last executing test programs: 1m26.006842731s ago: executing program 4 (id=6752): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000440)="b9ff033168440372b89e14f00800a25e4113c182879e029dbaeeaa7caa23c54957f1", 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendto$inet6(r0, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x5, @mcast2}, 0x1c) capset(&(0x7f00000002c0)={0x19980330}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000224effffffff", 0x58}], 0x1) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r3, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002b80)="b2", 0x1}], 0x1}, 0x40488e0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000026c0)=ANY=[@ANYBLOB='\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) sendfile(r6, r6, &(0x7f0000000000)=0x9, 0xffffffff) 1m25.312748267s ago: executing program 4 (id=6756): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg1\x00', 0x0}) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000580), &(0x7f00000005c0)=0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="10031200e4ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000002440)=@delchain={0x60, 0x65, 0x4, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x9}, {0xfff2, 0x6}, {0x6, 0x5}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x3}}, @TCA_RATE={0x6, 0x5, {0x49, 0x4}}, @TCA_RATE={0x6, 0x5, {0x3, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_RATE={0x6, 0x5, {0xe, 0xff}}]}, 0x60}, 0x1, 0x0, 0x0, 0xc0}, 0x24013) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x18) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x30120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0x494, &(0x7f0000000400)={0x0, 0x2003f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x6, 0x3}, 0x0, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r1) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r10, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r6, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, 0x0) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) 1m23.755992675s ago: executing program 4 (id=6773): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r4, @ANYRESHEX=r5], 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b165"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{&(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f00000002c0)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}], 0x1, 0x4004040) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xab) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r6, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000300)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x1d, 0xff, @private0, @private0={0xfc, 0x0, '\x00', 0x1}}}}}}}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) vmsplice(0xffffffffffffffff, &(0x7f0000000a00)=[{0x0, 0x47}, {&(0x7f0000000080)="9d", 0x1}], 0x2, 0x9) 1m23.648027875s ago: executing program 4 (id=6775): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$rxrpc(0x21, 0x2, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000000000000f5023000db21000000000600", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES16=0x0, @ANYRES32, @ANYRES64=r1], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file1\x00', 0x0, &(0x7f0000000640), 0x2, 0xbdf, &(0x7f0000000c00)="$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") epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x3, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r3, &(0x7f0000000b80)=0xfffffffffffffffd, r0, &(0x7f0000000bc0)=0x2, 0x1, 0x0) syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xf96c, 0x3010, 0x4, 0x18a}, &(0x7f0000000040), &(0x7f0000000080)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000cc0)='./file0\x00', 0x30050bc, &(0x7f0000000c80)=ANY=[@ANYRES8=r1, @ANYRESOCT=0x0], 0xfb, 0x11fc, &(0x7f0000003680)="$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") recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0) r5 = creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r6 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r6, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000c40)={'batadv_slave_1\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r7, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r8, 0x0, 0x7fffffffffffffff}, 0x18) r9 = socket$rds(0x15, 0x5, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x1b, 0x5, 0x458, 0x0, 0x2e8, 0xffffffff, 0x140, 0x2e8, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, &(0x7f0000000340), {[{{@ip={@private=0xa010102, @broadcast, 0xffffff00, 0xff, 'veth1_virt_wifi\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x88, 0x1, 0x12}, 0x0, 0x108, 0x140, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth1_to_bridge\x00', {}, 'pim6reg0\x00', {0xff}, 0x5}}, @common=@ah={{0x30}, {[0x60, 0xf]}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @local, @loopback, @icmp_id=0x66, @port=0x4e22}}}}, {{@ip={@local, @local, 0xff000000, 0xffffff00, 'macvtap0\x00', 'batadv_slave_1\x00', {}, {}, 0x1, 0x0, 0x10}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x4a}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xc, @private=0xa010102, @local, @port=0x4e22, @port=0x4e22}}}}, {{@uncond, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@ah={{0x30}, {[0x6, 0xe9], 0x1}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x17, @private=0xa010102, @private=0xa010102, @icmp_id=0x67, @icmp_id=0x64}}}}, {{@ip={@multicast2, @local, 0xff000000, 0x0, 'sit0\x00', 'caif0\x00', {0xff}, {}, 0x73, 0x1, 0x5d}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}, {0x411, 0x800}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xe, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @port=0x4e23, @gre_key=0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) bind$rds(r9, &(0x7f0000000c00)={0x2, 0x4e21, @remote}, 0x10) sendmsg$rds(r9, &(0x7f0000000080)={&(0x7f00000017c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@mask_cswp={0x58, 0x114, 0x9, {{0x9, 0x660}, &(0x7f0000000180)=0x80000001, 0x0, 0x6, 0xd, 0x1, 0x3, 0x3a, 0x8}}], 0x58}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000b40), r5) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRESHEX], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r11, 0x0, 0x8}, 0x18) 1m23.405059818s ago: executing program 4 (id=6778): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000400)={0x8, 0xfffffff7, 0xfffffffe, 0x2, 0x40}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) r3 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@abort}]}, 0xff, 0x258, &(0x7f0000000780)="$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") socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x14, r4, 0x200, 0x80000000, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x2904c, 0x1, 0x10003, '\x00', [{}, {0xffffffff}], ['\x00']}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2100, 0x0) mknodat(r3, &(0x7f00000002c0)='./mnt/file0\x00', 0x8000, 0x1) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newqdisc={0xa0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x70, 0x2, {{}, [@TCA_NETEM_LOSS={0x34, 0x2, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x4, 0x1, 0x4000, 0xfffff3e3}}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0xf, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0xa0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x16, 0x401, 0x80, 0x3, 0x2545c2a0a0705b4b, r8, 0xffffff74, '\x00', r11, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x50) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f0000000040)={'wlan0\x00', 0x400}) openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x321000, 0x0) recvmmsg(r0, &(0x7f0000001f80)=[{{0x0, 0x0, &(0x7f0000000100), 0x1, 0x0, 0xfffffffffffffe09}, 0x8}], 0x4000173, 0x40012102, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m22.607819004s ago: executing program 4 (id=6786): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) socket$inet(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, 0x0, 0x0, 0x8fd, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0x5, 0xfffffffffffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x100a, &(0x7f00000009c0)=""/4106, 0x41100, 0xd}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0) (fail_nth: 3) 1m22.607291724s ago: executing program 32 (id=6786): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) socket$inet(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, 0x0, 0x0, 0x8fd, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0x5, 0xfffffffffffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x100a, &(0x7f00000009c0)=""/4106, 0x41100, 0xd}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0) (fail_nth: 3) 1m20.469461727s ago: executing program 2 (id=6810): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg1\x00', 0x0}) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000580), &(0x7f00000005c0)=0x4) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000002440)=@delchain={0x3564, 0x65, 0x4, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x9}, {0xfff2, 0x6}, {0x6, 0x5}}, [@filter_kind_options=@f_fw={{0x7}, {0x3508, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x5}, @TCA_FW_MASK={0x8, 0x5, 0x2}, @TCA_FW_ACT={0x1044, 0x4, [@m_sample={0x1040, 0x4, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x6}}}}]}, @TCA_FW_ACT={0x74, 0x4, [@m_sample={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3ff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xffffffff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0x4, 0x2000000f, 0x4, 0x4}}]}, {0x9, 0x6, "c0a6795d44"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_FW_ACT={0x150, 0x4, [@m_sample={0x14c, 0x1c, 0x0, 0x0, {{0xb}, {0x94, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x4, 0x175, 0x10000000, 0x4, 0xf93}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0x80000000, 0x7, 0x9, 0x7}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x101}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0xffff, 0x10000004, 0x476, 0x5}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x80}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0xfffffffe, 0x10000000, 0x0, 0x6}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffffff3}]}, {0x8e, 0x6, "23ba14f20120fda1bfa1fedf764d7e04297f4d802bc9c8557fcf902cb5cdc69ec801dc9a352e6c2c1e8fbd6e4ea53a90c130bcc703406fcb0078ff1bfa82acca42f2beec647cb059e398d6e00da0e2b3920c571fae624d31f23ce051b041e1f8bb8ed8d6b851d4210d56376a13e03d4d66b591b2df26d30e87c372d78347e3723adfee069e625bf4ea1a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_FW_ACT={0x4bc, 0x4, [@m_csum={0x8c, 0x18, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x4a, 0x8, 0xf1, 0x3}, 0x23}}]}, {0x42, 0x6, "d67106418650a999ba1e4572536ffd82940129c32211446eab91ba435704dcb63454d1ebe0f081898a9794d6caf80d89a94b7d55aac6dca2d3c49090f791"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0x144, 0x13, 0x0, 0x0, {{0x8}, {0x90, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x5, 0x8cc3b0, 0xffffffffffffffff, 0x6, 0x8001}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x3, 0x5, 0x7, 0x913}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x3, 0x8, 0xb, 0x81}, {0x8, 0x8, 0x3, 0x6}, {0x5, 0x2, 0x15, 0xfff6}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}]}, {0x90, 0x6, "4433e99a62bca5c542624c86a2ebaece5d4232f65b738b22e3dd696b556c783280293a43603ee7e1974140b114e4068b28a66a6d0a2b46e75292ab6ed5bf141abfc05fb89e3c1c80133bc4773b2de1a73387074418d92770ccc1375de08fd2c0c222482db49b5b058e40f8af142099bcecdfc18c007cce40e355d1b5d3b29972f0ab6cc393eade8a2178725c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_bpf={0xe4, 0x17, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x44, 0x4, [{0xdc2d, 0x8c, 0x3, 0xffffe8a5}, {0xe4aa, 0x1, 0x7f, 0x2}, {0x1, 0xf8, 0x8, 0x1}, {0x7f, 0x0, 0x3, 0xfff80000}, {0x4, 0x0, 0x5, 0xfffffffb}, {0x2, 0xa, 0x78, 0x81}, {0x9, 0x1, 0x6}, {0xffca, 0xf0, 0x1, 0x6}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x5f, 0x6, "2574c3034faa58f50e147a73e7df8b912b65fa0498a9b179fa61f0ccc00471126e987f15a8d11ce54ba3dc23e1abfebccbae2cd742c3a8a882c2efd09ea7eb3005effcf923e068ce6b18826eb983f9f1c37ced472a4d3eccaee0f4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_skbmod={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_simple={0x1bc, 0x14, 0x0, 0x0, {{0xb}, {0xac, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, '{&\xde)\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x1, 0x2, 0x5, 0x9c18}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'GPL\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x6, 0x20000000, 0x4, 0x4}}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffffffe, 0x59ae85e4, 0x20000000, 0x4, 0x4}}, @TCA_DEF_DATA={0xe, 0x3, 'syzkaller\x00'}, @TCA_DEF_DATA={0x14, 0x3, 'kmem_cache_free\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x1d0, 0x6a, 0x4, 0x6, 0xd}}]}, {0xe6, 0x6, "3e3c7d61657d38dc27f6560d35bf2705909eed4c0db79858ed60234738bce5225751ddc04e07d21d4bb8c27f8c0e69b18f8ccb57f09114a117f33cae0cc893ad61d8670a54d97dc1e9c41495b785cf1ba17a8aadbfa126c7267e13ae8c117a05f69ce5175fe5b6abaa526c3d14d0bc6ca1e4cc70af6ed531296ffeed8619b7e5a0e3448c623c6268596a96cbe7d4aa00a1fd28d85ab03aa7abfd05588fa9b28669129dbcca31b1a52edad368d62609889e77aa2b44e2436fdf621e00fb284fa7bf958f4ceb792d9a1d44b25d6c2fd888468d1854bc303ab1b5c5be1258ea8bdf29b5"}, {0xc}, {0xc, 0x8, {0x53b2eed20f711939, 0x3}}}}]}, @TCA_FW_ACT={0x1e28, 0x4, [@m_simple={0xf0, 0x7, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xa, 0x3, 0x0, 0x8, 0x3}}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x4, 0x1, 0x6, 0x8}}, @TCA_DEF_PARMS={0x18, 0x2, {0xb, 0xffffffff, 0x3, 0x10000, 0x4db}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x7, 0x0, 0x0, 0xf}}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xffff20bd, 0xffffffffffffffff, 0x2, 0x7}}]}, {0x4c, 0x6, "b1ffe2a805295ee1a2fea1adc078e0e8e9ba68926fffa13b8e22f6b5b5ac0fb7ef84b3951cce0edc68ce5e534145ff47d67cc203e1a5dc6c32fb3f9f2c7478860bd7ab8d520366df"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_connmark={0xc34, 0x4, 0x0, 0x0, {{0xd}, {0x4}, {0xc04, 0x6, "da296779616fbc176dd022da429d28c658e4586585bca9a5cbbd420b61e4bdc57f47882d2ddc43e3c7ffdacd629db1b327e2ea91e473c9666eada520b8f8ca431ad4676d4c8022e02546cb9bcd9372fef4b996a1e45f84428bf569d7e2460a6a66a99e6ce665802233eaff41cde19a4b775d82bb4f49eaf5ce9111d4d2d62f77ce6f02714e3252432d9dcb845f0e2043da9fc42fb43719f7e736190805ff3f4a57d77f2f486cf343983764ade5ce0647e15d31e1332bc9ae912365316fdd44dbf0171d784a836bb2986b835399bb94ec1b82a49a927bd39abc57db36464575b7a12b6c9b9edc7f635dcc33c246506ba169cd9d7924efc3e6baa6a7a48acebadf5a802495dbcfb04e7986568bfedde4542d35d744ed069dc8337620d0180ec118404682e6f7a3cfb74c9cc5eb6835bf651314bf11c13028c56bdd79fca8e5d3e7ddfa6c66ecbf1b5f76ba422642a13ced75a35399ede68c8e85c7ab41ce3ddf21973339c3ac9cde34cdfefe6135837e1936adb4235eec6c31f52e2f503abe89f0279f8f67f8ea60a70ad9a7f1aada43f716a80e21bbc64e44354ba97533496d2254ac6982396c154fbf975139955cb75bd74ab8ee1285887e5d23599af5c4074ff8e040dae75d89ab518fc512f1e8be2dc4aa7fafe74925a641bb62380946ca4cdca0363ab6618ab0038bb52e778c44bd8e1eed707c43b9ec95580cd3eebbc9f1ac41792acb2855a36aa7a7a58647bdd6d48322e86bfd1c31589f84f4db399bfac9f03e0d8b6f6d38742e0bb17f119d939a4f0535b0b96e4f1238123ef7e508beaebb73c2bf182e9fa17877d0ab7b7f4586ca2b470faef9dd5666fa2442910c1717dd1db408aafdf95ea7a1eddff7033705ef98be7f5642aaf20f0a5f46f249fe61bedae200a1d03330cffc92eeec72b1d3113174dbc250ce54b0f95fea741d5ecc7e155aa1dda6748a01e77708a64762dbeb4e4de1bdaea044296f33809fc71d0576b79e5493a7bc695c64267b90107eac7b9c8f24d153573c626398e9215f8c9cc71ccde2398c52440c40c1472a89a5eca0cfeb71cf5871e71d94bb2eb6d79c940e4e35dc70865224fa05f1a1f502aa4fde22ad5695d7e6c6d0d81683ca23adedf1fc6c6cd7b0b59ddcf31eaf7025b67d6d8ad1895f0a298f4f6452f6f5c93fbf07eba312301dcc1c46fa598e6286728c4c3498b183ffe945491d019e665bdac5ab5f0617c0fd7363acf1f90226e53a4cee210abaa67330707f77b9fca00f437e88d690624e0d8e46b7fb739505575d1220cf9b1329663c11a9cba477c1d350ab40781d33f721c78997d63b01266293021f1703402e6c2c3c3642b5b4e8c7df9514aefaeac0f17b9f438aa4b7ffb9fdcbb999158bc1c49deb99ad9fe50581381d3ce3947a84785d30e4540e722d187635aae9d794317ec29ded82730ab54cde5255220957871f180939562918e612aee64dfd61bb65efe3757d94fbb6a845fb8a90b8090adf4128768ce2caff41f7e8586ca1e3b6917ef170ff14fd657abc0157b4a84032130f0eb4457edbde3bb2575eac7767e7cb1cb3252819e914575433b3067700c106266990eceea3485c3c2f5de894cb0334f15612e8a0cc329d21ae2a8bfcad7928dee75e7b31f7cb9934aa9383bd8749d19e1fc759f5f2589dc4061886e28fb442c808b4887a7620f6065a1ad68887cc2dd4782e84bc18cd0d3e79701fd320ae3e27cad4dd2422adb81fcdcf2ed32d502c6ae38baaa2d09701fd1abca59c9ab65bf5f56ce72b9b8b57b6544a4fb0be56cb53cd0d2a443e838f8be4f44b048ab53ba608c384658a1a521828c9a0a304c605286441786cd7c9df0317249eec51f462225840daa40f8cc627f1762620dcdb5d377e8bda24cceb5fce94af753a841d42e4c2feb0c15c28ee1fa9a227a01a108b85f72b4800ad92b5d84765ace254d86d1d41ad2a19bbdf1602a412d6b3cd9599edec396903726e6c0a2921595500a3b4ea8e320607503d58549f1cb45c850c83516d37c3ce28ed94d9f3b17e26d0b7679dbb65c1b28455de0f50524c1f9412b32b0d51d28a19dc7bd0cc057adca047c9a038241f7ebe3fb2488a68922a8ec6216e984a4c9720c2bcfc9e55a5bf367c5ebbb19a861d38d6ef5e0f3b8c41afc31d97079f388ca25c5fa76195c26ce4b67892dd64e4664665e5238d030c4e45b82167e23f063a1a73e231ae3d779b8ec4b781c7a7cc1c24d682ddcfd1beb37713b9000df1ed798a150eff452d59bb9a6153bb6762dfe996f903d5043e994dcfb69b0581b08024cc1274cd71ffc530f7a12fa38e3082721893a564be94620d9dbac75193bf4126cf6324118d34cae0beacd7c264791c3303b465546396c33d0b9221a55a8e46036ccaf95aab54c5f58f991c9106b2b69fac639feb37a029e60d9bd41ac2e37fabc6dcaa12c356c94de19b381dbbfa4075d37519aa2eb59946e0d4381fb320c5ecb15b60617216653fa3b6a409cd147b4362baf7679021132d08071a7d830a907975d59af577951e1bf5f18c254c9019afac9863b9c2381d4938118bf0c06220fc3353a35f94add72cfd83e0ec3bc06328e7d392af00dc11a4ecba2e9b0c724a9db325d39d9a746d596ad308ae6df51c8804e1cb634994de181165b521c992a71d6c2684e8ca4f4323030a5ca4c806150b3e1e2a9d9612a2c9f7fdc994e4069d593bf897bc895d80b40200dc20916d6451b3968b1588b454a7bb1ce4554d3f9de81e6283f904d8d1485a4e76e4a40b4fa32b5aeaa3fcd3f4df051a1e13bd4fb36331623ce751e4837ebe7bb915c7edfd3a8addde4f249a0a97e27a88255625feb2e33f7f42cc880a9ae994bec751b92716290aaf007e2673ea4c2708124090e2a330f693eb190f48e3e46fa4d6e344bc15cf54e5ea48c4b5b22ea91c99761e1a338c276930bf3d15bd9102b1c315e0e1de3ce69c2ec827d766f21ef27837875784eba4cf3104a69b47214a76e03693908273a384e2d826b61c1d876a0f4da581bfe563892df80b00c2ce89f89385adf8ed83524a12ecd79e88dc24723ee3cf41307e2150d8db0dad308eaf7e913bb123c12fbdd6668e4810f8c8bb00ea117fe7ee66c196d043e16fef090fd74bb82c2834e2223887389d25a0fef553f89424301bb5a0275ba2c104ec8035bead443fc1cbf6d7c6fa7bb4f2203886cd4dd40813cd9eafee6c83ef7ac844ba3ced9e735801674994e2d98fc5162d0a3a195698bd93e023645b54431c028468b90fc5f72f8f07d0e2ca8b43f5567fb98a66b962f083f17a67a9411211964d66c6d894b794eda8a5d298e55983f592ca2264e3dacc923a9d470e442d677a1d9727bf8db3cbba3ee20c605218d3a44f3cc8f9eac60d05580d98fb78f641ac0ea9adb79f67542e57491d4b65155539d45a7ab9f6a6aa2b4126b2debfc4039b0cbd11adfe47f7290311d051b5ecb199ebbd4a8b03854ed7e7035a70dbfba27acbd06a6ddf2e08ebcf3224df6422fa8154bf30a1de5f4a945b670a03d67bc128aa5a991cffaa306f3adf3ebe6d458bfbe94ac9a3b4e199fdc48e935057fc69f42114a65fba385ac76429c57620d89736e4280f892c3c5c7763ea4398bbaad82064a4eedf25a53ce9eecac6612e4822221da37c765e785a61f143b734ae0fc1b4d239cf5153b79d7b60d0c98c434ca9f410d68c1dfd9269772d28e89e20eff46c8a5091741e0bf0f59ce99dc635b718b3a225a968506f56fcb0d2ce256f9bfbb814f412ab3ea6dbdc5a3ef8e1bf2da970552b4324d6b99ae155c179dc887ad3e63b861d8f99d784e612dd547a05962af6b9fe36483556cbe2cdd342d5f75134d3e3629d801e9407c17a6be633969118bf0236dfb81361eded4f595f1deb64e5c90a4c52b64ed64ccde7a579f6da74049d4d1c997deb41daae908ab819cb1b751aaa68db0554d8a3c9ba9af4219868f431b022ffb8dea127c089faf908588fc7a145bc74c7b654703e999c717b35e04ad615b89d830355c1f18a162669223334a358db50c0b620445139b83e33e8a12ff93b9f86a45967853b2a4f3c4d7bbd15edae4dc32b905694d0c1c10ac12ee6062177c56ae80cdb9ed1190144f10951ba9c1c5b346e5f80ff5ecc939c5a6864f17b729e5bcc0e2e2acd56c1e73af3d1c4f6d61b03d7db6aa7438627595e350b7065b15dea0169666abe8359eb99a86c11478de1bec3fb01100ac5d93395eecbf6830fab5b87472c995fce13675f2ad83d2668b0ed7f20688f45376da4c533409db9238505495cf9028df4998439bade0f105b5fca97c4e36adec061db6e057db461d7f4f3df8aa2af8acc150acf1d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2e22aa26f0e76f94, 0x1}}}}, @m_simple={0x78, 0x17, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, '&&[\x00'}]}, {0x41, 0x6, "10e0e004931ad57bac25c083cb135c0971077034c33313a70aeaaec0ee3b7509688f3eead601dd4e1ef7937c3d12d571e0cd41691100cb2b340bf524a9"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ct={0x1088, 0x18, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "0eb595237867120c753952703c3822b8"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010101}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @loopback}, @TCA_CT_ZONE={0x6, 0x4, 0x800}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x5}, @TCA_CT_PARMS={0x18, 0x1, {0x40, 0x9, 0x3, 0x401, 0xf49}}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @empty}]}, {0x1004, 0x6, "68260920cc745f0655aaa21c0b95961be713bd39fc71a420098370f588a23b6f9f15229cbcbf4b985476a73b24030b6ee8b01f8d5f6ab6d23a6b3563c31a4cd420fb57fd37237df12fa655dd44f2c51bc2ff3c8c06d619c571d7495f71d984bbff609a28547c36de89086fbb1057caf29fa33384bea755f25b866c6ba92d1dfe6854be241fe270ec2459103d24c514885da7ad6b5cd1757a09701b987cf6d5599bd9b2b022d96b5f800d104cd28809f5226393df444069ce33179ea42387241d91f39513a121bde0a6beb0bae4d800432637fe69b551dde33adf822c6e182e3fbf34a7c1893b12a2048bdad71d4b1a25ff7a9dc3ce88641e53da8ec23c1b44b33ebae571a953c2c1e6793f60aefc1774990bc5437f8a3e86b8501d49b44b67c6a6c6118bf3de380a8738a3906093ea35769a962f5a56fa37f87c7c08ef5892eea45451bc0aee9b7d4e3b7c0cf9467e300578ec6428974ed0f9fd673042db5aa44be389e45467da7dd9674afcf5324925c1935f807a32f18dc7c65bdccd663860157eef17268b6d7f361573c7e128d70bcf9c2ea3d1ceb351cf03c6584782659432d3615bce9c7c7de2dd55f7f4b713e21b3f4bb9a8f4cd6b6c4241dd78d51fef03f4890b07cbb237cc12f498bb543e892740c72366a9ad9cf69c250ee19f9d83e3604ca6cc7dac5ff31f0f9891007756fdcde93ce501a325af79c42d485a843cde8c19a1ec004fc2162fe825d9e01e4bd437eefdc08776fea1f8a60365d7a55f6221e0128d48f0a25cc0ffb2ace0ae92fc60df19d962ce1bda73a82ebb4a1c5b6baa2934bd77cc85a7c4251b0f90c1dcf348bc3c6ecb09ea88a3f3557ac518e7560e98b9d9879ea47b9c1a73c6d9f642b8081d8656f887e3004a5cd29e30a1e93ae42f1b3fc5ca46036f0280dfd9d42111350b4e81dd5da8ea6c7836e12efcf706279a65c74ec0e2f725e10b4a0d9d27946f606831e861ed542c3dc7d178721242b568a035dfd25674dbfe513442c8be93377947b35cbd0dbd397d9ec5d853a6dde565e605d795d1f607d94ad3f628fb2a91cca97842f7b6cf0eb88c8f665a1330af7e0c1650602332bfc597b5514fa7a0716b5de156ce83d9b5d30cadfefdb03f6a4a901e7e671dbd51b28bdc651bcb96618b96646a2b2a81deec6dcbda206dc7a3216855ec05d3a7b54bc57ad56f1cd6096ef7bc21961f60368761365344ff96d8ba6690308cef63c803a251923ab1f21b521743170e57f499e5cebe2ea09d09c99311658e030f1ca4dabc6588661883d1148a713afdc3c28078f1d872c7787663f2163d1d5bace36778717d5f5e0270f38cc3fd151fb9e05f5624e6a5b2e90b1e54b4cf0b653b559f2832fa1b9d34a6a236e2d2276c9a1dd0b8cbb76da2de3c824e9fd321dcf42331005fc69de422430c8836b4b82865d5bc5f21cc398a5ace8cec9a45f4bfda942406ac44a24975537b682600e3bccd66739d3e6dd441529b297d7229938d9b95ce4e8e60eb8724f0068db039cb1b5eb9e35f942b79e9fe2ce308581310c91f4a91777e6e43301d3ab1e0066af811b44c6ce29320fe124ea8efaa5af80ce3ac4f495b6041549f183785d67bed062f2de80acb6979f7f19dd3d32ee06033b96a17f34b91ae6cc19cfde8e26d7434aade83c5d2960782e4d1c2ad05d1023ebfa587e79c88829a4fbac0329f60e14607e34fd7bcf3379546b51108ac654a9bb99b55fad21cfddde86af228a4aaad57ef6685b171c6639b04d819d6bd76a89c6d700a1f5098a48c8eb31348d1d07c30c9c6609b67e18dc395eb4ade715085749a208ab7c8aa2f6a601ec92ff41d82a6e21406d1ecd724b6b58c2bbb1b9e05d33a30a964c5d1813593d589147131cfe6a14ad4136c1467b492640956ec9288cf9d1166932d338a5375148ff88c809a0bc7992d021d06e5c85661ccb9bdf657ca1c4374120397e56fa5b3c0134d8bb1c78fbd622255085e3f05de828115f5f95523ec7f9b95a8cf94c388fe5e69924a8b5e3b490461176bced988401f51385a79075293ce8b4c6c769ebada30a5c2f3985e20db0e49d2dcc69ae5937b992f916e366bab53790e86714739d16420f07d58f2ae343bc8904a9d7af13485390939b0660c0a606ed74fc9b488a92e612fb0a55f30f18311290a6b040516065e0fedd7dcac2dd90de541ecc505ded6a16e66a42e7a7fe0dbae50e2546c3c1de4c429e8e237b32e04e6f2c2eb5c2e619eeec5726e570161307d3f2313d058d8b44453abdbc57cd47233b14bd6d670928ca14bb03473cec5b5fa6c14ad44a07b93d17559e65cbd34ae61a82e3ea9dd35dfbeda149882b71251706c26c141dd3e86761f3e62258cb0b1b5f4e564f5e410324fc114b4ddcfde2fc122b893ef6c06b77da314aba8ccc182cf5a9cec14392026bb316b2e54be7562ab4a7fc547aa848b9dced745ad69376e8b277bdfd16b69f68736c09c1f7577bdf306780e1a0dff44812437c30aa27fcc76fd0b3a78d917f3ad3ee38ee9d1ddf7755a339a7736afff636d704be7188d0b94c35926c537b6664056f5bb2c84eacd457a88a2d70e8b3ceb0a1f3f847451fcd98c384d4694e1c8911b194f68e924f56782f79b0532ecd7468a33e2797751f9d409cdd7271929a831751c723c60e4b600f6463720b4e2e31115e6d0bf2a9670e565cd33777395991678576dec2daa0bd3185ebb6965f9d4e591144541e77ce3d2a600fb4b554f6f565dc1893638f8c51869864a6d4bd1a3ba1f5e261a70fd11ba1497cd23e8f88751896aadd8aaeac76898b0fdb8cef7177d864dafa367c10d471aef33855bf8103d645e95a7cfbe3fcdca2c5a6252815eefdc5aad1bba0b1f8c88c9000d7977918e0c82730d0e03963845d7937a972b4f4d27453622b75d2964ecf8ee75a7db72f3fbcb9026f5615fe75b5d3fb940d1e6f8af8c60677ffdf853b7c1c2733b2f7bb944fcce73bf3de24776072981cbceeb014281255ac958fc453036804533931b87ecea64d3fc897b04400dd3ee2e7839960852c9a0166ec9f7ecbc4c16f7555149b644614f9f0545c0c7b93970955859c2fe5a8f201b3190fe9604bae9cb03e79a57ff6c46a317f922f5b9d154240a93c3023986050bab2c7664405cbb00d872ee6b53d2f5e026f87ecfc2db6d9f7bcafcab70c76b0d594b7096d75adbeeadb5f1911fd066b5b8327a6edc3110c3e16f2f7bc6832158817433b32e223f7285d1200491387dfaeacc41451bb96d1430f535a2b82a3fce91d3f1d531eccd9bbee780b95599f4971a0873e4b13f98fa337941cb4078f95d64ed87633b2eab2236581cb94bacd5de3df0fecbc6dccf727fb09ff1070771f38cb3df52b1800399bf7c29e5d16bf737c0cd5679cbadb6f433f788f738d27d60071e3e5e67d20aa594b98f8bc47e4d8ae3b343808e945aa133415b69f5c8d6a19cded2f914ffcd525ee974db4ec37845119813f63109edd6a24a72ce3a78e4989cec02f0cde1ea7dcc3b09df7575e6e9c1ab23bd9c61119de3ea88d43b13fc8c500b5d4b033a4f0338914354185df415192d64ce5241bfd4c3934705d660b7e2998ad87b6a28865f3338ccf004fdbc1a1d9adebafe9c6e10153ff07e2baba97a0ca5e0d9123fa1669b817fa05091d52995f96ca2d3eabac5b33b6ece68f900b6a562226317379b900a70de9f60e848b89d32b7b4bd9d812d81263477666767e1fec978c8ccd35547040ebd22641415748ac5f9b7e62c182fe80da36f1bf323546025ba4f674155926726f254885ec7dfc0ef799c9d2012dc8b8d681cec2bfe4b83376b054202cf891ded86583769881383e355da2296cb9c3e602cf601a88cd04256c94977763d80f12a375d320d756e13a12d10c3bc0f62b763445ba9158b55b2b998e009b25866ee2da0cd368bb302d211d2178473cfa75cfb909ee4397826a617c468893c0cc3bb5deb47721d03cfdcbb80924cbe4c91f3f63a06760a08674694ff1f17b99d478304ab4451208bcf728a74a3b480de1c30982cef67bb9e2f75069043fcaed9687ba4cd8d9eceaeb8e920d0ff9427fb7cff39eca5228140ca2cd1e5e6d6fc1006fea12bc6afe46151ad400f948139e8863c3ab1754ca4e3a6487b9a2aa3b4c8d61669c6f909108b3d5dd4096c8fff3b890ca8f133cc82bc2ccc4852b5ca49434934a847b3c8c20a3b3c820331e212754f39bddf8e5fa85c15c76336075a26308b186746fd61f9df4d9e99cf95f72e6b70777a226f2faf6e7c8c52ff94e2ce61a41b46ee09daf7a06f09f639277464538ca84a9696950c2c50e1a40ae71652c52e91d1d7de615c7f8abfb90ef6727612af0e2d2b25c056b5a0bbdfac4d74373c18ccfcd6af7b5df3ca136a519b81285681310cd9e6574dacdcdad0d577dd038417ae74ed454c5bd0b75dd9d5e284bc829cfbc2aaa4ed56b14743c19b3a271b872eb5cc2af1a2df9c5d640b8ce383450d2646ee205671585e6df78e1922d3239f8308bbda010622cd78a0b41d6d145d797b1184372ff20ac6319f7f3820a32a9045faea48521b153a5a5e84fc0f534c76c5706920ad1a2fa30905b44ad0053759795df7df43a3751de7dac01a1c3372551998bcd762f0844e407259e837d64dc0d2976aceabcef68e2f6b06ee9cb4f5aaed328462db34d94323a674fb7c2943ed71792fa2ce001e1fb033377e2d7ee2ee048ebdc8d887ed2dc2e18803856caff703da468b5d3335c4c841e9ef700a8499f37c115880c506b3a683ac4a5b4dda8f45aed2d90f720a507eedade75aebadabe1133f12d17fc58277cf21425e1e917f3df9e6091cc1f1258e03c354e8f973ad7a25f0d2a1fbab46e3f1632ba39d208c902bf1337177fd27d1f76b31cea3b23fd01c35ab41bca451437f30f81a1cedc5f41fdf11d6fda1c3af516f7fcd489ea7907fe68f6ad45bdf672c446ad20c645274669b2fcf917b8151491549cc09edbe96b40e6c2be8861b666275ebbdd1fb486c825fb5e0727cc2ab147bc5773711d6cc7b899d9b2d8b225b77bdbbb8e5f83fde9679372a9d3f157fa6aaa5dd8e9e93272e58bd01775c34e7136a3ed853ae6d076bd4bb29d1663bcc5bb11dfbb3d8206f7dfcb5ba0da2b2511a407dd23f6c28b5396b1a33786576bc9dbdd4bebfa166378f45686f1b9f5a3223f794fdacb1db3cb2ea1e742eff504131dd17b4d431408e6b240cca737692e16db011c81f358c7977fba04efeef755a4d43feaccbf3a2bd9c04d88abf24d902a1cde30fd227caee450a7bf89d8d5cae1c54127dd69e8ac0b7ca83ff2dafe80671edaaa6e9cfcd5c5caad7324a70b94372b827ee17198a996387f2a128f0e978df63381cefa971c7528e0f724eb6ffbb1b80e3001a4a775af1ba8ea8ea39ad612b4c9c68a2c757d0b7c3dbb8b067e581df73cd0e045cbdaf48b627525a40481b34f17aaa15e718f01e0d9c607795430fa72e87724aa9c705c34336abae20a6ad2543e8f44874abb8d94ca784b19cd11e5709dd32c7ea595a3a9c464e0cbb891d309939fd02ad12df673213688d3b4f8e69a22413e09bb569f97ac2a5625cc131c934638464cb341bd4f6823fff383fd3cb5c201b4cb929088ad07c6555b196f907989f4c865a39508f76144a9510a3c7af8927cfbc7d08dd2d57dcfbbd1f042bcf5eb3310e56dc83a7c1e745f1533debc9c6d5a41a9649f24d2f4bd3de9054aba79e5bc40ea4aab68b96f9699e50c2e0e41131dbcf2f7a8dfcfdd0cc179ff97eec139bffeedf3f973903918c4aade9fed1aa1ae4074957"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_FW_MASK={0x8, 