last executing test programs: 2m55.899258263s ago: executing program 32 (id=307): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@resuid}, {@test_dummy_encryption_v1}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$eventfd(r1, &(0x7f0000000100), 0xfffffd79) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x50, 0x7, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7}]}, 0x50}}, 0x2004c080) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000011c0), 0x0, 0x4e5, &(0x7f0000000980)="$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") getdents(r0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) pipe2$9p(&(0x7f0000000240), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r5}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020200091a0000000000000080ffffff05000600000000000a000000000000002001000000000000000000000000000100000000000000000200010000000000000000020000230005000500000000000a0000000000000020010000000000000000000000000001010001000000000002001000000004d6000004d40000000001001400030000000800120003000000b36b6e00003c980106003200021f000005000000000000000a010102000000000000000000000000fe8000000000000000000000000000aa010016"], 0xd0}}, 0x40) lseek(r0, 0x7ff, 0x1) getdents64(r0, 0x0, 0x10) 2m54.238667806s ago: executing program 33 (id=321): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) fchownat(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffde, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="90000000", @ANYRES16=r4, @ANYBLOB="0100000000000002000005000000180001801400020073797a5f74756e000000000000000000080005000a0f00005c0003800400010054000380"], 0x90}}, 0x0) 2m43.882887002s ago: executing program 34 (id=428): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6001, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v2={0x2000000, [{0x9, 0xfffffff7}, {0xde7, 0x8002}]}, 0x14, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) (fail_nth: 4) 2m41.768291319s ago: executing program 35 (id=439): r0 = socket(0x10, 0x3, 0x9) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/locks\x00', 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x49010}, 0x10000010) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0xfd44) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0xc, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4}, 0x18) r6 = accept4$llc(r2, &(0x7f0000000300)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000340)=0x10, 0x80000) getsockname$llc(r6, 0x0, &(0x7f00000003c0)) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000013c0)=ANY=[@ANYBLOB="140000005304010000000000000000000500000a1447c1080000000000000000000000000a"], 0x28}, 0x1, 0x0, 0x0, 0x64049}, 0x40000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="9d0008", @ANYRESOCT=r5], 0x48) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r9, &(0x7f0000001ff0)={0x1d, r10}, 0x10) sendmsg$can_raw(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000140)=@canfd={{0x1}, 0xf6, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x88801) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r2}, 0x739d1f01966c5636) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010054000000000036fb7dd8000310000000050000000b0600a3003000"/45], &(0x7f0000000640)=""/124, 0x2d, 0x7c, 0x0, 0x8, 0x10000, @value=r3}, 0x28) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r11, 0x0, 0xfffffffffffffffe}, 0x18) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8c853}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000120a0900000000000000000002000a2f0900010073797a30000000000900020073797a310000000008000340000000010800084000000000080004400000000014000000110001"], 0x6c}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000000150a0102"], 0x34}}, 0x20000000) close_range(r0, r4, 0x0) 2m24.348722068s ago: executing program 36 (id=678): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x14, 0x453, 0x400, 0x70bd2d, 0x25dfdbfb, 's'}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x4) socket$xdp(0x2c, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], &(0x7f0000000680)=""/172, 0x7a, 0xac, 0x1, 0x80}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x17, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) setsockopt$inet6_udp_int(r3, 0x11, 0x65, &(0x7f0000000040)=0x6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 2m3.904126934s ago: executing program 37 (id=963): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @local}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x8094) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x18) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x100) write$sndseq(r7, &(0x7f0000000280)=[{0xff, 0xe6, 0xa8, 0x8, @tick, {0x6, 0x1}, {0xa2, 0x1}, @result={0x8001, 0x2}}, {0x10, 0x2, 0x7, 0x6, @time={0x0, 0x4}, {0x0, 0x81}, {0x9, 0x5}, @ext={0x4b, &(0x7f00000000c0)="81080cc2b1a7ab5e2add41c8cc63e2937a457122962e601b7e06cf4713948855e2b99b66c996b657352fd4f489112ae91a9c64681c34daa4b0a6ac78294ef458caddcf5da6c46cb8d3e119"}}, {0x1, 0x8, 0x80, 0x10, @tick=0xc, {0x22, 0x7}, {0x3, 0x2}, @connect={{0x5, 0x7f}, {0xa2, 0xf2}}}, {0x7, 0x81, 0x7, 0x6, @time={0x7, 0xd}, {0x40, 0x5}, {0xf6, 0x9}, @raw32={[0x6, 0x2, 0x5]}}, {0x5, 0x0, 0xf4, 0x1, @tick=0x4, {0x8, 0xe2}, {0x85, 0x1}, @note={0x8, 0x85, 0xb7, 0x9, 0x7}}], 0x8c) perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x10000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x3, 0x4, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m2.667246995s ago: executing program 38 (id=978): socket$netlink(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f0000000540)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) gettid() setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffffffffa}, 0x18) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 1m56.890024972s ago: executing program 39 (id=1025): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r2, 0x0, 0x5}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x0) setresuid(0xee00, 0xee00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1) 1m54.406018326s ago: executing program 40 (id=1043): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="acbd", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000000)="5bba7d07e578561d6419b4bf274e2c9a5c91b597a4572793e5013ea82e490ebf6ed1060375c253ecc1ec5db301e3287696c620f1b94412bc628eab5ddfba10dcbfb820725adb29b39c65132784af", 0x4e}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000f00)}], 0x1}}], 0x5, 0x400c404) sendmmsg$inet6(r0, &(0x7f00000055c0)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000c00)='s', 0x1}], 0x1}}], 0x1, 0x84) 1m53.088913485s ago: executing program 41 (id=1062): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000043c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) read(r2, 0x0, 0x0) 1m49.024804394s ago: executing program 42 (id=1087): fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0xfffffffffffffccc, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_dev$tty1(0xc, 0x4, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) readv(r4, &(0x7f0000000300)=[{&(0x7f00000078c0)=""/86, 0x56}], 0x1) 1m45.418910407s ago: executing program 43 (id=1119): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=ANY=[@ANYBLOB="94010000100031082bbd700800000000fc010000000000000000000000000000000000000000000000000000000000000000ecdf000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x194}}, 0x4050) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f00000001c0)={0x44, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TUPLE_REPLY={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xfffffff6}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x8000}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x24040015) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x44, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @replay_thresh={0x8, 0xb, 0x7}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x4, 0x3, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x190, 0xf1f80502f07a58b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x400000000000235, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5, 0x0, 0x10}, 0x18) sync() socket$inet_sctp(0x2, 0x1, 0x84) setresuid(r2, r2, 0x0) setreuid(r0, r2) 1m42.768100548s ago: executing program 44 (id=1129): r0 = syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000000)='./file0\x00', 0x2, &(0x7f0000000080)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT], 0x1, 0x5b9, &(0x7f0000002980)="$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") r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) creat(&(0x7f0000000140)='./file0\x00', 0x1) mount$9p_rdma(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x80, &(0x7f0000000580)={'trans=rdma,', {'port', 0x3d, 0x4e23}}) statx(r0, 0x0, 0x400, 0x2, &(0x7f0000000300)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002900)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f"], 0x50) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x810, 0xffffffffffffffff, 0xced01000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="44000000090601020000000000000000914700000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 1m36.804349783s ago: executing program 45 (id=1176): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x49, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r2}, 0x18) munlockall() ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x800, 0x5, 0xc, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(r1, 0x1276, 0x0) 1m31.270415516s ago: executing program 46 (id=1233): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="190000000400000008000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m17.706983426s ago: executing program 47 (id=1440): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) r2 = dup(r0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x5, 0x30}, 0xc) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000002700)={0x1, 0x2, 0x0, 0xfffffff8}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd5f, 0xfa00, {0x1, 0x0, 0x106, 0x5}}, 0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000005c0)={0x8, 0x0, 0xfff, 0xfffffffa}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x40400000000003, 0x0, 0x111, 0x6}}, 0xfd68) write$P9_RFLUSH(r1, &(0x7f0000000440)={0x7, 0x6d, 0x2}, 0x7) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e21, 0xffffff72, @empty}}, 0xffffec47, 0x6, 0xffff1896, 0x110, 0x25, 0x7fff}, 0x9c) 1m16.668455238s ago: executing program 48 (id=1458): set_mempolicy(0x4005, &(0x7f0000000300)=0x4, 0x7) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) fchdir(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000040)=0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffb4}, 0x94) r3 = socket$inet6(0xa, 0x805, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43) getsockopt$bt_hci(r3, 0x84, 0x0, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000140)=[{0x3, 0x6, 0x1, 0xfffffff7}]}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRES16=r0], 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r4}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000240), &(0x7f0000000280)=r8}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB], 0x118}, 0x1, 0x7}, 0x10) r10 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000006a00)={0x34, r10, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x2e}}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048040}, 0x48804) 1m15.661216187s ago: executing program 49 (id=1466): socket$nl_audit(0x10, 0x3, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) socket$xdp(0x2c, 0x3, 0x0) socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x17, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000240), &(0x7f00000003c0)=r8}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 1m8.264655813s ago: executing program 50 (id=1547): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') removexattr(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)=@known='system.posix_acl_default\x00') 1m4.406890981s ago: executing program 51 (id=1601): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r3, &(0x7f0000000200)={0xa, 0xffff, 0xb7, @loopback}, 0x1c) 1m1.305816585s ago: executing program 3 (id=1642): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000c000000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000200)=""/15, 0x4000, 0x800}, 0x20) 1m1.190426977s ago: executing program 3 (id=1643): socket$nl_audit(0x10, 0x3, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 1m1.127671093s ago: executing program 52 (id=1643): socket$nl_audit(0x10, 0x3, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 59.00954058s ago: executing program 53 (id=1667): r0 = creat(&(0x7f0000000100)='./bus\x00', 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r2, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x0, 0x0, r0, 0x0, 0x0, 0xffffffffffffffff}]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3fb}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0xf8, 0xdb, &(0x7f0000000340)="ecd6a53259fdd96614e400965122a7ca65e994f8183e15beb25af99399e3b95f446f23fb467e8963d33a8f4826802a7e9688793019a8f7854acdf090fc85f30f5cdd11ea18ff3e78cc0ff59efd0340280f104f08c87997a46ffd95833852b9821a6dbb22f4169644f4df1355322d2fdb29a2250f814444d3056d4ddc30731ea58ca5398a9f4c6618ec7984c5ba613371ebdf532c3b39457b32109e921d992c1ba9f8793ae6cb11e4415efe82cdec4573348757eed0f5cee81bb48fe5aa401274798504ff9e5ea51ef262551889cb3094711fccad81eb4a994d77b0885b2c59d50ab55734ef8ee4c74672eec84548bffc0534e560fc9195e7", &(0x7f00000004c0)=""/219, 0x3, 0x0, 0x79, 0x34, &(0x7f0000000000)="a4b610392b0a036049c4466b82c6a2d5d1e1695a3e41921df2b50d4fafc42ba31012e60a371824d2c76cedc382f390ff140a720fbfe6cab9b44a1feae83222044c0f4787691e5c099c640f53c34d92a5ed21904759dec43ee9925cbc2112349006604e1a5cfd9dee4d389bd2432877f8429630a6cf68697927", &(0x7f0000000080)="001f533d1272e05899fa84ec6430141dcac4257b80370ad55f19304389151e9b8cc962e818df1f87ed2e090e4813b666f3ddf503", 0x6, 0x0, 0xdb}, 0x50) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'syzkaller0\x00'}) r7 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r9}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f00000002c0)=@urb_type_control={0x2, {0x1, 0x1}, 0x0, 0x40, 0x0, 0x0, 0x4, 0x4, 0x0, 0xe, 0x2, 0x0}) socket$nl_route(0x10, 0x3, 0x0) 42.782870403s ago: executing program 8 (id=1904): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 42.720118828s ago: executing program 8 (id=1910): bpf$MAP_CREATE(0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="19000000040000"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x47, &(0x7f0000010080)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x11, 0x11, 0xff, @private1, @mcast2, {[], {0x0, 0xe22, 0x11, 0x0, @gue={{0x2}, 'J'}}}}}}}, 0x0) 42.669304364s ago: executing program 8 (id=1912): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) r3 = dup(r1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x5, 0x30}, 0xc) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000002700)={0x1, 0x2, 0x0, 0xfffffff8}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0xfffffffffffffd5f, 0xfa00, {0x1, 0x0, 0x106, 0x5}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x40400000000003, 0x0, 0x111, 0x6}}, 0xfd68) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e21, 0xffffff72, @empty}}, 0xffffec47, 0x6, 0xffff1896, 0x110, 0x25, 0x7fff}, 0x9c) 41.755884833s ago: executing program 8 (id=1931): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001cc0), 0x100, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f0000001d00)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f0000000000), 0xff, 0x4a7, &(0x7f0000000280)="$eJzs3M9rHFUcAPDv7OZHfyfWWm1tdbWKxR9Jk1btwYOKggcFQQ/1GJO01mwbaSLYEjQVqUcpeBePgn+BNy+iHkTwquBRCkWD0NRTZHZm2s1mkyZpkm2znw9s9r35se99Z+btvpmXmQDaViX9k0TsiIjfI6Iny85foJK9zc5MDV+fmRpOYm7urb+T2nLXZqaGi0WL9bbnmcOliNJnSbyYLCx34vyFsaFqdfRcnu+fPPNB/8T5C8+cPjN0avTU6NnB48ePHR14/rnBZ9ckzjSua/s/Hj+w77V3Lr8xfOLyuz99m1Zr78Fsfn0ct3S9SUBNVNKt9s9cTeO8x1dQ97vBzrp00tHCirAi5YhId1dnrf33RDlu7ryeePXTllYOWFfpb1P34rOn54BNLIlW1wBojeKHPj3/LV4b1PW4I1x9KaIrT8/OTA3P3oi/I0r59M51LL8SESem//sqfcVKr0MAAKxCrW/zdLP+Xyn21t6zsY5d+RhKb0TcExG7I+LeiNgTEfdF1Ja9PyIeyFae61lm+ZWG/ML+T+lK0zqvkbT/90Jd32+2Lv78rbec53bW4u9MTp6ujh7Jt8nh6OxO8wNLlPH9K799sdi8+v5f+krLL/qCeQWudDRcoBsZmhxaq41w9WLE/o5m8Sc3RgLSI2BfROxf2UfvKhKnn/zmwGIL3Tr+JazBONPc1xFPZPt/OhriLyRLj0/2b4nq6JH+4qhY6OdfL72ZJ7sa591W/Gsg3f/b5h//+ZyL+XvPv0k2XtsZ1erouYmVl3Hpj88XPadZ7fHflbxdG7P+5b1s2kdDk5PnBiK6ktdr+WJD16YP3ly3yBfLp/EfPtS8/e/O10njfzAi0oP4YEQ8FBEP53V/JCIejYhDS8T/48uPvb9E/Ekk0dL9P9L0++/G8d+b1I/XryJRHvvhu/zTtiyMv5i01P4/FtO179pM7fvvFpZbwdvcfAAAAHBXKEXEjkhKfVm6siNKpb6+7H/498S2UnV8YvKpk+Mfnh3J7hHojc5ScaWrp+566EAynX9ilh/MrxUX84/m142/LG+t5fuGx6sjLY4d2t32+e0/ivaf+qvc6toB6879WtC+Gtt/qUX1ADbecn7/nQvA5tSk/W9tRT2Ajef8H9pXs/b/SUNe/x82p4Xt/88mj6wDNiP9f2hf2j+0L+0f2tJy7+LviojuiFj1QwDmJYqbBVa6evFFdWFsy7Lv8L/zEpV1+eTiiRfrWfmtcXNKlO6IjbmBifJYd8tKT1vMxhba5GE1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAd6H/AwAA///g6dxC") r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write(r1, &(0x7f0000000180)="7e7226ce9b4d692092ffa2b579f0ff5793012c9738a9be19ff3e69a683a0a1bbace0dc3853c661a4e1019e7a1f3af60350126cb99c5f3ace6f5616c00e0fb30b2832398fed6233b8632a001dd0a846cbb8a5d77e3208db486b055edb6ae7917f07ccf4b6811be57047aa17799359e733ec395940d1feb7a9ec2ddadb1ff61070c9c00f9db8e47f74a5271fa77b6e692e6ac97aaae883e5522f8e86c2403aec0ff8dee1cba5d40f0969470b9a2a95f6f22f9d4250809400ea8403a6540948", 0xfffffec6) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) socket$nl_netfilter(0x10, 0x3, 0xc) 40.220285254s ago: executing program 54 (id=1956): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) r2 = dup(r0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x5, 0x30}, 0xc) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000002700)={0x1, 0x2, 0x0, 0xfffffff8}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd5f, 0xfa00, {0x1, 0x0, 0x106, 0x5}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x40400000000003, 0x0, 0x111, 0x6}}, 0xfd68) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e21, 0xffffff72, @empty}}, 0xffffec47, 0x6, 0xffff1896, 0x110, 0x25, 0x7fff}, 0x9c) 40.1582549s ago: executing program 8 (id=1951): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$rds(0x15, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a090400000000000000000200000058000480180001800d00010073796e70726f787900000000040002803c0001800e000100696d6d656469617465000000280002801c000280060002800900020073797a320000000008000180fffffffc08000140000000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x20000094}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x398, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x9, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x1010, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x9}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), 0x0}, 0x20) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000a40)='kfree\x00', r5, 0x0, 0x2}, 0x18) r6 = syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xe, 0xb0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x5, 0x7f}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x2, 0x5, 0x7}}]}}}]}}]}}, &(0x7f0000000d80)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x0, 0x5, 0x1, 0xff, 0xff, 0x5}, 0x3a, &(0x7f0000000900)={0x5, 0xf, 0x3a, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x6c, "d110f8abccb3ae8fa8933d64349a6113"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x5, 0xff, 0xff}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x1, 0x9}, @ssp_cap={0x10, 0x10, 0xa, 0xff, 0x1, 0x2d, 0xf, 0xf, [0xf]}]}, 0xa, [{0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x2401}}, {0x8d, &(0x7f0000000b80)=@string={0x8d, 