not claim interface 0 before use [ 317.666184][T20991] netlink: 'syz.1.4782': attribute type 11 has an invalid length. [ 317.681907][T20991] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 317.708264][ T3549] Bluetooth: hci0: Frame reassembly failed (-84) [ 317.994828][T21014] usb usb8: usbfs: process 21014 (syz.1.4789) did not claim interface 0 before use [ 318.643822][T21052] usb usb8: usbfs: process 21052 (syz.8.4802) did not claim interface 0 before use [ 318.774303][T21062] loop8: detected capacity change from 0 to 764 [ 318.781124][T21062] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 318.900351][T21065] lo speed is unknown, defaulting to 1000 [ 318.949097][T21065] lo speed is unknown, defaulting to 1000 [ 319.058689][T21065] lo speed is unknown, defaulting to 1000 [ 319.107605][T21065] lo speed is unknown, defaulting to 1000 [ 319.234117][T21068] usb usb8: usbfs: process 21068 (syz.1.4805) did not claim interface 0 before use [ 319.259650][T21062] atomic_op ffff888152ac3128 conn xmit_atomic 0000000000000000 [ 319.298360][T21070] loop1: detected capacity change from 0 to 4096 [ 319.356475][T21072] lo speed is unknown, defaulting to 1000 [ 319.381588][T21074] loop8: detected capacity change from 0 to 512 [ 319.429703][T21072] lo speed is unknown, defaulting to 1000 [ 319.559252][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 319.559266][ T29] audit: type=1400 audit(319.612:28605): avc: denied { relabelfrom } for pid=21079 comm="syz.0.4810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 319.585053][ T29] audit: type=1400 audit(319.612:28606): avc: denied { relabelto } for pid=21079 comm="syz.0.4810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 319.627472][T16624] IPVS: starting estimator thread 0... [ 319.661008][T21081] syzkaller0: create flow: hash 3436243366 index 1 [ 319.678897][T16624] syzkaller0: tun_net_xmit 76 [ 319.684603][T16624] syzkaller0: tun_net_xmit 76 [ 319.703902][T21079] syzkaller0: delete flow: hash 3436243366 index 1 [ 319.717386][T21088] IPVS: using max 2736 ests per chain, 136800 per kthread [ 319.728158][ T4676] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 319.739651][T21090] loop1: detected capacity change from 0 to 2048 [ 319.758865][T21092] loop8: detected capacity change from 0 to 512 [ 319.797214][T21092] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 319.830154][T21092] EXT4-fs (loop8): 1 truncate cleaned up [ 319.836664][T21092] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.879399][T21090] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 319.907612][T21092] loop8: detected capacity change from 512 to 0 [ 319.915570][T21102] EXT4-fs error (device loop8): ext4_get_inode_loc:4970: inode #2: block 5: comm syz.8.4814: unable to read itable block [ 319.928904][T21103] __nla_validate_parse: 13 callbacks suppressed [ 319.928917][T21103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4813'. [ 319.958185][T21100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4816'. [ 319.977341][T21102] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 320.013076][T21102] EXT4-fs (loop8): I/O error while writing superblock [ 320.019982][T21102] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6313: IO failure [ 320.020526][T21109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4818'. [ 320.037640][T21109] netlink: 348 bytes leftover after parsing attributes in process `syz.1.4818'. [ 320.045014][T21102] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 320.046844][T21109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4818'. [ 320.055222][T21102] EXT4-fs (loop8): I/O error while writing superblock [ 320.064226][T21109] netlink: 348 bytes leftover after parsing attributes in process `syz.1.4818'. [ 320.093473][T21109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4818'. [ 320.116481][T19689] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.133214][T21109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4818'. [ 320.142146][T21109] netlink: 348 bytes leftover after parsing attributes in process `syz.1.4818'. [ 320.151189][T21109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4818'. [ 320.160992][T19689] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 320.175973][T19689] EXT4-fs (loop8): I/O error while writing superblock [ 320.257245][T21124] wg2: entered promiscuous mode [ 320.262237][T21124] wg2: entered allmulticast mode [ 320.267359][T21122] loop1: detected capacity change from 