0x5, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x3}}, @TCA_RATE={0x6, 0x5, {0x49, 0x4}}, @TCA_RATE={0x6, 0x5, {0x3, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_RATE={0x6, 0x5, {0xe, 0xff}}]}, 0x3564}, 0x1, 0x0, 0x0, 0xc0}, 0x24013) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x30120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x494, &(0x7f0000000400)={0x0, 0x2003f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x6, 0x3}, 0x0, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r1) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r7, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r3, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137"], 0x0}, 0x94) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) 1m20.168993726s ago: executing program 2 (id=6815): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000010000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080e71113610e10d858e8327edb1fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18c65ae1bd4f4390af9a9ceafd07ed00b0000002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c3c9068000000bc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b40000000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f3ca1664fe2f3ced8416dc180604b60c2499d16d7d9158ffffffff00000000ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d7676074a0bde4471414c99d4894ee7f8139dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8070000001fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702cca54728acad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd20785f653b621491d04aaee0d409731091f4fb94c06006e3c1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e1590bab105b0cb578af7dc7d5e87d48d376444e2de02f47c61e8e84ff828de453f34c2b08660b080efc707e676e1fb4d5865c0ca177a4c7fbb4e829ab0894a1062b445c00f576b2b5cc7f819abd0f885cc4806f47ffb966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d3676329bb8cda690d192a070886df42b2708398773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169cdfaa4252d4ea6b8f6216ff202b5b5a182cb5e8380100632d03a7ca6f6d0339f9953c30930804fdc3690d10ecb65dc5b47481edbf1eee2e8893e903054d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026def743f1213bf817becd9e5a225d67521d1128eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979030000007081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f324661351df747aa6a65872dfdcfa68f65bd06b4082d43e121861b5cc09b986bf56c747d9a1cc5b506892c3a16ff10feea20bdac89bfb758cf3500000000000000000000000000000098e6db5a96055e764a3bfd4ccb20d2e800994f4b602d25b2c076f21c7102687e054bb93b2d013be6227fd99902b074c0de00733128c81c48c5e140b17d71ac48f137d10798c4272826d2ba55bbda0059636528c132ed06759d880d1bc291a76456ed7ee8bcb392fdf886dbc74879ec4b831904d7c101ebbaef3c0ae6d0cf0000000000000000000000000000000011cb735f66a559ef0cdb5163a15c0bb986474bf5d9542e3e48805ce53127e4c076d69d868df543717aaaa07d7aca056f7f036c2bcba0795d1a64868a29ac5321b3cd6ef5b1a741afc7124ee3df3a35e8014d6cb5fd6c054a10bb2146174c1d68b45fcfd7e531090ceae2f05536a4d5d6a4081e743827fb9c031d1fc9f195c2da189c49eaed6c30c71da0452e502ef393efeb02ebe82b1851cae5fa7c958ba23110b5e0e5b890803f28a356b2920e74564e0f8377b0ba5187fed2882b4780a1bcb583f1cb1470003ef9b592b9461328cfc01ebfce0ecdcea714a517dc40000000000000000000000000006bd0561e1cc72880cc3ec1bdf35eb670a9040e3b53cd826b94ad8aeb014e74787fe89fb3247a87d8bfb6d400142369f88964708d1d4db5a5df9d62ea6d805dfce568b885a50ed8e2eaf8a932287a1d3bfac17774e58875a63b77e07298e4b4f515189c6fcac3cd35dac9240e633219bb6a5a25865e6ed8e16caa5406b56702afe0befcabbc9a2a772a1a087f0d633d457bceb695b2cba3a1a2daa2dda796373cc0fe0a53236d028fc1076bb746b2717c8b6052f58c91bb8cc19474ab9d4d2160773829f078727f6c684ca749136a7f46ca28b00bb4237695b409859a3cb7dbf298c7802264387811e20a0d78489eab0b0e"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2e0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x3f, 0x51, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x50) 1m20.091888023s ago: executing program 2 (id=6816): syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x800009, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x5, 0x7, 0x444, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x10, 0x4, 0x7fff, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0xf8c800, 0x80000001, 0x6, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x4, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x1, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff44, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0xffffff00, 0x3, 0xffffffff, 0x7, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0x7, 0x0, 0x743, 0x5, 0x3, 0x7, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0x1, 0x1, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x5a, 0x2302, 0xffff, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x401, 0x10401, 0x512d, 0x1, 0xe, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e9, 0x48, 0x9, 0x3, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x6, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x4, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0x7, 0x6e8, 0x8, 0x0, 0x80000000, 0x6, 0x9, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r7, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r11, @ANYRES32=r11, @ANYBLOB="38c60400fe0000000000d7032ebe7ba9f2726c64513105d8cb5033fd65b736e274b6bd020087966e5da26c3959efeccf61000000"], 0x4c}}, 0x0) 1m19.270399801s ago: executing program 2 (id=6824): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) close(r0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x569, &(0x7f00000002c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000840)='./file1\x00', &(0x7f0000000180), &(0x7f0000000940)=ANY=[], 0x361, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000880)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)=ANY=[], 0xfe37, 0x3) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x93) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES64=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x80201, 0x0) write$rfkill(r10, &(0x7f0000000240)={0x1, 0x1, 0x2, 0x0, 0x1}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r11, r11, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) semget$private(0x0, 0x4, 0x0) 1m19.079976179s ago: executing program 2 (id=6825): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x79ca}], 0x1}, 0x0) 1m18.885732878s ago: executing program 2 (id=6827): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400a00142603600e120800160000001001a8000400a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x6000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r2, 0x407, 0x10005) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='kmem_cache_free\x00', r4}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r3}, &(0x7f0000000400), &(0x7f0000000500)=r4}, 0x20) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) syz_emit_ethernet(0x8e, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @local, @void, {@ipv4={0x4305, @generic={{0x20, 0x4, 0x3, 0x3, 0x80, 0x65, 0x0, 0x8, 0x2e, 0x0, @private=0xa010101, @rand_addr=0x64010102, {[@cipso={0x86, 0x4e, 0x3, [{0x0, 0x8, "094ac467ec3f"}, {0x0, 0x12, "4c985e594ee96c2b09f6e55ec84c916e"}, {0x5, 0x5, "2450b2"}, {0x7, 0xc, "e17393606d00a7ab3c13"}, {0x1, 0xd, "cee8f17fabc8f286afabb2"}, {0x7, 0x10, "6549c337b0e2fdba29f02c960c99"}]}, @ssrr={0x89, 0x1b, 0xe6, [@dev={0xac, 0x14, 0x14, 0x25}, @local, @rand_addr=0x64010100, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}}, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b2620df1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc561a62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x4, 0x26d, &(0x7f00000005c0)="$eJzs281OE18Yx/EfL/8/CMJUURSM8YludDOBegUNgcTYRIPU+JKYDDLVpkNLOg2mxgg7t14HcenOxHgDbLwCF+7YuGRhHMNMLS2UqAuZaL+fzXnI4deck+dMcxadnXuvV8vF0C16dfX3mQalTe1KGfVrQIm+5tgf1/+r3aauTeQ/Xbxz/8HNXD4/v2i2kFu6njWz8Uvvn714c/lDffTu2/F3Q9rOPNr5kv28Pbk9tfNt6WkptFJolWrdPFuuVuvecuDbSiksu2a3A98LfStVQr/WMV8MqmtrDfMqK2MjazU/DM2rNKzsN6xetXqtYd4Tr1Qx13VtbET4mcLW4qKXS3sV+LNqtZw3J2n60ExhK5UFAQCAVHH/72Xc/3vB3v3/YfP57cT9HwAAAAAAAAAAAAAAAAAAAACAv8FuFDlRFDk/xv+k+A2fqPn3CUkjkkYlnZQ0JmlckiMpI+mUpNOSJiSdkXRW0qSkc5LOS5pq+6y094rDjur/AP3vCTz/vY3+97a2F3eHpdVX64X1QjIm87miSgrka0aOvsa9bErqhRv5+RmLZXRhdaOZ31gvDHTmZ+XsHZhu+dkkb535ofjctfJZOXsHrFs+2zU/rKtX2vKuHH18rKoCrcRncj//ctZs7lb+QH46/r9/nWstXfvnukfNJ/lfOB/RTNf+DGp6MN29Qwobz8teEPg1CgoKilaR9jcTjsN+09NeCQAAAAAAAAAAAAAAAADgdxzHzwnT3iMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAd9DwAA//+TC2AL") mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file7\x00', 0x0) 1m18.854885311s ago: executing program 33 (id=6827): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400a00142603600e120800160000001001a8000400a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x6000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r2, 0x407, 0x10005) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='kmem_cache_free\x00', r4}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r3}, &(0x7f0000000400), &(0x7f0000000500)=r4}, 0x20) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) syz_emit_ethernet(0x8e, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @local, @void, {@ipv4={0x4305, @generic={{0x20, 0x4, 0x3, 0x3, 0x80, 0x65, 0x0, 0x8, 0x2e, 0x0, @private=0xa010101, @rand_addr=0x64010102, {[@cipso={0x86, 0x4e, 0x3, [{0x0, 0x8, "094ac467ec3f"}, {0x0, 0x12, "4c985e594ee96c2b09f6e55ec84c916e"}, {0x5, 0x5, "2450b2"}, {0x7, 0xc, "e17393606d00a7ab3c13"}, {0x1, 0xd, "cee8f17fabc8f286afabb2"}, {0x7, 0x10, "6549c337b0e2fdba29f02c960c99"}]}, @ssrr={0x89, 0x1b, 0xe6, [@dev={0xac, 0x14, 0x14, 0x25}, @local, @rand_addr=0x64010100, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}}, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b2620df1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc561a62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x4, 0x26d, &(0x7f00000005c0)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file7\x00', 0x0) 6.32012403s ago: executing program 5 (id=7653): socket$vsock_stream(0x28, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000026c0)=ANY=[@ANYBLOB='\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000e80)=ANY=[], 0x78) sendfile(r3, r3, &(0x7f0000000000)=0x9, 0xffffffff) 5.400858169s ago: executing program 5 (id=7667): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0xffffffff, 0x4, "8100e1c8e80b598c36ff000800"}) syz_open_pts(r2, 0x141601) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_io_uring_submit(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000400)={'#! ', './file0', [{}, {0x20, '$'}, {}]}, 0xf) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) 4.276744787s ago: executing program 0 (id=7671): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRESOCT=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x5e) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x6}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020100000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a01010000000000000000020000000900020073797a31000000000900010073797a300000000054000380080002400000000840000380140001006272696467655f736c6176655f31000014000100776732000000000000000000000000001400010077673200000000000000000000000000080001"], 0xa8}}, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r6, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) 4.275196828s ago: executing program 1 (id=7672): sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) tkill(0x0, 0x1e) r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,utf8=1,utf8=0,shortname=winnt,shortname=sinnt,shortname=win95,utf8=0,utf8=1,nonumtail=0,shortname=mixed,shortname=winnt,\x00'], 0x1, 0x26c, &(0x7f0000000340)="$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") syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="f3bb"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x18}}, 0x10044000) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad1f50ad32d3fd25dfd73a015e0ca6a0f68a7d007f15451dfb265a0e3ccae669e173a64bc1cfd5587d452d64e7cc957d77578f4c25235138d5521f9453559c35da860e8efbc64e57cbb7aee976f2b54421eed73d5661ca3dbe74bd09de8793dbcceef76b2e5feecf9c66c54c3b3ffe1b4ce25d7c983c044c06cd0a48dfe3e26e7a23129d6606fd28a69989d552af6d9a9df2c3af36e0360050011bbecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f163d1a13ed38ae82f87925bfacba83109753f541cd027edd68149ee99eebc6f7d6dd4aed4af7588c8e1b44ccb19e810879b70a7000000e7ffffff00000000d7900a820b63278f4e9a217b98ef7042ad2a92895614cd50cbe43a1ed25268816b00000000000009d27d753a30a147b24a48435bd8a568669596e9e0867958e1dd7a0defb6670c06054002238260000000000040587c1ed797aa21a38e1e389f640a0b8b0000000000a835ad0f61ba73c31b05c00fba8a4aee676d7c45bb29671a68ee2e60da7b01a2e5785a238afa4aba70c07fcd95bf8b0d71b6f72d6a8d87fb08533d97ad96d3943c4cc8306dac433a5cdf334178b04963d67dd5a5707e618a1ef9057fec00f9e930219fa8d30e716de8cde9c60f0000000c3b64d10f0939b42b788daa7075fa542242b00f6bf9b64ad460e386b6f388351fbdacb3ad074574ee9d450f9dcfaef1be95ff3c449e6482e4403174618c20e887d6f320616d31d78a0e5421d5742cc52509fd90cf2df6d1404f6b8f810d7b94d421971b77a3270153a0d57cccfe27872f3e8e44480f93c33421986a7737842627301fb2fee8cabab074adaa2024ff57e609ba2f4d83b3bbf52309484532416f48f43b31395c6f45fee8f1682a4e8d5e3b9ae634ed24fb0e8b5fadaf5cb7eea62b7bb4264e72950c9dc791d771acc24c08cdb6ef24c813d082a86d9b879bdf5aefdfd905a2bd4ea36b0b54915a68fe149db154a8340017e1855511e9c0fe62d0cf"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000300)='./file1\x00', r1, 0x4000, r0}, 0xfffffd45) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010000d042dbd7000fcffff1f00000000", @ANYRES32=r5], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000040)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl1\x00', r5, 0x2f, 0x4, 0x47, 0x0, 0x10, @mcast2, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x10, 0x7800, 0x0, 0x694}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local']) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000680)={0x0, 0x4000, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xfffffffffffffeb9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x404}, 0x44080) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000700)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@test_dummy_encryption}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@grpid}, {@prjquota}]}, 0x80, 0x54f, &(0x7f0000000a00)="$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") mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x10, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x401, 0x1000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) 4.179384747s ago: executing program 1 (id=7674): r0 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) read$usbmon(r0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0x1000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x510, 0x1f0, 0x0, 0x148, 0x1f0, 0x148, 0x478, 0x240, 0x240, 0x478, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 0x4e22, 0x4e22, 0x4e20, 0x4e23, 0x8, 0x2, 0x5f4a, 0x100, 0x2}}}, {{@ip={@remote, @multicast1, 0xff000000, 0xffffff00, 'wlan0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x260, 0x288, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x9, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x3, 0x1, 0x1, 'syz1\x00', 0x5}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000600)) r4 = syz_io_uring_setup(0xcc8, &(0x7f0000000300)={0x0, 0x24c1, 0x10, 0x40003, 0x310}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000140)={0x32, 0x3, '\x00', [@hao={0xc9, 0x10, @loopback}, @ra={0x5, 0x2, 0x4}, @jumbo={0xc2, 0x4, 0x101}]}, 0x28) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/uts\x00') sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000001140)=ANY=[@ANYBLOB="13c4dcc1115d7365146a15bf53b597d5b626195040296c2a0f5a9f055ab2b75b89c507baffe7994cb40db46c07edc13dd70a7212ce271ee61f6053197b9e8647783ada", @ANYRES16=r6, @ANYBLOB="080025bd7000fedbdf251e0000000c000600030000000000000008000300", @ANYRES32=r8, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="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"], 0x2d4}}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f00000001c0)=@framed={{0x18, 0x3}, [@initr0, @generic={0x66, 0x0, 0x0, 0x0, 0x2}, @initr0, @exit]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) io_uring_enter(r4, 0xdb4, 0xd44a, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000040)={0xfffffffffffffffe, r4, 0x33, {0x5, 0x10001}, 0x6}, 0x1) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) 4.120707073s ago: executing program 5 (id=7677): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000080)={0x0, 0x2, 0xffe, 0x4000006}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x3}, 0x18) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0xa7, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x4f) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) 4.04896798s ago: executing program 6 (id=7678): bind$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f000009ddc0), 0x20100) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f000009de00)={{0x3, 0x80}, {0x0, 0x2}, 0xbde, 0x5, 0x4}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000"], 0x48) r2 = open(&(0x7f0000000040)='./file2\x00', 0x4440, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c40)=@getchain={0x6c, 0x66, 0x800, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {0xfff3, 0xc}, {0x3, 0xe}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0xffffffe0}, {0x8, 0xb, 0x13}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x400}, {0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x10}, {0x8, 0xb, 0x5}]}, 0x6c}, 0x1, 0xf0ffffffffffff, 0x0, 0x240040c1}, 0x4000010) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000b80)=ANY=[@ANYRES16=r3], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r6, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r7, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000740)='GPL\x00', 0x9, 0xc3, &(0x7f0000000780)=""/195, 0x41000, 0x3, '\x00', r4, 0x1b, r2, 0x8, &(0x7f0000000880)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000008c0)={0x3, 0x10, 0x9, 0x9}, 0x10, r7, 0x0, 0x4, &(0x7f0000000900)=[r0, r1], &(0x7f0000000940)=[{0x5, 0x5, 0x1, 0x7}, {0x4, 0x3, 0x1, 0x6}, {0x2, 0x3, 0xd, 0x5}, {0x3, 0x2, 0x1, 0x4}], 0x10, 0x6c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180), 0x1, 0x451, &(0x7f0000000780)="$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") 3.931289351s ago: executing program 6 (id=7679): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000400)={0x8, 0xfffffff7, 0xfffffffe, 0x2, 0x40}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) r2 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@abort}]}, 0xff, 0x258, &(0x7f0000000780)="$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") socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x14, r3, 0x200, 0x80000000, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x2904c, 0x1, 0x10003, '\x00', [{}, {0xffffffff}], ['\x00']}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2100, 0x0) mknodat(r2, &(0x7f00000002c0)='./mnt/file0\x00', 0x8000, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newqdisc={0xa0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x70, 0x2, {{}, [@TCA_NETEM_LOSS={0x34, 0x2, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x4, 0x1, 0x4000, 0xfffff3e3}}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0xf, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0xa0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x16, 0x401, 0x80, 0x3, 0x2545c2a0a0705b4b, r7, 0xffffff74, '\x00', r10, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x50) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000040)={'wlan0\x00', 0x400}) openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x321000, 0x0) recvmmsg(r0, &(0x7f0000001f80)=[{{0x0, 0x0, &(0x7f0000000100), 0x1, 0x0, 0xfffffffffffffe09}, 0x8}], 0x4000173, 0x40012102, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.791825404s ago: executing program 3 (id=7680): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f40)=ANY=[], 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00fd583bf43affffff0000"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0014000004000000000000000000000000000000000000000000b13a7b511c"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) fsopen(&(0x7f0000000400)='autofs\x00', 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$evdev(&(0x7f0000001380), 0x1, 0x20442) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x4001084) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1}}}}) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc1}, &(0x7f0000000340)={0x0, "60cfc7e5a9992101d7f1c5aca325a25884f9c3c0c5ce07602565fef1599658ea0d1dfa9decf9a7d5cbc1410b90e108ecbce34e8fcbc5c7c6d4f9f335cb4a4d3c", 0x39}, 0x48, 0xfffffffffffffffc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x59}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x880) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="8ca0973e26905e58b702000014800000b703ffffff7f00000000000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095c92c6c2b23cf434ebc641456bd7bc485800d0e5b0889705c4049252248017f61f863ca33519825b3733461577d966994860d39d209579edb83868594a7ccc58808e8c85ef28c65b239f6d0bff86a9677a0fbe5c013a4ba089ff588e742a8679e2840d5877d"], &(0x7f0000000080)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.254587806s ago: executing program 1 (id=7681): syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x800009, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x5, 0x7, 0x444, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x10, 0x4, 0x7fff, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0xf8c800, 0x80000001, 0x6, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x4, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x1, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff44, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0xffffff00, 0x3, 0xffffffff, 0x7, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0x7, 0x0, 0x743, 0x5, 0x3, 0x7, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0x1, 0x1, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x5a, 0x2302, 0xffff, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x401, 0x10401, 0x512d, 0x1, 0xe, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e9, 0x48, 0x9, 0x3, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x6, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x4, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0x7, 