0x3, "ed056ae6138d71cc74bb3131ea458231e9e20d7cfbc49c6d77c3453e2cf0c86658a52311f2815c58688a1155e3c7661163f5874bc7aee5baebfb49a84b5feee0afcaf95751a21c9e928cd7e13371c2eb9fec1da388d1a41d78cfc56b98c55d6656564427b7929d8e78a2977a195c5fec2305c2eae4255ab6db56b2037f0f86463e9cd091ad96af4a3b5c23"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x403}}, {0x76, &(0x7f0000000c80)=@string={0x76, 0x3, "54e54368d01f0511a4a77a530c4594590bd2593dc373e045d13e4aa1453b2d2addbf543dc46830fa7f27a00eb46ff9cefc37e196d1ab52b4955f2222eb9c0a15c3f35be161a92f0f4409fba725fe787fd2eb07aac47ad507125c34f942f95494c34b4ecc4c4e859f641ea55d3e3ee91081608354"}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x2801}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x41f}}]}) syz_usb_disconnect(r6) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$inet_int(r7, 0x0, 0x5, &(0x7f0000000080)=0x6, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r8}, 0x18) r9 = socket$netlink(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000002c0)={0x34, r10, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) 39.760094369s ago: executing program 8 (id=1957): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) socket(0x2, 0x80805, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 6) 39.65046661s ago: executing program 55 (id=1957): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) socket(0x2, 0x80805, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc1"], &(0x7f0000000100)='GPL\x00'}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 6) 37.631645178s ago: executing program 9 (id=1980): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000180)={0x1d, r2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000040)={0x1d, r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x10, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, [@map_fd={0x18, 0x7}, @tail_call, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f0000000380)='GPL\x00', 0x89e, 0x0, 0x0, 0x41000, 0x7d, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0x4, 0x6, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000440), &(0x7f0000000480)=[{0x0, 0x5, 0xf, 0x4}, {0x3, 0x5, 0x9}, {0x0, 0x3, 0x1, 0x2}], 0x10, 0x3ff}, 0x94) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', r5, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000006c0)={0x36, 0x4000, 0x0, 0x9, 0x2, [0x3, 0x80000001, 0x5, 0x8]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@noinit_itable}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") r9 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') preadv(r9, &(0x7f00000001c0)=[{&(0x7f00000039c0)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r8}, 0x10) r10 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) tee(r11, r11, 0x7, 0x8) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r12 = fsmount(r10, 0x0, 0x82) sendmsg$can_raw(r9, &(0x7f00000007c0)={&(0x7f0000000440), 0x10, &(0x7f0000000780)={&(0x7f0000000700)=@canfd={{0x4, 0x1}, 0xc, 0x2, 0x0, 0x0, "e66c65cba4730bf1eb8e47c27f5aecdd254e95a6c9f92e3da4fee1560ceda589932ecd2ae89334864671197a28c4f4c92751e53983ddbc386ffd975477acee3e"}, 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x24000891) fchdir(r12) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) 37.19803017s ago: executing program 9 (id=1984): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) (fail_nth: 6) 36.643568965s ago: executing program 9 (id=1985): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x82) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (fail_nth: 6) 36.548115744s ago: executing program 9 (id=1987): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000001d00)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f0000000000), 0xff, 0x4a7, &(0x7f0000000280)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write(r2, &(0x7f0000000180)="7e7226ce9b4d692092ffa2b579f0ff5793012c9738a9be19ff3e69a683a0a1bbace0dc3853c661a4e1019e7a1f3af60350126cb99c5f3ace6f5616c00e0fb30b2832398fed6233b8632a001dd0a846cbb8a5d77e3208db486b055edb6ae7917f07ccf4b6811be57047aa17799359e733ec395940d1feb7a9ec2ddadb1ff61070c9c00f9db8e47f74a5271fa77b6e692e6ac97aaae883e5522f8e86c2403aec0ff8dee1cba5d40f0969470b9a2a95f6f22f9d4250809400ea8403a6540948", 0xfffffec6) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) socket$nl_netfilter(0x10, 0x3, 0xc) 35.698825668s ago: executing program 9 (id=1998): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000200)=""/15, 0x4000, 0x800}, 0x20) 34.992727667s ago: executing program 9 (id=2004): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000010380)="d800000018007b29e00212ba0d8105040a601800fe0f041c067c55a1bc000900b80006990600000015000500fe800000000000000300", 0x36}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0xe, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESOCT=r3], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0x1}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d700000010"], 0x10b8}, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) keyctl$reject(0x13, 0x0, 0x40, 0xffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000880)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@nodioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r9, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) ioctl$EXT4_IOC_MOVE_EXT(r8, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) socket$inet_smc(0x2b, 0x1, 0x0) 34.919978144s ago: executing program 56 (id=2004): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000010380)="d800000018007b29e00212ba0d8105040a601800fe0f041c067c55a1bc000900b80006990600000015000500fe800000000000000300", 0x36}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0xe, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESOCT=r3], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0x1}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d700000010"], 0x10b8}, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) keyctl$reject(0x13, 0x0, 0x40, 0xffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000880)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@nodioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r9, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) ioctl$EXT4_IOC_MOVE_EXT(r8, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) socket$inet_smc(0x2b, 0x1, 0x0) 28.400253103s ago: executing program 6 (id=2083): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000200)=""/15, 0x4000, 0x800}, 0x20) 28.139944549s ago: executing program 6 (id=2091): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) clock_settime(0xfffffffb, 0x0) 28.1299675s ago: executing program 6 (id=2092): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000200)='qrtr_ns_service_announce_del\x00', r0, 0x0, 0xffffffffffffff3a}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f00000003c0)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0086dd6004180000303afffe800000000000000000020000000000000000000000000000000000000000aa8900907800000000ff010000000000000000000000000001fc01000000000000000000000000000004019595f429ae08"], 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r6}, 0x20) sendmmsg$inet6(r6, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x11}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) r9 = openat$cgroup_int(r2, &(0x7f00000001c0)='cgroup.max.depth\x00', 0x2, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) write$cgroup_int(r9, &(0x7f0000000000), 0x12) sendfile(r10, r9, 0x0, 0x4) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 28.017310551s ago: executing program 6 (id=2096): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000001d00)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f0000000000), 0xff, 0x4a7, &(0x7f0000000280)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write(r2, &(0x7f0000000180)="7e7226ce9b4d692092ffa2b579f0ff5793012c9738a9be19ff3e69a683a0a1bbace0dc3853c661a4e1019e7a1f3af60350126cb99c5f3ace6f5616c00e0fb30b2832398fed6233b8632a001dd0a846cbb8a5d77e3208db486b055edb6ae7917f07ccf4b6811be57047aa17799359e733ec395940d1feb7a9ec2ddadb1ff61070c9c00f9db8e47f74a5271fa77b6e692e6ac97aaae883e5522f8e86c2403aec0ff8dee1cba5d40f0969470b9a2a95f6f22f9d4250809400ea8403a6540948", 0xfffffec6) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) socket$nl_netfilter(0x10, 0x3, 0xc) 25.757325003s ago: executing program 6 (id=2121): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000008000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6}, 0x66) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0xffffffff, r2}, 0x38) 25.448834403s ago: executing program 6 (id=2129): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) socket$can_j1939(0x1d, 0x2, 0x7) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xe, &(0x7f00000000c0)={@multicast, @broadcast, @void, {@generic={0x8}}}, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@getaddr={0x14, 0x16, 0x800, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x825}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f00000001c0)={0x0, 0x0, 0x0}) write$char_usb(r2, &(0x7f0000000040)="e2", 0x12d8) r6 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="b8", 0x1}], 0x1}}], 0x2, 0x20040017) close(r6) 25.3795485s ago: executing program 57 (id=2129): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) socket$can_j1939(0x1d, 0x2, 0x7) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xe, &(0x7f00000000c0)={@multicast, @broadcast, @void, {@generic={0x8}}}, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@getaddr={0x14, 0x16, 0x800, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x825}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f00000001c0)={0x0, 0x0, 0x0}) write$char_usb(r2, &(0x7f0000000040)="e2", 0x12d8) r6 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="b8", 0x1}], 0x1}}], 0x2, 0x20040017) close(r6) 21.553499115s ago: executing program 3 (id=2131): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) setpgid(0x0, 0x0) 21.525302068s ago: executing program 3 (id=2210): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000001d00)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f0000000000), 0xff, 0x4a7, &(0x7f0000000280)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write(r2, &(0x7f0000000180)="7e7226ce9b4d692092ffa2b579f0ff5793012c9738a9be19ff3e69a683a0a1bbace0dc3853c661a4e1019e7a1f3af60350126cb99c5f3ace6f5616c00e0fb30b2832398fed6233b8632a001dd0a846cbb8a5d77e3208db486b055edb6ae7917f07ccf4b6811be57047aa17799359e733ec395940d1feb7a9ec2ddadb1ff61070c9c00f9db8e47f74a5271fa77b6e692e6ac97aaae883e5522f8e86c2403aec0ff8dee1cba5d40f0969470b9a2a95f6f22f9d4250809400ea8403a6540948", 0xfffffec6) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) socket$nl_netfilter(0x10, 0x3, 0xc) 20.422316026s ago: executing program 3 (id=2217): socket$nl_audit(0x10, 0x3, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) socket$xdp(0x2c, 0x3, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 18.275955797s ago: executing program 3 (id=2256): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$netlink(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r1, @ANYRES16=r2, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRESOCT, @ANYRES32=r3, @ANYRES8=r4], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000580)='kfree\x00', r6}, 0x18) sendmmsg$inet(r3, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24004804) r7 = socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r7, &(0x7f0000000980)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24048001}}], 0x1, 0x44080) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r10, 0x0, 0x4}, 0x18) r11 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r11, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r11, 0x29, 0x16, &(0x7f0000000040), 0x4) sendmsg$NFT_MSG_GETFLOWTABLE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000170a0102"], 0x14}, 0x1, 0x0, 0x0, 0x20048000}, 0x8094) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r12, 0x0, 0x9}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000140)={[{@jqfmt_vfsv1}, {}, {@quota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") chdir(&(0x7f0000000340)='./file0\x00') r13 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r13, &(0x7f0000000080)=""/49, 0x31) 18.272570307s ago: executing program 58 (id=2256): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$netlink(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r1, @ANYRES16=r2, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRESOCT, @ANYRES32=r3, @ANYRES8=r4], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000580)='kfree\x00', r6}, 0x18) sendmmsg$inet(r3, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24004804) r7 = socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r7, &(0x7f0000000980)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24048001}}], 0x1, 0x44080) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r10, 0x0, 0x4}, 0x18) r11 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r11, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r11, 0x29, 0x16, &(0x7f0000000040), 0x4) sendmsg$NFT_MSG_GETFLOWTABLE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000170a0102"], 0x14}, 0x1, 0x0, 0x0, 0x20048000}, 0x8094) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r12, 0x0, 0x9}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000140)={[{@jqfmt_vfsv1}, {}, {@quota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") chdir(&(0x7f0000000340)='./file0\x00') r13 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r13, &(0x7f0000000080)=""/49, 0x31) 17.612307232s ago: executing program 1 (id=2267): r0 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xc9, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x0, 0x2000000000a5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x1) unshare(0x2a020400) syz_clone3(&(0x7f0000001e80)={0x166002400, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="3000000010000100000000000000000000000000156a6c317f7e128a452f1470c94e360dc35ebe64843933cc97618ea0327563b22cfc5a1c52da57b160005be139645f6b3e3e36974e6bcdafebdaae674d3230245971946f9afedba236cba0f5d076f3cd81fee8d06cd3b9d6556ee5cb4c94f5deef0a8019411c677859de0eb95a529dcfa31706191bbd82b17df69096d236dc014452fe76b665ee92904d2e44767f43890cdc56a9cf75b5e815", @ANYRES32=0x0, @ANYBLOB="0011000000000000080004000006000008001b0000000000", @ANYRES64=r0], 0x30}}, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, 'lo\x00'}}, 0x1e) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f00000000c0)=@in6={0xa, 0x4e20, 0x9639, @remote, 0x7}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x1}, 0x8) r3 = dup(0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0x1}}, 0xffcc) socket$can_bcm(0x1d, 0x2, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x6, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = shmget$private(0x0, 0x2000, 0x54003f00, &(0x7f0000ffc000/0x2000)=nil) shmat(r5, &(0x7f0000000000/0x4000)=nil, 0x6000) get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000001000/0x3000)=nil, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r4, 0x0, 0x80}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x100000000000026d, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) 17.242085368s ago: executing program 1 (id=2270): socket$netlink(0x10, 0x3, 0xf) r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4040004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x9, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x10) r5 = getpgrp(0x0) r6 = syz_pidfd_open(r5, 0x0) fsetxattr$trusted_overlay_nlink(r6, &(0x7f00000018c0), 0x0, 0x0, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, 0x0, 0xf00) 17.046822447s ago: executing program 1 (id=2273): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = getpid() r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r1, 0x0, 0xffe5, 0xe000, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000040)={'veth1_to_hsr\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYBLOB="de05a518d877e38e75a216cd57a692662232ffdf0c635b9dfb8615534cda72f77f99f95822dc6fea050515b4f6983f8166da0abb3143be1ddc06c2c10bed719784d0d8046f86dd589036a352c5f653365df7efb66e8387473c6bed433d8df6bde1eba6c9fbd5c2c49785279dc1af3fef052085e098d93e8f285af36c3b909b6beb", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0xfffffffffffff001}, 0x18) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, 0x0, 0x290) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="010426bd7000fedbdf250a00000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r11}, 0x10) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000c000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c080}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}}, 0x40) close_range(r9, 0xffffffffffffffff, 0x0) 16.8158481s ago: executing program 1 (id=2274): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) pipe2$9p(&(0x7f0000000000), 0x4800) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @value=r1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) pivot_root(&(0x7f0000000040)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r2, 0x0, 0x1034}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b000000000000f0ff000000008000000000000058616c61cac3e7a8028ef06005448e352b8f50785d90a0797fa5221d8bae12cd6dbaf2bdd7b094645301c15453bbbd6048b51bae51c75612e801afed17e709458f486f92c1a69368f252460ce4c3aa5cdd1ab7689a0b73e5f1173fa7abf107c3cb23a3330c553ea47fa8df150d812498ee428311967fb49040", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x1c, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4f8a}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2c4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, r1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r4}, 0x10) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xf0, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0x0, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000300)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='bcache_invalidate\x00', 0xffffffffffffffff, 0x0, 0x8b44}, 0x18) set_robust_list(&(0x7f00000003c0), 0x18) 16.680756353s ago: executing program 1 (id=2275): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 16.460140595s ago: executing program 1 (id=2277): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) sendto$inet6(r1, &(0x7f0000000080)='D', 0x1, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) rt_sigqueueinfo(0x0, 0x15, 0x0) uname(0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x1) 16.459695235s ago: executing program 59 (id=2277): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) sendto$inet6(r1, &(0x7f0000000080)='D', 0x1, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) rt_sigqueueinfo(0x0, 0x15, 0x0) uname(0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x1) 4.869580702s ago: executing program 7 (id=2492): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="03000000", @ANYRESHEX=r1, @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x9e, &(0x7f00000000c0)={[{@orlov}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$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") recvfrom$inet(0xffffffffffffffff, &(0x7f0000000140)=""/190, 0xbe, 0x2040, &(0x7f0000000200)={0x2, 0x4e21, @loopback}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') pread64(r2, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xa00) move_pages(0x0, 0x1, &(0x7f0000002600)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002640), &(0x7f0000000000), 0x0) chdir(&(0x7f0000000240)='./file0\x00') quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000280)) 4.644374534s ago: executing program 7 (id=2493): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) read$snapshot(r2, &(0x7f0000003600)=""/48, 0x30) (fail_nth: 3) 4.37510676s ago: executing program 7 (id=2496): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB="db863a301eb3405ebd34eeeecb376b3189208b6e3de9220cbd984692df8452cdac05e9b39a726a078a46638090e44be6f163c9a20b0788207bb0cca36b635abe2de6294eeb67a8a2e1d3f61611"], 0x48) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000080)=')-[..