0 to 4096 [ 320.296490][T21122] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.319906][ T29] audit: type=1400 audit(320.372:28607): avc: denied { read write } for pid=21121 comm="syz.1.4822" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 320.342154][ T29] audit: type=1400 audit(320.372:28608): avc: denied { open } for pid=21121 comm="syz.1.4822" path="/19/file0/file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 320.382293][T21128] pim6reg1: entered promiscuous mode [ 320.387648][T21128] pim6reg1: entered allmulticast mode [ 320.443615][T21139] netlink: 'syz.0.4827': attribute type 1 has an invalid length. [ 320.443615][T21138] netlink: 'syz.0.4827': attribute type 1 has an invalid length. [ 320.443687][T21138] netlink: 'syz.0.4827': attribute type 2 has an invalid length. [ 320.451434][T21139] netlink: 'syz.0.4827': attribute type 2 has an invalid length. [ 320.467586][T21139] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21139 comm=syz.0.4827 [ 320.525461][T20657] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.555286][T21154] xfrm0: entered promiscuous mode [ 320.557920][T21153] loop8: detected capacity change from 0 to 512 [ 320.560449][T21154] xfrm0: entered allmulticast mode [ 320.567385][T21153] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 320.586514][T21153] EXT4-fs (loop8): 1 truncate cleaned up [ 320.592801][T21153] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.598559][T21157] netlink: 'syz.1.4833': attribute type 1 has an invalid length. [ 320.657374][T21153] loop8: detected capacity change from 512 to 0 [ 320.663848][T21163] loop1: detected capacity change from 0 to 4096 [ 320.666382][T21153] EXT4-fs error (device loop8): ext4_get_inode_loc:4970: inode #2: block 5: comm syz.8.4831: unable to read itable block [ 320.683505][T21153] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 320.692262][T21153] EXT4-fs (loop8): I/O error while writing superblock [ 320.693717][T21163] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.699078][T21153] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6313: IO failure [ 320.721933][T21153] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 320.730240][T21153] EXT4-fs (loop8): I/O error while writing superblock [ 320.795950][ T29] audit: type=1326 audit(320.842:28609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21173 comm="syz.0.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4b8cefc9 code=0x7ffc0000 [ 320.796871][T19689] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.819075][ T29] audit: type=1326 audit(320.842:28610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21173 comm="syz.0.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4b8cefc9 code=0x7ffc0000 [ 320.861319][T21174] lo speed is unknown, defaulting to 1000 [ 320.869919][T21178] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 320.879109][T19689] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 320.890533][T19689] EXT4-fs (loop8): I/O error while writing superblock [ 320.896995][T21174] lo speed is unknown, defaulting to 1000 [ 320.917638][ T29] audit: type=1326 audit(320.882:28611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21173 comm="syz.0.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7faa4b8cefc9 code=0x7ffc0000 [ 320.940721][ T29] audit: type=1326 audit(320.882:28612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21173 comm="syz.0.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4b8cefc9 code=0x7ffc0000 [ 320.963740][ T29] audit: type=1326 audit(320.882:28613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21173 comm="syz.0.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4b8cefc9 code=0x7ffc0000 [ 320.986795][ T29] audit: type=1326 audit(320.882:28614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21173 comm="syz.0.