0x6e8, 0x8, 0x0, 0x80000000, 0x6, 0x9, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) socket(0x200000000000011, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c00028008000100080000", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="38c60400fe0000000000d7032ebe7ba9f2726c64513105d8cb5033fd65b736e274b6bd020087966e5da26c3959efeccf61000000"], 0x4c}}, 0x0) 3.161708885s ago: executing program 0 (id=7682): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x0, 0xc, &(0x7f0000000040)=ANY=[], 0x0, 0x2000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000b40)=""/67}, {&(0x7f0000000400)=""/8}, {&(0x7f0000000680)=""/188}, {&(0x7f0000000bc0)=""/241}, {&(0x7f0000000940)=""/221}], 0x0, &(0x7f0000000a40)=""/192}, 0x8}], 0x3fffffffffffedd, 0x10002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000002000000000ff000000850000000f000000850000000500000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=rdma']) (fail_nth: 3) 3.159916025s ago: executing program 5 (id=7683): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0), 0x101, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001740)=@newtaction={0xd3c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0xd28, 0x1, [@m_police={0xd24, 0x1, 0x0, 0x0, {{0xb}, {0xcf8, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x10000000}, @TCA_POLICE_TBF={0x30, 0x1, {0x0, 0x3, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x2e, 0xfffd}}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffd}, @TCA_POLICE_RATE64={0xc, 0x8, 0xbe6}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0xffffffffffffffff, 0x0, 0x8420, 0x80000000, {0xa, 0x0, 0x3ff, 0xff, 0x3, 0x401}, {0x5, 0x1, 0x10, 0xff, 0x9, 0x9}, 0x15800, 0x1, 0x7}}, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xef02, 0xef0a, 0x9, 0x23, 0x400000, 0x80000000, 0xfffffffb, 0xc, 0x3, 0x2, 0x6, 0x73f9e023, 0x6, 0x6, 0x7, 0xfb, 0xeb5, 0x7, 0x24, 0x35bad662, 0x5, 0x4, 0x29, 0x6, 0x8, 0x4, 0x5, 0x1ff, 0x140000, 0x0, 0x1a, 0x8, 0x5, 0x0, 0x5, 0x6, 0x9, 0x7, 0x2, 0x8, 0x0, 0xf, 0x2, 0x98, 0x800, 0x100, 0x8000, 0xca, 0x4, 0x2, 0x3, 0x4, 0x2, 0x1d9, 0x4, 0xfffff2c2, 0x8001, 0x0, 0x1, 0x8, 0x7, 0x9, 0x0, 0x7, 0x8, 0x7, 0x6, 0x7f, 0x3ff, 0x6e09bc56, 0x81, 0x0, 0x400, 0x4, 0x21c30312, 0x6, 0x8, 0x80, 0xc, 0x2, 0x9, 0x9, 0x1, 0xfffffff8, 0x5, 0xb, 0x5, 0xbfc3, 0x3, 0xe8b3, 0x8, 0x1, 0x6252, 0x7, 0x5, 0xc, 0x0, 0x9e, 0x1, 0x27, 0x3, 0x8, 0x10, 0x8001, 0xfff, 0x6, 0x4, 0x3, 0xfff, 0x5, 0x9, 0x16, 0x5, 0x7fffffff, 0x7f, 0x4, 0xffffff81, 0x1, 0x8, 0xc, 0x3ff, 0x6, 0xfffffff2, 0x2b22, 0x2c5, 0x2db1, 0xfffffff7, 0x200, 0x8, 0x10000e46, 0x5, 0xc9b3, 0x0, 0x9, 0x9, 0x2, 0x8, 0x7, 0x5, 0xfffffc00, 0x800, 0x400, 0x9, 0x6, 0x200, 0x48, 0x40, 0x1, 0x9, 0x7, 0x8000, 0x7, 0x1ff, 0x2237, 0x6, 0x5, 0x6, 0x0, 0x4b, 0x4, 0xffff8000, 0x80000001, 0xd, 0x3, 0x3, 0x5, 0x9, 0x5, 0x3ff, 0x800, 0x9, 0x0, 0x6, 0x2, 0x93b, 0x4, 0x9, 0x200, 0x9, 0x0, 0x9, 0x401, 0xb, 0x3, 0xffffffff, 0x3, 0x0, 0x7, 0x3, 0x1, 0x2, 0x8, 0x3, 0x9, 0x0, 0x9, 0xffffffff, 0x400, 0x9, 0x61a0, 0x7, 0x2, 0x9, 0x9, 0x200, 0x9, 0x1, 0x1, 0x0, 0x4, 0x6, 0x40, 0x7, 0xf, 0x40, 0x80, 0x3, 0x1ff, 0x1, 0x9, 0xff, 0x80, 0x0, 0x4, 0x3, 0x7, 0x9, 0x8, 0x0, 0xf17, 0x0, 0xfffffff7, 0x7, 0x9, 0x0, 0x6, 0x7, 0x3, 0x101, 0xfffffffd, 0x3723, 0xf8a, 0xa, 0xcdd6, 0x1, 0x369, 0x3, 0x9, 0x7fff, 0x8, 0x10, 0xfffffff3, 0x10, 0x3ff, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xf8}, @TCA_POLICE_RATE={0x404, 0x2, [0x26ac, 0x3, 0x9, 0xfffff000, 0x4a4, 0x3fed396c, 0x7cc, 0x9bc, 0xc77, 0xbe37, 0xfffffffb, 0x1000, 0x5, 0x2, 0x6, 0x5, 0x8, 0x7, 0x39a, 0x4103, 0x57, 0x8, 0xfffffff7, 0x1, 0x5, 0x81, 0x4, 0x5, 0xfffffffa, 0x101, 0xfffffffa, 0x7, 0xf, 0x800000, 0x5, 0x7, 0xa, 0x7, 0x0, 0x7, 0x7, 0x8, 0x3, 0x1000, 0x1, 0xd1db, 0xdf, 0x80000000, 0x556fa8b8, 0x0, 0x4, 0x3, 0x4, 0x1, 0x88, 0x200, 0x45b2, 0x4, 0x62, 0x2, 0x1, 0xe2, 0x401, 0x1ff, 0xfffffff9, 0x7, 0x1, 0x37, 0x7fff, 0x1, 0x9, 0x9, 0x5, 0x10001, 0x7, 0x1, 0x9, 0x1, 0x40, 0x1, 0xf94, 0x100, 0x6, 0x6, 0x44, 0x136, 0xe63, 0x1, 0x1, 0x9, 0xe7f0, 0xef3, 0x8, 0x400, 0x9, 0x3, 0x19, 0x8, 0x9, 0x3, 0x1, 0x6, 0x7, 0x9, 0x3ff, 0xfffffc01, 0x200, 0x9, 0x7fffffff, 0xf, 0x1, 0x6, 0x0, 0x85c, 0x3, 0xa, 0x86, 0x1000, 0x7, 0x800, 0x8000, 0x2ffaf120, 0x38b7, 0xe6, 0x100, 0x3, 0x8f, 0xfffffff8, 0x2, 0x5, 0x5, 0x1ff, 0x8001, 0x4f7, 0x96, 0xffff75d1, 0x2, 0x6, 0xb, 0x8, 0x9, 0x8f, 0x9, 0xdf9, 0x1, 0xfffffffd, 0x835d, 0x40, 0x1, 0x8, 0x0, 0xffffffff, 0xc, 0x28, 0x7, 0x142, 0x6, 0x5, 0x7f, 0xa34, 0x5, 0x9, 0xffff, 0x6, 0x9, 0x487e, 0x9, 0x10, 0xd, 0x2bd3, 0xf9f2, 0xfff, 0xfffffff7, 0x2, 0xae, 0x9, 0x4, 0x2, 0x8000, 0xfffffff9, 0x5, 0x6, 0xff, 0x5, 0x8, 0xfffffff8, 0x150, 0x3c3, 0x1, 0x3, 0xdcff, 0x4, 0x8, 0xff, 0x1ff, 0x7, 0x8, 0xac6, 0x1, 0x10000, 0x3ff, 0x8000, 0x7, 0x906, 0x5, 0x6, 0x4f9, 0x0, 0x1, 0x4, 0x8001, 0x8001, 0x7, 0xb4000000, 0xfffffffe, 0x0, 0x80, 0x1990, 0x4, 0x2, 0x1, 0x0, 0x6d0, 0xd2, 0xa56a, 0x0, 0xc, 0x5, 0x4, 0x93, 0x6e2, 0xffffffff, 0x10, 0xfff, 0x0, 0x4, 0x8, 0x0, 0x10, 0xffffffff, 0x10, 0xf, 0x8, 0x7, 0x5, 0x6, 0x8, 0xab9, 0x6316, 0x7fff, 0x0, 0xdc4, 0x10001, 0xcfd, 0x5, 0x7]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x10}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1000, 0x8000, 0x4, 0x4, 0x8, 0x8, 0x80000001, 0x74c6, 0x8, 0x4, 0x40000000, 0x101, 0xffff0a6a, 0x1, 0x7, 0x38, 0x8000, 0x5, 0x3, 0x3, 0x42d, 0x1, 0x9, 0x100, 0x1, 0x1, 0x81, 0x7ff800, 0x3, 0x4, 0x80000000, 0x0, 0x1, 0x6, 0xe, 0x5, 0x7, 0x4, 0xff, 0x2, 0x7, 0xe76, 0x10000, 0xfffffffa, 0x6, 0xd66, 0x9, 0x2, 0xb26, 0xb4, 0xa, 0x800, 0x7fffffff, 0x80, 0xace, 0x80000006, 0x3, 0x3, 0x380, 0x5, 0x100, 0x9, 0x9, 0x1000, 0x7f, 0x3, 0x7, 0x7, 0x18000000, 0x1, 0x10000, 0x2, 0x2, 0x7, 0xef, 0x3, 0x400, 0x0, 0x6, 0x5, 0x92b, 0x5, 0x1000, 0xb, 0x7, 0x5, 0x9, 0x7fffffff, 0x1000, 0x5, 0x76, 0x200, 0x8, 0x2, 0x6, 0x10, 0x7ff, 0x40008, 0x72, 0x7fffffff, 0x311, 0xff, 0x4, 0xffffff2f, 0x1, 0x8, 0x9, 0xa086, 0x1, 0x200, 0x800, 0x7, 0x5, 0x80000000, 0x3ff, 0x9, 0x100, 0x15d2, 0x6, 0x1, 0x1, 0x2, 0x241c1aaa, 0x2, 0x0, 0x2, 0x16b, 0x8, 0x9, 0xa, 0x981, 0x0, 0xb, 0x2, 0x2, 0xffff, 0x81, 0x3, 0x3, 0x7, 0x6, 0x4, 0x2, 0xfffffffd, 0x5, 0x40000000, 0x7a, 0x8f0a, 0x7, 0xd29, 0x7, 0x0, 0x15, 0xfffffa11, 0x2, 0x80000001, 0xfe2, 0xa, 0x8, 0x7f, 0x6, 0x4, 0x9, 0x7, 0x4, 0x6, 0xf, 0x51, 0xff, 0x2, 0xfffffffd, 0x2, 0x8, 0x3, 0xff, 0x8, 0x2c1efe9, 0x3e, 0x5d18, 0x81, 0x400, 0x4, 0x7326deb8, 0x8006, 0x7ff, 0xffffffff, 0x5, 0x0, 0x2, 0x1, 0x6, 0x9e8, 0x101, 0xb31, 0x5, 0xe2, 0x4, 0x7f1e7a56, 0x5, 0x83, 0x9, 0x203e, 0x5, 0x8, 0x5, 0x10001, 0x87, 0x9, 0x1, 0xff, 0x8, 0x9, 0x8001, 0xffffff41, 0x7, 0x0, 0xe, 0x9, 0x3, 0x3, 0x8001, 0x0, 0x401, 0xfffffff9, 0xed, 0x6, 0xb9, 0xc3, 0x200, 0x101, 0x10, 0xa, 0xc, 0x2, 0x101, 0x5, 0x1, 0xa, 0x6, 0x9, 0x7, 0x4, 0x6, 0xbdc0, 0x7, 0x9, 0x9, 0x100, 0x4, 0xfffffffe, 0x81, 0x1000, 0x1, 0x9, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xe62f, 0xffffffffffffffff, 0xf, 0x3, 0x7, {0x3, 0x0, 0x8, 0x9, 0x6, 0x6}, {0x8, 0x0, 0x9, 0x9, 0x6, 0x9}, 0x5, 0xa4de, 0x3}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0xd3c}}, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x280000, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="dd99401b1f441a835c3dfe053e0e094515e504b6316f2a67a040e860c8118441fc09df1fd193dfa63fcceb82dbd8c0c71b933214389bdf97fd6c3e72b4b836a0ee9b4d75f459e9e7a400ad5c01c749b8e8c6fc439e19077b744912af535044eab14e1a16e1ed9b2552408b230507bb3d8db6c4b28f2bc0e55df68ae70f3f51e1a6f9a3931a26f5"], 0x2, 0x69d, &(0x7f0000001c00)="$eJzs3V1vG1kdx/HfOE7iZNFqBahUVR9OW1ZKRXHHzjZVVCTWjMfJgO2xZhyUSEirsk1WVZ0utEWiuVlyw4O0vAHuuOGCF4HE9b4LbhBIK7hD4mbQPDl2/dRs3XSXfj/Rrscz/znnP3Nc/zWJ51gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECWU7ftiqWm197ZNZM59cBvTdmetraoG+nCjZn9Slb8n0olnU9Xnf/myeZz8f+u6WL67KJK8UNJR2+de+fuN4qFfP8pCX0ROm2DT54dPbzX6+0/foHYBZ26+ddJhXxpJRuTMUFbbtsLfa9V23KNF/pmc2PDvrXdCE3Da7rhXth1W8YJ3ELXD8yac8NUNjfXjVve83faW/Va081X3vlu1bY3zA+X04GWVA6dba/Z9NpbSUy8OY65Yz79SRrg1lrGHDzo7a/POpI4qPIiQdVZQVW7Wq1UqtXKxu3N23dsuziywo5Zdp9GIub+osVXzHzeuIE5KMT1/2+W1FRJbe1oV2bsj6O6AvlqTdieyev/u7fcqf0O1v+8yp+Xvp9tvqCk/l9On12eVP8n5GJkkh3GbbEmrD/dz2KSkdETPdORHuqeeuppX4/n0LaRuTKXVs7gZ0uu2vIUypenlmrJGpOtMdrUhjZk6wNtq6FQRg15aspVqD2F6spNXlGOArmqqStfgYzW5OiGjCra1KbWZeSqrD352lFbW6qrpv9EUXSgB8l5X5+So/KgyoSA5cGg6pSWJtX/n36Svk6z+m9T/99U6etgOX34bFoM8CUQZdf/gwqzd7vy6jICAAAAAADzZiW/fbeSv91fkhSp4TVd+3WnBQAAAAAA5shStKyLsuLrf0mXZHH9DwAAAADA/xsrucfOkrSafKjfOrkT6kV+CbBwBikCAAAAAICXlNz5f3lJipJJK67IOtX1PwAAAAAA+Ar47cAc+8V8jt0o/7N+QVLYWbb+8q9lBYvWcWf329ZhLd5SO8xiRj4B0G1csN7OJupNHpYkJc8c96KV9ZZNgtmfd/Dzg1lz/VvBcwksLQw2MCEBK+55o5g906e6mu5yNZtn/v5RQcmWtJfVhtd0y47fvFtRrfZ2oevudn/x6MEvpaB/nAcPevvlDz/u3U9yOY5XHR/GjX4ylE5h/Mk4yeVpMt9Ccs/FuCNeUSPv8nft1qqV9Gvnx7+g2mFhsKNpA3DS5691LR2za6tp7OpRf8b9+PhL8fFXysmQDR19sGidZFF5/sjHDcSELEpJFtfTmOtr11X9e7rcH4WCVfrOglQtj47BUBbVwSxmnwvr3yPnYiCL5CHfMnAu1uMs/ho3NCGL9dNlMTIiAPC6HOiSknehS0omMe9XoVJWd/PykL+pfaG6M7u6vz9c3Z/+IYqSHRakYva3iam9lBS/o69ZSR1aSg+peGHMO7qd1ZWSJryj2y9R3eK+/nzyHUhZ2iNZ/DeKoruVpN/fP1dV/zjU3Ui/YbO6EJ/CW08Pf5ZMgB/7aP+j/UfV6vqG/Z5t365qMTmM7GFB1B4AwIjZ37EzM8J6T1fTiKv3//luujRU8b7e/0hBWR/qY/V0XzfzrxC4Mr7V1YGPIdxMr1o1cNVqzr1zN/leuuHYim5OvKpLaulAbLUfu6h8l+FKfRK7/opHAQCAs3VtRh0eX/9LQ/X/ptbSiLULY6+7h2t5dnXcv6SfFFuZnfz78z4bAAC8Gdzgc2u1+xsrCLzOB5XNzUqtu+2awHd+ZAKvvuUar911A2e71t5yTSfwu77jN00n0LJXd0MT7nQ6ftA1DT8wHT/0dpNvfjfZV7+HbqvW7npO2Gm6tdA1jt/u1pyuqXuhYzo7P2h64bYbJDuHHdfxGp5T63p+24T+TuC4ZWNC1x0I9Opuu+s1vHixbTqB16oFe+bHfnOn5Zq6GzqB1+n6aYN5X1674QetpNlyMRr3eQEAAN44T54dPbzX6+0/fn5hJb40T9cca0LM6MKSnjyLr8rjNcVsE3MEAQDwJXNSwE+xU+kVJgQAAAAAAAAAAAAAAAAAAAAAAEbMvqXvlAuL424WlPprfv52tka/0skthiPtWFqcc2KnWSicdq/8loijh59NCV7JF/IZBzUYc3xmB/iPr0lvJWv0+Fu77YM4k3n3tTJlcF/FwvcO0jM6MSbeOHbTcn8sivP/5xAvPPrThE1RFEXTd18ePodL0w5weKEYj+nSSwzBmb8VAThj/wsAAP//EHYw2w==") syz_clone(0x4ca00200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101002, 0x2e) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r3, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%pB \x00'}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x748, 0xffff8000}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20002044}, 0x44080) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e0000020000003e00000012840000", @ANYRES32=r4, @ANYBLOB="001000"/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="0100000003000000050000000800000000000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r3, 0x0) chmod(&(0x7f0000000640)='./file2\x00', 0x171) write$RDMA_USER_CM_CMD_SET_OPTION(r3, 0x0, 0x0) 2.07754458s ago: executing program 5 (id=7684): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0), 0x101, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001740)=@newtaction={0xd00, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0xcec, 0x1, [@m_police={0xce8, 0x1, 0x0, 0x0, {{0xb}, {0xcbc, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x10000000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x3, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x2e, 0xfffd}}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffd}, @TCA_POLICE_RATE64={0xc, 0x8, 0xbe6}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0xffffffffffffffff, 0x0, 0x8420, 0x80000000, {0xa, 0x0, 0x3ff, 0xff, 0x3, 0x401}, {0x5, 0x1, 0x10, 0xff, 0x9, 0x9}, 0x15800, 0x1, 0x7}}, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xef02, 0xef0a, 0x9, 0x23, 0x400000, 0x80000000, 0xfffffffb, 0xc, 0x3, 0x2, 0x6, 0x73f9e023, 0x6, 0x6, 0x7, 0xfb, 0xeb5, 0x7, 0x24, 0x35bad662, 0x5, 0x4, 0x29, 0x6, 0x8, 0x4, 0x5, 0x1ff, 0x140000, 0x0, 0x1a, 0x8, 0x5, 0x0, 0x5, 0x6, 0x9, 0x7, 0x2, 0x8, 0x0, 0xf, 0x2, 0x98, 0x800, 0x100, 0x8000, 0xca, 0x4, 0x2, 0x3, 0x4, 0x2, 0x1d9, 0x4, 0xfffff2c2, 0x8001, 0x0, 0x1, 0x8, 0x7, 0x9, 0x0, 0x7, 0x8, 0x7, 0x6, 0x7f, 0x3ff, 0x6e09bc56, 0x81, 0x0, 0x400, 0x4, 0x21c30312, 0x6, 0x8, 0x80, 0xc, 0x2, 0x9, 0x9, 0x1, 0xfffffff8, 0x5, 0xb, 0x5, 0xbfc3, 0x3, 0xe8b3, 0x8, 0x1, 0x6252, 0x7, 0x5, 0xc, 0x0, 0x9e, 0x1, 0x27, 0x3, 0x8, 0x10, 0x8001, 0xfff, 0x6, 0x4, 0x3, 0xfff, 0x5, 0x9, 0x16, 0x5, 0x7fffffff, 0x7f, 0x4, 0xffffff81, 0x1, 0x8, 0xc, 0x3ff, 0x6, 0xfffffff2, 0x2b22, 0x2c5, 0x2db1, 0xfffffff7, 0x200, 0x8, 0x10000e46, 0x5, 0xc9b3, 0x0, 0x9, 0x9, 0x2, 0x8, 0x7, 0x5, 0xfffffc00, 0x800, 0x400, 0x9, 0x6, 0x200, 0x48, 0x40, 0x1, 0x9, 0x7, 0x8000, 0x7, 0x1ff, 0x2237, 0x6, 0x5, 0x6, 0x0, 0x4b, 0x4, 0xffff8000, 0x80000001, 0xd, 0x3, 0x3, 0x5, 0x9, 0x5, 0x3ff, 0x800, 0x9, 0x0, 0x6, 0x2, 0x93b, 0x4, 0x9, 0x200, 0x9, 0x0, 0x9, 0x401, 0xb, 0x3, 0xffffffff, 0x3, 0x0, 0x7, 0x3, 0x1, 0x2, 0x8, 0x3, 0x9, 0x0, 0x9, 0xffffffff, 0x400, 0x9, 0x61a0, 0x7, 0x2, 0x9, 0x9, 0x200, 0x9, 0x1, 0x1, 0x0, 0x4, 0x6, 0x40, 0x7, 0xf, 0x40, 0x80, 0x3, 0x1ff, 0x1, 0x9, 0xff, 0x80, 0x0, 0x4, 0x3, 0x7, 0x9, 0x8, 0x0, 0xf17, 0x0, 0xfffffff7, 0x7, 0x9, 0x0, 0x6, 0x7, 0x3, 0x101, 0xfffffffd, 0x3723, 0xf8a, 0xa, 0xcdd6, 0x1, 0x369, 0x3, 0x9, 0x7fff, 0x8, 0x10, 0xfffffff3, 0x10, 0x3ff, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xf8}, @TCA_POLICE_RATE={0x404, 0x2, [0x26ac, 0x3, 0x9, 0xfffff000, 0x4a4, 0x3fed396c, 0x7cc, 0x9bc, 0xc77, 0xbe37, 0xfffffffb, 0x1000, 0x5, 0x2, 0x6, 0x5, 0x8, 0x7, 0x39a, 0x4103, 0x57, 0x8, 0xfffffff7, 0x1, 0x5, 0x81, 0x4, 0x5, 0xfffffffa, 0x101, 0xfffffffa, 0x7, 0xf, 0x800000, 0x5, 0x7, 0xa, 0x7, 0x0, 0x7, 0x7, 0x8, 0x3, 0x1000, 0x1, 0xd1db, 0xdf, 0x80000000, 0x556fa8b8, 0x0, 0x4, 0x3, 0x4, 0x1, 0x88, 0x200, 0x45b2, 0x4, 0x62, 0x2, 0x1, 0xe2, 0x401, 0x1ff, 0xfffffff9, 0x7, 0x1, 0x37, 0x7fff, 0x1, 0x9, 0x9, 0x5, 0x10001, 0x7, 0x1, 0x9, 0x1, 0x40, 0x1, 0xf94, 0x100, 0x6, 0x6, 0x44, 0x136, 0xe63, 0x1, 0x1, 0x9, 0xe7f0, 0xef3, 0x8, 0x400, 0x9, 0x3, 0x19, 0x8, 0x9, 0x3, 0x1, 0x6, 0x7, 0x9, 0x3ff, 0xfffffc01, 0x200, 0x9, 0x7fffffff, 0xf, 0x1, 0x6, 0x0, 0x85c, 0x3, 0xa, 0x86, 0x1000, 0x7, 0x800, 0x8000, 0x2ffaf120, 0x38b7, 0xe6, 0x100, 0x3, 0x8f, 0xfffffff8, 0x2, 0x5, 0x5, 0x1ff, 0x8001, 0x4f7, 0x96, 0xffff75d1, 0x2, 0x6, 0xb, 0x8, 0x9, 0x8f, 0x9, 0xdf9, 0x1, 0xfffffffd, 0x835d, 0x40, 0x1, 0x8, 0x0, 0xffffffff, 0xc, 0x28, 0x7, 0x142, 0x6, 0x5, 0x7f, 0xa34, 0x5, 0x9, 0xffff, 0x6, 0x9, 0x487e, 0x9, 0x10, 0xd, 0x2bd3, 0xf9f2, 0xfff, 0xfffffff7, 0x2, 0xae, 0x9, 0x4, 0x2, 0x8000, 0xfffffff9, 0x5, 0x6, 0xff, 0x5, 0x8, 0xfffffff8, 0x150, 0x3c3, 0x1, 0x3, 0xdcff, 0x4, 0x8, 0xff, 0x1ff, 0x7, 0x8, 0xac6, 0x1, 0x10000, 0x3ff, 0x8000, 0x7, 0x906, 0x5, 0x6, 0x4f9, 0x0, 0x1, 0x4, 0x8001, 0x8001, 0x7, 0xb4000000, 0xfffffffe, 0x0, 0x80, 0x1990, 0x4, 0x2, 0x1, 0x0, 0x6d0, 0xd2, 0xa56a, 0x0, 0xc, 0x5, 0x4, 0x93, 0x6e2, 0xffffffff, 0x10, 0xfff, 0x0, 0x4, 0x8, 0x0, 0x10, 0xffffffff, 0x10, 0xf, 0x8, 0x7, 0x5, 0x6, 0x8, 0xab9, 0x6316, 0x7fff, 0x0, 0xdc4, 0x10001, 0xcfd, 0x5, 0x7]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x10}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1000, 0x8000, 0x4, 0x4, 0x8, 0x8, 0x80000001, 0x74c6, 0x8, 0x4, 0x40000000, 0x101, 0xffff0a6a, 0x1, 0x7, 0x38, 0x8000, 0x5, 0x3, 0x3, 0x42d, 0x1, 0x9, 0x100, 0x1, 0x1, 0x81, 0x7ff800, 0x3, 0x4, 0x80000000, 0x0, 0x1, 0x6, 0xe, 0x5, 0x7, 0x4, 0xff, 0x2, 0x7, 0xe76, 0x10000, 0xfffffffa, 0x6, 0xd66, 0x9, 0x2, 0xb26, 0xb4, 0xa, 0x800, 0x7fffffff, 0x80, 0xace, 0x80000006, 0x3, 0x3, 0x380, 0x5, 0x100, 0x9, 0x9, 0x1000, 0x7f, 0x3, 0x7, 0x7, 0x18000000, 0x1, 0x10000, 0x2, 0x2, 0x7, 0xef, 0x3, 0x400, 0x0, 0x6, 0x5, 0x92b, 0x5, 0x1000, 0xb, 0x7, 0x5, 0x9, 0x7fffffff, 0x1000, 0x5, 0x76, 0x200, 0x8, 0x2, 0x6, 0x10, 0x7ff, 0x40008, 0x72, 0x7fffffff, 0x311, 0xff, 0x4, 0xffffff2f, 0x1, 0x8, 0x9, 0xa086, 0x1, 0x200, 0x800, 0x7, 0x5, 0x80000000, 0x3ff, 0x9, 0x100, 0x15d2, 0x6, 0x1, 0x1, 0x2, 0x241c1aaa, 0x2, 0x0, 0x2, 0x16b, 0x8, 0x9, 0xa, 0x981, 0x0, 0xb, 0x2, 0x2, 0xffff, 0x81, 0x3, 0x3, 0x7, 0x6, 0x4, 0x2, 0xfffffffd, 0x5, 0x40000000, 0x7a, 0x8f0a, 0x7, 0xd29, 0x7, 0x0, 0x15, 0xfffffa11, 0x2, 0x80000001, 0xfe2, 0xa, 0x8, 0x7f, 0x6, 0x4, 0x9, 0x7, 0x4, 0x6, 0xf, 0x51, 0xff, 0x2, 0xfffffffd, 0x2, 0x8, 0x3, 0xff, 0x8, 0x2c1efe9, 0x3e, 0x5d18, 0x81, 0x400, 0x4, 0x7326deb8, 0x8006, 0x7ff, 0xffffffff, 0x5, 0x0, 0x2, 0x1, 0x6, 0x9e8, 0x101, 0xb31, 0x5, 0xe2, 0x4, 0x7f1e7a56, 0x5, 0x83, 0x9, 0x203e, 0x5, 0x8, 0x5, 0x10001, 0x87, 0x9, 0x1, 0xff, 0x8, 0x9, 0x8001, 0xffffff41, 0x7, 0x0, 0xe, 0x9, 0x3, 0x3, 0x8001, 0x0, 0x401, 0xfffffff9, 0xed, 0x6, 0xb9, 0xc3, 0x200, 0x101, 0x10, 0xa, 0xc, 0x2, 0x101, 0x5, 0x1, 0xa, 0x6, 0x9, 0x7, 0x4, 0x6, 0xbdc0, 0x7, 0x9, 0x9, 0x100, 0x4, 0xfffffffe, 0x81, 0x1000, 0x1, 0x9, 0x4]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0xd00}}, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x280000, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="dd99401b1f441a835c3dfe053e0e094515e504b6316f2a67a040e860c8118441fc09df1fd193dfa63fcceb82dbd8c0c71b933214389bdf97fd6c3e72b4b836a0ee9b4d75f459e9e7a400ad5c01c749b8e8c6fc439e19077b744912af535044eab14e1a16e1ed9b2552408b230507bb3d8db6c4b28f2bc0e55df68ae70f3f51e1a6f9a3931a26f5"], 0x2, 0x69d, &(0x7f0000001c00)="$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") syz_clone(0x4ca00200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101002, 0x2e) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r2, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%pB \x00'}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x748, 0xffff8000}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20002044}, 0x44080) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e0000020000003e00000012840000", @ANYRES32=r3, @ANYBLOB="001000"/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="0100000003000000050000000800000000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r2, 0x0) chmod(&(0x7f0000000640)='./file2\x00', 0x171) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000600)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000005c0), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) 1.958662091s ago: executing program 6 (id=7685): sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) tkill(0x0, 0x1e) r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,utf8=1,utf8=0,shortname=winnt,shortname=sinnt,shortname=win95,utf8=0,utf8=1,nonumtail=0,shortname=mixed,shortname=winnt,\x00'], 0x1, 0x26c, &(0x7f0000000340)="$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") syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="f3bb"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x18}}, 0x10044000) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000300)='./file1\x00', r1, 0x4000, r0}, 0xfffffd45) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010000d042dbd7000fcffff1f00000000", @ANYRES32=r5], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000040)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl1\x00', r5, 0x2f, 0x4, 0x47, 0x0, 0x10, @mcast2, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x10, 0x7800, 0x0, 0x694}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local']) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000680)={0x0, 0x4000, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xfffffffffffffeb9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x404}, 0x44080) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000700)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@test_dummy_encryption}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@grpid}, {@prjquota}]}, 0x80, 0x54f, &(0x7f0000000a00)="$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") mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x10, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x401, 0x1000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) 1.933916673s ago: executing program 3 (id=7686): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000200000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f0000000400), &(0x7f0000000500)=r1}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @local, @void, {@ipv4={0x4305, @generic={{0x20, 0x4, 0x3, 0x3, 0x80, 0x65, 0x0, 0x8, 0x2e, 0x0, @private=0xa010101, @rand_addr=0x64010102, {[@cipso={0x86, 0x4e, 0x3, [{0x0, 0x8, "094ac467ec3f"}, {0x0, 0x12, "4c985e594ee96c2b09f6e55ec84c916e"}, {0x5, 0x5, "2450b2"}, {0x7, 0xc, "e17393606d00a7ab3c13"}, {0x1, 0xd, "cee8f17fabc8f286afabb2"}, {0x7, 0x10, "6549c337b0e2fdba29f02c960c99"}]}, @ssrr={0x89, 0x1b, 0xe6, [@dev={0xac, 0x14, 0x14, 0x25}, @local, @rand_addr=0x64010100, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}}, 0x0) 1.370171068s ago: executing program 1 (id=7687): r0 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) read$usbmon(r0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0x1000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x510, 0x1f0, 0x0, 0x148, 0x1f0, 0x148, 0x478, 0x240, 0x240, 0x478, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 0x4e22, 0x4e22, 0x4e20, 0x4e23, 0x8, 0x2, 0x5f4a, 0x100, 0x2}}}, {{@ip={@remote, @multicast1, 0xff000000, 0xffffff00, 'wlan0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x260, 0x288, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x9, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x3, 0x1, 0x1, 'syz1\x00', 0x5}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000600)) r4 = syz_io_uring_setup(0xcc8, &(0x7f0000000300)={0x0, 0x24c1, 0x10, 0x40003, 0x310}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}}) io_uring_enter(r4, 0xdb4, 0xd44a, 0x5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) 1.307652664s ago: executing program 3 (id=7688): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x13732000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x2d, 0x20040040) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000500)="87", 0x1}], 0x1) recvmmsg(r2, &(0x7f0000000d40), 0x40000000000038f, 0x10020, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x1f, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r5, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, r5, 0x13, 0x618c4}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @sit={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @mcast2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010100}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c044) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r5, 0x0, {0x2, 0x0, 0x1}, 0x1}, 0x18) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 1.210438664s ago: executing program 1 (id=7689): rseq(0x0, 0x0, 0x4, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000"], 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x8, 0x80, 0x7b6, 0x5, {{0x22, 0x4, 0x2, 0x8, 0x88, 0x65, 0x0, 0x7f, 0x4, 0x0, @multicast2, @empty, {[@timestamp_prespec={0x44, 0x2c, 0x66, 0x3, 0xa, [{@broadcast, 0x3}, {@remote, 0xe}, {@remote, 0x10001}, {@multicast1}, {@empty, 0x2}]}, @ra={0x94, 0x4, 0x1}, @generic={0x83, 0x9, "626161a845ebc3"}, @timestamp={0x44, 0x24, 0x20, 0x0, 0x3, [0xd, 0x2, 0x80000000, 0x1, 0x2, 0x8, 0x7, 0xfc85]}, @lsrr={0x83, 0x17, 0x73, [@broadcast, @multicast2, @broadcast, @loopback, @private=0xa010101]}]}}}}}) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/cgroup.procs\x00', 0x2, 0x128) io_setup(0x6, &(0x7f00000001c0)=0x0) io_destroy(r0) rseq(&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd}}, 0x20, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x95255000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000980)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1.153306459s ago: executing program 6 (id=7690): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffe}, 0x50) r1 = dup2(r0, r0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x84, 0x453, 0x1, 0x1, 0x25dfdbfe, "1f173f894f82bfb9f3f028d943fef67d6ffa67ea0de82f545699ac0ff2adbe61b748860d9c052c7b09ad573146f8c298756c177c3bb77872cb05808315edd3ddaa6b835088579092f0fe225123fd2315aa409fbfd6c29e115ab8124a7d1fcf7d00b3a257ad10daded5f51fd5019fdd8d21b7", ["", "", "", "", "", "", "", "", "", ""]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008004) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x70bd2b, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000000000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x40084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003540)=""/4130, 0x1022}, {&(0x7f0000000780)=""/178, 0xb2}, {&(0x7f0000000200)=""/190, 0xbe}, {&(0x7f0000000400)=""/193, 0xc1}], 0x4}, 0x102) splice(r6, 0x0, r7, 0x0, 0xf3a, 0x0) write(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x3}, 0x20) setsockopt$inet6_int(r9, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @mcast2, 0x275c30e1}, 0x1c) sendmsg$inet6(r9, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @dev={0xfe, 0x80, '\x00', 0x36}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2800003200007d36c70200009c2a035861e8f6329b593761bd3b30366e05027eb100000000000000"], 0x28}, 0x40) 977.113646ms ago: executing program 0 (id=7691): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 976.125556ms ago: executing program 3 (id=7692): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0), 0x101, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001740)=@newtaction={0xcf4, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0xce0, 0x1, [@m_police={0xcdc, 0x1, 0x0, 0x0, {{0xb}, {0xcb0, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x10000000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x3, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x2e, 0xfffd}}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffd}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0xffffffffffffffff, 0x0, 0x8420, 0x80000000, {0xa, 0x0, 0x3ff, 0xff, 0x3, 0x401}, {0x5, 0x1, 0x10, 0xff, 0x9, 0x9}, 0x15800, 0x1, 0x7}}, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xef02, 0xef0a, 0x9, 0x23, 0x400000, 0x80000000, 0xfffffffb, 0xc, 0x3, 0x2, 0x6, 0x73f9e023, 0x6, 0x6, 0x7, 0xfb, 0xeb5, 0x7, 0x24, 0x35bad662, 0x5, 0x4, 0x29, 0x6, 0x8, 0x4, 0x5, 0x1ff, 0x140000, 0x0, 0x1a, 0x8, 0x5, 0x0, 0x5, 0x6, 0x9, 0x7, 0x2, 0x8, 0x0, 0xf, 0x2, 0x98, 0x800, 0x100, 0x8000, 0xca, 0x4, 0x2, 0x3, 0x4, 0x2, 0x1d9, 0x4, 0xfffff2c2, 0x8001, 0x0, 0x1, 0x8, 0x7, 0x9, 0x0, 0x7, 0x8, 0x7, 0x6, 0x7f, 0x3ff, 0x6e09bc56, 0x81, 0x0, 0x400, 0x4, 0x21c30312, 0x6, 0x8, 