(\x00', 0x0, r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r5}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000b80)=[{0x6}]}, 0x10) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) ioctl$TCFLSH(r2, 0x400455c8, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x77ff, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x40814}, 0x0) 1.194193262s ago: executing program 7 (id=2558): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x190, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffd}]}, @TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x236954e3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa5a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x59dd}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "aecfe2bcfadba8055bf117bda85c40d789d70271b5"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8dd}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "74864cd1693fc00e4f7d84bc1486812cc136645779cf62810ba6294f2e7b94"}}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x3) 1.188020653s ago: executing program 5 (id=2560): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000030000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) rt_sigqueueinfo(0x0, 0x11, &(0x7f0000000300)={0x35, 0x676, 0xff}) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 1.160713876s ago: executing program 7 (id=2561): r0 = syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b2620df1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc561a62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x4, 0x26d, &(0x7f00000005c0)="$eJzs281OE18Yx/EfL/8/CMJUURSM8YludDOBegUNgcTYRIPU+JKYDDLVpkNLOg2mxgg7t14HcenOxHgDbLwCF+7YuGRhHMNMLS2UqAuZaL+fzXnI4deck+dMcxadnXuvV8vF0C16dfX3mQalTe1KGfVrQIm+5tgf1/+r3aauTeQ/Xbxz/8HNXD4/v2i2kFu6njWz8Uvvn714c/lDffTu2/F3Q9rOPNr5kv28Pbk9tfNt6WkptFJolWrdPFuuVuvecuDbSiksu2a3A98LfStVQr/WMV8MqmtrDfMqK2MjazU/DM2rNKzsN6xetXqtYd4Tr1Qx13VtbET4mcLW4qKXS3sV+LNqtZw3J2n60ExhK5UFAQCAVHH/72Xc/3vB3v3/YfP57cT9HwAAAAAAAAAAAAAAAAAAAACAv8FuFDlRFDk/xv+k+A2fqPn3CUkjkkYlnZQ0JmlckiMpI+mUpNOSJiSdkXRW0qSkc5LOS5pq+6y094rDjur/AP3vCTz/vY3+97a2F3eHpdVX64X1QjIm87miSgrka0aOvsa9bErqhRv5+RmLZXRhdaOZ31gvDHTmZ+XsHZhu+dkkb535ofjctfJZOXsHrFs+2zU/rKtX2vKuHH18rKoCrcRncj//ctZs7lb+QH46/r9/nWstXfvnukfNJ/lfOB/RTNf+DGp6MN29Qwobz8teEPg1CgoKilaR9jcTjsN+09NeCQAAAAAAAAAAAAAAAADgdxzHzwnT3iMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAd9DwAA//+TC2AL") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) mount$9p_rdma(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x80, &(0x7f0000001040)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030346532332c6163636573733da4"]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='timer_start\x00', r2}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x158, 0x11, 0x148, 0x0, 0x0, 0x230, 0x2a8, 0x2a8, 0x230, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x40, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x4, 0x18}}}, @common=@unspec=@limit={{0x48}, {0x5, 0x5, 0x4, 0x3, 0x9, 0x3, 0xfffffffffffffff8}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @multicast1, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x12, 0x9, 0x5, 0x1, 'netbios-ns\x00', 'syz0\x00', {0x4a7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) r4 = creat(&(0x7f0000000040)='./file7\x00', 0x1a2) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x200) fcntl$setstatus(r5, 0x4, 0x2800) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x8) fchdir(r7) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r7, &(0x7f0000000e80)={0x1}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x5452, &(0x7f0000000a00)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000300), &(0x7f0000000540)=0x68) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x24, 0x65, 0x300, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xc, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r8 = socket(0x25, 0x803, 0x7e2) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) setreuid(0x0, 0xee00) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r9, 0x8983, &(0x7f0000000b40)={0x2, 'vlan0\x00', {}, 0x6}) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x800008, 0x5}) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000880)={{{@in=@multicast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000e00)=0xe8) fsetxattr$system_posix_acl(r5, &(0x7f0000000580)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB="0200000001000e000000000002000400", @ANYRES32=r10, @ANYBLOB="0000ff03000000001e000200", @ANYRES32=0xee01, @ANYBLOB="10000100000000002000050000000000"], 0x34, 0x1) 1.126029119s ago: executing program 5 (id=2562): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1, @in6=@mcast1, 0x0, 0x7, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x6, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x1, 0x0, 0x80}}, [@tmpl={0x104, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x34ff, 0x0, 0x2}, {{@in=@local, 0x0, 0x3c}, 0xa, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x2, 0x0, 0x0, 0x0, 0x800, 0x800, 0xfffffffc}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@loopback, 0x3503, 0x3, 0x0, 0x0, 0x0, 0x200}, {{@in6=@loopback, 0x4d4, 0x3c}, 0x0, @in=@multicast1, 0x3, 0x0, 0x1, 0x8, 0x9, 0x0, 0x400}]}]}, 0x1bc}}, 0x0) 1.01206796s ago: executing program 5 (id=2563): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="4000aa000a0002"], 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r5], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000010020"], 0x24, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) ioctl$FS_IOC_SETFSLABEL(r10, 0x41009432, &(0x7f0000000780)="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") r11 = socket$inet_sctp(0x2, 0x5, 0x84) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x9}]}, &(0x7f00000002c0)=0x22) getsockopt$inet_sctp6_SCTP_MAX_BURST(r12, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r11, 0x84, 0x0, &(0x7f0000000000)={r13, 0xf2, 0xfffffff7, 0x3}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r10, 0x84, 0x77, &(0x7f0000000080)={r13, 0x7, 0x4, [0x8, 0x7, 0x3ff, 0xb]}, 0x10) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES32=r7], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0x12, 0x2, 0x1, 0x0, ':\\:){,$\x9c{!*%\\\x00'}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 852.777096ms ago: executing program 7 (id=2565): r0 = syz_io_uring_setup(0x6c8b, &(0x7f0000000540)={0x0, 0x9590, 0x0, 0x0, 0x19e}, &(0x7f00000005c0), &(0x7f0000000600)) io_uring_enter(r0, 0x3914, 0x5b35, 0x20, &(0x7f0000000640)={[0x2]}, 0x8) syz_read_part_table(0x5d0, &(0x7f00000006c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) clock_adjtime(0x0, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x7fff}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x498, 0xffffffff, 0xf8, 0x2c0, 0xf8, 0xffffffff, 0xffffffff, 0x400, 0x400, 0x400, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ip={@loopback, @multicast2, 0xff, 0x0, 'veth0\x00', 'virt_wifi0\x00', {}, {0xb7c7d30d0bbb37bd}, 0x67, 0x2, 0xc}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ah={{0x30}, {[0x1, 0xfffffff7], 0x1}}, @common=@ah={{0x30}, {[0xffffff01], 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x2, 0xc7}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff000000, 0xffff00, 'rose0\x00', 'xfrm0\x00', {}, {}, 0x35, 0x1, 0x50}, 0x0, 0xa0, 0x1c8, 0x0, {}, [@common=@inet=@udp={{0x30}, {[0x4e21, 0x4e22], [0x4e24, 0x4e24], 0x2}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x82fa, 'system_u:object_r:event_device_t:s0\x00'}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x3d}, 0xff, 0xffffff00, 'bond_slave_1\x00', 'erspan0\x00', {0xff}, {}, 0x2f, 0x2, 0x48}, 0x0, 0xe0, 0x140, 0x0, {}, [@common=@inet=@udplite={{0x30}, {[0x4e21, 0x4e22], [0x4e20, 0x4e20], 0x1}}, @common=@set={{0x40}, {{0x4, [0x4, 0x1, 0x1, 0x1, 0x6], 0x5, 0x4}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0xff, 0xc, [0x1d, 0x3c, 0x3a, 0x10, 0x3f, 0x1d, 0x16, 0x32, 0x3f, 0x6, 0x13, 0x40, 0xd60f, 0x3a, 0x0, 0x15], 0x0, 0x198a, 0x16}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) 705.70238ms ago: executing program 2 (id=2574): socket$nl_audit(0x10, 0x3, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) socket$xdp(0x2c, 0x3, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 676.272233ms ago: executing program 2 (id=2575): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="78000000000801010000000000000000070000000900010073797a31000000001c0004800800014000000002080002400000070f08000140200000000600024089140000050003"], 0x78}, 0x1, 0x0, 0x0, 0x10000840}, 0x0) (fail_nth: 2) 634.315458ms ago: executing program 2 (id=2576): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x470bd30, 0x25dfdc01, {0x60, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000b00850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x7, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r4}, 0x18) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000200)={r5, 0x7a, "4f7bc824bbe9f55f0e7d51f3cd0ee6bdcb14e318d6e31e61b80c00dc1cb406cdf9abb3784a7f6c8ef7bc0a0d7b97382042327a4f403db30547e40dc79b6f50cba0ff96125ef3b8a1c341b80e754c90c578dd542e53df78157aa72dcd215bb84696579551eeeb77590bfad74c2c84c2750ef921f47e31b66c99c5"}, &(0x7f0000000140)=0x82) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r6}, 0x18) syz_io_uring_setup(0x4276, &(0x7f00000004c0)={0x0, 0xd96d, 0x0, 0x3, 0x387, 0x0, r0}, &(0x7f0000000180), &(0x7f0000000300)) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) brk(0x200004ffc000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="78000000000801010000000000000000070000000900010073797a31000000001c0004800800014000000002080002400000070f08000140200000000600024089140000050003"], 0x78}, 0x1, 0x0, 0x0, 0x10000840}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 551.860186ms ago: executing program 2 (id=2577): msgsnd(0x0, 0x0, 0x401, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10000000002008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x1}, 0x18) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) inotify_add_watch(0xffffffffffffffff, 0x0, 0x16000f57) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000640)={0xa, 0x4e20, 0xf, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000001b40)={0x424, r4, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x74, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="09449ecfb5f10c4f959943747fce3af7e8ca14949bc42b50"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1ff}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="ecdf2ab07f317fba8a6873d480b1bd4e284da2fe35d7ffbd"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x101}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="97494cba93a79fc7a89399ec496ca622"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "dc5f61dbfd2a235e"}]}, @NL80211_ATTR_REKEY_DATA={0x4c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8ab0}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d979bcfbed1a8946d306a8ead078c8107943e073322b06f6"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="41e430a9b4799ecd55dde21f178a9ddb"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}]}, @NL80211_ATTR_REKEY_DATA={0x7c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="cb08d5cca7cc46a1fa9f1b76c28adac0b428ed59e9e46d9767f3d78e2d0c7a64"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="229112fb52c6378e9df73654ec1f4a985c28fe8c4b4ab78d"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="e1e5271461ea804a3aabc1c09a1622cfb60e95cd63ce3298d5be08b888b6386b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xff}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "48c1fc92ff4f845b"}]}, @NL80211_ATTR_REKEY_DATA={0x140, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7d90f55cd8065abfb75cc0fe1266be2cd67528e0b8a015d6"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="370383048747d517cffa78c04902f9ed"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="54cd20cfbcb4a73d0c68d6a0a9fa5fe0"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="67820887aea9a91f80f2bf71b4a46c12560fea15d0d67a9385c5cd51b5778fed"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="a4e9bf6f5e7621a63a2554d9a9ba68a99e8a692111108749"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="3a34b472f2b4f558177521c50ac4a018f99d1ff5bb3a8569b8428791a4e6e973"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "93e6729fa972b57f"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="39d6b91d3d9299c1111019a704c99dc3bb285f0b0947c8a112c261c899022189"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xc6}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b0f5a3d1800083e400"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b21af66b2a4ddd743de76d1e4435d97c636e88a0b4e926c8439d8060ccaed361"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="0fdb3b08b0ae202f06898ef796e6711d428f41e23b9a07956e5fad90cdeea615"}]}, @NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8582bda9ed739e0e"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="222004b9f2e41e2d5bfa4a9b8b08324d"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ebb46bc3791a907b"}]}, @NL80211_ATTR_REKEY_DATA={0x60, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="5496f32697381efcca17caf3791d8cff"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "0ac7f2d9558589ff"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f00578679b31a8fb"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="261525afa146d1700e22f6256ef1abfe2db95b5c42dc85fe37c2e8168779e936"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9c9c5e7342bb57f9"}]}, @NL80211_ATTR_REKEY_DATA={0x70, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "afd2b7090000678a"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="fa3044e9fca622a679133f820b4e5ab55293f0f9bbd0ebf8"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="5786b3fcaea6939aa838a1f2e28d891a"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7a1592126ce5c16ec689584b588f5e6dce0df581da04df2c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="f4e1826e4b60790b04715059d8f5bb88"}]}, @NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="77331dfdc10d89aba1186539db13e2e1be20cd049cea2d75"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="5f325db597142d24de4c99461ee53834"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "4491b7a922f22260"}]}, @NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="a475d3a9aa22a825ff25a1f174885842"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="977791f8f1ebb7402efd9aaf40db887aa401be3557d7e3ddfafedf8a782aabef"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="6cbc6139b5619733165d623752f2577f"}]}]}, 0x424}, 0x1, 0x0, 0x0, 0x40000}, 0x90) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) sendmsg$inet_sctp(r5, &(0x7f0000001b00)={&(0x7f0000000600)=@in6={0xa, 0x4e23, 0x8, @mcast1, 0x5}, 0x1c, &(0x7f0000001a80)=[{&(0x7f0000000680)="0a59c75ef1d14af16c831b36f39f8a371eab8d6d4b757f09bf24639dcb5a241b702a4ebf0834ccbb8549f5a41253c6b602b04fe305b6ba6e1a40fb6521b40577b8167ac9391f6fb9874d46ff5153380303668fa31009212da477b55de2ec25288897a98af9beb101bcc78de0880a665d36682c6407043ae346c13dc91f4c68298c19ac7fd36f0f10941ef721e7cdc2531093ba08cd62cf298abe55c3929ac66dcbcf8ff1914720beaae70c6185a96bcea5874fda113879e8cd715a4917c57144b9dac46913edccdc71e65e49e27e5eb95afc3df681a9577bd8a2de9b8aa0ab26d1209ee20385ac90e173638188f7216c04f306eaf0f2", 0xf6}, {&(0x7f0000000780)="a1a1ebdb5193af617bb72cc589fdb79b4c633e001d3bc8b1db44bfe3d016cc074daa438e7a5386", 0x27}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f00000017c0)="924a09f4b2f17a223dc41d0ae77c9e842632b1f439ca05d1e7e63379fd609441bae748e89671a2e855dc4075cded6c5dc8e50f647ab1e2bc63e87c3471f511ee72ef322b2904460e7fa802313a1bd6794055657b239c7be765400b5aadcb7c87da48c1ba8c04a46f596ca9efdf4a8b3f13aa81784614da5aacc5d0352495a4510a0beae8fc77509bf1a975fdf968299463de5c098bbf2db527bac05498b7626de9ad5cbeeae4eac17c94d05724e31482b1fa7d02301d", 0xb6}, {&(0x7f0000001880)="640d44e138a24df8cf77732c2a5a46a284665b345ee4e12cdd9326b224c8bba994ca5511309ec83ebb07940e0be80a96637dc275ecfee8f54e2c4c195ed91158a1756fecf58f58bb4a03c62e4ca5147befcc1db4bce5288872ba2b27d5d4864fe72b49a234317701d0a9fec6b6358b4ca9abe61a2e4b9e6b9cf04fdb48ed782115247464a0f1db25ca207d02e12bfa037927964cde3d8a0dc6b3d406244a6e46e2b1408f8f1ad565a90973da0536af623aab5c153d3fe3d92001c57b0a5ec8ffa2e3fbbf797aa7c8e03269dfa051df664c", 0xd1}, {&(0x7f0000001980)="38683002e0d7d18fe95ffda4501e9fcb19e680901d1c5bd5d946de27fddad5a69e056fbe1e0534bef41aba7baae4a36c36d8c0f52a0e5d728d96dfb37502346d41db66b5c1763d2f522b051ade1f7e19a572dbc03406d9935ce95ee7b030e5604e3fb1ae4a5de4b65146ccf841de3d741ccbfb82c26bcec05a3519217c5806686d1de0b34acb16f977dcaefcfecb7a61c49b6c2843518e51912c1d4fa15afaae153581dfd910384dcee5fff1c62bc7eb3ed2f57033476ed5c108b76416138f94df49c4d775d963080bb416bd7043da004895d0d416bb65c58046873363", 0xdd}], 0x6, 0x0, 0x0, 0xc048090}, 0x2000c000) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000000c0), 0x4) 492.276961ms ago: executing program 2 (id=2578): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) munlockall() 456.941005ms ago: executing program 2 (id=2579): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x400000000000000) 350.793955ms ago: executing program 4 (id=2585): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff8500", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) rt_sigqueueinfo(0x0, 0x11, &(0x7f0000000300)={0x35, 0x676, 0xff}) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 330.177537ms ago: executing program 4 (id=2586): socket$nl_audit(0x10, 0x3, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) socket$xdp(0x2c, 0x3, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 306.11443ms ago: executing program 4 (id=2588): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000080)=0x4) (async) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0x2000004) (async) pwritev(r3, &(0x7f0000000280)=[{&(0x7f0000000000)='\x00!', 0x62}], 0x1, 0xee, 0x4200008) (async) dup2(r1, r2) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001540), r4) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000440)={{{@in=@remote, @in6=@mcast1}}, {{@in6=@private1}, 0x0, @in=@broadcast}}, &(0x7f0000000200)=0xe8) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000000)={0x30, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x40004) (async) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000140)={0x0, 0x2}, 0x8) 292.410881ms ago: executing program 0 (id=2589): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) munlockall() 274.511213ms ago: executing program 0 (id=2590): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, 0x0, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x8044) 260.491484ms ago: executing program 0 (id=2591): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711239000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 207.949759ms ago: executing program 0 (id=2592): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f00000005c0)="f5", 0x1, 0x20000880, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000340), &(0x7f0000000380)=0x4) 206.805989ms ago: executing program 0 (id=2593): socket$netlink(0x10, 0x3, 0xf) r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4040004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x9, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) getpgrp(0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0xf00) 