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7faa4b8cefc9 code=0x7ffc0000 [ 321.061288][T20657] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.855341][T21209] raw_sendmsg: syz.0.4847 forgot to set AF_INET. Fix it! [ 321.875948][T21209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.891445][T21209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.143494][T21212] loop8: detected capacity change from 0 to 512 [ 322.181855][T21212] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.205008][T21219] loop1: detected capacity change from 0 to 512 [ 322.205667][T21223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.213227][T21219] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 322.219870][T21223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.239041][T21219] EXT4-fs (loop1): 1 truncate cleaned up [ 322.245083][T21219] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.307416][T21219] loop1: detected capacity change from 512 to 0 [ 322.315003][T21219] EXT4-fs error (device loop1): ext4_get_inode_loc:4970: inode #2: block 5: comm syz.1.4851: unable to read itable block [ 322.328393][T21219] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 322.336723][T21219] EXT4-fs (loop1): I/O error while writing superblock [ 322.343554][T21219] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: IO failure [ 322.352269][T21219] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 322.360669][T21219] EXT4-fs (loop1): I/O error while writing superblock [ 322.390219][T20657] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 322.399328][T20657] EXT4-fs (loop1): I/O error while writing superblock [ 322.425055][T21249] loop1: detected capacity change from 0 to 2048 [ 323.533315][T21266] loop8: detected capacity change from 0 to 2048 [ 323.620499][T21289] IPv6: Can't replace route, no match found [ 323.751818][T21309] loop1: detected capacity change from 0 to 1024 [ 323.815597][T21315] loop4: detected capacity change from 0 to 512 [ 323.840342][T21318] usb usb8: usbfs: process 21318 (syz.1.4877) did not claim interface 0 before use [ 323.860858][T21315] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4874: bg 0: block 248: padding at end of block bitmap is not set [ 323.891254][T21315] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.4874: Failed to acquire dquot type 1 [ 323.915068][T21315] EXT4-fs (loop4): 1 truncate cleaned up [ 324.115982][T21334] FAULT_INJECTION: forcing a failure. [ 324.115982][T21334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.129126][T21334] CPU: 1 UID: 0 PID: 21334 Comm: syz.8.4881 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 324.129160][T21334] Tainted: [W]=WARN [ 324.129168][T21334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 324.129185][T21334] Call Trace: [ 324.129193][T21334] [ 324.129202][T21334] __dump_stack+0x1d/0x30 [ 324.129224][T21334] dump_stack_lvl+0xe8/0x140 [ 324.129244][T21334] dump_stack+0x15/0x1b [ 324.129280][T21334] should_fail_ex+0x265/0x280 [ 324.129299][T21334] should_fail+0xb/0x20 [ 324.129314][T21334] should_fail_usercopy+0x1a/0x20 [ 324.129349][T21334] _copy_from_user+0x1c/0xb0 [ 324.129503][T21334] __sys_sendto+0x19e/0x330 [ 324.129539][T21334] __x64_sys_sendto+0x76/0x90 [ 324.129566][T21334] x64_sys_call+0x2d14/0x3000 [ 324.129588][T21334] do_syscall_64+0xd2/0x200 [ 324.129673][T21334] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 324.129698][T21334] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 324.129735][T21334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.129758][T21334] RIP: 0033:0x7ffa63feefc9 [ 324.129773][T21334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.129791][T21334] RSP: 002b:00007ffa62a4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 324.129810][T21334] RAX: ffffffffffffffda RBX: 00007ffa64245fa0 RCX: 00007ffa63feefc9 [ 324.129823][T21334] RDX: 000000000000000e RSI: 0000200000000100 RDI: 0000000000000007 [ 324.129848][T21334] RBP: 00007ffa62a4f090 R08: 0000200000000200 R09: 0000000000000014 [ 324.129858][T21334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.129871][T21334] R13: 00007ffa64246038 R14: 00007ffa64245fa0 R15: 00007ffee649faa8 [ 324.129891][T21334] [ 324.312014][T21336] loop1: detected capacity change from 0 to 128 [ 324.347941][T21336] bridge: RTM_NEWNEIGH with invalid ether address [ 324.384740][T21341] loop8: detected capacity change from 0 to 4096 [ 324.395199][T20657] EXT4-fs error (device loop1): ext4_readdir:224: inode #11: comm syz-executor: path /33/file0/lost+found: directory fails checksum at offset 1024 [ 324.413267][T21341] EXT4-fs: Ignoring removed nomblk_io_submit option [ 324.452359][T20657] EXT4-fs error (device loop1): ext4_readdir:224: inode #11: comm syz-executor: path /33/file0/lost+found: directory fails checksum at offset 8192 [ 324.468937][T20657] EXT4-fs error (device loop1): ext4_empty_dir:3109: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 324.510924][T20657] EXT4-fs error (device loop1): ext4_readdir:224: inode #11: comm syz-executor: path /33/file0/lost+found: directory fails checksum at offset 1024 [ 324.527210][T20657] EXT4-fs