0x80, 0xc, 0x2, 0x9, 0x9, 0x1, 0xfffffff8, 0x5, 0xb, 0x5, 0xbfc3, 0x3, 0xe8b3, 0x8, 0x1, 0x6252, 0x7, 0x5, 0xc, 0x0, 0x9e, 0x1, 0x27, 0x3, 0x8, 0x10, 0x8001, 0xfff, 0x6, 0x4, 0x3, 0xfff, 0x5, 0x9, 0x16, 0x5, 0x7fffffff, 0x7f, 0x4, 0xffffff81, 0x1, 0x8, 0xc, 0x3ff, 0x6, 0xfffffff2, 0x2b22, 0x2c5, 0x2db1, 0xfffffff7, 0x200, 0x8, 0x10000e46, 0x5, 0xc9b3, 0x0, 0x9, 0x9, 0x2, 0x8, 0x7, 0x5, 0xfffffc00, 0x800, 0x400, 0x9, 0x6, 0x200, 0x48, 0x40, 0x1, 0x9, 0x7, 0x8000, 0x7, 0x1ff, 0x2237, 0x6, 0x5, 0x6, 0x0, 0x4b, 0x4, 0xffff8000, 0x80000001, 0xd, 0x3, 0x3, 0x5, 0x9, 0x5, 0x3ff, 0x800, 0x9, 0x0, 0x6, 0x2, 0x93b, 0x4, 0x9, 0x200, 0x9, 0x0, 0x9, 0x401, 0xb, 0x3, 0xffffffff, 0x3, 0x0, 0x7, 0x3, 0x1, 0x2, 0x8, 0x3, 0x9, 0x0, 0x9, 0xffffffff, 0x400, 0x9, 0x61a0, 0x7, 0x2, 0x9, 0x9, 0x200, 0x9, 0x1, 0x1, 0x0, 0x4, 0x6, 0x40, 0x7, 0xf, 0x40, 0x80, 0x3, 0x1ff, 0x1, 0x9, 0xff, 0x80, 0x0, 0x4, 0x3, 0x7, 0x9, 0x8, 0x0, 0xf17, 0x0, 0xfffffff7, 0x7, 0x9, 0x0, 0x6, 0x7, 0x3, 0x101, 0xfffffffd, 0x3723, 0xf8a, 0xa, 0xcdd6, 0x1, 0x369, 0x3, 0x9, 0x7fff, 0x8, 0x10, 0xfffffff3, 0x10, 0x3ff, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xf8}, @TCA_POLICE_RATE={0x404, 0x2, [0x26ac, 0x3, 0x9, 0xfffff000, 0x4a4, 0x3fed396c, 0x7cc, 0x9bc, 0xc77, 0xbe37, 0xfffffffb, 0x1000, 0x5, 0x2, 0x6, 0x5, 0x8, 0x7, 0x39a, 0x4103, 0x57, 0x8, 0xfffffff7, 0x1, 0x5, 0x81, 0x4, 0x5, 0xfffffffa, 0x101, 0xfffffffa, 0x7, 0xf, 0x800000, 0x5, 0x7, 0xa, 0x7, 0x0, 0x7, 0x7, 0x8, 0x3, 0x1000, 0x1, 0xd1db, 0xdf, 0x80000000, 0x556fa8b8, 0x0, 0x4, 0x3, 0x4, 0x1, 0x88, 0x200, 0x45b2, 0x4, 0x62, 0x2, 0x1, 0xe2, 0x401, 0x1ff, 0xfffffff9, 0x7, 0x1, 0x37, 0x7fff, 0x1, 0x9, 0x9, 0x5, 0x10001, 0x7, 0x1, 0x9, 0x1, 0x40, 0x1, 0xf94, 0x100, 0x6, 0x6, 0x44, 0x136, 0xe63, 0x1, 0x1, 0x9, 0xe7f0, 0xef3, 0x8, 0x400, 0x9, 0x3, 0x19, 0x8, 0x9, 0x3, 0x1, 0x6, 0x7, 0x9, 0x3ff, 0xfffffc01, 0x200, 0x9, 0x7fffffff, 0xf, 0x1, 0x6, 0x0, 0x85c, 0x3, 0xa, 0x86, 0x1000, 0x7, 0x800, 0x8000, 0x2ffaf120, 0x38b7, 0xe6, 0x100, 0x3, 0x8f, 0xfffffff8, 0x2, 0x5, 0x5, 0x1ff, 0x8001, 0x4f7, 0x96, 0xffff75d1, 0x2, 0x6, 0xb, 0x8, 0x9, 0x8f, 0x9, 0xdf9, 0x1, 0xfffffffd, 0x835d, 0x40, 0x1, 0x8, 0x0, 0xffffffff, 0xc, 0x28, 0x7, 0x142, 0x6, 0x5, 0x7f, 0xa34, 0x5, 0x9, 0xffff, 0x6, 0x9, 0x487e, 0x9, 0x10, 0xd, 0x2bd3, 0xf9f2, 0xfff, 0xfffffff7, 0x2, 0xae, 0x9, 0x4, 0x2, 0x8000, 0xfffffff9, 0x5, 0x6, 0xff, 0x5, 0x8, 0xfffffff8, 0x150, 0x3c3, 0x1, 0x3, 0xdcff, 0x4, 0x8, 0xff, 0x1ff, 0x7, 0x8, 0xac6, 0x1, 0x10000, 0x3ff, 0x8000, 0x7, 0x906, 0x5, 0x6, 0x4f9, 0x0, 0x1, 0x4, 0x8001, 0x8001, 0x7, 0xb4000000, 0xfffffffe, 0x0, 0x80, 0x1990, 0x4, 0x2, 0x1, 0x0, 0x6d0, 0xd2, 0xa56a, 0x0, 0xc, 0x5, 0x4, 0x93, 0x6e2, 0xffffffff, 0x10, 0xfff, 0x0, 0x4, 0x8, 0x0, 0x10, 0xffffffff, 0x10, 0xf, 0x8, 0x7, 0x5, 0x6, 0x8, 0xab9, 0x6316, 0x7fff, 0x0, 0xdc4, 0x10001, 0xcfd, 0x5, 0x7]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x10}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1000, 0x8000, 0x4, 0x4, 0x8, 0x8, 0x80000001, 0x74c6, 0x8, 0x4, 0x40000000, 0x101, 0xffff0a6a, 0x1, 0x7, 0x38, 0x8000, 0x5, 0x3, 0x3, 0x42d, 0x1, 0x9, 0x100, 0x1, 0x1, 0x81, 0x7ff800, 0x3, 0x4, 0x80000000, 0x0, 0x1, 0x6, 0xe, 0x5, 0x7, 0x4, 0xff, 0x2, 0x7, 0xe76, 0x10000, 0xfffffffa, 0x6, 0xd66, 0x9, 0x2, 0xb26, 0xb4, 0xa, 0x800, 0x7fffffff, 0x80, 0xace, 0x80000006, 0x3, 0x3, 0x380, 0x5, 0x100, 0x9, 0x9, 0x1000, 0x7f, 0x3, 0x7, 0x7, 0x18000000, 0x1, 0x10000, 0x2, 0x2, 0x7, 0xef, 0x3, 0x400, 0x0, 0x6, 0x5, 0x92b, 0x5, 0x1000, 0xb, 0x7, 0x5, 0x9, 0x7fffffff, 0x1000, 0x5, 0x76, 0x200, 0x8, 0x2, 0x6, 0x10, 0x7ff, 0x40008, 0x72, 0x7fffffff, 0x311, 0xff, 0x4, 0xffffff2f, 0x1, 0x8, 0x9, 0xa086, 0x1, 0x200, 0x800, 0x7, 0x5, 0x80000000, 0x3ff, 0x9, 0x100, 0x15d2, 0x6, 0x1, 0x1, 0x2, 0x241c1aaa, 0x2, 0x0, 0x2, 0x16b, 0x8, 0x9, 0xa, 0x981, 0x0, 0xb, 0x2, 0x2, 0xffff, 0x81, 0x3, 0x3, 0x7, 0x6, 0x4, 0x2, 0xfffffffd, 0x5, 0x40000000, 0x7a, 0x8f0a, 0x7, 0xd29, 0x7, 0x0, 0x15, 0xfffffa11, 0x2, 0x80000001, 0xfe2, 0xa, 0x8, 0x7f, 0x6, 0x4, 0x9, 0x7, 0x4, 0x6, 0xf, 0x51, 0xff, 0x2, 0xfffffffd, 0x2, 0x8, 0x3, 0xff, 0x8, 0x2c1efe9, 0x3e, 0x5d18, 0x81, 0x400, 0x4, 0x7326deb8, 0x8006, 0x7ff, 0xffffffff, 0x5, 0x0, 0x2, 0x1, 0x6, 0x9e8, 0x101, 0xb31, 0x5, 0xe2, 0x4, 0x7f1e7a56, 0x5, 0x83, 0x9, 0x203e, 0x5, 0x8, 0x5, 0x10001, 0x87, 0x9, 0x1, 0xff, 0x8, 0x9, 0x8001, 0xffffff41, 0x7, 0x0, 0xe, 0x9, 0x3, 0x3, 0x8001, 0x0, 0x401, 0xfffffff9, 0xed, 0x6, 0xb9, 0xc3, 0x200, 0x101, 0x10, 0xa, 0xc, 0x2, 0x101, 0x5, 0x1, 0xa, 0x6, 0x9, 0x7, 0x4, 0x6, 0xbdc0, 0x7, 0x9, 0x9, 0x100, 0x4, 0xfffffffe, 0x81, 0x1000, 0x1, 0x9, 0x4]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0xcf4}}, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x280000, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="dd99401b1f441a835c3dfe053e0e094515e504b6316f2a67a040e860c8118441fc09df1fd193dfa63fcceb82dbd8c0c71b933214389bdf97fd6c3e72b4b836a0ee9b4d75f459e9e7a400ad5c01c749b8e8c6fc439e19077b744912af535044eab14e1a16e1ed9b2552408b230507bb3d8db6c4b28f2bc0e55df68ae70f3f51e1a6f9a3931a26f5"], 0x2, 0x69d, &(0x7f0000001c00)="$eJzs3V1vG1kdx/HfOE7iZNFqBahUVR9OW1ZKRXHHzjZVVCTWjMfJgO2xZhyUSEirsk1WVZ0utEWiuVlyw4O0vAHuuOGCF4HE9b4LbhBIK7hD4mbQPDl2/dRs3XSXfj/Rrscz/znnP3Nc/zWJ51gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECWU7ftiqWm197ZNZM59cBvTdmetraoG+nCjZn9Slb8n0olnU9Xnf/myeZz8f+u6WL67KJK8UNJR2+de+fuN4qFfP8pCX0ROm2DT54dPbzX6+0/foHYBZ26+ddJhXxpJRuTMUFbbtsLfa9V23KNF/pmc2PDvrXdCE3Da7rhXth1W8YJ3ELXD8yac8NUNjfXjVve83faW/Va081X3vlu1bY3zA+X04GWVA6dba/Z9NpbSUy8OY65Yz79SRrg1lrGHDzo7a/POpI4qPIiQdVZQVW7Wq1UqtXKxu3N23dsuziywo5Zdp9GIub+osVXzHzeuIE5KMT1/2+W1FRJbe1oV2bsj6O6AvlqTdieyev/u7fcqf0O1v+8yp+Xvp9tvqCk/l9On12eVP8n5GJkkh3GbbEmrD/dz2KSkdETPdORHuqeeuppX4/n0LaRuTKXVs7gZ0uu2vIUypenlmrJGpOtMdrUhjZk6wNtq6FQRg15aspVqD2F6spNXlGOArmqqStfgYzW5OiGjCra1KbWZeSqrD352lFbW6qrpv9EUXSgB8l5X5+So/KgyoSA5cGg6pSWJtX/n36Svk6z+m9T/99U6etgOX34bFoM8CUQZdf/gwqzd7vy6jICAAAAAADzZiW/fbeSv91fkhSp4TVd+3WnBQAAAAAA5shStKyLsuLrf0mXZHH9DwAAAADA/xsrucfOkrSafKjfOrkT6kV+CbBwBikCAAAAAICXlNz5f3lJipJJK67IOtX1PwAAAAAA+Ar47cAc+8V8jt0o/7N+QVLYWbb+8q9lBYvWcWf329ZhLd5SO8xiRj4B0G1csN7OJupNHpYkJc8c96KV9ZZNgtmfd/Dzg1lz/VvBcwksLQw2MCEBK+55o5g906e6mu5yNZtn/v5RQcmWtJfVhtd0y47fvFtRrfZ2oevudn/x6MEvpaB/nAcPevvlDz/u3U9yOY5XHR/GjX4ylE5h/Mk4yeVpMt9Ccs/FuCNeUSPv8nft1qqV9Gvnx7+g2mFhsKNpA3DS5691LR2za6tp7OpRf8b9+PhL8fFXysmQDR19sGidZFF5/sjHDcSELEpJFtfTmOtr11X9e7rcH4WCVfrOglQtj47BUBbVwSxmnwvr3yPnYiCL5CHfMnAu1uMs/ho3NCGL9dNlMTIiAPC6HOiSknehS0omMe9XoVJWd/PykL+pfaG6M7u6vz9c3Z/+IYqSHRakYva3iam9lBS/o69ZSR1aSg+peGHMO7qd1ZWSJryj2y9R3eK+/nzyHUhZ2iNZ/DeKoruVpN/fP1dV/zjU3Ui/YbO6EJ/CW08Pf5ZMgB/7aP+j/UfV6vqG/Z5t365qMTmM7GFB1B4AwIjZ37EzM8J6T1fTiKv3//luujRU8b7e/0hBWR/qY/V0XzfzrxC4Mr7V1YGPIdxMr1o1cNVqzr1zN/leuuHYim5OvKpLaulAbLUfu6h8l+FKfRK7/opHAQCAs3VtRh0eX/9LQ/X/ptbSiLULY6+7h2t5dnXcv6SfFFuZnfz78z4bAAC8Gdzgc2u1+xsrCLzOB5XNzUqtu+2awHd+ZAKvvuUar911A2e71t5yTSfwu77jN00n0LJXd0MT7nQ6ftA1DT8wHT/0dpNvfjfZV7+HbqvW7npO2Gm6tdA1jt/u1pyuqXuhYzo7P2h64bYbJDuHHdfxGp5T63p+24T+TuC4ZWNC1x0I9Opuu+s1vHixbTqB16oFe+bHfnOn5Zq6GzqB1+n6aYN5X1674QetpNlyMRr3eQEAAN44T54dPbzX6+0/fn5hJb40T9cca0LM6MKSnjyLr8rjNcVsE3MEAQDwJXNSwE+xU+kVJgQAAAAAAAAAAAAAAAAAAAAAAEbMvqXvlAuL424WlPprfv52tka/0skthiPtWFqcc2KnWSicdq/8loijh59NCV7JF/IZBzUYc3xmB/iPr0lvJWv0+Fu77YM4k3n3tTJlcF/FwvcO0jM6MSbeOHbTcn8sivP/5xAvPPrThE1RFEXTd18ePodL0w5weKEYj+nSSwzBmb8VAThj/wsAAP//EHYw2w==") syz_clone(0x4ca00200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101002, 0x2e) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r3, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%pB \x00'}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x748, 0xffff8000}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20002044}, 0x44080) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e0000020000003e00000012840000", @ANYRES32=r4, @ANYBLOB="001000"/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="0100000003000000050000000800000000000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r3, 0x0) chmod(&(0x7f0000000640)='./file2\x00', 0x171) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000600)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000005c0), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) 967.809727ms ago: executing program 0 (id=7693): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000080)={0x0, 0x2, 0xffe, 0x4000006}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x3}, 0x18) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_open_dev$loop(0x0, 0xd5d1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0xa7, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x4f) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) 408.9893ms ago: executing program 1 (id=7694): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000080)={0x0, 0x2, 0xffe, 0x4000006}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x3}, 0x18) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0xa7, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x4f) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) 255.163615ms ago: executing program 6 (id=7695): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000080000000181200", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x11, 0x4, 0x4, 0x9}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000004000000040000000010000001000000", @ANYRES32=r2], 0x48) unshare(0x28000600) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f00000002c0), &(0x7f0000000400)=r3}, 0x20) 218.112529ms ago: executing program 5 (id=7696): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000400)={0x8, 0xfffffff7, 0xfffffffe, 0x2, 0x40}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) r2 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@abort}]}, 0xff, 0x258, &(0x7f0000000780)="$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") socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x14, r3, 0x200, 0x80000000, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x2904c, 0x1, 0x10003, '\x00', [{}, {0xffffffff}], ['\x00']}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2100, 0x0) mknodat(r2, &(0x7f00000002c0)='./mnt/file0\x00', 0x8000, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newqdisc={0xa0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x70, 0x2, {{}, [@TCA_NETEM_LOSS={0x34, 0x2, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x4, 0x1, 0x4000, 0xfffff3e3}}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0xf, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0xa0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x16, 0x401, 0x80, 0x3, 0x2545c2a0a0705b4b, r7, 0xffffff74, '\x00', r10, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x50) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000040)={'wlan0\x00', 0x400}) openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x321000, 0x0) recvmmsg(r0, &(0x7f0000001f80)=[{{0x0, 0x0, &(0x7f0000000100), 0x1, 0x0, 0xfffffffffffffe09}, 0x8}], 0x4000173, 0x40012102, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 171.902034ms ago: executing program 6 (id=7697): r0 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) read$usbmon(r0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0x1000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x510, 0x1f0, 0x0, 0x148, 0x1f0, 0x148, 0x478, 0x240, 0x240, 0x478, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 0x4e22, 0x4e22, 0x4e20, 0x4e23, 0x8, 0x2, 0x5f4a, 0x100, 0x2}}}, {{@ip={@remote, @multicast1, 0xff000000, 0xffffff00, 'wlan0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x260, 0x288, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x9, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x3, 0x1, 0x1, 'syz1\x00', 0x5}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000600)) r4 = syz_io_uring_setup(0xcc8, &(0x7f0000000300)={0x0, 0x24c1, 0x10, 0x40003, 0x310}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000140)={0x32, 0x3, '\x00', [@hao={0xc9, 0x10, @loopback}, @ra={0x5, 0x2, 0x4}, @jumbo={0xc2, 0x4, 0x101}]}, 0x28) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/uts\x00') sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000001140)=ANY=[@ANYBLOB="13c4dcc1115d7365146a15bf53b597d5b626195040296c2a0f5a9f055ab2b75b89c507baffe7994cb40db46c07edc13dd70a7212ce271ee61f6053197b9e8647783ada", @ANYRES16=r7, @ANYBLOB="080025bd7000fedbdf251e0000000c000600030000000000000008000300", @ANYRES32=r9, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="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"], 0x2d4}}, 0x4000) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}}) io_uring_enter(r4, 0xdb4, 0xd44a, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000040)={0xfffffffffffffffe, r4, 0x33, {0x5, 0x10001}, 0x6}, 0x1) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) 111.159149ms ago: executing program 0 (id=7698): getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000400"/28], 0x50) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') close_range(r3, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000170000de00000000ff000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000dc0)='module_free\x00', r7}, 0x18) r8 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r8, &(0x7f0000001cc0)=ANY=[@ANYBLOB='system_h:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00000000000w'], 0x79) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) sendfile(r5, r9, 0x0, 0x20000023893) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="1b000000000000000000000006001b0f6a0000005489555dda8ca1485e8f00824b3d9cc15834a5619ff63b4b15680cf0d4aa57dd48b99b874ad40fbd7f32521aa68f42f0c92313799112e7f3785aca4dbdf18bd748d95d6052df3e3b2ed21dd3e4bd9d1244d90ec850d5ff625b169b5407b88feaa94ea50e52caae1063", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="0300002004000000040000000ad20740c33ff3404600000000000000dce86ca87686eb3a5378bf358240923f1c4f909803bff8b9ae1d496a0cad152625fda2f6d8f70fb3f1cb203bd22b9f87388e9a52138d047436a1502727c907b7d225fcf2ffae2ac3cea871a2cba20a1b7b786fd8f7f939aca968c46449d0112953", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000050000000400"/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)='%pI4 \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x92, &(0x7f0000000340)=""/146, 0x20780, 0x0, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x7, 0x0, 0xee}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000980)=[r1, r2, r3, r9, 0x1, r10, r11, r12, r13, r14], &(0x7f00000009c0)=[{0x4, 0x2, 0x2, 0x3}, {0x0, 0x4, 0xf, 0x8}, {0x4, 0x5, 0x7, 0x2}, {0x4, 0x5, 0x4, 0xa}, {0x1, 0x2, 0x2, 0x3}, {0x2, 0x3, 0x4, 0x6}], 0x10, 0x3}, 0x94) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095", @ANYRES32=r13, @ANYBLOB="984e79ab1baf536600ed2373884b1674a3149bd5e595ca00dc2df7117112e0a86fb1b0c566128f6b685908b26077381f301972c82fe7fea20dc25470239231e16d401c89ea5a01b46d16e3e8896f25c7241a11216655c5029b9e6ed5e37186005f1ea631895bcd18883b618e373dadf42b3c", @ANYRES8=r13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, r4}, 0x94) r16 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000100)='kmem_cache_free\x00', r16}, 0x18) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000000), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) syz_emit_ethernet(0x76, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000030000403a00fc000000000000000000000000000000ff0200000000000058000000000000010401907800000000604aa19800003c00fe80000000000000000000000000003e00000000000000000000ffffac1414aa2c000400040000003c00000000000000"], 0x0) socket$kcm(0x21, 0x1, 0x2) 71.647173ms ago: executing program 3 (id=7699): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mount$9p_fd(0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d2752c5110000781f8819756ae4bf054dfa3ab2ae0735bba662617af7412cf64b608610f370f04e173f81e03a0f13e0ae34e6e06c3791a6a1016eb59a9ffa2b9271ba9c5bcf6bf93f1cda21ca4edbb927080000002067a25d6f1cbdaa1a5812f80d63dfcf81da688bde8a4a87c203e285d2fa75998b13336cd6105e9de9", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) 69.096164ms ago: executing program 0 (id=7700): bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@jqfmt_vfsold}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") 0s ago: executing program 3 (id=7701): rseq(0x0, 0x0, 0x4, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000"], 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x8, 0x80, 0x7b6, 0x5, {{0x22, 0x4, 0x2, 0x8, 0x88, 0x65, 0x0, 0x7f, 0x4, 0x0, @multicast2, @empty, {[@timestamp_prespec={0x44, 0x2c, 0x66, 0x3, 0xa, [{@broadcast, 0x3}, {@remote, 0xe}, {@remote, 0x10001}, {@multicast1}, {@empty, 0x2}]}, @ra={0x94, 0x4, 0x1}, @generic={0x83, 0x9, "626161a845ebc3"}, @timestamp={0x44, 0x24, 0x20, 0x0, 0x3, [0xd, 0x2, 0x80000000, 0x1, 0x2, 0x8, 0x7, 0xfc85]}, @lsrr={0x83, 0x17, 0x73, [@broadcast, @multicast2, @broadcast, @loopback, @private=0xa010101]}]}}}}}) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/cgroup.procs\x00', 0x2, 0x128) io_setup(0x6, &(0x7f00000001c0)=0x0) io_destroy(r0) rseq(&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd}}, 0x20, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x95255000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000980)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ad-only [ 629.257885][T30303] Alternate GPT is invalid, using primary GPT. [ 629.264320][T30303] loop3: p2 p3 p7 [ 629.373504][T29268] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.406424][T30316] FAULT_INJECTION: forcing a failure. [ 629.406424][T30316] name failslab, interval 1, probability 0, space 0, times 0 [ 629.419227][T30316] CPU: 1 UID: 0 PID: 30316 Comm: syz.6.7131 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 629.419267][T30316] Tainted: [W]=WARN [ 629.419276][T30316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 629.419311][T30316] Call Trace: [ 629.419320][T30316] [ 629.419330][T30316] __dump_stack+0x1d/0x30 [ 629.419434][T30316] dump_stack_lvl+0x95/0xd0 [ 629.419462][T30316] dump_stack+0x15/0x1b [ 629.419501][T30316] should_fail_ex+0x265/0x280 [ 629.419583][T30316] should_failslab+0x8c/0xb0 [ 629.419612][T30316] kmem_cache_alloc_noprof+0x69/0x4b0 [ 629.419682][T30316] ? getname_flags+0x80/0x3b0 [ 629.419714][T30316] getname_flags+0x80/0x3b0 [ 629.419744][T30316] do_sys_openat2+0x60/0x150 [ 629.419781][T30316] __x64_sys_openat+0xf2/0x120 [ 629.419899][T30316] x64_sys_call+0x2b07/0x3000 [ 629.419930][T30316] do_syscall_64+0xca/0x2b0 [ 629.419974][T30316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.420000][T30316] RIP: 0033:0x7fdd6c30f749 [ 629.420056][T30316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 629.420079][T30316] RSP: 002b:00007fdd6ad6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 629.420100][T30316] RAX: ffffffffffffffda RBX: 00007fdd6c565fa0 RCX: 00007fdd6c30f749 [ 629.420116][T30316] RDX: 0000000000000000 RSI: 0000200000001040 RDI: 00000000ffffff9c [ 629.420132][T30316] RBP: 00007fdd6ad6f090 R08: 0000000000000000 R09: 0000000000000000 [ 629.420224][T30316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 629.420239][T30316] R13: 00007fdd6c566038 R14: 00007fdd6c565fa0 R15: 00007ffc7ed4d2e8 [ 629.420263][T30316] [ 629.704196][T30330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7130'. [ 629.739620][T30326] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 629.861975][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 629.861993][ T29] audit: type=1326 audit(1766425727.706:40697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30340 comm="syz.1.7142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38461f749 code=0x7ffc0000 [ 629.912033][T30342] loop3: detected capacity change from 0 to 2048 [ 629.918597][ T29] audit: type=1326 audit(1766425727.746:40698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30340 comm="syz.1.7142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc38461f749 code=0x7ffc0000 [ 629.942273][ T29] audit: type=1326 audit(1766425727.746:40699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30340 comm="syz.1.7142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38461f749 code=0x7ffc0000 [ 629.965992][ T29] audit: type=1326 audit(1766425727.746:40700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30340 comm="syz.1.7142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc38461f749 code=0x7ffc0000 [ 629.989743][ T29] audit: type=1326 audit(1766425727.746:40701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30340 comm="syz.1.7142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38461f749 code=0x7ffc0000 [ 630.013382][ T29] audit: type=1326 audit(1766425727.746:40702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30340 comm="syz.1.7142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc38461f749 code=0x7ffc0000 [ 630.037120][ T29] audit: type=1326 audit(1766425727.746:40703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30340 comm="syz.1.7142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38461f749 code=0x7ffc0000 [ 630.060818][ T29] audit: type=1326 audit(1766425727.746:40704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30340 comm="syz.1.7142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc38461f749 code=0x7ffc0000 [ 630.084512][ T29] audit: type=1326 audit(1766425727.746:40705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30340 comm="syz.1.7142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38461f749 code=0x7ffc0000 [ 630.088643][T30342] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 630.108098][ T29] audit: type=1326 audit(1766425727.746:40706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30340 comm="syz.1.7142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc38461f749 code=0x7ffc0000 [ 630.152141][T30342] ext4 filesystem being mounted at /227/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 630.234621][T30342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.256472][T30342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.394772][T30359] 9p: Bad value for 'rfdno' [ 630.597942][T30367] loop5: detected capacity change from 0 to 128 [ 630.689137][T30367] __nla_validate_parse: 3 callbacks suppressed [ 630.689160][T30367] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7150'. [ 630.707207][T30367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 630.714826][T30367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 630.723264][T30367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 630.730711][T30367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 630.835901][T30377] loop6: detected capacity change from 0 to 512 [ 630.854143][T30380] loop0: detected capacity change from 0 to 256 [ 630.861271][T30380] vfat: Bad value for 'shortname' [ 630.877708][T30380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7155'. [ 630.939649][T30380] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 630.999851][T30380] bond7: (slave lo): Enslaving as a backup interface with an up link [ 631.008743][T30380] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 631.025617][T30380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7155'. [ 631.055855][T30380] loop0: detected capacity change from 0 to 512 [ 631.080314][T30380] EXT4-fs: test_dummy_encryption option not supported [ 631.187887][ T7213] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:14: bg 0: block 345: padding at end of block bitmap is not set [ 631.222843][T30400] lo: entered promiscuous mode [ 631.227703][T30400] lo: entered allmulticast mode [ 631.232992][ T7213] EXT4-fs (loop3): Remounting filesystem read-only [ 631.243604][T30400] tunl0: entered promiscuous mode [ 631.248728][T30400] tunl0: entered allmulticast mode [ 631.274898][T30400] gre0: entered promiscuous mode [ 631.279918][T30400] gre0: entered allmulticast mode [ 631.298075][T30400] gretap0: entered promiscuous mode [ 631.303406][T30400] gretap0: entered allmulticast mode [ 631.310522][T30400] erspan0: entered promiscuous mode [ 631.315828][T30400] erspan0: entered allmulticast mode [ 631.340317][T26661] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.347615][T30400] ip_vti0: entered promiscuous mode [ 631.354612][T30400] ip_vti0: entered allmulticast mode [ 631.363880][T30400] ip6_vti0: entered promiscuous mode [ 631.369225][T30400] ip6_vti0: entered allmulticast mode [ 631.392566][T30400] sit0: entered promiscuous mode [ 631.397653][T30400] sit0: entered allmulticast mode [ 631.410963][T30400] ip6tnl0: entered promiscuous mode [ 631.416319][T30400] ip6tnl0: entered allmulticast mode [ 631.423523][T30400] ip6gre0: entered promiscuous mode [ 631.428790][T30400] ip6gre0: entered allmulticast mode [ 631.436875][T30400] syz_tun: entered promiscuous mode [ 631.442133][T30400] syz_tun: entered allmulticast mode [ 631.449597][T30400] bridge0: entered promiscuous mode [ 631.454994][T30400] bridge0: entered allmulticast mode [ 631.462859][T30400] vcan0: entered promiscuous mode [ 631.467945][T30400] vcan0: entered allmulticast mode [ 631.476010][T30400] bond0: entered promiscuous mode [ 631.481118][T30400] bond_slave_0: entered promiscuous mode [ 631.487020][T30400] bond_slave_1: entered promiscuous mode [ 631.495191][T30409] loop6: detected capacity change from 0 to 512 [ 631.527661][T30400] dummy0: entered promiscuous mode [ 631.533234][T30400] bond0: entered allmulticast mode [ 631.538396][T30400] bond_slave_0: entered allmulticast mode [ 631.544195][T30400] bond_slave_1: entered allmulticast mode [ 631.553358][T30411] netlink: 'syz.6.7166': attribute type 1 has an invalid length. [ 631.564799][T30400] dummy0: entered allmulticast mode [ 631.574092][T30400] nlmon0: entered promiscuous mode [ 631.579326][T30400] nlmon0: entered allmulticast mode [ 631.586842][T30400] caif0: entered promiscuous mode [ 631.591915][T30400] caif0: entered allmulticast mode [ 631.597134][T30400] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 631.644405][T30411] 8021q: adding VLAN 0 to HW filter on device bond1 [ 631.695168][T30412] 8021q: adding VLAN 0 