206.301939ms ago: executing program 0 (id=2594): r0 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300030000000903000038000000fcffffff0e000000000020000100050000"], 0x58) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, r2, 0x6b56000) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a6970"], 0x58}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a310000000005000100"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r6, 0x0, 0x80000}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) futimesat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)={{r7, r8/1000+10000}}) 184.748492ms ago: executing program 4 (id=2595): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) 184.248772ms ago: executing program 4 (id=2596): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x0, 0x0}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000040)=0x1, 0x4) socket$kcm(0x29, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x363, &(0x7f0000000f00)="$eJzs3c1rM0UcwPFfXp8kD21yEEVBOtiLXpY2ehaDtCAELG0jtoKwbTcasiYlG6oRse3Jq3j3JHgovYgFDwXtP9CLN72I4K0XwYM9qCv7lmze+hKTxqf9fqBkMzO/3ZnMpPw27WYv3v78g2rZ0sp6U6IpJRERkUuRnEQlEPEfo+52UsIO5KXHf/z0/NpGKeUVqOXC+st5pdTs3PcffpL2m50+kvPcuxe/5387f/r82Yt/1t+vWKpiqVq9qXS1Vf+lqW+ZhtqpWFVNqRXT0C1DVWqW0fDqv/X3Y9Z3d1tKr+3MZHYbhmUpvdZSVaOlmnXVbLSU/p5eqSlN09RMRnCd0tHqql4YMXh7zJ3BhDQaBT0mIum+mtLRVDoEAACmqjf/jzop/Sj5/6bMFotLq8pp3Mn/j184az5+62TWz/9Pk4Py/1d+9vbVlf87pxOd/L/unR+Ur8//v5Rb5P/9GdHDMnL+n5tAZzCauWRfUaTrmZP/Z/z3r+vwneMFd4P8HwAAAAAAAAAAAAAAAAAAAACAJ8GlbWdt284Gj8FP5xIC/znupWHz/0hEUs7s28z/fba2sSkp98I9Z47Nz/ZKeyXv0W9wJiKmGH/bvZy1EVx5pBw5+cHc9+P390oxt6ZQlooTL4uSlZy7nkLxtr38RnFpUXn8+PZlSplwfF6y8lQ4/jt3dTrx+e54//hJeXE+FK9JVn7clrqYsuNGdo7/6aJSr79Z7IlPu+1E5Nc7nxQAAAAAAMZMU20Dz981bVi99y0jhbL7MZEhC5KVvwaf3y8MPD+PZ5+LT3v0AAAAAAA8DFbrm5hI1GhYrY+rumkO2kjL0KoxbMS7ShIiMrBxsqckcdWeY6ERXn30mAQlSfHuYPJfx/WV+6reMir4Rwqn4+0q/44qMlp/gvG7JZH46NMUORB3ARyEq6Jyg/B4b+fnnAI1sPH80P0c+gNplwQfGyWHvM6y0r+f6BUrIdFXYkdGWwDPfPH1n+N7g7x64q+Aj65vfGga9r7cZFJ6NpxD9FclJv6LBwAAAMCd6yT9Qclr4erwjUTCN8vhL/cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIzRRL7Sr2dj2mMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/i/+DQAA//+3BvI3") r1 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r4, 0x400, 0x1) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000340)) io_submit(r6, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0xfffc, r5, 0x0}]) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8402, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0xce8}, 0x23) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xc) fcntl$notify(r7, 0x402, 0x91ea6c1af182532) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r8, 0x402, 0x5) close_range(r3, 0xffffffffffffffff, 0x0) 72.224973ms ago: executing program 5 (id=2597): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff8500", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) rt_sigqueueinfo(0x0, 0x11, &(0x7f0000000300)={0x35, 0x676, 0xff}) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 71.685073ms ago: executing program 5 (id=2598): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4128, 0x1020}], 0x1}, 0x42) (fail_nth: 3) 55.186965ms ago: executing program 4 (id=2599): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x1}, 0x18) r3 = syz_io_uring_setup(0x315b, &(0x7f0000000200)={0x0, 0xcfca, 0x1040, 0x0, 0x1000001, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000280)=[@ioring_restriction_register_op={0x0, 0x13}, @ioring_restriction_sqe_op={0x1, 0xf}, @ioring_restriction_sqe_flags_required={0x3, 0x18}, @ioring_restriction_sqe_flags_allowed={0x2, 0x21}, @ioring_restriction_sqe_op={0x1, 0x7}, @ioring_restriction_sqe_flags_allowed={0x2, 0x1a}, @ioring_restriction_sqe_op={0x1, 0x2}], 0x19) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newtaction={0x8c, 0x30, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4, 0x20}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x8c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x1}, 0x18) (async) syz_io_uring_setup(0x315b, &(0x7f0000000200)={0x0, 0xcfca, 0x1040, 0x0, 0x1000001, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000040)) (async) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000280)=[@ioring_restriction_register_op={0x0, 0x13}, @ioring_restriction_sqe_op={0x1, 0xf}, @ioring_restriction_sqe_flags_required={0x3, 0x18}, @ioring_restriction_sqe_flags_allowed={0x2, 0x21}, @ioring_restriction_sqe_op={0x1, 0x7}, @ioring_restriction_sqe_flags_allowed={0x2, 0x1a}, @ioring_restriction_sqe_op={0x1, 0x2}], 0x19) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newtaction={0x8c, 0x30, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4, 0x20}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x8c}}, 0x0) (async) 0s ago: executing program 5 (id=2600): set_mempolicy(0x4005, &(0x7f0000000300)=0x4, 0x7) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) fchdir(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000040)=0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffb4}, 0x94) r3 = socket$inet6(0xa, 0x805, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43) getsockopt$bt_hci(r3, 0x84, 0x0, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000140)=[{0x3, 0x6, 0x1, 0xfffffff7}]}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRES16=r0], 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r4}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000240), &(0x7f0000000280)=r8}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="02030003230000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c01000000030005000000000002004e21ac1e0101000000000000100002001000000004d3000004d50000000014001800090d94"], 0x118}, 0x1, 0x7}, 0x10) r10 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000006a00)={0x34, r10, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x2e}}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048040}, 0x48804) kernel console output (not intermixed with test programs): 00-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.541037][T21719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.552105][T21772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.561814][ T126] bridge_slave_1: left allmulticast mode [ 208.567655][ T126] bridge_slave_1: left promiscuous mode [ 208.573351][ T126] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.585440][ T126] bridge_slave_0: left allmulticast mode [ 208.591136][ T126] bridge_slave_0: left promiscuous mode [ 208.597129][ T126] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.645009][T22274] loop9: detected capacity change from 512 to 64 [ 208.663919][T22203] bio_check_eod: 14 callbacks suppressed [ 208.663938][T22203] syz.9.1987: attempt to access beyond end of device [ 208.663938][T22203] loop9: rw=8402945, sector=74, nr_sectors = 2 limit=64 [ 208.683268][T22203] Buffer I/O error on dev loop9, logical block 37, lost sync page write [ 208.700063][T22203] EXT4-fs error (device loop9): ext4_splice_branch:472: inode #18: block 37: comm syz.9.1987: IO error syncing itable block [ 208.713458][T22203] EXT4-fs error (device loop9): ext4_check_bdev_write_error:227: comm syz.9.1987: Error while async write back metadata [ 208.727162][T22203] syz.9.1987: attempt to access beyond end of device [ 208.727162][T22203] loop9: rw=8390659, sector=470, nr_sectors = 2 limit=64 [ 208.741226][T22203] EXT4-fs (loop9): discard request in group:0 block:234 count:1 failed with -5 [ 208.750902][T22203] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6689: IO failure [ 208.759281][T22203] EXT4-fs error (device loop9): mb_free_blocks:2037: group 0, inode 18: block 235:freeing already freed block (bit 234); block bitmap corrupt. [ 208.759350][ T126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.782465][T22203] EXT4-fs (loop9): pa ffff888107dc2a10: logic 33, phys. 205, len 31 [ 208.790555][T22203] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5466: group 0, free 28, pa_free 27 [ 208.802893][ T126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.803578][T22203] syz.9.1987: attempt to access beyond end of device [ 208.803578][T22203] loop9: rw=8402945, sector=74, nr_sectors = 2 limit=64 [ 208.824984][T22203] Buffer I/O error on dev loop9, logical block 37, lost sync page write [ 208.833938][T22203] EXT4-fs error (device loop9): ext4_free_data:978: inode #18: block 37: comm syz.9.1987: IO error syncing itable block [ 208.840207][ T126] bond0 (unregistering): Released all slaves [ 208.846879][T22203] EXT4-fs error (device loop9): ext4_check_bdev_write_error:227: comm syz.9.1987: Error while async write back metadata [ 208.867762][T22203] syz.9.1987: attempt to access beyond end of device [ 208.867762][T22203] loop9: rw=2049, sector=82, nr_sectors = 8 limit=64 [ 208.881074][T22203] EXT4-fs warning (device loop9): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 41) [ 208.892305][T22203] buffer_io_error: 50 callbacks suppressed [ 208.892322][T22203] Buffer I/O error on device loop9, logical block 41 [ 208.904898][T22203] Buffer I/O error on device loop9, logical block 42 [ 208.911595][T22203] Buffer I/O error on device loop9, logical block 43 [ 208.918407][T22203] Buffer I/O error on device loop9, logical block 44 [ 208.925961][T22203] syz.9.1987: attempt to access beyond end of device [ 208.925961][T22203] loop9: rw=2049, sector=98, nr_sectors = 8 limit=64 [ 208.939306][T22203] EXT4-fs warning (device loop9): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 49) [ 208.950477][T22203] Buffer I/O error on device loop9, logical block 49 [ 208.957180][T22203] Buffer I/O error on device loop9, logical block 50 [ 208.963909][T22203] Buffer I/O error on device loop9, logical block 51 [ 208.970606][T22203] Buffer I/O error on device loop9, logical block 52 [ 208.979088][T21772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.982920][T22203] syz.9.1987: attempt to access beyond end of device [ 208.982920][T22203] loop9: rw=2049, sector=114, nr_sectors = 8 limit=64 [ 209.001565][T22203] EXT4-fs warning (device loop9): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 57) [ 209.012773][T22203] Buffer I/O error on device loop9, logical block 57 [ 209.019527][T22203] Buffer I/O error on device loop9, logical block 58 [ 209.026885][T22203] syz.9.1987: attempt to access beyond end of device [ 209.026885][T22203] loop9: rw=2049, sector=130, nr_sectors = 8 limit=64 [ 209.040308][T22203] EXT4-fs warning (device loop9): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 65) [ 209.052322][T22203] syz.9.1987: attempt to access beyond end of device [ 209.052322][T22203] loop9: rw=2049, sector=90, nr_sectors = 8 limit=64 [ 209.065654][T22203] EXT4-fs warning (device loop9): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 45) [ 209.077665][T22203] syz.9.1987: attempt to access beyond end of device [ 209.077665][T22203] loop9: rw=2049, sector=106, nr_sectors = 8 limit=64 [ 209.091114][T22203] EXT4-fs warning (device loop9): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 53) [ 209.114703][T22203] syz.9.1987: attempt to access beyond end of device [ 209.114703][T22203] loop9: rw=2049, sector=122, nr_sectors = 8 limit=64 [ 209.128131][T22203] EXT4-fs warning (device loop9): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 61) [ 209.140007][T22203] EXT4-fs warning (device loop9): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 125) [ 209.151362][T22203] EXT4-fs warning (device loop9): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 161) [ 209.163409][T22203] EXT4-fs warning (device loop9): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 201) [ 209.199807][T21719] team0: Port device team_slave_0 added [ 209.206565][T21772] team0: Port device team_slave_0 added [ 209.217971][T21719] team0: Port device team_slave_1 added [ 209.225040][T18451] Buffer I/O error on dev loop9, logical block 36, lost sync page write [ 209.233569][T18451] EXT4-fs error (device loop9): ext4_handle_dirty_dirblock:409: inode #2: block 36: comm syz-executor: IO error syncing itable block [ 209.253112][T18451] EXT4-fs error (device loop9) in ext4_delete_entry:2737: IO failure [ 209.285849][T21772] team0: Port device team_slave_1 added [ 209.307784][T21719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.314840][T21719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.328616][T21073] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.340898][T21719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.374318][T21772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.381325][T21772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.407475][T21772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.419358][T21719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.426479][T21719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.452539][T21719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.465654][ T126] hsr_slave_0: left promiscuous mode [ 209.471324][ T126] hsr_slave_1: left promiscuous mode [ 209.479857][ T126] veth1_macvtap: left promiscuous mode [ 209.485489][ T126] veth0_macvtap: left promiscuous mode [ 209.491053][ T126] veth1_vlan: left promiscuous mode [ 209.496371][ T126] veth0_vlan: left promiscuous mode [ 209.567572][ T126] team0 (unregistering): Port device team_slave_1 removed [ 209.577355][ T126] team0 (unregistering): Port device team_slave_0 removed [ 209.621198][T21772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.628312][T21772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.654349][T21772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.736368][T21772] hsr_slave_0: entered promiscuous mode [ 209.753242][T21772] hsr_slave_1: entered promiscuous mode [ 209.760128][T21772] debugfs: 'hsr0' already exists in 'hsr' [ 209.766489][T21772] Cannot create hsr debugfs directory [ 209.775084][T21719] hsr_slave_0: entered promiscuous mode [ 209.781568][T21719] hsr_slave_1: entered promiscuous mode [ 209.788971][T21719] debugfs: 'hsr0' already exists in 'hsr' [ 209.794790][T21719] Cannot create hsr debugfs directory [ 209.800375][T22286] lo speed is unknown, defaulting to 1000 [ 210.051507][ T126] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.133497][ T126] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.209056][ T126] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.280252][ T126] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.366636][T21719] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 210.378238][T21719] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 210.396717][T21719] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 210.484127][T21719] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 210.514931][T22623] lo speed is unknown, defaulting to 1000 [ 210.579975][ T126] bridge_slave_1: left allmulticast mode [ 210.585763][ T126] bridge_slave_1: left promiscuous mode [ 210.591457][ T126] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.619654][ T126] bridge_slave_0: left allmulticast mode [ 210.625450][ T126] bridge_slave_0: left promiscuous mode [ 210.631182][ T126] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.739094][ T126] bond0 (unregistering): left promiscuous mode [ 210.745380][ T126] bond_slave_0: left promiscuous mode [ 210.750881][ T126] bond_slave_1: left promiscuous mode [ 210.758123][ T126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.769065][ T126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.779642][ T126] bond0 (unregistering): Released all slaves [ 210.844454][T22754] xt_hashlimit: size too large, truncated to 1048576 [ 210.873683][ T126] tipc: Disabling bearer [ 210.879064][ T126] tipc: Left network mode [ 210.982526][T21719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.996151][T22789] netlink: 648 bytes leftover after parsing attributes in process `syz.5.2016'. [ 211.056634][T21719] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.140350][ T3977] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.147587][ T3977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.184726][ T3977] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.191867][ T3977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.246666][T22623] chnl_net:caif_netlink_parms(): no params data found [ 211.345532][ T126] team0: left promiscuous mode [ 211.350465][ T126] team_slave_0: left promiscuous mode [ 211.356016][ T126] team_slave_1: left promiscuous mode [ 211.398473][ T126] hsr_slave_0: left promiscuous mode [ 211.404600][ T126] hsr_slave_1: left promiscuous mode [ 211.410735][ T126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.418282][ T126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.442982][ T126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.450555][ T126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.466743][ T126] veth1_macvtap: left promiscuous mode [ 211.472829][ T126] veth0_macvtap: left promiscuous mode [ 211.478658][ T126] veth1_vlan: left promiscuous mode [ 211.484539][ T126] veth0_vlan: left promiscuous mode [ 211.585112][ T126] team0 (unregistering): Port device team_slave_1 removed [ 211.597562][ T126] team0 (unregistering): Port device team_slave_0 removed [ 211.692269][ T3543] lo speed is unknown, defaulting to 1000 [ 211.698130][ T3543] infiniband syz2: ib_query_port failed (-19) [ 211.726503][T22623] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.733654][T22623] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.761274][T22623] bridge_slave_0: entered allmulticast mode [ 211.768338][T22623] bridge_slave_0: entered promiscuous mode [ 211.786512][T22623] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.793638][T22623] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.808101][T22623] bridge_slave_1: entered allmulticast mode [ 211.818373][T22623] bridge_slave_1: entered promiscuous mode [ 211.863578][T21772] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 211.898783][T21772] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 211.911098][T22623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.920310][ T29] kauditd_printk_skb: 524 callbacks suppressed [ 211.920328][ T29] audit: type=1326 audit(1768018555.739:14060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22835 comm="syz.5.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f4b738ff749 code=0x7ffc0000 [ 211.925301][T21719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.934893][ T29] audit: type=1326 audit(1768018555.769:14061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22835 comm="syz.5.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4b73932005 code=0x7ffc0000 [ 211.982913][T21772] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 211.984979][ T29] audit: type=1326 audit(1768018555.779:14062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22835 comm="syz.5.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f4b738ff749 code=0x7ffc0000 [ 212.013327][ T29] audit: type=1326 audit(1768018555.789:14063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22835 comm="syz.5.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f4b738ff749 code=0x7ffc0000 [ 212.037059][ T29] audit: type=1326 audit(1768018555.789:14064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22835 comm="syz.5.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f4b738ff749 code=0x7ffc0000 [ 212.060746][ T29] audit: type=1326 audit(1768018555.819:14065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22835 comm="syz.5.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4b73932005 code=0x7ffc0000 [ 212.084428][ T29] audit: type=1326 audit(1768018555.819:14066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22835 comm="syz.5.