error (device loop1): ext4_readdir:224: inode #11: comm syz-executor: path /33/file0/lost+found: directory fails checksum at offset 8192 [ 324.551780][T20657] EXT4-fs error (device loop1): ext4_empty_dir:3109: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 324.567032][T20657] EXT4-fs error (device loop1): ext4_readdir:224: inode #11: comm syz-executor: path /33/file0/lost+found: directory fails checksum at offset 1024 [ 324.582981][ T29] kauditd_printk_skb: 436 callbacks suppressed [ 324.583009][ T29] audit: type=1400 audit(324.632:29049): avc: denied { read } for pid=21355 comm="syz.0.4889" name="file0" dev="tmpfs" ino=605 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 324.584814][T21356] block device autoloading is deprecated and will be removed. [ 324.611189][T20657] EXT4-fs error (device loop1): ext4_readdir:224: inode #11: comm syz-executor: path /33/file0/lost+found: directory fails checksum at offset 8192 [ 324.633733][ T29] audit: type=1400 audit(324.672:29050): avc: denied { recv } for pid=21306 comm="syz.4.4874" saddr=10.128.0.163 src=47764 daddr=10.128.1.89 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 324.665603][T20657] EXT4-fs error (device loop1): ext4_empty_dir:3109: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 324.678948][ T29] audit: type=1326 audit(324.712:29051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21355 comm="syz.0.4889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4b8cefc9 code=0x7ffc0000 [ 324.701970][ T29] audit: type=1326 audit(324.712:29052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21355 comm="syz.0.4889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4b8cefc9 code=0x7ffc0000 [ 324.724960][ T29] audit: type=1326 audit(324.712:29053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21355 comm="syz.0.4889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7faa4b8cefc9 code=0x7ffc0000 [ 324.747899][ T29] audit: type=1326 audit(324.712:29054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21355 comm="syz.0.4889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4b8cefc9 code=0x7ffc0000 [ 324.770864][ T29] audit: type=1326 audit(324.712:29055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21355 comm="syz.0.4889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4b8cefc9 code=0x7ffc0000 [ 324.793943][ T29] audit: type=1326 audit(324.712:29056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21355 comm="syz.0.4889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa4b8cefc9 code=0x7ffc0000 [ 324.817078][ T29] audit: type=1326 audit(324.712:29057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21355 comm="syz.0.4889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4b8cefc9 code=0x7ffc0000 [ 324.840105][ T29] audit: type=1326 audit(324.712:29058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21355 comm="syz.0.4889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4b8cefc9 code=0x7ffc0000 [ 324.867430][T20657] EXT4-fs error (device loop1): ext4_readdir:224: inode #11: comm syz-executor: path /33/file0/lost+found: directory fails checksum at offset 1024 [ 324.912360][T21370] FAULT_INJECTION: forcing a failure. [ 324.912360][T21370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.925512][T21370] CPU: 1 UID: 0 PID: 21370 Comm: syz.8.4893 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 324.925609][T21370] Tainted: [W]=WARN [ 324.925616][T21370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 324.925628][T21370] Call Trace: [ 324.925636][T21370] [ 324.925645][T21370] __dump_stack+0x1d/0x30 [ 324.925667][T21370] dump_stack_lvl+0xe8/0x140 [ 324.925688][T21370] dump_stack+0x15/0x1b [ 324.925753][T21370] should_fail_ex+0x265/0x280 [ 324.925773][T21370] should_fail+0xb/0x20 [ 324.925789][T21370] should_fail_usercopy+0x1a/0x20 [ 324.925810][T21370] _copy_to_user+0x20/0xa0 [ 324.925834][T21370] simple_read_from_buffer+0xb5/0x130 [ 324.925916][T21370] proc_fail_nth_read+0x10e/0x150 [ 324.925943][T21370] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 324.925971][T21370] vfs_read+0x1a8/0x770 [ 324.925993][T21370] ? __rcu_read_unlock+0x4f/0x70 [ 324.926093][T21370] ? __fget_files+0x184/0x1c0 [ 324.926159][T21370] ksys_read+0xda/0x1a0 [ 324.926181][T21370] __x64_sys_read+0x40/0x50 [ 324.926244][T21370] x64_sys_call+0x27c0/0x3000 [ 324.926266][T21370] do_syscall_64+0xd2/0x200 [ 324.926281][T21370] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 