to HW filter on device bond1 [ 631.703324][T30412] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 631.725495][T30412] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 631.747785][T30411] gretap1: entered promiscuous mode [ 631.758079][T30411] bond1: (slave gretap1): making interface the new active one [ 631.766856][T30411] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 631.804365][T30411] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7166'. [ 631.880668][T30427] loop1: detected capacity change from 0 to 2048 [ 631.894663][T30427] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 631.911264][T30427] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 631.925759][T30435] vfat: Bad value for 'shortname' [ 631.933376][T30435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7173'. [ 631.966306][T30435] bond7: (slave lo): Releasing backup interface [ 631.978909][T30435] bond7: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 631.994216][T30435] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 632.023928][T30438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.046577][T30435] bond8: (slave lo): Enslaving as a backup interface with an up link [ 632.059735][T30438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.080691][T30435] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 632.097040][T30440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7173'. [ 632.108625][T30438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7171'. [ 632.124641][T30443] EXT4-fs: test_dummy_encryption option not supported [ 632.416446][T30457] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 632.446832][T30457] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 632.459928][T30457] ext4 filesystem being mounted at /232/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 632.819271][ T7952] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:34: bg 0: block 345: padding at end of block bitmap is not set [ 632.842286][ T7952] EXT4-fs (loop1): Remounting filesystem read-only [ 632.948427][T26956] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.074466][T30473] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 633.083291][T30473] FAT-fs (loop1): Filesystem has been set read-only [ 633.104878][T30473] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 633.293603][T26661] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.328813][T30473] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 633.436541][T30481] vfat: Bad value for 'shortname' [ 633.475890][T30481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7187'. [ 633.537084][T30473] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 633.560959][T30488] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 633.593033][T30488] bond8: (slave lo): Enslaving as a backup interface with an up link [ 633.613238][T30488] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 633.646282][T30481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7187'. [ 633.673515][T30489] EXT4-fs: test_dummy_encryption option not supported [ 633.747373][T30493] vfat: Bad value for 'shortname' [ 633.760087][T30493] bond8: (slave lo): Releasing backup interface [ 633.764002][T30473] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 633.790951][T30493] bond8: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 633.879270][T30495] set_capacity_and_notify: 9 callbacks suppressed [ 633.879292][T30495] loop6: detected capacity change from 0 to 2048 [ 633.894597][T30493] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 633.914746][T30495] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 633.937712][T30495] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 633.951792][T30493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7191'. [ 633.963737][T30493] loop0: detected capacity change from 0 to 512 [ 633.981343][T30493] EXT4-fs: test_dummy_encryption option not supported [ 634.007107][T30473] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 634.100781][T30503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.151065][T30503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.162384][T30507] loop1: detected capacity change from 0 to 2048 [ 634.175360][T30507] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 634.193651][T30507] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 634.323645][T30515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.332425][T30515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.413688][T30517] loop0: detected capacity change from 0 to 2048 [ 634.451890][T30517] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 634.492784][T30517] ext4 filesystem being mounted at /325/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 634.572089][T30527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.583824][T30527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.714288][T30534] loop5: detected capacity change from 0 to 128 [ 634.721179][T30534] EXT4-fs: Ignoring removed nobh option [ 634.730770][T30534] ext4 filesystem being mounted at /85/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 634.774536][T30537] loop5: detected capacity change from 0 to 256 [ 634.786440][T30537] vfat: Bad value for 'shortname' [ 634.803544][T30537] bond1: (slave lo): Releasing backup interface [ 634.810786][T30537] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 634.821821][T30537] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 634.838943][T30537] bond3: (slave lo): Enslaving as a backup interface with an up link [ 634.849208][T30537] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 634.888009][T30537] loop5: detected capacity change from 0 to 512 [ 634.895758][T30537] EXT4-fs: test_dummy_encryption option not supported [ 635.122313][ T3008] udevd[3008]: worker [3310] terminated by signal 33 (Unknown signal 33) [ 635.160398][ T7244] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:22: bg 0: block 345: padding at end of block bitmap is not set [ 635.185181][ T7244] EXT4-fs (loop6): Remounting filesystem read-only [ 635.192007][ T4567] printk: udevd: 256 output lines suppressed due to ratelimiting [ 635.216954][ T7250] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:25: bg 0: block 345: padding at end of block bitmap is not set [ 635.232393][ T7250] EXT4-fs (loop1): Remounting filesystem read-only [ 635.296881][T30555] loop5: detected capacity change from 0 to 512 [ 635.334360][T30559] 9p: Bad value for 'rfdno' [ 635.362816][ T29] kauditd_printk_skb: 418 callbacks suppressed [ 635.362834][ T29] audit: type=1326 audit(1766425733.216:41125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30561 comm="syz.1.7209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38461f749 code=0x7ffc0000 [ 635.377542][T30562] loop5: detected capacity change from 0 to 512 [ 635.415627][ T29] audit: type=1326 audit(1766425733.246:41126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30561 comm="syz.1.7209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38461f749 code=0x7ffc0000 [ 635.439364][ T29] audit: type=1326 audit(1766425733.246:41127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30561 comm="syz.1.7209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fc38461f749 code=0x7ffc0000 [ 635.463042][ T29] audit: type=1326 audit(1766425733.246:41128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30561 comm="syz.1.7209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38461f749 code=0x7ffc0000 [ 635.486755][ T29] audit: type=1326 audit(1766425733.246:41129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30561 comm="syz.1.7209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38461f749 code=0x7ffc0000 [ 635.550166][T30562] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 635.558991][T30562] FAT-fs (loop5): Filesystem has been set read-only [ 635.579196][ T7250] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:25: bg 0: block 345: padding at end of block bitmap is not set [ 635.587302][T30562] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 635.602085][ T7250] EXT4-fs (loop0): Remounting filesystem read-only [ 635.801189][T30572] loop0: detected capacity change from 0 to 128 [ 635.813835][T30562] FAT-fs (loop5): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 635.817095][T30572] EXT4-fs: Ignoring removed nobh option [ 635.845213][T30567] lo speed is unknown, defaulting to 1000 [ 635.882326][T30567] lo speed is unknown, defaulting to 1000 [ 635.977183][T30575] vfat: Bad value for 'shortname' [ 635.984572][T30575] __nla_validate_parse: 8 callbacks suppressed [ 635.984589][T30575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7213'. [ 636.009433][T30578] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 636.034402][T30575] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 636.050257][T30575] bond2: (slave lo): Enslaving as a backup interface with an up link [ 636.059945][T30575] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 636.094391][T30562] FAT-fs (loop5): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 636.114487][T30575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7213'. [ 636.128476][T30575] EXT4-fs: test_dummy_encryption option not supported [ 636.151677][T30572] ext4 filesystem being mounted at /326/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 636.162513][T30578] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.7214: invalid indirect mapped block 4294967295 (level 0) [ 636.186147][T30567] Alternate GPT is invalid, using primary GPT. [ 636.192641][T30567] loop6: p2 p3 p7 [ 636.211678][T30578] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.7214: invalid indirect mapped block 4294967295 (level 1) [ 636.243066][T30572] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7211'. [ 636.284090][T30578] EXT4-fs (loop3): 1 orphan inode deleted [ 636.289926][T30578] EXT4-fs (loop3): 1 truncate cleaned up [ 636.355244][T30585] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 636.375187][T30562] FAT-fs (loop5): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 636.424341][T30594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.436599][T30593] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 636.482911][T30593] EXT4-fs (loop0): invalid journal inode [ 636.502296][T30594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.510957][T30593] EXT4-fs (loop0): can't get journal size [ 636.522172][T30593] EXT4-fs (loop0): 1 truncate cleaned up [ 636.528345][ T29] audit: type=1326 audit(1766425734.376:41130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30598 comm="syz.5.7220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59a61ff749 code=0x7ffc0000 [ 636.553795][T30593] 9p: Bad value for 'rfdno' [ 636.583510][T30594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7215'. [ 636.702696][ T29] audit: type=1326 audit(1766425734.406:41131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30598 comm="syz.5.7220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f59a61ff749 code=0x7ffc0000 [ 636.726430][ T29] audit: type=1326 audit(1766425734.406:41132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30598 comm="syz.5.7220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59a61ff749 code=0x7ffc0000 [ 636.834609][T30615] vfat: Bad value for 'shortname' [ 636.842412][T30615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7225'. [ 636.882117][T30615] bond8: (slave lo): Releasing backup interface [ 636.907680][T30617] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 636.916590][T30617] FAT-fs (loop0): Filesystem has been set read-only [ 636.931695][T30615] bond8: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 636.955648][T30615] bond9: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 636.968248][T30617] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 636.991970][T30615] bond9: (slave lo): Enslaving as a backup interface with an up link [ 637.000769][T30615] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 637.093018][T30615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7225'. [ 637.116312][T30615] EXT4-fs: test_dummy_encryption option not supported [ 637.222752][T30617] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 637.266154][T30626] random: crng reseeded on system resumption [ 637.288919][T30626] Restarting kernel threads ... [ 637.294628][T30626] Done restarting kernel threads. [ 637.349218][T30632] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7230'. [ 637.399519][ T31] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 345: padding at end of block bitmap is not set [ 637.447038][T30617] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 637.461017][ T31] EXT4-fs (loop1): Remounting filesystem read-only [ 637.655119][T30617] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 637.706894][T30645] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 637.740154][T30645] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.7233: invalid indirect mapped block 4294967295 (level 0) [ 637.756612][T30645] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.7233: invalid indirect mapped block 4294967295 (level 1) [ 637.771637][T30645] EXT4-fs (loop3): 1 orphan inode deleted [ 637.777510][T30645] EXT4-fs (loop3): 1 truncate cleaned up [ 637.888785][T30617] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 638.226483][T30666] lo speed is unknown, defaulting to 1000 [ 638.281364][T30666] lo speed is unknown, defaulting to 1000 [ 638.556268][T30653] lo speed is unknown, defaulting to 1000 [ 638.585904][T30667] Alternate GPT is invalid, using primary GPT. [ 638.592358][T30667] loop0: p2 p3 p7 [ 638.609120][T30671] Alternate GPT is invalid, using primary GPT. [ 638.615500][T30671] loop3: p2 p3 p7 [ 638.658112][T30653] lo speed is unknown, defaulting to 1000 [ 638.790929][T30678] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #18: comm syz.6.7242: iget: bad extra_isize 90 (inode size 256) [ 638.861504][T30678] EXT4-fs (loop6): Remounting filesystem read-only [ 638.888966][T30684] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7244'. [ 638.898938][T30678] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -30) [ 638.908091][T30678] EXT4-fs (loop6): 1 orphan inode deleted [ 638.936437][T30689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7243'. [ 638.978042][ T29] audit: type=1326 audit(1766425736.816:41133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30691 comm="syz.0.7247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94862bf749 code=0x7ffc0000 [ 639.001804][ T29] audit: type=1326 audit(1766425736.816:41134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30691 comm="syz.0.7247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94862bf749 code=0x7ffc0000 [ 639.029133][T30695] set_capacity_and_notify: 19 callbacks suppressed [ 639.029149][T30695] loop0: detected capacity change from 0 to 128 [ 639.092690][T30696] loop5: detected capacity change from 0 to 512 [ 639.099641][T30696] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 639.123221][T30696] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.7248: invalid indirect mapped block 4294967295 (level 0) [ 639.148609][T30696] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.7248: invalid indirect mapped block 4294967295 (level 1) [ 639.165246][T30703] FAULT_INJECTION: forcing a failure. [ 639.165246][T30703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 639.178404][T30703] CPU: 0 UID: 0 PID: 30703 Comm: syz.3.7250 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 639.178509][T30703] Tainted: [W]=WARN [ 639.178519][T30703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 639.178535][T30703] Call Trace: [ 639.178544][T30703] [ 639.178555][T30703] __dump_stack+0x1d/0x30 [ 639.178587][T30703] dump_stack_lvl+0x95/0xd0 [ 639.178632][T30703] dump_stack+0x15/0x1b [ 639.178658][T30703] should_fail_ex+0x265/0x280 [ 639.178689][T30703] should_fail+0xb/0x20 [ 639.178713][T30703] should_fail_usercopy+0x1a/0x20 [ 639.178816][T30703] _copy_from_user+0x1c/0xb0 [ 639.178845][T30703] ___sys_sendmsg+0xc1/0x1d0 [ 639.178900][T30703] __x64_sys_sendmsg+0xd4/0x160 [ 639.178974][T30703] x64_sys_call+0x17ba/0x3000 [ 639.179027][T30703] do_syscall_64+0xca/0x2b0 [ 639.179069][T30703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.179139][T30703] RIP: 0033:0x7f9ffb6af749 [ 639.179169][T30703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 639.179193][T30703] RSP: 002b:00007f9ffa117038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 639.179290][T30703] RAX: ffffffffffffffda RBX: 00007f9ffb905fa0 RCX: 00007f9ffb6af749 [ 639.179303][T30703] RDX: 0000000000004800 RSI: 0000200000000300 RDI: 0000000000000003 [ 639.179315][T30703] RBP: 00007f9ffa117090 R08: 0000000000000000 R09: 0000000000000000 [ 639.179372][T30703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.179388][T30703] R13: 00007f9ffb906038 R14: 00007f9ffb905fa0 R15: 00007ffdaae05fa8 [ 639.179414][T30703] [ 639.259728][T30696] EXT4-fs (loop5): 1 orphan inode deleted [ 639.351902][T30696] EXT4-fs (loop5): 1 truncate cleaned up [ 639.364547][T30708] loop3: detected capacity change from 0 to 256 [ 639.379608][T30708] vfat: Bad value for 'shortname' [ 639.410245][T30708] bond9: (slave lo): Releasing backup interface [ 639.418701][T30708] bond9: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 639.433631][T30708] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 639.474178][T30708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7251'. [ 639.488197][T30708] loop3: detected capacity change from 0 to 512 [ 639.496769][T30708] EXT4-fs: test_dummy_encryption option not supported [ 639.615810][T30733] netlink: 'syz.3.7260': attribute type 3 has an invalid length. [ 639.656169][T30731] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 639.753985][T30736] loop6: detected capacity change from 0 to 512 [ 639.793098][T30736] vfat: Unknown parameter 'dos1]ÃZVÏwVœóû²wñ´xfloppy' [ 639.824664][T30744] loop6: detected capacity change from 0 to 128 [ 640.048526][T30756] loop0: detected capacity change from 0 to 256 [ 640.066035][T30756] vfat: Bad value for 'shortname' [ 640.097228][T30756] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 640.212626][T30759] loop0: detected capacity change from 0 to 512 [ 640.253477][T30759] EXT4-fs: test_dummy_encryption option not supported [ 640.308603][T30762] loop5: detected capacity change from 0 to 128 [ 640.315490][T30762] EXT4-fs: Ignoring removed nobh option [ 640.331674][T30762] ext4 filesystem being mounted at /103/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 640.397571][T30768] loop0: detected capacity change from 0 to 128 [ 640.504531][T30781] netlink: 'syz.1.7273': attribute type 1 has an invalid length. [ 640.513705][T30773] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 640.532306][T30781] 8021q: adding VLAN 0 to HW filter on device bond3 [ 640.534009][T30788] random: crng reseeded on system resumption [ 640.560810][T30788] Restarting kernel threads ... [ 640.566239][T30788] Done restarting kernel threads. [ 640.579643][T30781] 8021q: adding VLAN 0 to HW filter on device bond3 [ 640.587280][T30781] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 640.599665][T30781] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 640.631319][T30791] gretap1: entered promiscuous mode [ 640.660675][T30791] bond3: (slave gretap1): making interface the new active one [ 640.672369][T30791] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 640.691305][T30793] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 640.700106][T30793] FAT-fs (loop3): Filesystem has been set read-only [ 640.706886][T30793] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 640.760666][T30804] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 640.784940][T30804] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.7282: invalid indirect mapped block 4294967295 (level 0) [ 640.799391][T30804] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.7282: invalid indirect mapped block 4294967295 (level 1) [ 640.814132][T30804] EXT4-fs (loop6): 1 orphan inode deleted [ 640.819979][T30804] EXT4-fs (loop6): 1 truncate cleaned up [ 640.826434][T30804] EXT4-fs mount: 20 callbacks suppressed [ 640.826448][T30804] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 640.856954][T29268] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.935582][T30793] FAT-fs (loop3): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 641.100860][T30813] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 641.114269][T30813] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.7284: invalid indirect mapped block 4294967295 (level 0) [ 641.128748][T30813] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.7284: invalid indirect mapped block 4294967295 (level 1) [ 641.145279][T30813] EXT4-fs (loop6): 1 orphan inode deleted [ 641.151061][T30813] EXT4-fs (loop6): 1 truncate cleaned up [ 641.157702][T30793] FAT-fs (loop3): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 641.157807][T30813] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 641.196183][T29268] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.206792][T29105] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 641.377693][T30793] FAT-fs (loop3): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 641.584326][T30793] FAT-fs (loop3): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 641.777157][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 641.777186][ T29] audit: type=1326 audit(1766425739.626:41139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30835 comm="syz.0.7294" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f94862bf749 code=0x0 [ 641.833469][T30837] lo speed is unknown, defaulting to 1000 [ 641.890044][T30837] lo speed is unknown, defaulting to 1000 [ 642.019262][T30834] EXT4-fs: Ignoring removed nobh option [ 642.164318][ T29] audit: type=1326 audit(1766425739.926:41140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30842 comm="syz.3.7295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ffb6af749 code=0x7ffc0000 [ 642.179559][T30834] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 642.188306][ T29] audit: type=1326 audit(1766425739.926:41141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30842 comm="syz.3.7295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ffb6af749 code=0x7ffc0000 [ 642.223711][ T29] audit: type=1326 audit(1766425739.926:41142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30842 comm="syz.3.7295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f9ffb6af749 code=0x7ffc0000 [ 642.247365][ T29] audit: type=1326 audit(1766425739.926:41143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30842 comm="syz.3.7295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ffb6af749 code=0x7ffc0000 [ 642.271155][ T29] audit: type=1326 audit(1766425739.926:41144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30842 comm="syz.3.7295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ffb6af749 code=0x7ffc0000 [ 642.295711][T30834] ext4 filesystem being mounted at /187/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 642.308705][T30838] Alternate GPT is invalid, using primary GPT. [ 642.315206][T30838] loop5: p2 p3 p7 [ 642.321935][T30846] syzkaller0: entered promiscuous mode [ 642.327490][T30846] syzkaller0: entered allmulticast mode [ 642.341632][T30834] __nla_validate_parse: 6 callbacks suppressed [ 642.341689][T30834] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7293'. [ 642.476958][T30850] netlink: 'syz.5.7297': attribute type 1 has an invalid length. [ 642.493049][T30850] 8021q: adding VLAN 0 to HW filter on device bond4 [ 642.517734][T30850] 8021q: adding VLAN 0 to HW filter on device bond4 [ 642.525345][T30850] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 642.537467][T30850] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 642.549278][T30854] EXT4-fs: Ignoring removed nobh option [ 642.561521][T30854] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 642.571182][T30855] gretap1: entered promiscuous mode [ 642.579260][T30854] ext4 filesystem being mounted at /263/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 642.593995][T30855] bond4: (slave gretap1): making interface the new active one [ 642.602122][T30855] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 642.610920][T30854] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7299'. [ 642.643449][T26661] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 642.654384][T26956] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 642.673287][T30850] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7297'. [ 642.682302][T30850] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7297'. [ 642.702812][T30860] random: crng reseeded on system resumption [ 642.715660][T30860] Restarting kernel threads ... [ 642.742164][T30860] Done restarting kernel threads. [ 643.049419][T30880] lo speed is unknown, defaulting to 1000 [ 643.105787][T30880] lo speed is unknown, defaulting to 1000 [ 643.215050][T30879] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 643.246631][T30881] Alternate GPT is invalid, using primary GPT. [ 643.253184][T30881] loop3: p2 p3 p7 [ 643.437999][T30887] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 643.455825][ T29] audit: type=1326 audit(1766425741.306:41145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30892 comm="syz.5.7312" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f59a61ff749 code=0x0 [ 643.456268][T30889] EXT4-fs: Ignoring removed nobh option [ 643.479457][T30887] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 643.496495][T30889] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 643.508994][T30889] ext4 filesystem being mounted at /347/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 643.547557][T30889] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7311'. [ 