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f4b738ff749 code=0x7ffc0000 [ 212.108120][ T29] audit: type=1326 audit(1768018555.819:14067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22835 comm="syz.5.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4b73932005 code=0x7ffc0000 [ 212.131745][ T29] audit: type=1326 audit(1768018555.819:14068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22835 comm="syz.5.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4b73932005 code=0x7ffc0000 [ 212.155557][ T29] audit: type=1326 audit(1768018555.819:14069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22835 comm="syz.5.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4b73932005 code=0x7ffc0000 [ 212.196266][T22623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.212346][T21772] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 212.232275][T22623] team0: Port device team_slave_0 added [ 212.243631][T22623] team0: Port device team_slave_1 added [ 212.290921][T22623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.297984][T22623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.324073][T22623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.336934][T22623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.344022][T22623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.370132][T22623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.415861][T22623] hsr_slave_0: entered promiscuous mode [ 212.422178][T22623] hsr_slave_1: entered promiscuous mode [ 212.497887][T21719] veth0_vlan: entered promiscuous mode [ 212.519968][T21772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.544970][T21719] veth1_vlan: entered promiscuous mode [ 212.570998][T21772] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.611574][ T126] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.618728][ T126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.666004][T21719] veth0_macvtap: entered promiscuous mode [ 212.673845][T23135] xt_hashlimit: size too large, truncated to 1048576 [ 212.689987][ T126] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.697187][ T126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.763421][T23169] netlink: 648 bytes leftover after parsing attributes in process `syz.4.2024'. [ 212.773665][T21719] veth1_macvtap: entered promiscuous mode [ 212.879301][T21719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.921761][T21719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.947740][ T126] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.968753][ T126] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.036052][ T363] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.087687][ T363] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.131145][T21772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.161349][T22623] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 213.191852][T22623] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 213.254424][T22623] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 213.277435][T23242] openvswitch: netlink: Missing key (keys=40, expected=80) [ 213.297621][T22623] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 213.347535][T23242] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 213.462910][T22623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.501975][T22623] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.526066][T16842] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.533254][T16842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.563757][T16842] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.570927][T16842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.593637][T21772] veth0_vlan: entered promiscuous mode [ 213.602662][T21772] veth1_vlan: entered promiscuous mode [ 213.664471][T21772] veth0_macvtap: entered promiscuous mode [ 213.681959][T21772] veth1_macvtap: entered promiscuous mode [ 213.698244][T21772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.709710][T21772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.761974][ T4001] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.803840][ T4001] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.829839][T23299] xt_hashlimit: size too large, truncated to 1048576 [ 213.845171][ T4001] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.854039][ T4001] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.889815][T22623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.980398][T23313] loop6: detected capacity change from 0 to 256 [ 213.991306][T23317] netlink: 648 bytes leftover after parsing attributes in process `syz.5.2034'. [ 214.146652][T23331] loop6: detected capacity change from 0 to 128 [ 214.202644][T22623] veth0_vlan: entered promiscuous mode [ 214.228691][T22623] veth1_vlan: entered promiscuous mode [ 214.311206][T22623] veth0_macvtap: entered promiscuous mode [ 214.325855][T22623] veth1_macvtap: entered promiscuous mode [ 214.344506][T23352] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13572 sclass=netlink_route_socket pid=23352 comm=syz.5.2039 [ 214.358883][T23352] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65296 sclass=netlink_route_socket pid=23352 comm=syz.5.2039 [ 214.401686][T22623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.435625][T22623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.462888][ T3969] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.496321][ T3969] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.528068][ T3969] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.551551][ T3969] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.623996][T23383] xt_hashlimit: size too large, truncated to 1048576 [ 214.659679][T23388] SELinux: failed to load policy [ 214.738892][T23399] netlink: 648 bytes leftover after parsing attributes in process `syz.4.2048'. [ 214.932674][T23427] netlink: 'syz.4.2052': attribute type 30 has an invalid length. [ 215.030295][T23434] netlink: 68 bytes leftover after parsing attributes in process `+}[@'. [ 215.281982][T23473] xt_hashlimit: size too large, truncated to 1048576 [ 215.321139][T23480] netlink: 648 bytes leftover after parsing attributes in process `syz.4.2062'. [ 215.426197][T23488] loop6: detected capacity change from 0 to 2048 [ 215.498772][T23488] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.528884][T23488] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.628098][T23505] netlink: 'syz.4.2065': attribute type 1 has an invalid length. [ 215.755027][T23514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.775805][T23514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.874046][T23530] 9p: Bad value for 'wfdno' [ 215.879584][T23530] random: crng reseeded on system resumption [ 215.891154][T23530] Restarting kernel threads ... [ 215.896495][T23530] Done restarting kernel threads. [ 215.913242][T23530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2069'. [ 215.951233][T23530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2069'. [ 216.073397][T23572] xt_hashlimit: size too large, truncated to 1048576 [ 216.264610][T23584] netlink: 648 bytes leftover after parsing attributes in process `syz.0.2075'. [ 216.298336][T23584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.305890][T23584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.319717][T23598] netlink: 'syz.4.2078': attribute type 1 has an invalid length. [ 216.320885][T23504] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2063: bg 0: block 345: padding at end of block bitmap is not set [ 216.345109][T23584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.352643][T23584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.431917][T23504] EXT4-fs (loop6): Remounting filesystem read-only [ 216.438644][ T4000] EXT4-fs warning (device loop6): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 216.632117][T21772] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.745850][T23648] netlink: 'syz.4.2089': attribute type 1 has an invalid length. [ 216.783076][T23648] 8021q: adding VLAN 0 to HW filter on device bond1 [ 216.872068][T23702] loop6: detected capacity change from 0 to 512 [ 216.893229][T23702] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.2096: inode has both inline data and extents flags [ 216.911691][T23702] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2096: couldn't read orphan inode 15 (err -117) [ 216.925269][T23702] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.044734][T23720] loop6: detected capacity change from 512 to 64 [ 217.051394][T23702] bio_check_eod: 9 callbacks suppressed [ 217.051412][T23702] syz.6.2096: attempt to access beyond end of device [ 217.051412][T23702] loop6: rw=8402945, sector=74, nr_sectors = 2 limit=64 [ 217.070699][T23702] Buffer I/O error on dev loop6, logical block 37, lost sync page write [ 217.081924][ T29] kauditd_printk_skb: 746 callbacks suppressed [ 217.081940][ T29] audit: type=1326 audit(1768018560.909:14816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23729 comm="syz.4.2102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8b5df749 code=0x7ffc0000 [ 217.114531][ T29] audit: type=1326 audit(1768018560.939:14817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23729 comm="syz.4.2102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8b5df749 code=0x7ffc0000 [ 217.138198][ T29] audit: type=1326 audit(1768018560.939:14818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23729 comm="syz.4.2102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8b5df749 code=0x7ffc0000 [ 217.138270][ T29] audit: type=1326 audit(1768018560.939:14819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23729 comm="syz.4.2102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7d8b5df749 code=0x7ffc0000 [ 217.138305][ T29] audit: type=1326 audit(1768018560.939:14820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23729 comm="syz.4.2102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8b5df749 code=0x7ffc0000 [ 217.138337][ T29] audit: type=1326 audit(1768018560.949:14821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23729 comm="syz.4.2102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8b5df749 code=0x7ffc0000 [ 217.138439][ T29] audit: type=1326 audit(1768018560.949:14822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23729 comm="syz.4.2102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8b5df749 code=0x7ffc0000 [ 217.140969][ T29] audit: type=1326 audit(1768018560.949:14823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23729 comm="syz.4.2102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d8b5df749 code=0x7ffc0000 [ 217.141133][ T29] audit: type=1326 audit(1768018560.949:14824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23729 comm="syz.4.2102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8b5df749 code=0x7ffc0000 [ 217.141169][ T29] audit: type=1326 audit(1768018560.949:14825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23729 comm="syz.4.2102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8b5df749 code=0x7ffc0000 [ 217.164929][T23702] EXT4-fs error (device loop6): ext4_splice_branch:472: inode #18: block 37: comm syz.6.2096: IO error syncing itable block [ 217.216140][T23739] FAULT_INJECTION: forcing a failure. [ 217.216140][T23739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.356987][T23739] CPU: 0 UID: 0 PID: 23739 Comm: syz.1.2103 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 217.357030][T23739] Tainted: [W]=WARN [ 217.357037][T23739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 217.357054][T23739] Call Trace: [ 217.357060][T23739] [ 217.357067][T23739] __dump_stack+0x1d/0x30 [ 217.357094][T23739] dump_stack_lvl+0x95/0xd0 [ 217.357117][T23739] dump_stack+0x15/0x1b [ 217.357252][T23739] should_fail_ex+0x265/0x280 [ 217.357276][T23739] should_fail+0xb/0x20 [ 217.357295][T23739] should_fail_usercopy+0x1a/0x20 [ 217.357320][T23739] _copy_to_user+0x20/0xa0 [ 217.357411][T23739] simple_read_from_buffer+0xb5/0x130 [ 217.357445][T23739] proc_fail_nth_read+0x10e/0x150 [ 217.357533][T23739] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 217.357562][T23739] vfs_read+0x1a8/0x770 [ 217.357579][T23739] ? __rcu_read_unlock+0x4f/0x70 [ 217.357673][T23739] ? __fget_files+0x184/0x1c0 [ 217.357695][T23739] ? mutex_lock+0x58/0x90 [ 217.357724][T23739] ksys_read+0xda/0x1a0 [ 217.357745][T23739] __x64_sys_read+0x40/0x50 [ 217.357818][T23739] x64_sys_call+0x2889/0x3000 [ 217.357844][T23739] do_syscall_64+0xca/0x2b0 [ 217.357880][T23739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.357906][T23739] RIP: 0033:0x7f955dace15c [ 217.357928][T23739] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 217.357967][T23739] RSP: 002b:00007f955c50e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 217.357988][T23739] RAX: ffffffffffffffda RBX: 00007f955dd26090 RCX: 00007f955dace15c [ 217.358001][T23739] RDX: 000000000000000f RSI: 00007f955c50e0a0 RDI: 0000000000000004 [ 217.358014][T23739] RBP: 00007f955c50e090 R08: 0000000000000000 R09: 0000000000000000 [ 217.358027][T23739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.358039][T23739] R13: 00007f955dd26128 R14: 00007f955dd26090 R15: 00007ffc0fff54b8 [ 217.358059][T23739] [ 217.584497][T23702] EXT4-fs error (device loop6): ext4_check_bdev_write_error:227: comm syz.6.2096: Error while async write back metadata [ 217.604761][T23702] syz.6.2096: attempt to access beyond end of device [ 217.604761][T23702] loop6: rw=8390659, sector=308, nr_sectors = 2 limit=64 [ 217.623192][T23702] EXT4-fs (loop6): discard request in group:0 block:153 count:1 failed with -5 [ 217.638075][T23702] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: IO failure [ 217.665253][T23702] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 18: block 154:freeing already freed block (bit 153); block bitmap corrupt. [ 217.679925][T23702] EXT4-fs (loop6): pa ffff888107e52d90: logic 32, phys. 129, len 32 [ 217.688249][T23702] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5466: group 0, free 31, pa_free 30 [ 217.699314][T23702] syz.6.2096: attempt to access beyond end of device [ 217.699314][T23702] loop6: rw=8402945, sector=74, nr_sectors = 2 limit=64 [ 217.712944][T23702] Buffer I/O error on dev loop6, logical block 37, lost sync page write [ 217.811540][T23702] EXT4-fs error (device loop6): ext4_free_data:978: inode #18: block 37: comm syz.6.2096: IO error syncing itable block [ 217.894659][T23702] EXT4-fs error (device loop6): ext4_check_bdev_write_error:227: comm syz.6.2096: Error while async write back metadata [ 217.922086][T23702] syz.6.2096: attempt to access beyond end of device [ 217.922086][T23702] loop6: rw=2049, sector=82, nr_sectors = 8 limit=64 [ 217.935612][T23702] EXT4-fs warning (device loop6): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 41) [ 217.946978][T23702] buffer_io_error: 50 callbacks suppressed [ 217.946997][T23702] Buffer I/O error on device loop6, logical block 41 [ 217.959575][T23702] Buffer I/O error on device loop6, logical block 42 [ 217.966424][T23702] Buffer I/O error on device loop6, logical block 43 [ 217.973444][T23702] Buffer I/O error on device loop6, logical block 44 [ 218.016525][T23702] syz.6.2096: attempt to access beyond end of device [ 218.016525][T23702] loop6: rw=2049, sector=98, nr_sectors = 8 limit=64 [ 218.029966][T23702] EXT4-fs warning (device loop6): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 49) [ 218.041256][T23702] Buffer I/O error on device loop6, logical block 49 [ 218.047971][T23702] Buffer I/O error on device loop6, logical block 50 [ 218.054730][T23702] Buffer I/O error on device loop6, logical block 51 [ 218.061438][T23702] Buffer I/O error on device loop6, logical block 52 [ 218.112101][T23702] syz.6.2096: attempt to access beyond end of device [ 218.112101][T23702] loop6: rw=2049, sector=114, nr_sectors = 8 limit=64 [ 218.125621][T23702] EXT4-fs warning (device loop6): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 57) [ 218.136802][T23702] Buffer I/O error on device loop6, logical block 57 [ 218.143516][T23702] Buffer I/O error on device loop6, logical block 58 [ 218.161913][T23702] syz.6.2096: attempt to access beyond end of device [ 218.161913][T23702] loop6: rw=2049, sector=130, nr_sectors = 8 limit=64 [ 218.175517][T23702] EXT4-fs warning (device loop6): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 65) [ 218.360497][T23702] syz.6.2096: attempt to access beyond end of device [ 218.360497][T23702] loop6: rw=2049, sector=90, nr_sectors = 8 limit=64 [ 218.373913][T23702] EXT4-fs warning (device loop6): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 45) [ 218.444361][T23702] syz.6.2096: attempt to access beyond end of device [ 218.444361][T23702] loop6: rw=2049, sector=106, nr_sectors = 8 limit=64 [ 218.457766][T23702] EXT4-fs warning (device loop6): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 53) [ 218.511082][T23702] syz.6.2096: attempt to access beyond end of device [ 218.511082][T23702] loop6: rw=2049, sector=122, nr_sectors = 8 limit=64 [ 218.524646][T23702] EXT4-fs warning (device loop6): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 61) [ 218.983205][T23702] EXT4-fs warning (device loop6): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 125) [ 219.068997][T23702] EXT4-fs warning (device loop6): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 161) [ 219.102688][T23702] EXT4-fs warning (device loop6): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 201) [ 219.165706][T21772] Buffer I/O error on dev loop6, logical block 36, lost sync page write [ 219.184609][T21772] EXT4-fs error (device loop6): ext4_handle_dirty_dirblock:409: inode #2: block 36: comm syz-executor: IO error syncing itable block [ 219.217838][T21772] EXT4-fs error (device loop6) in ext4_delete_entry:2737: IO failure [ 219.429066][ T2116] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.440447][T21772] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.497611][ T2116] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.559612][T23887] netlink: 660 bytes leftover after parsing attributes in process `syz.5.2132'. [ 219.571055][T23891] netlink: 'syz.1.2134': attribute type 2 has an invalid length. [ 219.587391][ T2116] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.623085][T23889] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2133'. [ 219.656302][T23889] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2133'. [ 219.692489][ T2116] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.839227][ T2116] bridge_slave_1: left allmulticast mode [ 219.845031][ T2116] bridge_slave_1: left promiscuous mode [ 219.850734][ T2116] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.894972][ T2116] bridge_slave_0: left allmulticast mode [ 219.900680][ T2116] bridge_slave_0: left promiscuous mode [ 219.906487][ T2116] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.954480][T23952] SELinux: failed to load policy [ 220.096693][ T2116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.107236][ T2116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.126128][ T2116] bond0 (unregistering): Released all slaves [ 220.349176][T23997] xt_hashlimit: size too large, truncated to 1048576 [ 220.358028][ T2116] hsr_slave_0: left promiscuous mode [ 220.443850][ T2116] hsr_slave_1: left promiscuous mode [ 220.446272][T23999] netlink: 648 bytes leftover after parsing attributes in process `syz.1.2150'. [ 220.455338][ T2116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.465714][ T2116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.490893][ T2116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.498640][ T2116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.568952][ T2116] veth1_macvtap: left promiscuous mode [ 220.585311][ T2116] veth0_macvtap: left promiscuous mode [ 220.591107][ T2116] veth1_vlan: left promiscuous mode [ 220.596589][ T2116] veth0_vlan: left promiscuous mode [ 220.703495][ T2116] team0 (unregistering): Port device team_slave_1 removed [ 220.722730][ T2116] team0 (unregistering): Port device team_slave_0 removed [ 220.762487][T24003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.770091][T24003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.781731][T24003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.789284][T24003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.269486][T23900] chnl_net:caif_netlink_parms(): no params data found [ 221.449900][T23900] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.457052][T23900] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.486078][T23900] bridge_slave_0: entered allmulticast mode [ 221.492811][T23900] bridge_slave_0: entered promiscuous mode [ 221.501869][T23900] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.509095][T23900] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.517064][T23900] bridge_slave_1: entered allmulticast mode [ 221.523852][T23900] bridge_slave_1: entered promiscuous mode [ 221.577940][T23900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.616886][T23900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.657469][T23900] team0: Port device team_slave_0 added [ 221.671385][T23900] team0: Port device team_slave_1 added [ 221.723927][T23900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.731055][T23900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.757183][T23900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.778249][T23900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.785449][T23900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.811487][T23900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.858933][T23900] hsr_slave_0: entered promiscuous mode [ 221.873244][T23900] hsr_slave_1: entered promiscuous mode [ 221.888531][T23900] debugfs: 'hsr0' already exists in 'hsr' [ 221.894374][T23900] Cannot create hsr debugfs directory [ 222.208524][T24427] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2189'. [ 222.293418][ T29] kauditd_printk_skb: 790 callbacks suppressed [ 222.293434][ T29] audit: type=1326 audit(1768018566.119:15616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24433 comm="syz.4.