324.926326][T21370] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 324.926355][T21370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.926376][T21370] RIP: 0033:0x7ffa63fed9dc [ 324.926392][T21370] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 324.926428][T21370] RSP: 002b:00007ffa62a4f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 324.926445][T21370] RAX: ffffffffffffffda RBX: 00007ffa64245fa0 RCX: 00007ffa63fed9dc [ 324.926459][T21370] RDX: 000000000000000f RSI: 00007ffa62a4f0a0 RDI: 0000000000000008 [ 324.926503][T21370] RBP: 00007ffa62a4f090 R08: 0000000000000000 R09: 0000000000000014 [ 324.926513][T21370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.926524][T21370] R13: 00007ffa64246038 R14: 00007ffa64245fa0 R15: 00007ffee649faa8 [ 324.926541][T21370] [ 325.131328][T21360] __nla_validate_parse: 12 callbacks suppressed [ 325.131343][T21360] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4890'. [ 325.164271][T21373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.172952][T21373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.372794][ T3519] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.410391][ T3519] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.470517][ T3519] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.510170][ T3519] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.521424][T21376] lo speed is unknown, defaulting to 1000 [ 325.556223][T21376] lo speed is unknown, defaulting to 1000 [ 325.570027][ T3519] bridge_slave_1: left allmulticast mode [ 325.575747][ T3519] bridge_slave_1: left promiscuous mode [ 325.581461][ T3519] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.589314][ T3519] bridge_slave_0: left allmulticast mode [ 325.595023][ T3519] bridge_slave_0: left promiscuous mode [ 325.600690][ T3519] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.680302][ T3519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.698743][ T3519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.714048][ T3519] bond0 (unregistering): Released all slaves [ 325.744980][T21390] loop8: detected capacity change from 0 to 1024 [ 325.775994][T21390] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 325.797596][T21390] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 325.809511][T21399] loop0: detected capacity change from 0 to 512 [ 325.819661][T21390] EXT4-fs (loop8): orphan cleanup on readonly fs [ 325.827529][T21399] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 325.845428][T21376] chnl_net:caif_netlink_parms(): no params data found [ 325.857062][T21402] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4903'. [ 325.859113][T21390] EXT4-fs error (device loop8): __ext4_get_inode_loc:4832: comm syz.8.4899: Invalid inode table block 0 in block_group 0 [ 325.905122][T21399] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 325.926812][T21409] bridge0: entered promiscuous mode [ 325.927659][T21390] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 325.932592][T21409] macsec1: entered promiscuous mode [ 325.942638][T21390] EXT4-fs error (device loop8): ext4_quota_write:7334: inode #3: comm syz.8.4899: mark_inode_dirty error [ 325.947033][T21399] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4902: bg 0: block 248: padding at end of block bitmap is not set [ 325.958054][T21390] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.4899: Failed to acquire dquot type 0 [ 325.973645][T21409] bridge0: port 3(macsec1) entered blocking state [ 325.988232][T21390] EXT4-fs error (device loop8): __ext4_get_inode_loc:4832: comm syz.8.4899: Invalid inode table block 0 in block_group 0 [ 325.990369][T21409] bridge0: port 3(macsec1) entered disabled state [ 326.003081][T21399] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.4902: Failed to acquire dquot type 1 [ 326.013376][T21409] macsec1: entered allmulticast mode [ 326.020745][T21390] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 326.025741][T21409] bridge0: entered allmulticast mode [ 326.035272][T21390] EXT4-fs error (device loop8): ext4_ext_truncate:4475: inode #15: comm syz.8.4899: mark_inode_dirty error [ 326.047704][T21399] EXT4-fs (loop0): 1 truncate cleaned up [ 326.052085][T21390] EXT4-fs error (device loop8): __ext4_get_inode_loc:4832: comm syz.8.4899: Invalid inode table block 0 in block_group 0 [ 326.070238][T21390] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 326.070692][T21409] macsec1: left allmulticast mode [ 326.079947][T21390] EXT4-fs error (device