643.557376][T30896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.577276][T30896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.594706][T25706] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 643.612112][T30896] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7310'. [ 643.740740][ T29] audit: type=1326 audit(1766425741.586:41146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30910 comm="syz.0.7316" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f94862bf749 code=0x0 [ 643.769650][T30913] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 643.784382][T30913] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.7317: invalid indirect mapped block 4294967295 (level 0) [ 643.806101][T30913] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.7317: invalid indirect mapped block 4294967295 (level 1) [ 643.827801][T30913] EXT4-fs (loop1): 1 orphan inode deleted [ 643.833805][T30913] EXT4-fs (loop1): 1 truncate cleaned up [ 643.840095][T30913] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 643.865461][T26956] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.936678][ T29] audit: type=1326 audit(1766425741.786:41147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30920 comm="syz.1.7319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38461f749 code=0x7ffc0000 [ 643.960944][ T29] audit: type=1326 audit(1766425741.786:41148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30920 comm="syz.1.7319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38461f749 code=0x7ffc0000 [ 643.963556][T30928] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 644.385361][ T7952] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:34: bg 0: block 345: padding at end of block bitmap is not set [ 644.406723][ T7952] EXT4-fs (loop6): Remounting filesystem read-only [ 644.494666][T29268] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.727232][T30971] set_capacity_and_notify: 13 callbacks suppressed [ 644.727368][T30971] loop6: detected capacity change from 0 to 164 [ 644.762787][T30971] lo speed is unknown, defaulting to 1000 [ 644.821473][T30971] lo speed is unknown, defaulting to 1000 [ 644.931036][T30972] loop6: detected capacity change from 0 to 2048 [ 644.960253][T30974] loop0: detected capacity change from 0 to 512 [ 644.973946][T30972] Alternate GPT is invalid, using primary GPT. [ 644.980315][T30972] loop6: p2 p3 p7 [ 645.077580][T30974] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.7332: iget: bad extra_isize 90 (inode size 256) [ 645.112849][T30974] EXT4-fs (loop0): Remounting filesystem read-only [ 645.119589][T30974] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 645.142752][T30974] EXT4-fs (loop0): 1 orphan inode deleted [ 645.149575][T30974] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 645.543681][T25706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.675106][T31017] loop0: detected capacity change from 0 to 512 [ 645.869930][T31031] loop0: detected capacity change from 0 to 512 [ 645.905438][T31031] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.7351: iget: bad extra_isize 90 (inode size 256) [ 645.929744][T31036] FAULT_INJECTION: forcing a failure. [ 645.929744][T31036] name failslab, interval 1, probability 0, space 0, times 0 [ 645.942471][T31036] CPU: 0 UID: 0 PID: 31036 Comm: syz.6.7350 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 645.942619][T31036] Tainted: [W]=WARN [ 645.942628][T31036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 645.942643][T31036] Call Trace: [ 645.942670][T31036] [ 645.942681][T31036] __dump_stack+0x1d/0x30 [ 645.942739][T31036] dump_stack_lvl+0x95/0xd0 [ 645.942766][T31036] dump_stack+0x15/0x1b [ 645.942790][T31036] should_fail_ex+0x265/0x280 [ 645.942837][T31036] should_failslab+0x8c/0xb0 [ 645.942864][T31036] kmem_cache_alloc_noprof+0x69/0x4b0 [ 645.942945][T31036] ? security_inode_alloc+0x37/0x100 [ 645.942968][T31036] security_inode_alloc+0x37/0x100 [ 645.942988][T31036] inode_init_always_gfp+0x4b7/0x500 [ 645.943012][T31036] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 645.943110][T31036] alloc_inode+0x58/0x170 [ 645.943135][T31036] new_inode+0x1d/0xe0 [ 645.943159][T31036] shmem_get_inode+0x246/0x750 [ 645.943190][T31036] __shmem_file_setup+0x113/0x210 [ 645.943269][T31036] shmem_file_setup+0x3b/0x50 [ 645.943336][T31036] __se_sys_memfd_create+0x2f7/0x6b0 [ 645.943418][T31036] __x64_sys_memfd_create+0x31/0x40 [ 645.943455][T31036] x64_sys_call+0x28cb/0x3000 [ 645.943487][T31036] do_syscall_64+0xca/0x2b0 [ 645.943626][T31036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.943652][T31036] RIP: 0033:0x7fdd6c30f749 [ 645.943719][T31036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 645.943737][T31036] RSP: 002b:00007fdd6ad2ce18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 645.943766][T31036] RAX: ffffffffffffffda RBX: 0000000000000488 RCX: 00007fdd6c30f749 [ 645.943781][T31036] RDX: 00007fdd6ad2cef0 RSI: 0000000000000000 RDI: 00007fdd6c394960 [ 645.943796][T31036] RBP: 0000200000001340 R08: 00007fdd6ad2cbb7 R09: 00007fdd6ad2ce40 [ 645.943811][T31036] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000140 [ 645.943826][T31036] R13: 00007fdd6ad2cef0 R14: 00007fdd6ad2ceb0 R15: 0000200000000080 [ 645.943849][T31036] [ 646.114982][T31031] EXT4-fs (loop0): Remounting filesystem read-only [ 646.162756][T31031] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 646.171753][T31031] EXT4-fs (loop0): 1 orphan inode deleted [ 646.191254][T31031] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 646.334805][T31047] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 646.409417][T31056] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7359'. [ 646.431152][T31054] loop3: detected capacity change from 0 to 512 [ 646.490118][T31064] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7363'. [ 646.658208][T25706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.020126][T31072] loop0: detected capacity change from 0 to 2048 [ 647.038346][T31069] syz.6.7365 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 647.052688][T31069] CPU: 1 UID: 0 PID: 31069 Comm: syz.6.7365 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 647.052794][T31069] Tainted: [W]=WARN [ 647.052816][T31069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 647.052832][T31069] Call Trace: [ 647.052889][T31069] [ 647.052898][T31069] __dump_stack+0x1d/0x30 [ 647.052929][T31069] dump_stack_lvl+0x95/0xd0 [ 647.052958][T31069] dump_stack+0x15/0x1b [ 647.053058][T31069] dump_header+0x81/0x240 [ 647.053147][T31069] oom_kill_process+0x295/0x350 [ 647.053177][T31069] out_of_memory+0x97b/0xb80 [ 647.053207][T31069] try_charge_memcg+0x610/0xa10 [ 647.053236][T31069] obj_cgroup_charge_pages+0xa6/0x150 [ 647.053311][T31069] __memcg_kmem_charge_page+0x9f/0x170 [ 647.053347][T31069] __alloc_frozen_pages_noprof+0x18f/0x360 [ 647.053399][T31069] alloc_pages_mpol+0xb3/0x260 [ 647.053434][T31069] alloc_pages_noprof+0x90/0x130 [ 647.053537][T31069] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 647.053582][T31069] __kvmalloc_node_noprof+0x492/0x6b0 [ 647.053614][T31069] ? ip_set_alloc+0x24/0x30 [ 647.053691][T31069] ? ip_set_alloc+0x24/0x30 [ 647.053810][T31069] ip_set_alloc+0x24/0x30 [ 647.053850][T31069] hash_netiface_create+0x282/0x740 [ 647.053921][T31069] ? __pfx_hash_netiface_create+0x10/0x10 [ 647.054034][T31069] ip_set_create+0x3cc/0x970 [ 647.054069][T31069] ? __nla_parse+0x40/0x60 [ 647.054096][T31069] nfnetlink_rcv_msg+0x4c6/0x590 [ 647.054130][T31069] ? copy_from_kernel_nofault+0xc9/0x200 [ 647.054233][T31069] netlink_rcv_skb+0x123/0x220 [ 647.054274][T31069] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 647.054315][T31069] nfnetlink_rcv+0x167/0x16c0 [ 647.054376][T31069] ? kmem_cache_free+0xe3/0x3a0 [ 647.054403][T31069] ? __kfree_skb+0x109/0x150 [ 647.054521][T31069] ? nlmon_xmit+0x4f/0x60 [ 647.054546][T31069] ? consume_skb+0x49/0x150 [ 647.054573][T31069] ? nlmon_xmit+0x4f/0x60 [ 647.054599][T31069] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 647.054640][T31069] ? __dev_queue_xmit+0x138d/0x1ec0 [ 647.054682][T31069] ? __dev_queue_xmit+0x148/0x1ec0 [ 647.054721][T31069] ? ref_tracker_free+0x37d/0x3e0 [ 647.054759][T31069] ? __netlink_deliver_tap+0x4dc/0x500 [ 647.054841][T31069] netlink_unicast+0x5c0/0x690 [ 647.054946][T31069] netlink_sendmsg+0x58b/0x6b0 [ 647.055064][T31069] ? __pfx_netlink_sendmsg+0x10/0x10 [ 647.055099][T31069] __sock_sendmsg+0x145/0x180 [ 647.055160][T31069] ____sys_sendmsg+0x31e/0x4a0 [ 647.055199][T31069] ___sys_sendmsg+0x17b/0x1d0 [ 647.055252][T31069] __x64_sys_sendmsg+0xd4/0x160 [ 647.055329][T31069] x64_sys_call+0x17ba/0x3000 [ 647.055376][T31069] do_syscall_64+0xca/0x2b0 [ 647.055415][T31069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.055443][T31069] RIP: 0033:0x7fdd6c30f749 [ 647.055464][T31069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 647.055543][T31069] RSP: 002b:00007fdd6ad6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 647.055568][T31069] RAX: ffffffffffffffda RBX: 00007fdd6c565fa0 RCX: 00007fdd6c30f749 [ 647.055580][T31069] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 647.055596][T31069] RBP: 00007fdd6c393f91 R08: 0000000000000000 R09: 0000000000000000 [ 647.055752][T31069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 647.055765][T31069] R13: 00007fdd6c566038 R14: 00007fdd6c565fa0 R15: 00007ffc7ed4d2e8 [ 647.055785][T31069] [ 647.055792][T31069] memory: usage 307200kB, limit 307200kB, failcnt 183 [ 647.359261][ T29] kauditd_printk_skb: 871 callbacks suppressed [ 647.359298][ T29] audit: type=1400 audit(1766425745.206:42020): avc: denied { read } for pid=31079 comm="syz.5.7368" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 647.363263][T31069] memory+swap: usage 206496kB, limit 9007199254740988kB, failcnt 0 [ 647.363289][T31069] kmem: usage 206156kB, limit 9007199254740988kB, failcnt 0 [ 647.363305][T31069] Memory cgroup stats for /syz6: [ 647.442951][T31069] cache 0 [ 647.444806][T31072] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 647.447927][T31069] rss 4096 [ 647.451067][T31072] ext4 filesystem being mounted at /357/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 647.463079][T31069] shmem 0 [ 647.479372][T31069] mapped_file 0 [ 647.482869][T31069] dirty 0 [ 647.485837][T31069] writeback 0 [ 647.489116][T31069] workingset_refault_anon 15 [ 647.493739][T31069] workingset_refault_file 0 [ 647.498249][T31069] swap 180224 [ 647.501579][T31069] swapcached 24576 [ 647.505347][T31069] pgpgin 70537 [ 647.508736][T31069] pgpgout 70526 [ 647.512264][T31069] pgfault 77563 [ 647.513073][T31083] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 647.515847][T31069] pgmajfault 7 [ 647.533834][T31069] inactive_anon 8192 [ 647.537749][T31069] active_anon 16384 [ 647.541587][T31069] inactive_file 20480 [ 647.545620][T31069] active_file 0 [ 647.549109][T31069] unevictable 0 [ 647.550476][T31083] EXT4-fs (loop0): Remounting filesystem read-only [ 647.552729][T31069] hierarchical_memory_limit 314572800 [ 647.564563][T31069] hierarchical_memsw_limit 9223372036854771712 [ 647.570759][T31069] total_cache 0 [ 647.574249][T31069] total_rss 4096 [ 647.577855][T31069] total_shmem 0 [ 647.581476][T31069] total_mapped_file 0 [ 647.585477][T31069] total_dirty 0 [ 647.588973][T31069] total_writeback 0 [ 647.592865][T31069] total_workingset_refault_anon 15 [ 647.597967][T31069] total_workingset_refault_file 0 [ 647.603006][T31069] total_swap 180224 [ 647.606820][T31069] total_swapcached 24576 [ 647.611112][T31069] total_pgpgin 70537 [ 647.615187][T31069] total_pgpgout 70526 [ 647.619180][T31069] total_pgfault 77563 [ 647.623335][T31069] total_pgmajfault 7 [ 647.627239][T31069] total_inactive_anon 8192 [ 647.631651][T31069] total_active_anon 16384 [ 647.636010][T31069] total_inactive_file 20480 [ 647.640576][T31069] total_active_file 0 [ 647.644596][T31069] total_unevictable 0 [ 647.648590][T31069] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.7365,pid=31068,uid=0 [ 647.663326][T31069] Memory cgroup out of memory: Killed process 31068 (syz.6.7365) total-vm:94100kB, anon-rss:1136kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 647.741759][T31072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.757156][T31072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.786356][T31072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7364'. [ 647.825466][T31088] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 647.921011][ T29] audit: type=1326 audit(1766425745.766:42021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31102 comm="syz.5.7374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59a61ff749 code=0x7ffc0000 [ 647.944705][ T29] audit: type=1326 audit(1766425745.766:42022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31102 comm="syz.5.7374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59a61ff749 code=0x7ffc0000 [ 648.012639][ T29] audit: type=1326 audit(1766425745.766:42023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31102 comm="syz.5.7374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f59a61ff749 code=0x7ffc0000 [ 648.036309][ T29] audit: type=1326 audit(1766425745.766:42024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31102 comm="syz.5.7374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59a61ff749 code=0x7ffc0000 [ 648.059897][ T29] audit: type=1326 audit(1766425745.766:42025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31102 comm="syz.5.7374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59a61ff749 code=0x7ffc0000 [ 648.083480][ T29] audit: type=1326 audit(1766425745.836:42026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31104 comm="syz.6.7375" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdd6c30f749 code=0x0 [ 648.434936][T25706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.553612][T31136] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 648.635039][ T29] audit: type=1326 audit(1766425746.486:42027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31142 comm="syz.1.7387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38461f749 code=0x7ffc0000 [ 648.670543][ T29] audit: type=1326 audit(1766425746.486:42028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31142 comm="syz.1.7387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38461f749 code=0x7ffc0000 [ 648.694387][ T29] audit: type=1326 audit(1766425746.486:42029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31142 comm="syz.1.7387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38461f749 code=0x7ffc0000 [ 648.793618][T31158] loop0: detected capacity change from 0 to 512 [ 648.813800][T31158] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.7392: iget: bad extra_isize 90 (inode size 256) [ 648.829687][T31158] EXT4-fs (loop0): Remounting filesystem read-only [ 648.849340][T31162] FAULT_INJECTION: forcing a failure. [ 648.849340][T31162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 648.862659][T31162] CPU: 0 UID: 0 PID: 31162 Comm: syz.6.7394 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 648.862690][T31162] Tainted: [W]=WARN [ 648.862699][T31162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 648.862714][T31162] Call Trace: [ 648.862722][T31162] [ 648.862732][T31162] __dump_stack+0x1d/0x30 [ 648.862760][T31162] dump_stack_lvl+0x95/0xd0 [ 648.862788][T31162] dump_stack+0x15/0x1b [ 648.862805][T31162] should_fail_ex+0x265/0x280 [ 648.862827][T31162] should_fail+0xb/0x20 [ 648.862904][T31162] should_fail_usercopy+0x1a/0x20 [ 648.862933][T31162] _copy_from_iter+0xcf/0xe70 [ 648.862962][T31162] ? lockref_put_return+0xf7/0x130 [ 648.863075][T31162] ? __rcu_read_unlock+0x4f/0x70 [ 648.863102][T31162] tun_get_user+0x3d0/0x2670 [ 648.863132][T31162] ? _parse_integer_limit+0x170/0x190 [ 648.863216][T31162] ? ref_tracker_alloc+0x1f2/0x2f0 [ 648.863247][T31162] ? selinux_file_permission+0x1e2/0x320 [ 648.863306][T31162] tun_chr_write_iter+0x15e/0x210 [ 648.863337][T31162] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 648.863363][T31162] vfs_write+0x52a/0x960 [ 648.863392][T31162] ksys_write+0xda/0x1a0 [ 648.863417][T31162] __x64_sys_write+0x40/0x50 [ 648.863440][T31162] x64_sys_call+0x2847/0x3000 [ 648.863549][T31162] do_syscall_64+0xca/0x2b0 [ 648.863591][T31162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.863618][T31162] RIP: 0033:0x7fdd6c30f749 [ 648.863633][T31162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 648.863650][T31162] RSP: 002b:00007fdd6ad6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 648.863667][T31162] RAX: ffffffffffffffda RBX: 00007fdd6c565fa0 RCX: 00007fdd6c30f749 [ 648.863678][T31162] RDX: 0000000000000fcf RSI: 00002000000021c0 RDI: 0000000000000003 [ 648.863702][T31162] RBP: 00007fdd6ad6f090 R08: 0000000000000000 R09: 0000000000000000 [ 648.863717][T31162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.863730][T31162] R13: 00007fdd6c566038 R14: 00007fdd6c565fa0 R15: 00007ffc7ed4d2e8 [ 648.863780][T31162] [ 648.923073][T31158] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 649.082114][T31158] EXT4-fs (loop0): 1 orphan inode deleted [ 649.088818][T31158] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 649.187449][T31167] loop3: detected capacity change from 0 to 164 [ 649.215533][T31167] lo speed is unknown, defaulting to 1000 [ 649.273015][T31167] lo speed is unknown, defaulting to 1000 [ 649.383290][T31168] loop3: detected capacity change from 0 to 2048 [ 649.615040][T31168] Alternate GPT is invalid, using primary GPT. [ 649.621459][T31168] loop3: p2 p3 p7 [ 649.639181][T25706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.681312][T31177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7397'. [ 649.690489][T31177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 649.698067][T31177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 649.710023][T31177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 649.717555][T31177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 649.743463][T31183] set_capacity_and_notify: 1 callbacks suppressed [ 649.743520][T31183] loop6: detected capacity change from 0 to 512 [ 649.816198][T31183] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 649.830774][T31183] EXT4-fs (loop6): invalid journal inode [ 649.838120][T31183] EXT4-fs (loop6): can't get journal size [ 649.845298][T31183] EXT4-fs (loop6): 1 truncate cleaned up [ 649.851464][T31183] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 649.883085][T31183] 9p: Bad value for 'rfdno' [ 649.890494][T31191] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7402'. [ 649.920137][T29268] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.931127][T31191] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 649.950751][T31194] loop3: detected capacity change from 0 to 512 [ 649.957711][T31194] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 649.969403][T31194] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.7404: invalid indirect mapped block 4294967295 (level 0) [ 649.984054][T31194] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.7404: invalid indirect mapped block 4294967295 (level 1) [ 650.001683][T31194] EXT4-fs (loop3): 1 orphan inode deleted [ 650.007552][T31194] EXT4-fs (loop3): 1 truncate cleaned up [ 650.013867][T31194] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 650.021239][T31200] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7405'. [ 650.038567][T31201] random: crng reseeded on system resumption [ 650.049774][T26661] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.062384][T31201] Restarting kernel threads ... [ 650.068056][T31201] Done restarting kernel threads. [ 650.075972][T31200] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 650.095122][T31200] bond2: (slave lo): Enslaving as a backup interface with an up link [ 650.105402][T31200] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 650.151498][T31200] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7405'. [ 650.164806][T31200] loop6: detected capacity change from 0 to 512 [ 650.171498][T31200] EXT4-fs: test_dummy_encryption option not supported [ 650.206340][T31212] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7408'. [ 650.320648][T31217] loop3: detected capacity change from 0 to 128 [ 650.327542][T31217] EXT4-fs: Ignoring removed nobh option [ 650.335146][T31217] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 650.347629][T31217] ext4 filesystem being mounted at /290/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 650.361453][T31217] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7410'. [ 650.504050][T31224] netlink: 'syz.6.7412': attribute type 1 has an invalid length. [ 650.520986][T31224] 8021q: adding VLAN 0 to HW filter on device bond3 [ 650.536580][T31227] loop0: detected capacity change from 0 to 512 [ 650.547065][T31224] 8021q: adding VLAN 0 to HW filter on device bond3 [ 650.554701][T31224] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 650.566869][T31224] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 650.567596][T31227] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 650.583249][T31227] FAT-fs (loop0): Filesystem has been set read-only [ 650.594870][T31227] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 650.604060][T31228] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7412'. [ 650.791269][T31227] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 650.997508][T31227] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 651.176810][T26661] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 651.212712][T31227] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 651.232085][T31239] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7419'. [ 651.324156][T31247] 9p: Bad value for 'rfdno' [ 651.353471][T31243] bond2: (slave lo): Releasing backup interface [ 651.362302][T31243] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 651.399087][T31248] loop3: detected capacity change from 0 to 128 [ 651.441842][T31227] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 651.456265][T31243] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 651.473048][T31243] bond4: (slave lo): Enslaving as a backup interface with an up link [ 651.481686][T31243] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 651.513164][T31243] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7419'. [ 651.525770][T31243] loop6: detected capacity change from 0 to 512 [ 651.556778][T31253] loop5: detected capacity change from 0 to 2048 [ 651.564422][T31243] EXT4-fs: test_dummy_encryption option not supported [ 651.594364][T31253] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 651.600681][T31263] random: crng reseeded on system resumption [ 651.628208][T31263] Restarting kernel threads ... [ 651.632953][T31253] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 651.644946][T31263] Done restarting kernel threads. [ 651.701491][T31269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.714448][T31268] loop6: detected capacity change from 0 to 128 [ 651.721330][T31268] EXT4-fs: Ignoring removed nobh option [ 651.735895][T31268] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 651.767908][T31269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.773558][T31268] ext4 filesystem being mounted at /108/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 651.834959][T29268] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 651.891287][T31277] loop6: detected capacity change from 0 to 512 [ 651.970173][T31277] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 651.979048][T31277] FAT-fs (loop6): Filesystem has been set read-only [ 651.991519][T31277] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548) [ 652.004873][T31280] EXT4-fs: Ignoring removed nobh option [ 652.031894][T31280] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 652.044490][T31280] ext4 filesystem being mounted at /219/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 652.204749][T31277] FAT-fs (loop6): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 652.393402][T31277] FAT-fs (loop6): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 652.594851][ T7244] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:22: bg 0: block 345: padding at end of block bitmap is not set [ 652.609525][T31277] FAT-fs (loop6): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 652.633113][ T7244] EXT4-fs (loop5): Remounting filesystem read-only [ 652.794863][T29105] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.831753][T31277] FAT-fs (loop6): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 652.892880][T31296] random: crng reseeded on system resumption [ 652.906653][T26956] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 652.920015][T31298] netlink: 'syz.3.7435': attribute type 1 has an invalid length. [ 652.928924][T31296] Restarting kernel threads ... [ 652.934333][T31296] Done restarting kernel threads. [ 652.944362][T31298] 8021q: adding VLAN 0 to HW filter on device bond10 [ 652.963941][T31298] 8021q: adding VLAN 0 to HW filter on device bond10 [ 652.971569][T31298] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 652.992042][ T29] kauditd_printk_skb: 312 callbacks suppressed [ 652.992089][ T29] audit: type=1400 audit(1766425750.836:42342): avc: denied { listen } for pid=31302 comm="syz.5.7438" lport=53421 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 652.995574][T31298] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 653.035502][T31306] __nla_validate_parse: 4 callbacks suppressed [ 653.035536][T31306] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7435'. [ 653.107221][T31313] vfat: Bad value for 'shortname' [ 653.117213][T31313] bond2: (slave lo): Releasing backup interface [ 653.124467][T31313] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 