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8b5df749 code=0x7ffc0000 [ 222.338482][T23900] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 222.355122][ T29] audit: type=1326 audit(1768018566.159:15617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24433 comm="syz.4.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8b5df749 code=0x7ffc0000 [ 222.365358][T23900] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 222.378862][ T29] audit: type=1326 audit(1768018566.159:15618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24433 comm="syz.4.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8b5df749 code=0x7ffc0000 [ 222.409164][ T29] audit: type=1326 audit(1768018566.159:15619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24433 comm="syz.4.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7d8b5df749 code=0x7ffc0000 [ 222.432788][ T29] audit: type=1326 audit(1768018566.159:15620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24433 comm="syz.4.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8b5df749 code=0x7ffc0000 [ 222.456411][ T29] audit: type=1326 audit(1768018566.159:15621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24433 comm="syz.4.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8b5df749 code=0x7ffc0000 [ 222.480161][ T29] audit: type=1326 audit(1768018566.159:15622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24433 comm="syz.4.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8b5df749 code=0x7ffc0000 [ 222.503944][ T29] audit: type=1326 audit(1768018566.159:15623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24433 comm="syz.4.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d8b5df749 code=0x7ffc0000 [ 222.527697][ T29] audit: type=1326 audit(1768018566.159:15624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24433 comm="syz.4.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8b5df749 code=0x7ffc0000 [ 222.551450][ T29] audit: type=1326 audit(1768018566.159:15625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24433 comm="syz.4.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8b5df749 code=0x7ffc0000 [ 222.580915][T23900] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 222.606994][T23900] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 222.722050][T23900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.760229][T23900] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.782379][ T4001] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.789554][ T4001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.808003][ T4001] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.815140][ T4001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.859176][T23900] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 222.869756][T23900] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 222.938477][T23900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.982882][T24486] xt_hashlimit: size too large, truncated to 1048576 [ 223.021469][T24493] netlink: 648 bytes leftover after parsing attributes in process `syz.4.2202'. [ 223.184713][T23900] veth0_vlan: entered promiscuous mode [ 223.204092][T23900] veth1_vlan: entered promiscuous mode [ 223.222581][T23900] veth0_macvtap: entered promiscuous mode [ 223.237795][T23900] veth1_macvtap: entered promiscuous mode [ 223.259594][T23900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.281114][T23900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.292952][ T3971] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.309312][ T3971] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.336860][ T3971] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.346174][ T3971] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.409586][T24515] loop3: detected capacity change from 0 to 512 [ 223.433079][T24515] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.2210: inode has both inline data and extents flags [ 223.447355][T24515] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2210: couldn't read orphan inode 15 (err -117) [ 223.460675][T24515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.594514][T24525] loop3: detected capacity change from 512 to 64 [ 223.610150][T24515] bio_check_eod: 8 callbacks suppressed [ 223.610171][T24515] syz.3.2210: attempt to access beyond end of device [ 223.610171][T24515] loop3: rw=8402945, sector=74, nr_sectors = 2 limit=64 [ 223.629492][T24515] Buffer I/O error on dev loop3, logical block 37, lost sync page write [ 223.643574][T24515] EXT4-fs error (device loop3): ext4_splice_branch:472: inode #18: block 37: comm syz.3.2210: IO error syncing itable block [ 223.666937][T24515] EXT4-fs error (device loop3): ext4_check_bdev_write_error:227: comm syz.3.2210: Error while async write back metadata [ 223.685119][ T3977] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.705379][T24515] syz.3.2210: attempt to access beyond end of device [ 223.705379][T24515] loop3: rw=8390659, sector=374, nr_sectors = 2 limit=64 [ 223.736628][ T3977] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.742508][T24515] EXT4-fs (loop3): discard request in group:0 block:186 count:1 failed with -5 [ 223.775571][T24515] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: IO failure [ 223.804563][T24515] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 18: block 187:freeing already freed block (bit 186); block bitmap corrupt. [ 223.819357][T24515] EXT4-fs (loop3): pa ffff888107dc2a80: logic 36, phys. 165, len 28 [ 223.827438][T24515] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 26, pa_free 25 [ 223.840649][ T3977] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.860431][T24515] syz.3.2210: attempt to access beyond end of device [ 223.860431][T24515] loop3: rw=8402945, sector=74, nr_sectors = 2 limit=64 [ 223.874104][T24515] Buffer I/O error on dev loop3, logical block 37, lost sync page write [ 223.882673][T24515] EXT4-fs error (device loop3): ext4_free_data:978: inode #18: block 37: comm syz.3.2210: IO error syncing itable block [ 223.895684][T24515] EXT4-fs error (device loop3): ext4_check_bdev_write_error:227: comm syz.3.2210: Error while async write back metadata [ 223.916235][ T3977] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.926589][T24515] syz.3.2210: attempt to access beyond end of device [ 223.926589][T24515] loop3: rw=2049, sector=82, nr_sectors = 8 limit=64 [ 223.939939][T24515] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 41) [ 223.951257][T24515] buffer_io_error: 46 callbacks suppressed [ 223.951277][T24515] Buffer I/O error on device loop3, logical block 41 [ 223.963788][T24515] Buffer I/O error on device loop3, logical block 42 [ 223.970480][T24515] Buffer I/O error on device loop3, logical block 43 [ 223.977205][T24515] Buffer I/O error on device loop3, logical block 44 [ 223.986281][T24515] syz.3.2210: attempt to access beyond end of device [ 223.986281][T24515] loop3: rw=2049, sector=98, nr_sectors = 8 limit=64 [ 223.989237][T24547] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2213'. [ 223.999634][T24515] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 49) [ 224.009211][T24547] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2213'. [ 224.019769][T24515] Buffer I/O error on device loop3, logical block 49 [ 224.019788][T24515] Buffer I/O error on device loop3, logical block 50 [ 224.019803][T24515] Buffer I/O error on device loop3, logical block 51 [ 224.019814][T24515] Buffer I/O error on device loop3, logical block 52 [ 224.046147][T24547] bond0: entered promiscuous mode [ 224.051529][T24515] syz.3.2210: attempt to access beyond end of device [ 224.051529][T24515] loop3: rw=2049, sector=114, nr_sectors = 8 limit=64 [ 224.055572][T24547] bond_slave_0: entered promiscuous mode [ 224.060598][T24515] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 57) [ 224.074192][T24547] bond_slave_1: entered promiscuous mode [ 224.079743][T24515] Buffer I/O error on device loop3, logical block 57 [ 224.103138][T24515] Buffer I/O error on device loop3, logical block 58 [ 224.125181][T24547] bond0: left promiscuous mode [ 224.130262][T24547] bond_slave_0: left promiscuous mode [ 224.135994][T24547] bond_slave_1: left promiscuous mode [ 224.145370][T24515] syz.3.2210: attempt to access beyond end of device [ 224.145370][T24515] loop3: rw=2049, sector=130, nr_sectors = 2 limit=64 [ 224.158828][T24515] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 65) [ 224.170180][T24515] syz.3.2210: attempt to access beyond end of device [ 224.170180][T24515] loop3: rw=2049, sector=90, nr_sectors = 6 limit=64 [ 224.183470][T24515] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 45) [ 224.197064][T24515] syz.3.2210: attempt to access beyond end of device [ 224.197064][T24515] loop3: rw=2049, sector=106, nr_sectors = 8 limit=64 [ 224.210663][T24515] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 53) [ 224.222347][T24515] syz.3.2210: attempt to access beyond end of device [ 224.222347][T24515] loop3: rw=2049, sector=122, nr_sectors = 8 limit=64 [ 224.235899][T24515] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 61) [ 224.314502][T24515] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 121) [ 224.336161][T24515] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 221) [ 224.345074][T24579] xt_hashlimit: size too large, truncated to 1048576 [ 224.364366][T24515] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 161) [ 224.377292][T24592] netlink: 648 bytes leftover after parsing attributes in process `syz.1.2216'. [ 224.402874][ T3977] dummy0: left allmulticast mode [ 224.436439][ T3977] bridge0: port 3(dummy0) entered disabled state [ 224.443543][ T3977] bridge_slave_1: left allmulticast mode [ 224.449378][ T3977] bridge_slave_1: left promiscuous mode [ 224.455220][ T3977] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.500132][T23900] Buffer I/O error on dev loop3, logical block 36, lost sync page write [ 224.509432][T23900] EXT4-fs error (device loop3): ext4_handle_dirty_dirblock:409: inode #2: block 36: comm syz-executor: IO error syncing itable block [ 224.523558][ T3977] bridge_slave_0: left promiscuous mode [ 224.528187][T23900] EXT4-fs error (device loop3) in ext4_delete_entry:2737: IO failure [ 224.529638][ T3977] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.696682][ T3977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.707544][ T3977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.717055][ T3977] bond0 (unregistering): Released all slaves [ 224.726721][ T3977] bond1 (unregistering): Released all slaves [ 224.750818][ T10] syû: Port: 1 Link DOWN [ 224.789356][ T3977] tipc: Disabling bearer [ 224.794663][ T3977] tipc: Disabling bearer [ 224.799997][ T3977] tipc: Left network mode [ 224.833640][T24526] chnl_net:caif_netlink_parms(): no params data found [ 224.957708][ T3977] hsr_slave_0: left promiscuous mode [ 224.963697][ T3977] hsr_slave_1: left promiscuous mode [ 224.972053][ T3977] veth1_macvtap: left promiscuous mode [ 224.978269][ T3977] veth0_macvtap: left promiscuous mode [ 224.983893][ T3977] veth1_vlan: left promiscuous mode [ 224.990367][ T3977] veth0_vlan: left promiscuous mode [ 225.085823][ T363] smc: removing ib device !yz! [ 225.097455][ T4001] smc: removing ib device syû [ 225.136470][T24526] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.143660][T24526] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.152147][T24526] bridge_slave_0: entered allmulticast mode [ 225.159453][T24526] bridge_slave_0: entered promiscuous mode [ 225.181657][T24526] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.189007][T24526] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.211063][T24526] bridge_slave_1: entered allmulticast mode [ 225.229223][T24526] bridge_slave_1: entered promiscuous mode [ 225.285186][T24526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.298775][T24526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.410764][T24526] team0: Port device team_slave_0 added [ 225.420495][T24526] team0: Port device team_slave_1 added [ 225.535072][T24526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.542132][T24526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.568307][T24526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.602232][T24526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.609307][T24526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.635382][T24526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.780905][T24526] hsr_slave_0: entered promiscuous mode [ 225.797184][T24526] hsr_slave_1: entered promiscuous mode [ 225.812413][T24526] debugfs: 'hsr0' already exists in 'hsr' [ 225.818253][T24526] Cannot create hsr debugfs directory [ 226.033248][T24983] FAULT_INJECTION: forcing a failure. [ 226.033248][T24983] name failslab, interval 1, probability 0, space 0, times 0 [ 226.046028][T24983] CPU: 1 UID: 0 PID: 24983 Comm: syz.0.2240 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 226.046070][T24983] Tainted: [W]=WARN [ 226.046079][T24983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 226.046151][T24983] Call Trace: [ 226.046160][T24983] [ 226.046178][T24983] __dump_stack+0x1d/0x30 [ 226.046211][T24983] dump_stack_lvl+0x95/0xd0 [ 226.046318][T24983] dump_stack+0x15/0x1b [ 226.046346][T24983] should_fail_ex+0x265/0x280 [ 226.046379][T24983] should_failslab+0x8c/0xb0 [ 226.046409][T24983] __kmalloc_cache_noprof+0x65/0x4c0 [ 226.046449][T24983] ? ucma_alloc_ctx+0x30/0x1d0 [ 226.046531][T24983] ? should_fail_ex+0xdb/0x280 [ 226.046553][T24983] ucma_alloc_ctx+0x30/0x1d0 [ 226.046642][T24983] ucma_create_id+0x13f/0x250 [ 226.046679][T24983] ucma_write+0x1b3/0x250 [ 226.046714][T24983] ? __pfx_ucma_write+0x10/0x10 [ 226.046748][T24983] vfs_write+0x269/0x960 [ 226.046847][T24983] ? __rcu_read_unlock+0x4f/0x70 [ 226.046871][T24983] ? __fget_files+0x184/0x1c0 [ 226.046952][T24983] ksys_write+0xda/0x1a0 [ 226.047109][T24983] __x64_sys_write+0x40/0x50 [ 226.047135][T24983] x64_sys_call+0x2847/0x3000 [ 226.047176][T24983] do_syscall_64+0xca/0x2b0 [ 226.047221][T24983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.047318][T24983] RIP: 0033:0x7fad7dc5f749 [ 226.047339][T24983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.047361][T24983] RSP: 002b:00007fad7c6c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 226.047383][T24983] RAX: ffffffffffffffda RBX: 00007fad7deb5fa0 RCX: 00007fad7dc5f749 [ 226.047400][T24983] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 0000000000000006 [ 226.047456][T24983] RBP: 00007fad7c6c7090 R08: 0000000000000000 R09: 0000000000000000 [ 226.047472][T24983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.047486][T24983] R13: 00007fad7deb6038 R14: 00007fad7deb5fa0 R15: 00007ffeb222afe8 [ 226.047505][T24983] [ 226.457001][T25021] xt_CT: No such helper "pptp" [ 226.473759][T24526] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 226.483866][T24526] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 226.513351][T24526] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 226.522801][T24526] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 226.566585][T23900] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.583994][ T1716] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.652641][T25055] bridge0: entered promiscuous mode [ 226.711098][T24526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.747068][T24526] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.775757][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.782903][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.801258][T25081] netlink: 12 bytes leftover after parsing attributes in process `ÿ'. [ 226.830305][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.837473][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.848962][T25020] bridge0: left promiscuous mode [ 226.950349][T24526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.085939][T25126] ªªªªªª: renamed from vlan0 (while UP) [ 227.115499][T25080] chnl_net:caif_netlink_parms(): no params data found [ 227.228025][T25241] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 227.235175][T25260] IPv6: addrconf: prefix option has invalid lifetime [ 227.242504][T25080] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.249764][T25080] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.258207][T25080] bridge_slave_0: entered allmulticast mode [ 227.266206][T25080] bridge_slave_0: entered promiscuous mode [ 227.274529][T25080] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.281632][T25080] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.294864][T25080] bridge_slave_1: entered allmulticast mode [ 227.303811][T25080] bridge_slave_1: entered promiscuous mode [ 227.342417][ T29] kauditd_printk_skb: 606 callbacks suppressed [ 227.342437][ T29] audit: type=1326 audit(1768018571.169:16232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25273 comm="syz.5.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b738ff749 code=0x7ffc0000 [ 227.376085][ T29] audit: type=1326 audit(1768018571.209:16233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25273 comm="syz.5.