loop8) in ext4_orphan_del:301: Corrupt filesystem [ 326.084773][T21409] bridge0: left allmulticast mode [ 326.093558][T21390] EXT4-fs error (device loop8): __ext4_get_inode_loc:4832: comm syz.8.4899: Invalid inode table block 0 in block_group 0 [ 326.111412][T21409] bridge0: left promiscuous mode [ 326.116384][T21390] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 326.126149][T21390] EXT4-fs error (device loop8): ext4_truncate:4637: inode #15: comm syz.8.4899: mark_inode_dirty error [ 326.137527][T21390] EXT4-fs error (device loop8) in ext4_process_orphan:343: Corrupt filesystem [ 326.138354][ T3546] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:35: Failed to release dquot type 1 [ 326.146498][T21390] EXT4-fs (loop8): 1 truncate cleaned up [ 326.170074][ T3519] hsr_slave_0: left promiscuous mode [ 326.175910][ T3519] hsr_slave_1: left promiscuous mode [ 326.181635][ T3519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.189074][ T3519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.196717][ T3519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.204131][ T3519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.216246][ T3519] veth1_macvtap: left promiscuous mode [ 326.221842][ T3519] veth0_macvtap: left promiscuous mode [ 326.228598][T21415] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 326.237642][ T3519] veth1_vlan: left promiscuous mode [ 326.243549][ T3519] veth0_vlan: left promiscuous mode [ 326.340643][ T3519] team0 (unregistering): Port device team_slave_1 removed [ 326.351026][ T3519] team0 (unregistering): Port device team_slave_0 removed [ 326.441380][T21376] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.448560][T21376] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.456935][T21376] bridge_slave_0: entered allmulticast mode [ 326.463041][T21428] loop8: detected capacity change from 0 to 256 [ 326.463500][T21376] bridge_slave_0: entered promiscuous mode [ 326.477934][T21376] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.485001][T21376] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.492267][T21376] bridge_slave_1: entered allmulticast mode [ 326.499181][T21376] bridge_slave_1: entered promiscuous mode [ 326.537173][T21376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.549054][T21376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.573635][T21376] team0: Port device team_slave_0 added [ 326.586129][T21376] team0: Port device team_slave_1 added [ 326.603201][T21376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.610789][T21376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.636808][T21376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.648466][T21376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.655417][T21376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.681875][T21376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.710474][T21376] hsr_slave_0: entered promiscuous mode [ 326.716854][T21376] hsr_slave_1: entered promiscuous mode [ 326.722839][T21376] debugfs: 'hsr0' already exists in 'hsr' [ 326.728607][T21376] Cannot create hsr debugfs directory [ 326.950801][T21376] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 326.959327][T21376] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 326.968319][T21376] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 326.977615][T21376] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 326.992282][T21376] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.999475][T21376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.006824][T21376] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.013980][T21376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.041406][T21443] loop0: detected capacity change from 0 to 1024 [ 327.044851][T21376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.057060][T21443] EXT4-fs (loop0): orphan cleanup on readonly fs [ 327.063662][ T3549] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.067844][T21443] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.4912: Failed to acquire dquot type 0 [ 327.082228][ T3549] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.082272][T21443] EXT4-fs (loop0): 1 truncate cleaned up [ 327.101753][T21376] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.113408][ T3549] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.120503][ T3549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.147722][ T3519] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.154870][ T3519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.206511][T21376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.296423][T21376] veth0_vlan: entered promiscuous mode [ 327.304191][T21376] veth1_vlan: entered promiscuous mode [ 327.318964][T21376] veth0_macvtap: entered promiscuous mode [ 327.326622][T21376] veth1_macvtap: entered promiscuous mode [ 327.337797][T21376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.349266][T21376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.359958][ T3519] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.389249][ T3519] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.400961][ T3519] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.418465][ T3519] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.444906][T21478] loop7: detected capacity change from 0 to 4096 [ 327.451630][T21478] EXT4-fs: Ignoring removed nomblk_io_submit option [ 327.532548][T21486] loop8: detected capacity change from 0 to 512 [ 327.539624][T21486] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 327.550053][T21487] loop7: detected capacity change from 0 to 512 [ 327.557550][T21486] EXT4-fs (loop8): 1 truncate cleaned up [ 327.564448][T21487] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4918: bg 0: block 248: padding at end of block bitmap is not set [ 327.579504][T21487] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.4918: Failed to acquire dquot type 1 [ 327.591740][T21487] EXT4-fs (loop7): 1 truncate cleaned up [ 327.736752][T21492] loop8: detected capacity change from 0 to 512 [ 327.743354][T21492] vfat: Bad value for 'gid' [ 327.747874][T21492] vfat: Bad value for 'gid' [ 328.123091][T21512] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4924'. [ 328.338546][T21518] loop7: detected capacity change from 0 to 764 [ 328.345127][T21518] iso9660: Unknown parameter '' [ 328.352521][T16624] IPVS: starting estimator thread 0... [ 328.359616][T21518] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4496 sclass=netlink_route_socket pid=21518 comm=syz.7.4926 [ 328.444927][T21526] loop7: detected capacity change from 0 to 4096 [ 328.447448][T21519] IPVS: using max 2736 ests per chain, 136800 per kthread [ 328.456357][T21526] EXT4-fs: Ignoring removed nomblk_io_submit option [ 328.501836][T21529] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 328.505400][T21531] loop8: detected capacity change from 0 to 1024 [ 328.524822][T21531] EXT4-fs: Ignoring removed orlov option [ 328.530746][T21531] EXT4-fs: Ignoring removed nomblk_io_submit option [ 328.558462][T21535] loop7: detected capacity change from 0 to 1024 [ 328.565143][T21535] EXT4-fs: Ignoring removed orlov option [ 328.649373][T21531] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4930'. [ 328.659462][T21540] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4932'. [ 328.696449][T21531] ================================================================== [ 328.704600][T21531] BUG: KCSAN: data-race in sg_common_write / sg_finish_rem_req [ 328.712152][T21531] [ 328.714462][T21531] write to 0xffff888119c4931d of 1 bytes by task 16624 on cpu 1: [ 328.722161][T21531] sg_finish_rem_req+0x11f/0x270 [ 328.727089][T21531] sg_rq_end_io_usercontext+0x38/0x1c0 [ 328.732540][T21531] process_scheduled_works+0x4ce/0x9d0 [ 328.738199][T21531] worker_thread+0x582/0x770 [ 328.742772][T21531] kthread+0x489/0x510 [ 328.746827][T21531] ret_from_fork+0x122/0x1b0 [ 328.751672][T21531] ret_from_fork_asm+0x1a/0x30 [ 328.756423][T21531] [ 328.758740][T21531] read to 0xffff888119c4931d of 1 bytes by task 21531 on cpu 0: [ 328.766366][T21531] sg_common_write+0x961/0xc30 [ 328.771131][T21531] sg_new_write+0x7b6/0x890 [ 328.775713][T21531] sg_ioctl+0xb81/0x1360 [ 328.779942][T21531] __se_sys_ioctl+0xce/0x140 [ 328.784524][T21531] __x64_sys_ioctl+0x43/0x50 [ 328.789104][T21531] x64_sys_call+0x1816/0x3000 [ 328.793767][T21531] do_syscall_64+0xd2/0x200 [ 328.798282][T21531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.804162][T21531] [ 328.806463][T21531] value changed: 0x01 -> 0x00 [ 328.811116][T21531] [ 328.813443][T21531] Reported by Kernel Concurrency Sanitizer on: [ 328.819584][T21531] CPU: 0 UID: 0 PID: 21531 Comm: syz.8.4930 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 328.830944][T21531] Tainted: [W]=WARN [ 328.834726][T21531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 328.844761][T21531] ==================================================================