653.135433][T31313] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 653.171291][T31313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7440'. [ 653.184035][T31313] EXT4-fs: test_dummy_encryption option not supported [ 653.242092][T31323] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 653.254526][T31323] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.7442: invalid indirect mapped block 4294967295 (level 0) [ 653.268854][T31323] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.7442: invalid indirect mapped block 4294967295 (level 1) [ 653.283652][T31323] EXT4-fs (loop1): 1 orphan inode deleted [ 653.286507][ T29] audit: type=1326 audit(1766425751.136:42343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31325 comm="syz.5.7441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59a61ff749 code=0x7ffc0000 [ 653.289410][T31323] EXT4-fs (loop1): 1 truncate cleaned up [ 653.319219][T31323] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 653.343369][ T29] audit: type=1326 audit(1766425751.166:42344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31325 comm="syz.5.7441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59a61ff749 code=0x7ffc0000 [ 653.367441][ T29] audit: type=1326 audit(1766425751.166:42345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31325 comm="syz.5.7441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59a61ff749 code=0x7ffc0000 [ 653.391146][ T29] audit: type=1326 audit(1766425751.166:42346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31325 comm="syz.5.7441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59a61ff749 code=0x7ffc0000 [ 653.414783][ T29] audit: type=1326 audit(1766425751.166:42347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31325 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f59a61f65e7 code=0x7ffc0000 [ 653.437761][ T29] audit: type=1326 audit(1766425751.166:42348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31325 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f59a619b829 code=0x7ffc0000 [ 653.460820][ T29] audit: type=1326 audit(1766425751.166:42349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31325 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59a61ff749 code=0x7ffc0000 [ 653.483922][ T29] audit: type=1326 audit(1766425751.166:42350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31325 comm="syz.5.7441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59a61ff749 code=0x7ffc0000 [ 653.507594][ T29] audit: type=1326 audit(1766425751.166:42351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31325 comm="syz.5.7441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59a61ff749 code=0x7ffc0000 [ 653.532098][T26956] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.026324][T31364] vfat: Bad value for 'shortname' [ 654.034023][T31364] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 654.067204][T31364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7452'. [ 654.080427][T31364] EXT4-fs: test_dummy_encryption option not supported [ 654.248848][T31376] netlink: 76 bytes leftover after parsing attributes in process `syz.5.7456'. [ 654.558259][T31388] vfat: Bad value for 'shortname' [ 654.568268][T31388] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7460'. [ 654.578257][T31388] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 654.634705][T31388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7460'. [ 654.647285][T31388] EXT4-fs: test_dummy_encryption option not supported [ 654.686177][T31402] vfat: Bad value for 'shortname' [ 654.703277][T31402] bond4: (slave lo): Releasing backup interface [ 654.710495][T31402] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 654.721819][T31402] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 654.833384][T31411] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7464'. [ 654.846407][T31411] set_capacity_and_notify: 10 callbacks suppressed [ 654.846453][T31411] loop6: detected capacity change from 0 to 512 [ 654.880188][T31411] EXT4-fs: test_dummy_encryption option not supported [ 654.998039][T31417] loop1: detected capacity change from 0 to 164 [ 655.027890][T31417] lo speed is unknown, defaulting to 1000 [ 655.085182][T31417] lo speed is unknown, defaulting to 1000 [ 655.187587][T31418] loop1: detected capacity change from 0 to 2048 [ 655.245723][T31418] Alternate GPT is invalid, using primary GPT. [ 655.252203][T31418] loop1: p2 p3 p7 [ 655.593776][T31444] loop5: detected capacity change from 0 to 512 [ 655.910258][T31451] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 656.122902][T31459] 9p: Bad value for 'rfdno' [ 656.254996][T31463] netlink: 76 bytes leftover after parsing attributes in process `syz.6.7483'. [ 656.384250][T31466] loop0: detected capacity change from 0 to 512 [ 656.418687][T31466] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 656.432120][T31466] EXT4-fs (loop0): invalid journal inode [ 656.438309][T31466] EXT4-fs (loop0): can't get journal size [ 656.445858][T31466] EXT4-fs (loop0): 1 truncate cleaned up [ 656.455095][T31466] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 656.480640][T31466] 9p: Bad value for 'rfdno' [ 656.502068][T25706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.737053][T31471] FAULT_INJECTION: forcing a failure. [ 656.737053][T31471] name failslab, interval 1, probability 0, space 0, times 0 [ 656.749851][T31471] CPU: 1 UID: 0 PID: 31471 Comm: syz.5.7486 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 656.749901][T31471] Tainted: [W]=WARN [ 656.749910][T31471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 656.749922][T31471] Call Trace: [ 656.749929][T31471] [ 656.749935][T31471] __dump_stack+0x1d/0x30 [ 656.749959][T31471] dump_stack_lvl+0x95/0xd0 [ 656.749979][T31471] dump_stack+0x15/0x1b [ 656.750058][T31471] should_fail_ex+0x265/0x280 [ 656.750082][T31471] should_failslab+0x8c/0xb0 [ 656.750107][T31471] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 656.750189][T31471] ? __alloc_skb+0x2ff/0x4b0 [ 656.750212][T31471] __alloc_skb+0x2ff/0x4b0 [ 656.750232][T31471] ? __alloc_skb+0x228/0x4b0 [ 656.750314][T31471] netlink_alloc_large_skb+0xbf/0xf0 [ 656.750349][T31471] netlink_sendmsg+0x3cf/0x6b0 [ 656.750406][T31471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 656.750487][T31471] __sock_sendmsg+0x145/0x180 [ 656.750553][T31471] ____sys_sendmsg+0x31e/0x4a0 [ 656.750587][T31471] ___sys_sendmsg+0x17b/0x1d0 [ 656.750702][T31471] __x64_sys_sendmsg+0xd4/0x160 [ 656.750733][T31471] x64_sys_call+0x17ba/0x3000 [ 656.750804][T31471] do_syscall_64+0xca/0x2b0 [ 656.750885][T31471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.750910][T31471] RIP: 0033:0x7f59a61ff749 [ 656.750925][T31471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 656.751031][T31471] RSP: 002b:00007f59a4c5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 656.751049][T31471] RAX: ffffffffffffffda RBX: 00007f59a6455fa0 RCX: 00007f59a61ff749 [ 656.751060][T31471] RDX: 0000000024040084 RSI: 0000200000006040 RDI: 0000000000000003 [ 656.751123][T31471] RBP: 00007f59a4c5f090 R08: 0000000000000000 R09: 0000000000000000 [ 656.751167][T31471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 656.751179][T31471] R13: 00007f59a6456038 R14: 00007f59a6455fa0 R15: 00007ffe5121cd68 [ 656.751196][T31471] [ 656.983481][T31473] loop5: detected capacity change from 0 to 512 [ 657.037648][T31477] loop5: detected capacity change from 0 to 764 [ 657.057232][T31477] rock: directory entry would overflow storage [ 657.063581][T31477] rock: sig=0x4f50, size=4, remaining=3 [ 657.069178][T31477] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 657.143967][T31479] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 657.168409][T31485] loop5: detected capacity change from 0 to 164 [ 657.235490][T31486] loop5: detected capacity change from 0 to 2048 [ 657.305813][T31486] Alternate GPT is invalid, using primary GPT. [ 657.312119][T31486] loop5: p2 p3 p7 [ 657.333743][T31489] loop3: detected capacity change from 0 to 128 [ 657.335146][T31485] lo speed is unknown, defaulting to 1000 [ 657.376508][T31485] lo speed is unknown, defaulting to 1000 [ 657.491707][T31489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7493'. [ 657.535143][T31503] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7497'. [ 657.825905][T31520] netlink: 'syz.5.7502': attribute type 1 has an invalid length. [ 657.833816][T31520] netlink: 'syz.5.7502': attribute type 4 has an invalid length. [ 657.841971][T31520] netlink: 'syz.5.7502': attribute type 1 has an invalid length. [ 657.849899][T31520] netlink: 'syz.5.7502': attribute type 4 has an invalid length. [ 657.952440][T31532] 9p: Bad value for 'rfdno' [ 658.304860][T31548] lo speed is unknown, defaulting to 1000 [ 658.361703][T31548] lo speed is unknown, defaulting to 1000 [ 658.505695][T31549] Alternate GPT is invalid, using primary GPT. [ 658.512198][T31549] loop6: p2 p3 p7 [ 658.745930][T31552] __nla_validate_parse: 4 callbacks suppressed [ 658.745947][T31552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7510'. [ 658.780004][ T29] kauditd_printk_skb: 2023 callbacks suppressed [ 658.780020][ T29] audit: type=1326 audit(1766425756.626:44375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31562 comm="syz.3.7515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ffb6af749 code=0x7ffc0000 [ 658.810603][ T29] audit: type=1326 audit(1766425756.626:44376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31562 comm="syz.3.7515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ffb6af749 code=0x7ffc0000 [ 658.811001][T31565] FAULT_INJECTION: forcing a failure. [ 658.811001][T31565] name failslab, interval 1, probability 0, space 0, times 0 [ 658.834302][ T29] audit: type=1326 audit(1766425756.626:44377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31562 comm="syz.3.7515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ffb6af749 code=0x7ffc0000 [ 658.846975][T31565] CPU: 1 UID: 0 PID: 31565 Comm: syz.1.7514 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 658.847146][T31565] Tainted: [W]=WARN [ 658.847248][T31565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 658.847285][T31565] Call Trace: [ 658.847310][T31565] [ 658.847332][T31565] __dump_stack+0x1d/0x30 [ 658.847404][T31565] dump_stack_lvl+0x95/0xd0 [ 658.847470][T31565] dump_stack+0x15/0x1b [ 658.847535][T31565] should_fail_ex+0x265/0x280 [ 658.847611][T31565] should_failslab+0x8c/0xb0 [ 658.847677][T31565] kmem_cache_alloc_noprof+0x69/0x4b0 [ 658.847803][T31565] ? getname_flags+0x80/0x3b0 [ 658.847957][T31565] getname_flags+0x80/0x3b0 [ 658.848029][T31565] __x64_sys_linkat+0x73/0xa0 [ 658.848101][T31565] x64_sys_call+0x2ad0/0x3000 [ 658.848201][T31565] do_syscall_64+0xca/0x2b0 [ 658.848324][T31565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.848400][T31565] RIP: 0033:0x7fc38461f749 [ 658.848469][T31565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 658.848535][T31565] RSP: 002b:00007fc38307f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000109 [ 658.848602][T31565] RAX: ffffffffffffffda RBX: 00007fc384875fa0 RCX: 00007fc38461f749 [ 658.848689][T31565] RDX: ffffffffffffff9c RSI: 00002000000004c0 RDI: ffffffffffffff9c [ 658.848729][T31565] RBP: 00007fc38307f090 R08: 0000000000000000 R09: 0000000000000000 [ 658.848755][T31565] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000001 [ 658.848794][T31565] R13: 00007fc384876038 R14: 00007fc384875fa0 R15: 00007ffdc24705e8 [ 658.848855][T31565] [ 659.036715][ T29] audit: type=1326 audit(1766425756.626:44378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31562 comm="syz.3.7515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ffb6af749 code=0x7ffc0000 [ 659.060335][ T29] audit: type=1326 audit(1766425756.626:44379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31562 comm="syz.3.7515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ffb6af749 code=0x7ffc0000 [ 659.083959][ T29] audit: type=1326 audit(1766425756.626:44380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31562 comm="syz.3.7515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ffb6af749 code=0x7ffc0000 [ 659.107629][ T29] audit: type=1326 audit(1766425756.626:44381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31562 comm="syz.3.7515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ffb6af749 code=0x7ffc0000 [ 659.131345][ T29] audit: type=1326 audit(1766425756.626:44382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31562 comm="syz.3.7515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ffb6af749 code=0x7ffc0000 [ 659.155037][ T29] audit: type=1326 audit(1766425756.626:44383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31562 comm="syz.3.7515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ffb6af749 code=0x7ffc0000 [ 659.178700][ T29] audit: type=1326 audit(1766425756.626:44384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31562 comm="syz.3.7515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f9ffb6af749 code=0x7ffc0000 [ 659.190459][T31580] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7517'. [ 659.245071][T31580] bond3: (slave lo): Releasing backup interface [ 659.252044][T31580] bond3: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 659.263733][T31580] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 659.286463][T31580] bond5: (slave lo): Enslaving as a backup interface with an up link [ 659.297795][T31580] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 659.321796][T31588] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 659.322493][T31589] 9p: Bad value for 'rfdno' [ 659.337701][T31588] EXT4-fs (loop6): invalid journal inode [ 659.345734][T31588] EXT4-fs (loop6): can't get journal size [ 659.353338][T31588] EXT4-fs (loop6): 1 truncate cleaned up [ 659.360126][T31588] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 659.382035][T31580] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7517'. [ 659.383456][T31588] 9p: Bad value for 'rfdno' [ 659.406007][T29268] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.416806][T31580] EXT4-fs: test_dummy_encryption option not supported [ 659.461623][T31603] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7525'. [ 659.486063][T31605] netlink: 'syz.5.7526': attribute type 13 has an invalid length. [ 659.523563][T31605] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 659.550477][T31605] EXT4-fs: Ignoring removed mblk_io_submit option [ 659.558817][T31605] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 659.570989][T31605] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #11: comm syz.5.7526: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 659.589819][T31605] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.7526: couldn't read orphan inode 11 (err -117) [ 659.607819][T31605] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 659.625501][T31605] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.7526: Invalid block bitmap block 0 in block_group 0 [ 659.642885][T31605] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.7526: Failed to acquire dquot type 0 [ 659.945504][T29105] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.967660][T31623] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7530'. [ 659.990761][T31623] bond5: (slave lo): Releasing backup interface [ 659.998959][T31623] bond5: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 660.009833][T31623] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 660.026357][T31623] bond6: (slave lo): Enslaving as a backup interface with an up link [ 660.036246][T31623] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 660.080481][T31623] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7530'. [ 660.093094][T31623] set_capacity_and_notify: 12 callbacks suppressed [ 660.093111][T31623] loop5: detected capacity change from 0 to 512 [ 660.107983][T31623] EXT4-fs: test_dummy_encryption option not supported [ 660.138585][T31629] FAULT_INJECTION: forcing a failure. [ 660.138585][T31629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 660.151722][T31629] CPU: 1 UID: 0 PID: 31629 Comm: syz.5.7531 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 660.151780][T31629] Tainted: [W]=WARN [ 660.151787][T31629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 660.151799][T31629] Call Trace: [ 660.151804][T31629] [ 660.151812][T31629] __dump_stack+0x1d/0x30 [ 660.151918][T31629] dump_stack_lvl+0x95/0xd0 [ 660.151942][T31629] dump_stack+0x15/0x1b [ 660.151965][T31629] should_fail_ex+0x265/0x280 [ 660.151992][T31629] should_fail+0xb/0x20 [ 660.152079][T31629] should_fail_usercopy+0x1a/0x20 [ 660.152109][T31629] _copy_from_iter+0xcf/0xe70 [ 660.152140][T31629] ? __alloc_skb+0x396/0x4b0 [ 660.152231][T31629] ? __alloc_skb+0x228/0x4b0 [ 660.152339][T31629] netlink_sendmsg+0x471/0x6b0 [ 660.152381][T31629] ? __pfx_netlink_sendmsg+0x10/0x10 [ 660.152490][T31629] __sock_sendmsg+0x145/0x180 [ 660.152516][T31629] ____sys_sendmsg+0x31e/0x4a0 [ 660.152554][T31629] ___sys_sendmsg+0x17b/0x1d0 [ 660.152609][T31629] __x64_sys_sendmsg+0xd4/0x160 [ 660.152661][T31629] x64_sys_call+0x17ba/0x3000 [ 660.152691][T31629] do_syscall_64+0xca/0x2b0 [ 660.152732][T31629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.152767][T31629] RIP: 0033:0x7f59a61ff749 [ 660.152851][T31629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 660.152874][T31629] RSP: 002b:00007f59a4c5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 660.152897][T31629] RAX: ffffffffffffffda RBX: 00007f59a6455fa0 RCX: 00007f59a61ff749 [ 660.152908][T31629] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000007 [ 660.152920][T31629] RBP: 00007f59a4c5f090 R08: 0000000000000000 R09: 0000000000000000 [ 660.152930][T31629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.152949][T31629] R13: 00007f59a6456038 R14: 00007f59a6455fa0 R15: 00007ffe5121cd68 [ 660.152973][T31629] [ 660.362093][T31631] 9p: Bad value for 'rfdno' [ 660.388337][T31635] FAULT_INJECTION: forcing a failure. [ 660.388337][T31635] name failslab, interval 1, probability 0, space 0, times 0 [ 660.401061][T31635] CPU: 1 UID: 0 PID: 31635 Comm: syz.6.7534 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 660.401100][T31635] Tainted: [W]=WARN [ 660.401107][T31635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 660.401119][T31635] Call Trace: [ 660.401149][T31635] [ 660.401158][T31635] __dump_stack+0x1d/0x30 [ 660.401187][T31635] dump_stack_lvl+0x95/0xd0 [ 660.401266][T31635] dump_stack+0x15/0x1b [ 660.401342][T31635] should_fail_ex+0x265/0x280 [ 660.401366][T31635] should_failslab+0x8c/0xb0 [ 660.401423][T31635] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 660.401452][T31635] ? __alloc_skb+0x2ff/0x4b0 [ 660.401527][T31635] __alloc_skb+0x2ff/0x4b0 [ 660.401547][T31635] ? __alloc_skb+0x228/0x4b0 [ 660.401569][T31635] netlink_dump+0x10d/0x8a0 [ 660.401625][T31635] netlink_recvmsg+0x420/0x550 [ 660.401668][T31635] ? __pfx_netlink_recvmsg+0x10/0x10 [ 660.401738][T31635] sock_recvmsg+0x139/0x170 [ 660.401757][T31635] ____sys_recvmsg+0xf5/0x280 [ 660.401791][T31635] ___sys_recvmsg+0x11f/0x370 [ 660.401905][T31635] do_recvmmsg+0x1ef/0x540 [ 660.402040][T31635] ? fput+0x8f/0xc0 [ 660.402075][T31635] __x64_sys_recvmmsg+0xe5/0x170 [ 660.402127][T31635] x64_sys_call+0x2b75/0x3000 [ 660.402203][T31635] do_syscall_64+0xca/0x2b0 [ 660.402292][T31635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.402317][T31635] RIP: 0033:0x7fdd6c30f749 [ 660.402333][T31635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 660.402354][T31635] RSP: 002b:00007fdd6ad6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 660.402438][T31635] RAX: ffffffffffffffda RBX: 00007fdd6c565fa0 RCX: 00007fdd6c30f749 [ 660.402450][T31635] RDX: 0000000000000001 RSI: 00002000000037c0 RDI: 0000000000000003 [ 660.402464][T31635] RBP: 00007fdd6ad6f090 R08: 0000000000000000 R09: 0000000000000000 [ 660.402523][T31635] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 660.402537][T31635] R13: 00007fdd6c566038 R14: 00007fdd6c565fa0 R15: 00007ffc7ed4d2e8 [ 660.402560][T31635] [ 660.660998][T31639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7535'. [ 660.666754][T31638] loop6: detected capacity change from 0 to 512 [ 660.698068][T31639] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 660.721966][T31639] bond4: (slave lo): Enslaving as a backup interface with an up link [ 660.730834][T31639] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 660.798724][T31639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7535'. [ 660.825709][T31639] loop1: detected capacity change from 0 to 512 [ 660.849734][T31639] EXT4-fs: test_dummy_encryption option not supported [ 660.897753][T31651] loop3: detected capacity change from 0 to 512 [ 660.921507][T31656] loop1: detected capacity change from 0 to 512 [ 660.953240][T31658] netlink: 'syz.6.7543': attribute type 3 has an invalid length. [ 660.992467][T31656] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 661.001367][T31656] FAT-fs (loop1): Filesystem has been set read-only [ 661.013093][T31660] 9p: Bad value for 'rfdno' [ 661.018447][T31662] netlink: 76 bytes leftover after parsing attributes in process `syz.6.7545'. [ 661.027622][T31656] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 661.250636][T31656] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 661.292877][T31674] loop0: detected capacity change from 0 to 512 [ 661.468145][T31686] loop3: detected capacity change from 0 to 128 [ 661.507368][T31656] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 661.646208][T31697] loop5: detected capacity change from 0 to 512 [ 661.670791][T31686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7552'. [ 661.714384][T31656] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 661.725811][T31694] loop0: detected capacity change from 0 to 164 [ 661.747251][T31694] lo speed is unknown, defaulting to 1000 [ 661.782794][T31694] lo speed is unknown, defaulting to 1000 [ 661.797775][T31701] loop0: detected capacity change from 0 to 2048 [ 661.844804][T31701] Alternate GPT is invalid, using primary GPT. [ 661.851189][T31701] loop0: p2 p3 p7 [ 661.866794][T31697] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.7558: iget: bad extra_isize 90 (inode size 256) [ 661.885479][T31697] EXT4-fs (loop5): Remounting filesystem read-only [ 661.902896][T31697] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -30) [ 661.915122][T31697] EXT4-fs (loop5): 1 orphan inode deleted [ 661.940458][T31697] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 661.966721][T31708] lo speed is unknown, defaulting to 1000 [ 662.001102][T31707] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 662.007026][T31708] lo speed is unknown, defaulting to 1000 [ 662.010099][T31707] FAT-fs (loop6): Filesystem has been set read-only [ 662.074443][T31709] Alternate GPT is invalid, using primary GPT. [ 662.080955][T31709] loop1: p2 p3 p7 [ 662.120109][T31707] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548) [ 662.347344][T31707] FAT-fs (loop6): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 662.568478][T31707] FAT-fs (loop6): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 662.658378][T29105] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 663.109327][T31707] FAT-fs (loop6): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 663.310125][T31731] IPVS: Error connecting to the multicast addr [ 663.338675][T31730] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 663.347551][T31730] FAT-fs (loop6): Filesystem has been set read-only [ 663.412832][T31730] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548) [ 663.642274][T31730] FAT-fs (loop6): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 663.900278][T31746] __nla_validate_parse: 2 callbacks suppressed [ 663.900298][T31746] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7573'. [ 664.012988][T31749] netlink: 'syz.5.7575': attribute type 4 has an invalid length. [ 664.024408][T31745] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 664.075695][T31751] EXT4-fs: Ignoring removed nobh option [ 664.095652][T31751] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 664.108521][T31751] ext4 filesystem being mounted at /320/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 664.122011][T31751] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7576'. [ 664.135793][T31753] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 664.154060][T31730] FAT-fs (loop6): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 664.199216][T26661] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 664.239018][T31765] netlink: 'syz.3.7580': attribute type 1 has an invalid length. [ 664.266640][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 664.266671][ T29] audit: type=1326 audit(1766425762.116:44508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31771 comm="syz.5.7584" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f59a61ff749 code=0x0 [ 664.269450][T31765] 8021q: adding VLAN 0 to HW filter on device bond11 [ 664.305254][T31767] syzkaller0: entered promiscuous mode [ 664.310769][T31767] syzkaller0: entered allmulticast mode [ 664.329361][T31775] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 664.351511][T31765] 8021q: adding VLAN 0 to HW filter on device bond11 [ 664.359161][T31765] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 664.371343][T31765] bond11: (slave vxcan3): Error -95 calling set_mac_address [ 664.396150][T31775] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.7585: invalid indirect mapped block 4294967295 (level 0) [ 664.410530][T31775] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.7585: invalid indirect mapped block 4294967295 (level 1) [ 664.425204][T31775] EXT4-fs (loop6): 1 orphan inode deleted [ 664.430960][T31775] EXT4-fs (loop6): 1 truncate cleaned up [ 664.437334][T31775] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 