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b738ff749 code=0x7ffc0000 [ 227.399902][ T29] audit: type=1326 audit(1768018571.209:16234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25273 comm="syz.5.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f4b738ff749 code=0x7ffc0000 [ 227.423523][ T29] audit: type=1326 audit(1768018571.209:16235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25273 comm="syz.5.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b738ff749 code=0x7ffc0000 [ 227.447330][ T29] audit: type=1326 audit(1768018571.209:16236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25273 comm="syz.5.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b738ff749 code=0x7ffc0000 [ 227.471096][ T29] audit: type=1326 audit(1768018571.209:16237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25273 comm="syz.5.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f4b738ff749 code=0x7ffc0000 [ 227.494733][ T29] audit: type=1326 audit(1768018571.209:16238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25273 comm="syz.5.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b738ff749 code=0x7ffc0000 [ 227.518436][ T29] audit: type=1326 audit(1768018571.209:16239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25273 comm="syz.5.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b738ff749 code=0x7ffc0000 [ 227.565392][T25272] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2267'. [ 227.574522][ T29] audit: type=1326 audit(1768018571.379:16240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25273 comm="syz.5.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b738ff749 code=0x7ffc0000 [ 227.598466][ T29] audit: type=1326 audit(1768018571.379:16241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25273 comm="syz.5.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b738ff749 code=0x7ffc0000 [ 227.632188][ T1716] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.667147][T25080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.698974][T25080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.783751][T25319] netlink: 'syz.5.2272': attribute type 4 has an invalid length. [ 227.794945][ T1716] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.838649][T25080] team0: Port device team_slave_0 added [ 227.865935][T24526] veth0_vlan: entered promiscuous mode [ 227.883118][T24526] veth1_vlan: entered promiscuous mode [ 227.894007][T25080] team0: Port device team_slave_1 added [ 227.905207][ T1716] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.982491][T25080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.989600][T25080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.015995][T25080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.058715][T25080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.065841][T25080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.092024][T25080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.124975][T24526] veth0_macvtap: entered promiscuous mode [ 228.194618][T24526] veth1_macvtap: entered promiscuous mode [ 228.207145][T25080] hsr_slave_0: entered promiscuous mode [ 228.223645][T25080] hsr_slave_1: entered promiscuous mode [ 228.230063][T25080] debugfs: 'hsr0' already exists in 'hsr' [ 228.235966][T25080] Cannot create hsr debugfs directory [ 228.263270][ T1716] bridge_slave_1: left allmulticast mode [ 228.269204][ T1716] bridge_slave_1: left promiscuous mode [ 228.274903][ T1716] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.319652][T25431] xt_CT: No such helper "pptp" [ 228.327204][ T1716] bridge_slave_0: left allmulticast mode [ 228.332936][ T1716] bridge_slave_0: left promiscuous mode [ 228.338751][ T1716] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.639550][ T1716] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.650400][ T1716] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.662592][ T1716] bond0 (unregistering): Released all slaves [ 228.665672][T25445] netlink: 68 bytes leftover after parsing attributes in process `+}[@'. [ 228.680172][T24526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.704168][T25439] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2279'. [ 228.737540][ T1716] hsr_slave_0: left promiscuous mode [ 228.750587][ T1716] hsr_slave_1: left promiscuous mode [ 228.762395][T25462] ref_ctr going negative. vaddr: 0x200000ffd000, curr val: -19135, delta: 1 [ 228.763573][ T1716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.771167][T25462] ref_ctr increment failed for inode: 0xfc offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810a1957c0 [ 228.790212][ T1716] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.799360][ T1716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.807390][ T1716] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.820100][ T1716] veth1_macvtap: left promiscuous mode [ 228.826125][ T1716] veth0_macvtap: left promiscuous mode [ 228.831735][ T1716] veth1_vlan: left promiscuous mode [ 228.837952][ T1716] veth0_vlan: left promiscuous mode [ 228.919936][ T1716] team0 (unregistering): Port device team_slave_1 removed [ 228.930114][ T1716] team0 (unregistering): Port device team_slave_0 removed [ 228.986472][T24526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.010644][ T363] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.027603][ T363] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.057362][ T363] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.077170][ T4001] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.189510][T25564] loop4: detected capacity change from 0 to 256 [ 229.206856][T25564] FAT-fs (loop4): bogus number of FAT sectors [ 229.213003][T25564] FAT-fs (loop4): Can't find a valid FAT filesystem [ 229.254643][T25435] chnl_net:caif_netlink_parms(): no params data found [ 229.348502][T25435] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.355711][T25435] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.363023][T25435] bridge_slave_0: entered allmulticast mode [ 229.369691][T25435] bridge_slave_0: entered promiscuous mode [ 229.378899][T25435] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.386109][T25435] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.393926][T25435] bridge_slave_1: entered allmulticast mode [ 229.400831][T25435] bridge_slave_1: entered promiscuous mode [ 229.423497][ T1716] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.443860][T25435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.455424][T25435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.457775][T25733] loop4: detected capacity change from 0 to 128 [ 229.475822][T25681] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2289'. [ 229.512444][ T1716] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.527260][T25435] team0: Port device team_slave_0 added [ 229.538793][T25435] team0: Port device team_slave_1 added [ 229.590563][ T1716] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.610898][T25435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.617957][T25435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.644003][T25435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.662380][T25435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.669553][T25435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.695877][T25435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.713964][T25080] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 229.714499][T25813] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2297'. [ 229.729882][T25813] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2297'. [ 229.738987][T25813] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2297'. [ 229.756734][ T1716] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.772239][T25080] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 229.789852][T25080] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 229.810592][T25435] hsr_slave_0: entered promiscuous mode [ 229.842964][T25435] hsr_slave_1: entered promiscuous mode [ 229.850978][T25435] debugfs: 'hsr0' already exists in 'hsr' [ 229.856812][T25435] Cannot create hsr debugfs directory [ 229.862640][T25080] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 229.912350][T25859] loop4: detected capacity change from 0 to 128 [ 229.955093][ T1716] bridge_slave_1: left allmulticast mode [ 229.960808][ T1716] bridge_slave_1: left promiscuous mode [ 229.966714][ T1716] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.977885][ T1716] bridge_slave_0: left allmulticast mode [ 229.983645][ T1716] bridge_slave_0: left promiscuous mode [ 229.989496][ T1716] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.028631][T25891] FAULT_INJECTION: forcing a failure. [ 230.028631][T25891] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 230.042164][T25891] CPU: 0 UID: 0 PID: 25891 Comm: syz.4.2301 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 230.042205][T25891] Tainted: [W]=WARN [ 230.042215][T25891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 230.042231][T25891] Call Trace: [ 230.042239][T25891] [ 230.042249][T25891] __dump_stack+0x1d/0x30 [ 230.042280][T25891] dump_stack_lvl+0x95/0xd0 [ 230.042306][T25891] dump_stack+0x15/0x1b [ 230.042332][T25891] should_fail_ex+0x265/0x280 [ 230.042382][T25891] should_fail_alloc_page+0xf2/0x100 [ 230.042408][T25891] __alloc_frozen_pages_noprof+0x109/0x360 [ 230.042456][T25891] alloc_pages_mpol+0xb3/0x260 [ 230.042489][T25891] alloc_pages_noprof+0x90/0x130 [ 230.042591][T25891] get_zeroed_page_noprof+0x1a/0x40 [ 230.042639][T25891] simple_transaction_get+0x4c/0x130 [ 230.042666][T25891] selinux_transaction_write+0x9d/0x110 [ 230.042694][T25891] ? __pfx_selinux_transaction_write+0x10/0x10 [ 230.042722][T25891] vfs_write+0x269/0x960 [ 230.042775][T25891] ? __rcu_read_unlock+0x4f/0x70 [ 230.042801][T25891] ? __fget_files+0x184/0x1c0 [ 230.042904][T25891] ? mutex_lock+0x58/0x90 [ 230.042941][T25891] ksys_write+0xda/0x1a0 [ 230.042968][T25891] __x64_sys_write+0x40/0x50 [ 230.042994][T25891] x64_sys_call+0x2847/0x3000 [ 230.043121][T25891] do_syscall_64+0xca/0x2b0 [ 230.043164][T25891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.043188][T25891] RIP: 0033:0x7f90db15f749 [ 230.043209][T25891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.043232][T25891] RSP: 002b:00007f90d9bc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 230.043280][T25891] RAX: ffffffffffffffda RBX: 00007f90db3b5fa0 RCX: 00007f90db15f749 [ 230.043293][T25891] RDX: 0000000000000058 RSI: 0000200000000800 RDI: 0000000000000006 [ 230.043305][T25891] RBP: 00007f90d9bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 230.043317][T25891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.043393][T25891] R13: 00007f90db3b6038 R14: 00007f90db3b5fa0 R15: 00007ffce0f36878 [ 230.043412][T25891] [ 230.316765][ T1716] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.327173][ T1716] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.339140][ T1716] bond0 (unregistering): Released all slaves [ 230.379147][T25897] SELinux: failed to load policy [ 230.444550][ T1716] hsr_slave_0: left promiscuous mode [ 230.452699][ T1716] hsr_slave_1: left promiscuous mode [ 230.461976][ T1716] veth1_macvtap: left promiscuous mode [ 230.467530][ T1716] veth0_macvtap: left promiscuous mode [ 230.473112][ T1716] veth1_vlan: left promiscuous mode [ 230.478712][ T1716] veth0_vlan: left promiscuous mode [ 230.613898][ T1716] team0 (unregistering): Port device team_slave_1 removed [ 230.636375][ T1716] team0 (unregistering): Port device team_slave_0 removed [ 230.752375][T25080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.761331][T25970] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2311'. [ 230.784803][T25080] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.804223][ T126] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.811431][ T126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.827108][ T126] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.834277][ T126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.945358][T26003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2314'. [ 230.974565][T25080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.053347][T25435] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 231.069141][T25435] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 231.084490][T25435] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 231.096146][T25435] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 231.162557][T25435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.180672][T25435] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.192341][ T1716] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.199561][ T1716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.238007][ T1716] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.245179][ T1716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.275410][T25435] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 231.285865][T25435] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 231.345920][T25080] veth0_vlan: entered promiscuous mode [ 231.355278][T25080] veth1_vlan: entered promiscuous mode [ 231.383802][T25080] veth0_macvtap: entered promiscuous mode [ 231.420409][T25080] veth1_macvtap: entered promiscuous mode [ 231.433322][T25435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.462113][T25080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.493832][T25080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.522095][ T126] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.553388][ T126] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.584426][ T126] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.597813][ T126] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.647655][T25435] veth0_vlan: entered promiscuous mode [ 231.666899][T26074] FAULT_INJECTION: forcing a failure. [ 231.666899][T26074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.669141][T25435] veth1_vlan: entered promiscuous mode [ 231.679987][T26074] CPU: 1 UID: 0 PID: 26074 Comm: syz.0.2320 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 231.680237][T26074] Tainted: [W]=WARN [ 231.680267][T26074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 231.680304][T26074] Call Trace: [ 231.680311][T26074] [ 231.680349][T26074] __dump_stack+0x1d/0x30 [ 231.680436][T26074] dump_stack_lvl+0x95/0xd0 [ 231.680511][T26074] dump_stack+0x15/0x1b [ 231.680597][T26074] should_fail_ex+0x265/0x280 [ 231.680725][T26074] should_fail+0xb/0x20 [ 231.680803][T26074] should_fail_usercopy+0x1a/0x20 [ 231.681004][T26074] strncpy_from_user+0x27/0x260 [ 231.681148][T26074] ? xa_load+0xb1/0xe0 [ 231.681255][T26074] strncpy_from_user_nofault+0x68/0xf0 [ 231.681352][T26074] bpf_probe_read_user_str+0x2a/0x70 [ 231.681460][T26074] bpf_prog_c762caf419d1c004+0x3e/0x44 [ 231.681526][T26074] bpf_trace_run4+0x117/0x1e0 [ 231.681664][T26074] __traceiter_sched_switch+0x3f/0x60 [ 231.681737][T26074] __schedule+0xb0f/0xcd0 [ 231.681859][T26074] ? avc_has_perm+0xf7/0x180 [ 231.681975][T26074] __cond_resched+0x31/0x60 [ 231.682043][T26074] netlink_autobind+0x7f/0x150 [ 231.682154][T26074] netlink_sendmsg+0x35b/0x6b0 [ 231.682327][T26074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.682509][T26074] __sock_sendmsg+0x145/0x180 [ 231.682581][T26074] ____sys_sendmsg+0x31e/0x4a0 [ 231.682706][T26074] ___sys_sendmsg+0x17b/0x1d0 [ 231.682928][T26074] __x64_sys_sendmsg+0xd4/0x160 [ 231.683064][T26074] x64_sys_call+0x17ba/0x3000 [ 231.683149][T26074] do_syscall_64+0xca/0x2b0 [ 231.683258][T26074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.683405][T26074] RIP: 0033:0x7fad7dc5f749 [ 231.683458][T26074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.683516][T26074] RSP: 002b:00007fad7c6c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.683624][T26074] RAX: ffffffffffffffda RBX: 00007fad7deb5fa0 RCX: 00007fad7dc5f749 [ 231.683729][T26074] RDX: 0000000000008844 RSI: 0000200000000080 RDI: 0000000000000009 [ 231.683774][T26074] RBP: 00007fad7c6c7090 R08: 0000000000000000 R09: 0000000000000000 [ 231.683826][T26074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.683869][T26074] R13: 00007fad7deb6038 R14: 00007fad7deb5fa0 R15: 00007ffeb222afe8 [ 231.683926][T26074] [ 231.776605][T26088] loop7: detected capacity change from 0 to 512 [ 231.868778][T25435] veth0_macvtap: entered promiscuous mode [ 231.910437][T26088] EXT4-fs: Ignoring removed oldalloc option [ 231.942398][T25435] veth1_macvtap: entered promiscuous mode [ 231.973307][T26088] EXT4-fs: Ignoring removed i_version option [ 231.979439][T26088] EXT4-fs: Ignoring removed nomblk_io_submit option [ 231.991801][T26088] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 232.032547][T26088] EXT4-fs (loop7): 1 truncate cleaned up [ 232.039315][T26088] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.053261][T26074] infiniband syz!: set active [ 232.058054][T26074] infiniband syz!: added team_slave_0 [ 232.064891][T25435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.075617][T25435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.088701][ T363] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.099682][ T363] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.114095][ T363] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.146884][ T363] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.181836][T26074] RDS/IB: syz!: added [ 232.186600][T26074] smc: adding ib device syz! with port count 1 [ 232.193185][T26074] smc: ib device syz! port 1 has no pnetid [ 232.281481][T26114] blktrace: Concurrent blktraces are not allowed on loop9 [ 232.288834][T26114] tap0: tun_chr_ioctl cmd 1074025676 [ 232.294215][T26114] tap0: owner set to 0 [ 232.347409][ T29] kauditd_printk_skb: 437 callbacks suppressed [ 232.347423][ T29] audit: type=1326 audit(1768018576.179:16679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26098 comm="syz.5.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4b738f65e7 code=0x7ffc0000 [ 232.400121][ T29] audit: type=1326 audit(1768018576.209:16680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26098 comm="syz.5.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4b7389b829 code=0x7ffc0000 [ 232.423947][ T29] audit: type=1326 audit(1768018576.209:16681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26098 comm="syz.5.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4b738f65e7 code=0x7ffc0000 [ 232.447727][ T29] audit: type=1326 audit(1768018576.209:16682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26098 comm="syz.5.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4b7389b829 code=0x7ffc0000 [ 232.465146][T26129] netlink: 'syz.4.2336': attribute type 1 has an invalid length. [ 232.471514][ T29] audit: type=1326 audit(1768018576.209:16683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26098 comm="syz.5.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f4b738ff749 code=0x7ffc0000 [ 232.502528][ T29] audit: type=1326 audit(1768018576.219:16684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26098 comm="syz.5.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4b738f65e7 code=0x7ffc0000 [ 232.526051][ T29] audit: type=1326 audit(1768018576.219:16685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26098 comm="syz.5.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4b7389b829 code=0x7ffc0000 [ 232.549752][ T29] audit: type=1326 audit(1768018576.219:16686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26098 comm="syz.5.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f4b738ff749 code=0x7ffc0000 [ 232.573497][ T29] audit: type=1326 audit(1768018576.229:16687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26098 comm="syz.5.