664.450385][T31782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7580'. [ 664.474597][T29268] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.508266][T31786] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7587'. [ 664.527108][T31786] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 664.542986][T31786] bond5: (slave lo): Enslaving as a backup interface with an up link [ 664.562751][T31786] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 664.674781][T31786] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7587'. [ 664.691751][T31786] EXT4-fs: test_dummy_encryption option not supported [ 664.950763][T31803] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #18: comm syz.6.7590: iget: bad extra_isize 90 (inode size 256) [ 664.966828][T31803] EXT4-fs (loop6): Remounting filesystem read-only [ 664.982115][T31803] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -30) [ 664.991238][T31803] EXT4-fs (loop6): 1 orphan inode deleted [ 664.997986][T31803] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 665.221410][T31806] set_capacity_and_notify: 11 callbacks suppressed [ 665.221426][T31806] loop5: detected capacity change from 0 to 128 [ 665.241615][T31806] EXT4-fs: Ignoring removed nobh option [ 665.278553][T31806] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 665.291011][T31806] ext4 filesystem being mounted at /175/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 665.309651][T31806] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7591'. [ 665.333020][T29105] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 665.385286][T31815] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7596'. [ 665.398624][ T29] audit: type=1326 audit(1766425763.246:44509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31814 comm="syz.3.7596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ffb6af749 code=0x7ffc0000 [ 665.424619][ T29] audit: type=1326 audit(1766425763.276:44510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31814 comm="syz.3.7596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ffb6af749 code=0x7ffc0000 [ 665.448384][ T29] audit: type=1326 audit(1766425763.276:44511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31814 comm="syz.3.7596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ffb6af749 code=0x7ffc0000 [ 665.472195][ T29] audit: type=1326 audit(1766425763.276:44512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31814 comm="syz.3.7596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ffb6af749 code=0x7ffc0000 [ 665.495877][ T29] audit: type=1326 audit(1766425763.276:44513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31814 comm="syz.3.7596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ffb6af749 code=0x7ffc0000 [ 665.519572][ T29] audit: type=1326 audit(1766425763.276:44514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31814 comm="syz.3.7596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ffb6af749 code=0x7ffc0000 [ 665.543303][ T29] audit: type=1326 audit(1766425763.276:44515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31814 comm="syz.3.7596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ffb6af749 code=0x7ffc0000 [ 665.567142][ T29] audit: type=1326 audit(1766425763.276:44516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31814 comm="syz.3.7596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ffb6af749 code=0x7ffc0000 [ 665.590763][ T29] audit: type=1326 audit(1766425763.276:44517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31814 comm="syz.3.7596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ffb6af749 code=0x7ffc0000 [ 665.675024][T31820] vlan3: entered allmulticast mode [ 665.732049][T29268] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.834560][T31822] syzkaller0: entered promiscuous mode [ 665.840098][T31822] syzkaller0: entered allmulticast mode [ 665.912517][T31825] netlink: 'syz.1.7601': attribute type 1 has an invalid length. [ 665.927838][T31825] 8021q: adding VLAN 0 to HW filter on device bond5 [ 665.947720][T31825] 8021q: adding VLAN 0 to HW filter on device bond5 [ 665.955664][T31825] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 665.968123][T31825] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 666.254799][T31833] loop0: detected capacity change from 0 to 128 [ 666.356530][T31836] loop5: detected capacity change from 0 to 512 [ 666.368177][T31839] loop3: detected capacity change from 0 to 128 [ 666.375049][T31839] EXT4-fs: Ignoring removed nobh option [ 666.382910][T31839] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 666.422877][T31839] ext4 filesystem being mounted at /326/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 666.441885][T31842] loop6: detected capacity change from 0 to 164 [ 666.471791][T31842] lo speed is unknown, defaulting to 1000 [ 666.528611][T31842] lo speed is unknown, defaulting to 1000 [ 666.631049][T31843] loop6: detected capacity change from 0 to 2048 [ 666.665774][T31843] Alternate GPT is invalid, using primary GPT. [ 666.672236][T31843] loop6: p2 p3 p7 [ 666.824666][T31848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7602'. [ 666.851911][T31839] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7604'. [ 667.014904][T26661] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 667.027351][T31857] random: crng reseeded on system resumption [ 667.040510][T31857] Restarting kernel threads ... [ 667.047570][T31857] Done restarting kernel threads. [ 667.094833][T31860] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7611'. [ 667.371512][T31882] loop6: detected capacity change from 0 to 128 [ 667.412312][T31884] loop6: detected capacity change from 0 to 512 [ 667.430967][T31884] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 667.439753][T31884] FAT-fs (loop6): Filesystem has been set read-only [ 667.446641][T31884] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548) [ 667.636407][T31884] FAT-fs (loop6): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 667.829717][T31884] FAT-fs (loop6): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 668.024040][T31884] FAT-fs (loop6): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 668.163461][T31893] loop0: detected capacity change from 0 to 512 [ 668.186814][T31893] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 668.195699][T31893] FAT-fs (loop0): Filesystem has been set read-only [ 668.207210][T31893] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 668.277309][T31884] FAT-fs (loop6): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 668.361305][T31895] loop3: detected capacity change from 0 to 128 [ 668.412390][T31893] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 668.559909][T31901] lo speed is unknown, defaulting to 1000 [ 668.596447][T31901] lo speed is unknown, defaulting to 1000 [ 668.797718][T31905] lo speed is unknown, defaulting to 1000 [ 668.833888][T31905] lo speed is unknown, defaulting to 1000 [ 669.189289][T31893] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 669.300743][T31906] Alternate GPT is invalid, using primary GPT. [ 669.307266][T31906] loop6: p2 p3 p7 [ 669.358096][T31895] __nla_validate_parse: 5 callbacks suppressed [ 669.358117][T31895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7622'. [ 669.436371][T31917] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7627'. [ 669.514305][T31918] syzkaller0: entered promiscuous mode [ 669.519903][T31918] syzkaller0: entered allmulticast mode [ 669.575551][T31893] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 669.674025][T31928] random: crng reseeded on system resumption [ 669.688925][T31928] Restarting kernel threads ... [ 669.698342][T31930] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 669.709882][T31928] Done restarting kernel threads. [ 669.718697][T31930] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.7628: invalid indirect mapped block 4294967295 (level 0) [ 669.734751][T31925] syzkaller0: entered promiscuous mode [ 669.740273][T31925] syzkaller0: entered allmulticast mode [ 669.746650][T31930] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.7628: invalid indirect mapped block 4294967295 (level 1) [ 669.775513][T31930] EXT4-fs (loop5): 1 orphan inode deleted [ 669.781342][T31930] EXT4-fs (loop5): 1 truncate cleaned up [ 669.788044][T31930] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 669.814723][T29105] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.825060][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 669.825074][ T29] audit: type=1326 audit(1766425767.676:44543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31934 comm="syz.3.7632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ffb6af749 code=0x7ffc0000 [ 669.901191][T31938] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 669.910067][T31938] FAT-fs (loop5): Filesystem has been set read-only [ 669.941076][T31938] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 669.952625][ T29] audit: type=1326 audit(1766425767.716:44544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31934 comm="syz.3.7632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f9ffb6af749 code=0x7ffc0000 [ 669.976367][ T29] audit: type=1326 audit(1766425767.716:44545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31934 comm="syz.3.7632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ffb6af749 code=0x7ffc0000 [ 670.206022][T31938] FAT-fs (loop5): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 670.354283][T31960] set_capacity_and_notify: 6 callbacks suppressed [ 670.354319][T31960] loop6: detected capacity change from 0 to 128 [ 670.367740][T31960] EXT4-fs: Ignoring removed nobh option [ 670.379580][T31960] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 670.392034][T31960] ext4 filesystem being mounted at /146/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 670.405941][T31960] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7641'. [ 670.428886][T29268] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 670.435165][T31938] FAT-fs (loop5): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 670.641331][T31938] FAT-fs (loop5): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 670.654631][T31963] loop3: detected capacity change from 0 to 164 [ 670.682184][T31963] lo speed is unknown, defaulting to 1000 [ 670.738896][T31963] lo speed is unknown, defaulting to 1000 [ 670.801817][T31964] loop3: detected capacity change from 0 to 2048 [ 670.861514][T31967] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7642'. [ 671.011850][T31938] FAT-fs (loop5): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 671.030757][T31964] Alternate GPT is invalid, using primary GPT. [ 671.037342][T31964] loop3: p2 p3 p7 [ 671.081119][ T29] audit: type=1326 audit(1766425768.926:44546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31973 comm="syz.0.7645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94862bf749 code=0x7ffc0000 [ 671.105039][ T29] audit: type=1326 audit(1766425768.926:44547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31973 comm="syz.0.7645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94862bf749 code=0x7ffc0000 [ 671.192898][ T29] audit: type=1326 audit(1766425768.986:44548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31973 comm="syz.0.7645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f94862bf749 code=0x7ffc0000 [ 671.216700][ T29] audit: type=1326 audit(1766425768.986:44549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31973 comm="syz.0.7645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94862bf749 code=0x7ffc0000 [ 671.240329][ T29] audit: type=1326 audit(1766425768.986:44550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31973 comm="syz.0.7645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94862bf749 code=0x7ffc0000 [ 671.318473][T31979] loop1: detected capacity change from 0 to 164 [ 671.347901][T31979] lo speed is unknown, defaulting to 1000 [ 671.407908][T31979] lo speed is unknown, defaulting to 1000 [ 671.519734][T31980] loop1: detected capacity change from 0 to 2048 [ 671.596446][T31980] Alternate GPT is invalid, using primary GPT. [ 671.602875][T31980] loop1: p2 p3 p7 [ 671.671682][T31976] loop0: detected capacity change from 0 to 128 [ 671.695794][ T29] audit: type=1326 audit(1766425769.426:44551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31972 comm="syz.5.7643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59a61ff749 code=0x7ffc0000 [ 671.719688][ T29] audit: type=1326 audit(1766425769.436:44552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31972 comm="syz.5.7643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59a61ff749 code=0x7ffc0000 [ 671.761291][T31978] loop5: detected capacity change from 0 to 128 [ 671.788042][T31976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7646'. [ 671.831315][T31988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7649'. [ 671.839434][T31990] loop3: detected capacity change from 0 to 512 [ 671.884894][T31988] bond9: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 671.905045][T31997] loop5: detected capacity change from 0 to 512 [ 671.915807][T31988] bond9: (slave lo): Enslaving as a backup interface with an up link [ 671.937846][T31997] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 671.946672][T31997] FAT-fs (loop5): Filesystem has been set read-only [ 671.976260][T32001] loop3: detected capacity change from 0 to 128 [ 671.989755][T31988] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 671.993265][T31997] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 672.066017][T31988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7649'. [ 672.086094][T31988] EXT4-fs: test_dummy_encryption option not supported [ 672.110634][T32001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7652'. [ 672.178428][T32016] vfat: Bad value for 'shortname' [ 672.186146][T32016] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7658'. [ 672.215850][T32016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7658'. [ 672.228926][T32016] EXT4-fs: test_dummy_encryption option not supported [ 672.232241][T31997] FAT-fs (loop5): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 672.242924][T32004] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 672.295747][T32024] EXT4-fs: Ignoring removed nobh option [ 672.417574][T32032] netlink: 'syz.0.7664': attribute type 1 has an invalid length. [ 672.478108][T31997] FAT-fs (loop5): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 672.495679][T32024] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 672.518403][T32032] 8021q: adding VLAN 0 to HW filter on device bond10 [ 672.533214][T32035] 8021q: adding VLAN 0 to HW filter on device bond10 [ 672.541235][T32035] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 672.555466][T32035] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 672.570811][T32036] syzkaller0: entered promiscuous mode [ 672.576416][T32036] syzkaller0: entered allmulticast mode [ 672.685631][T32024] ext4 filesystem being mounted at /151/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 672.715675][T31997] FAT-fs (loop5): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 672.876729][T32046] netlink: 'syz.5.7667': attribute type 13 has an invalid length. [ 673.687221][T32046] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.694776][T32046] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.747656][T32048] Alternate GPT is invalid, using primary GPT. [ 673.754181][T32048] loop1: p2 p3 p7 [ 673.822209][T32047] lo speed is unknown, defaulting to 1000 [ 673.833013][T29268] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 673.862117][T32047] lo speed is unknown, defaulting to 1000 [ 673.972748][ T7260] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.982227][ T7260] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.991184][ T7260] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.000815][ T7260] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.017118][T32058] vfat: Bad value for 'shortname' [ 674.049731][T32058] EXT4-fs: test_dummy_encryption option not supported [ 674.098636][T32072] vfat: Bad value for 'shortname' [ 674.117004][T32072] bond5: (slave lo): Releasing backup interface [ 674.131193][T32072] bond5: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 674.142320][T32072] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 674.182761][T32072] EXT4-fs: test_dummy_encryption option not supported [ 674.215710][T32082] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 674.230840][T32082] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.7678: invalid indirect mapped block 4294967295 (level 0) [ 674.253349][T32082] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.7678: invalid indirect mapped block 4294967295 (level 1) [ 674.282393][T32082] EXT4-fs (loop6): 1 orphan inode deleted [ 674.288292][T32082] EXT4-fs (loop6): 1 truncate cleaned up [ 674.294494][T32082] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 674.320405][T29268] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.352133][T32087] EXT4-fs: Ignoring removed nobh option [ 674.359971][T32087] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 674.372466][T32087] ext4 filesystem being mounted at /156/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 674.387875][T32087] __nla_validate_parse: 8 callbacks suppressed [ 674.387893][T32087] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7679'. [ 674.505477][T32091] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 674.517803][T32091] ext4 filesystem being mounted at /342/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 674.582859][T32094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.591903][T32094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.601786][T32094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7680'. [ 674.832805][ T29] kauditd_printk_skb: 685 callbacks suppressed [ 674.832868][ T29] audit: type=1326 audit(1766425772.686:45238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32076 comm="syz.5.7677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f59a6232005 code=0x7ffc0000 [ 674.862928][ T29] audit: type=1326 audit(1766425772.686:45239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32076 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f59a61f65e7 code=0x7ffc0000 [ 674.886089][ T29] audit: type=1326 audit(1766425772.686:45240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32076 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f59a619b829 code=0x7ffc0000 [ 674.909164][ T29] audit: type=1326 audit(1766425772.686:45241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32076 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59a61ff749 code=0x7ffc0000 [ 674.932350][ T29] audit: type=1326 audit(1766425772.686:45242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32076 comm="syz.5.7677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f59a6232005 code=0x7ffc0000 [ 674.956138][ T29] audit: type=1326 audit(1766425772.686:45243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32076 comm="syz.5.7677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f59a6232005 code=0x7ffc0000 [ 674.979876][ T29] audit: type=1326 audit(1766425772.686:45244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32076 comm="syz.5.7677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f59a6232005 code=0x7ffc0000 [ 675.003602][ T29] audit: type=1326 audit(1766425772.686:45245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32076 comm="syz.5.7677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f59a6232005 code=0x7ffc0000 [ 675.027217][ T29] audit: type=1326 audit(1766425772.686:45246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32076 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f59a61f65e7 code=0x7ffc0000 [ 675.050236][ T29] audit: type=1326 audit(1766425772.686:45247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32076 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f59a619b829 code=0x7ffc0000 [ 675.090466][T32098] netlink: 'syz.1.7681': attribute type 1 has an invalid length. [ 675.205688][T32098] 8021q: adding VLAN 0 to HW filter on device bond6 [ 675.219889][T32104] 8021q: adding VLAN 0 to HW filter on device bond6 [ 675.227647][T32104] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 675.239531][T32104] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 675.408398][T32108] set_capacity_and_notify: 16 callbacks suppressed [ 675.408418][T32108] loop5: detected capacity change from 0 to 2048 [ 675.878636][T32098] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7681'. [ 675.906408][T32107] lo speed is unknown, defaulting to 1000 [ 675.941704][T32107] lo speed is unknown, defaulting to 1000 [ 676.012904][T32110] lo speed is unknown, defaulting to 1000 [ 676.047915][T32110] lo speed is unknown, defaulting to 1000 [ 676.297867][T29268] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 676.331560][ T7237] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:18: bg 0: block 345: padding at end of block bitmap is not set [ 676.346948][ T7237] EXT4-fs (loop3): Remounting filesystem read-only [ 676.419904][T32118] loop5: detected capacity change from 0 to 164 [ 676.481731][T26661] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.530025][T32118] lo speed is unknown, defaulting to 1000 [ 676.551305][T32119] loop5: detected capacity change from 0 to 2048 [ 676.619268][T32119] Alternate GPT is invalid, using primary GPT. [ 676.625651][T32119] loop5: p2 p3 p7 [ 676.691243][T32118] lo speed is unknown, defaulting to 1000 [ 676.896386][T32121] loop6: detected capacity change from 0 to 256 [ 676.930564][T32121] vfat: Bad value for 'shortname' [ 676.956560][T32121] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7685'. [ 677.009553][T32121] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7685'. [ 677.031747][T32121] loop6: detected capacity change from 0 to 512 [ 677.042214][T32127] syzkaller0: entered promiscuous mode [ 677.048005][T32127] syzkaller0: entered allmulticast mode [ 677.059627][T32121] EXT4-fs: test_dummy_encryption option not supported [ 677.128209][T32135] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7690'. [ 677.504410][T32148] loop3: detected capacity change from 0 to 164 [ 677.533899][T32148] lo speed is unknown, defaulting to 1000 [ 677.595975][T32148] lo speed is unknown, defaulting to 1000 [ 677.704377][T32149] loop3: detected capacity change from 0 to 2048 [ 677.776265][T32149] Alternate GPT is invalid, using primary GPT. [ 677.782853][T32149] loop3: p2 p3 p7 [ 678.058913][T32157] loop5: detected capacity change from 0 to 128 [ 678.065743][T32157] EXT4-fs: Ignoring removed nobh option [ 678.073759][T32157] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 678.086413][T32157] ext4 filesystem being mounted at /191/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 678.100608][T32157] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7696'. [ 678.254189][T32176] loop0: detected capacity change from 0 to 512 [ 678.263301][ T3487] ================================================================== [ 678.270690][T32176] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.7700: iget: bad extra_isize 90 (inode size 256) [ 678.271459][ T3487] BUG: KCSAN: data-race in __filemap_add_folio / nr_blockdev_pages [ 678.285511][T32176] EXT4-fs (loop0): Remounting filesystem read-only [ 678.292575][ T3487] [ 678.292585][ T3487] read-write to 0xffff888100480bb8 of 8 bytes by task 32176 on cpu 1: [ 678.292606][ T3487] __filemap_add_folio+0x5b9/0x7d0 [ 678.292633][ T3487] filemap_add_folio+0x1d9/0x360 [ 678.299607][T32176] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 678.301476][ T3487] __filemap_get_folio_mpol+0x326/0x650 [ 678.301507][ T3487] bdev_getblk+0x174/0x3f0 [ 678.301528][ T3487] __ext4_sb_bread_gfp+0x44/0x170 [ 678.310036][T32176] EXT4-fs (loop0): 1 orphan inode deleted [ 678.314808][ T3487] ext4_fill_super+0x496/0x37a0 [ 678.314837][ T3487] get_tree_bdev_flags+0x291/0x300 [ 678.314862][ T3487] get_tree_bdev+0x1f/0x30 [ 678.321087][T32176] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 678.328751][ T3487] ext4_get_tree+0x1c/0x30 [ 678.328775][ T3487] vfs_get_tree+0x57/0x1d0 [ 678.328795][ T3487] do_new_mount+0x24d/0x6a0 [ 678.328812][ T3487] path_mount+0x4ab/0xb80 [ 678.328830][ T3487] __se_sys_mount+0x28c/0x2e0 [ 678.398164][ T3487] __x64_sys_mount+0x67/0x80 [ 678.402775][ T3487] x64_sys_call+0x2cca/0x3000 [ 678.407480][ T3487] do_syscall_64+0xca/0x2b0 [ 678.412008][ T3487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.417899][ T3487] [ 678.420230][ T3487] read to 0xffff888100480bb8 of 8 bytes by task 3487 on cpu 0: [ 678.427777][ T3487] nr_blockdev_pages+0x7e/0xd0 [ 678.432552][ T3487] si_meminfo+0x87/0xd0 [ 678.436739][ T3487] update_defense_level+0x47/0x5c0 [ 678.441870][ T3487] defense_work_handler+0x1f/0x80 [ 678.446898][ T3487] process_scheduled_works+0x4ce/0x9d0 [ 678.452382][ T3487] worker_thread+0x582/0x770 [ 678.456980][ T3487] kthread+0x489/0x510 [ 678.461070][ T3487] ret_from_fork+0x149/0x290 [ 678.465664][ T3487] ret_from_fork_asm+0x1a/0x30 [ 678.470449][ T3487] [ 678.472766][ T3487] value changed: 0x0000000000000000 -> 0x0000000000000001 [ 678.479870][ T3487] [ 678.482188][ T3487] Reported by Kernel Concurrency Sanitizer on: [ 678.488343][ T3487] CPU: 0 UID: 0 PID: 3487 Comm: kworker/0:7 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 678.499738][ T3487] Tainted: [W]=WARN [ 678.503538][ T3487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 678.513608][ T3487] Workqueue: events_long defense_work_handler [ 678.519694][ T3487] ================================================================== [ 678.886312][T29105] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 679.042886][T25706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.