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4b738f65e7 code=0x7ffc0000 [ 232.597089][ T29] audit: type=1326 audit(1768018576.229:16688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26098 comm="syz.5.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4b7389b829 code=0x7ffc0000 [ 232.767378][T26142] xt_hashlimit: size too large, truncated to 1048576 [ 232.846101][T26144] __nla_validate_parse: 2 callbacks suppressed [ 232.846121][T26144] netlink: 648 bytes leftover after parsing attributes in process `syz.0.2341'. [ 232.872813][T26143] loop2: detected capacity change from 0 to 128 [ 232.980740][T26150] xt_hashlimit: size too large, truncated to 1048576 [ 233.006995][T26152] netlink: 648 bytes leftover after parsing attributes in process `syz.5.2342'. [ 233.089902][T26143] bio_check_eod: 9 callbacks suppressed [ 233.089948][T26143] syz.2.2340: attempt to access beyond end of device [ 233.089948][T26143] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 233.109885][T26143] syz.2.2340: attempt to access beyond end of device [ 233.109885][T26143] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 233.125175][T26143] syz.2.2340: attempt to access beyond end of device [ 233.125175][T26143] loop2: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 233.206304][T26143] syz.2.2340: attempt to access beyond end of device [ 233.206304][T26143] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 233.227322][T26143] syz.2.2340: attempt to access beyond end of device [ 233.227322][T26143] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 233.241831][T26143] syz.2.2340: attempt to access beyond end of device [ 233.241831][T26143] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 233.265604][T26143] syz.2.2340: attempt to access beyond end of device [ 233.265604][T26143] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 233.279318][T26143] syz.2.2340: attempt to access beyond end of device [ 233.279318][T26143] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 233.305134][T26143] syz.2.2340: attempt to access beyond end of device [ 233.305134][T26143] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 233.339903][T26143] syz.2.2340: attempt to access beyond end of device [ 233.339903][T26143] loop2: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 233.393112][T26172] macvtap1: entered promiscuous mode [ 233.398758][T26172] macvtap1: entered allmulticast mode [ 233.405517][T26172] dummy0: entered promiscuous mode [ 233.411098][T26172] dummy0: entered allmulticast mode [ 233.417452][T26172] team0: Device macvtap1 failed to register rx_handler [ 233.428816][T25080] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.440956][T26172] dummy0: left allmulticast mode [ 233.446416][T26172] dummy0: left promiscuous mode [ 233.638119][T26198] 9pnet_fd: Insufficient options for proto=fd [ 233.667313][T26198] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2354'. [ 233.699127][T26203] IPv6: Can't replace route, no match found [ 233.727584][T26203] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2357'. [ 233.762151][T26215] FAULT_INJECTION: forcing a failure. [ 233.762151][T26215] name failslab, interval 1, probability 0, space 0, times 0 [ 233.775251][T26215] CPU: 1 UID: 0 PID: 26215 Comm: syz.7.2359 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 233.775292][T26215] Tainted: [W]=WARN [ 233.775376][T26215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 233.775392][T26215] Call Trace: [ 233.775398][T26215] [ 233.775405][T26215] __dump_stack+0x1d/0x30 [ 233.775438][T26215] dump_stack_lvl+0x95/0xd0 [ 233.775468][T26215] dump_stack+0x15/0x1b [ 233.775535][T26215] should_fail_ex+0x265/0x280 [ 233.775567][T26215] should_failslab+0x8c/0xb0 [ 233.775597][T26215] __kmalloc_noprof+0xb9/0x5a0 [ 233.775635][T26215] ? iovec_from_user+0x84/0x210 [ 233.775692][T26215] ? kernel_text_address+0x94/0xb0 [ 233.775774][T26215] iovec_from_user+0x84/0x210 [ 233.775813][T26215] __import_iovec+0xf3/0x540 [ 233.775867][T26215] ? kernelmode_fixup_or_oops+0x59/0xb0 [ 233.775968][T26215] import_iovec+0x61/0x80 [ 233.776064][T26215] ___sys_recvmsg+0x358/0x370 [ 233.776120][T26215] do_recvmmsg+0x1ef/0x540 [ 233.776164][T26215] ? get_timespec64+0xc9/0x100 [ 233.776193][T26215] __x64_sys_recvmmsg+0xfb/0x170 [ 233.776334][T26215] x64_sys_call+0x2b75/0x3000 [ 233.776366][T26215] do_syscall_64+0xca/0x2b0 [ 233.776415][T26215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.776443][T26215] RIP: 0033:0x7f0c2f0ff749 [ 233.776463][T26215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.776490][T26215] RSP: 002b:00007f0c2db5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 233.776592][T26215] RAX: ffffffffffffffda RBX: 00007f0c2f355fa0 RCX: 00007f0c2f0ff749 [ 233.776616][T26215] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000005 [ 233.776632][T26215] RBP: 00007f0c2db5f090 R08: 0000200000003700 R09: 0000000000000000 [ 233.776649][T26215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.776665][T26215] R13: 00007f0c2f356038 R14: 00007f0c2f355fa0 R15: 00007ffef1c5a7e8 [ 233.776691][T26215] [ 234.155591][T26239] loop2: detected capacity change from 0 to 512 [ 234.220729][T26255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.231901][T26255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.242002][T26255] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2371'. [ 234.359101][T26273] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2376'. [ 234.373674][T26277] netlink: 'syz.4.2374': attribute type 32 has an invalid length. [ 234.377079][T26278] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2377'. [ 234.415240][T26282] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2378'. [ 234.425220][T26282] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2378'. [ 234.540770][T26299] binfmt_misc: register: failed to install interpreter file ./file2 [ 234.563897][T26302] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2385'. [ 234.600281][T26305] FAULT_INJECTION: forcing a failure. [ 234.600281][T26305] name failslab, interval 1, probability 0, space 0, times 0 [ 234.613304][T26305] CPU: 1 UID: 0 PID: 26305 Comm: syz.0.2386 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 234.613345][T26305] Tainted: [W]=WARN [ 234.613354][T26305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 234.613409][T26305] Call Trace: [ 234.613417][T26305] [ 234.613426][T26305] __dump_stack+0x1d/0x30 [ 234.613457][T26305] dump_stack_lvl+0x95/0xd0 [ 234.613483][T26305] dump_stack+0x15/0x1b [ 234.613552][T26305] should_fail_ex+0x265/0x280 [ 234.613577][T26305] should_failslab+0x8c/0xb0 [ 234.613601][T26305] kmem_cache_alloc_noprof+0x69/0x4b0 [ 234.613625][T26305] ? audit_log_start+0x342/0x720 [ 234.613657][T26305] audit_log_start+0x342/0x720 [ 234.613687][T26305] ? kstrtouint+0x76/0xc0 [ 234.613713][T26305] audit_seccomp+0x48/0x100 [ 234.613752][T26305] ? __seccomp_filter+0x832/0x1260 [ 234.613787][T26305] __seccomp_filter+0x843/0x1260 [ 234.613968][T26305] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 234.614016][T26305] ? vfs_write+0x7e8/0x960 [ 234.614041][T26305] ? __rcu_read_unlock+0x4f/0x70 [ 234.614066][T26305] ? __fget_files+0x184/0x1c0 [ 234.614093][T26305] __secure_computing+0x82/0x150 [ 234.614121][T26305] syscall_trace_enter+0xcf/0x1e0 [ 234.614194][T26305] do_syscall_64+0xa4/0x2b0 [ 234.614311][T26305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.614371][T26305] RIP: 0033:0x7fad7dc5f749 [ 234.614388][T26305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.614410][T26305] RSP: 002b:00007fad7c6c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000000c [ 234.614435][T26305] RAX: ffffffffffffffda RBX: 00007fad7deb5fa0 RCX: 00007fad7dc5f749 [ 234.614453][T26305] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200004ffc000 [ 234.614465][T26305] RBP: 00007fad7c6c7090 R08: 0000000000000000 R09: 0000000000000000 [ 234.614498][T26305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.614509][T26305] R13: 00007fad7deb6038 R14: 00007fad7deb5fa0 R15: 00007ffeb222afe8 [ 234.614531][T26305] [ 234.872422][T26311] loop7: detected capacity change from 0 to 1024 [ 234.976661][T26328] FAULT_INJECTION: forcing a failure. [ 234.976661][T26328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.989872][T26328] CPU: 1 UID: 0 PID: 26328 Comm: syz.0.2394 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 234.989941][T26328] Tainted: [W]=WARN [ 234.989951][T26328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 234.989968][T26328] Call Trace: [ 234.989977][T26328] [ 234.989987][T26328] __dump_stack+0x1d/0x30 [ 234.990020][T26328] dump_stack_lvl+0x95/0xd0 [ 234.990104][T26328] dump_stack+0x15/0x1b [ 234.990131][T26328] should_fail_ex+0x265/0x280 [ 234.990161][T26328] should_fail+0xb/0x20 [ 234.990206][T26328] should_fail_usercopy+0x1a/0x20 [ 234.990237][T26328] _copy_from_iter+0xcf/0xe70 [ 234.990269][T26328] ? __alloc_skb+0x396/0x4b0 [ 234.990300][T26328] ? __alloc_skb+0x228/0x4b0 [ 234.990333][T26328] netlink_sendmsg+0x471/0x6b0 [ 234.990413][T26328] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.990456][T26328] __sock_sendmsg+0x145/0x180 [ 234.990526][T26328] ____sys_sendmsg+0x31e/0x4a0 [ 234.990582][T26328] ___sys_sendmsg+0x17b/0x1d0 [ 234.990635][T26328] __x64_sys_sendmsg+0xd4/0x160 [ 234.990733][T26328] x64_sys_call+0x17ba/0x3000 [ 234.990765][T26328] do_syscall_64+0xca/0x2b0 [ 234.990811][T26328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.990935][T26328] RIP: 0033:0x7fad7dc5f749 [ 234.990956][T26328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.991046][T26328] RSP: 002b:00007fad7c6c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.991069][T26328] RAX: ffffffffffffffda RBX: 00007fad7deb5fa0 RCX: 00007fad7dc5f749 [ 234.991082][T26328] RDX: 0000000000048850 RSI: 0000200000000300 RDI: 0000000000000004 [ 234.991095][T26328] RBP: 00007fad7c6c7090 R08: 0000000000000000 R09: 0000000000000000 [ 234.991108][T26328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.991120][T26328] R13: 00007fad7deb6038 R14: 00007fad7deb5fa0 R15: 00007ffeb222afe8 [ 234.991141][T26328] [ 235.237870][T26339] FAULT_INJECTION: forcing a failure. [ 235.237870][T26339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.251175][T26339] CPU: 0 UID: 0 PID: 26339 Comm: syz.7.2397 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 235.251215][T26339] Tainted: [W]=WARN [ 235.251223][T26339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 235.251260][T26339] Call Trace: [ 235.251270][T26339] [ 235.251279][T26339] __dump_stack+0x1d/0x30 [ 235.251312][T26339] dump_stack_lvl+0x95/0xd0 [ 235.251340][T26339] dump_stack+0x15/0x1b [ 235.251364][T26339] should_fail_ex+0x265/0x280 [ 235.251393][T26339] should_fail+0xb/0x20 [ 235.251446][T26339] should_fail_usercopy+0x1a/0x20 [ 235.251516][T26339] _copy_from_iter+0xcf/0xe70 [ 235.251547][T26339] ? __alloc_skb+0x396/0x4b0 [ 235.251577][T26339] ? __alloc_skb+0x228/0x4b0 [ 235.251610][T26339] netlink_sendmsg+0x471/0x6b0 [ 235.251679][T26339] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.251722][T26339] __sock_sendmsg+0x145/0x180 [ 235.251764][T26339] ____sys_sendmsg+0x31e/0x4a0 [ 235.251881][T26339] ___sys_sendmsg+0x17b/0x1d0 [ 235.251949][T26339] __x64_sys_sendmsg+0xd4/0x160 [ 235.251993][T26339] x64_sys_call+0x17ba/0x3000 [ 235.252097][T26339] do_syscall_64+0xca/0x2b0 [ 235.252142][T26339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.252171][T26339] RIP: 0033:0x7f0c2f0ff749 [ 235.252225][T26339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.252250][T26339] RSP: 002b:00007f0c2db5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.252273][T26339] RAX: ffffffffffffffda RBX: 00007f0c2f355fa0 RCX: 00007f0c2f0ff749 [ 235.252286][T26339] RDX: 0000000000000000 RSI: 00002000000018c0 RDI: 0000000000000003 [ 235.252299][T26339] RBP: 00007f0c2db5f090 R08: 0000000000000000 R09: 0000000000000000 [ 235.252316][T26339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.252331][T26339] R13: 00007f0c2f356038 R14: 00007f0c2f355fa0 R15: 00007ffef1c5a7e8 [ 235.252424][T26339] [ 235.296224][T26344] IPv6: Can't replace route, no match found [ 235.963886][T26407] FAULT_INJECTION: forcing a failure. [ 235.963886][T26407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.977084][T26407] CPU: 0 UID: 0 PID: 26407 Comm: syz.4.2417 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 235.977194][T26407] Tainted: [W]=WARN [ 235.977204][T26407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 235.977220][T26407] Call Trace: [ 235.977228][T26407] [ 235.977238][T26407] __dump_stack+0x1d/0x30 [ 235.977350][T26407] dump_stack_lvl+0x95/0xd0 [ 235.977380][T26407] dump_stack+0x15/0x1b [ 235.977406][T26407] should_fail_ex+0x265/0x280 [ 235.977436][T26407] should_fail+0xb/0x20 [ 235.977506][T26407] should_fail_usercopy+0x1a/0x20 [ 235.977564][T26407] _copy_from_user+0x1c/0xb0 [ 235.977598][T26407] memdup_user+0x5e/0xd0 [ 235.977618][T26407] strndup_user+0x68/0xb0 [ 235.977640][T26407] __se_sys_mount+0x4d/0x2e0 [ 235.977667][T26407] ? fput+0x8f/0xc0 [ 235.977770][T26407] ? ksys_write+0x192/0x1a0 [ 235.977796][T26407] __x64_sys_mount+0x67/0x80 [ 235.977825][T26407] x64_sys_call+0x2cca/0x3000 [ 235.977857][T26407] do_syscall_64+0xca/0x2b0 [ 235.977939][T26407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.977962][T26407] RIP: 0033:0x7f90db15f749 [ 235.977977][T26407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.977995][T26407] RSP: 002b:00007f90d9bc7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 235.978024][T26407] RAX: ffffffffffffffda RBX: 00007f90db3b5fa0 RCX: 00007f90db15f749 [ 235.978041][T26407] RDX: 0000200000001440 RSI: 0000200000001400 RDI: 00002000000013c0 [ 235.978058][T26407] RBP: 00007f90d9bc7090 R08: 00002000000000c0 R09: 0000000000000000 [ 235.978077][T26407] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 235.978094][T26407] R13: 00007f90db3b6038 R14: 00007f90db3b5fa0 R15: 00007ffce0f36878 [ 235.978169][T26407] [ 236.198972][T26416] tipc: Enabling of bearer rejected, failed to enable media [ 236.244062][T26420] xt_CT: No such helper "pptp" [ 236.630256][T26471] loop4: detected capacity change from 0 to 1024 [ 236.637414][T26471] EXT4-fs: Ignoring removed nomblk_io_submit option [ 236.652598][T26471] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a041c01c, mo2=0002] [ 236.663486][T26471] System zones: 0-1, 3-36 [ 236.672736][T26471] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.913395][T24526] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.140167][T26511] xt_CT: No such helper "pptp" [ 237.357948][ T29] kauditd_printk_skb: 1058 callbacks suppressed [ 237.357965][ T29] audit: type=1326 audit(1768018581.169:17745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26521 comm="syz.4.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f90db192005 code=0x7ffc0000 [ 237.388029][ T29] audit: type=1326 audit(1768018581.169:17746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26521 comm="syz.4.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f90db192005 code=0x7ffc0000 [ 237.411842][ T29] audit: type=1326 audit(1768018581.169:17747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26521 comm="syz.4.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f90db192005 code=0x7ffc0000 [ 237.435533][ T29] audit: type=1326 audit(1768018581.169:17748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26521 comm="syz.4.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f90db192005 code=0x7ffc0000 [ 237.459247][ T29] audit: type=1326 audit(1768018581.169:17749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26521 comm="syz.4.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f90db192005 code=0x7ffc0000 [ 237.483057][ T29] audit: type=1326 audit(1768018581.179:17750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26521 comm="syz.4.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f90db192005 code=0x7ffc0000 [ 237.506736][ T29] audit: type=1326 audit(1768018581.179:17751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26521 comm="syz.4.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f90db192005 code=0x7ffc0000 [ 237.530587][ T29] audit: type=1326 audit(1768018581.179:17752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26521 comm="syz.4.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f90db192005 code=0x7ffc0000 [ 237.554203][ T29] audit: type=1326 audit(1768018581.179:17753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26521 comm="syz.4.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f90db192005 code=0x7ffc0000 [ 237.577891][ T29] audit: type=1326 audit(1768018581.179:17754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26521 comm="syz.4.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f90db192005 code=0x7ffc0000 [ 237.615946][ T363] Bluetooth: hci0: Frame reassembly failed (-84) [ 237.628779][T26569] loop2: detected capacity change from 0 to 1024 [ 237.705885][T26569] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 237.760426][T26569] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.778637][T26589] FAULT_INJECTION: forcing a failure. [ 237.778637][T26589] name failslab, interval 1, probability 0, space 0, times 0 [ 237.791424][T26589] CPU: 0 UID: 0 PID: 26589 Comm: syz.4.2448 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 237.791520][T26589] Tainted: [W]=WARN [ 237.791528][T26589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 237.791542][T26589] Call Trace: [ 237.791549][T26589] [ 237.791556][T26589] __dump_stack+0x1d/0x30 [ 237.791629][T26589] dump_stack_lvl+0x95/0xd0 [ 237.791701][T26589] dump_stack+0x15/0x1b [ 237.791722][T26589] should_fail_ex+0x265/0x280 [ 237.791745][T26589] should_failslab+0x8c/0xb0 [ 237.791817][T26589] kmem_cache_alloc_noprof+0x69/0x4b0 [ 237.791912][T26589] ? dst_alloc+0xbd/0x100 [ 237.791970][T26589] ? __pfx_ip6_dst_gc+0x10/0x10 [ 237.791996][T26589] dst_alloc+0xbd/0x100 [ 237.792117][T26589] ip6_pol_route+0x71b/0xbe0 [ 237.792193][T26589] ? ip6_pol_route+0x389/0xbe0 [ 237.792229][T26589] ip6_pol_route_output+0x40/0x50 [ 237.792261][T26589] fib6_rule_lookup+0x1ff/0x470 [ 237.792284][T26589] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 237.792396][T26589] ? dev_get_by_index_rcu+0xa0/0xc0 [ 237.792431][T26589] ip6_route_output_flags+0x1e0/0x2c0 [ 237.792464][T26589] ip6_dst_lookup_tail+0x4a2/0xab0 [ 237.792553][T26589] ? __rcu_read_unlock+0x4f/0x70 [ 237.792576][T26589] ? terminate_walk+0x1e6/0x210 [ 237.792672][T26589] ? path_openat+0x1d88/0x23b0 [ 237.792767][T26589] ip6_dst_lookup_flow+0x47/0xc0 [ 237.792790][T26589] ip6_datagram_dst_update+0x332/0x510 [ 237.792827][T26589] __ip6_datagram_connect+0x70a/0x7e0 [ 237.792896][T26589] udpv6_connect+0x33/0x150 [ 237.792968][T26589] inet_dgram_connect+0x125/0x1c0 [ 237.792993][T26589] ? __pfx_inet_dgram_connect+0x10/0x10 [ 237.793016][T26589] __sys_connect+0x1f2/0x2b0 [ 237.793110][T26589] __x64_sys_connect+0x3f/0x50 [ 237.793135][T26589] x64_sys_call+0x2e09/0x3000 [ 237.793198][T26589] do_syscall_64+0xca/0x2b0 [ 237.793234][T26589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.793332][T26589] RIP: 0033:0x7f90db15f749 [ 237.793348][T26589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.793368][T26589] RSP: 002b:00007f90d9bc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 237.793388][T26589] RAX: ffffffffffffffda RBX: 00007f90db3b5fa0 RCX: 00007f90db15f749 [ 237.793401][T26589] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000004 [ 237.793431][T26589] RBP: 00007f90d9bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 237.793445][T26589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.793465][T26589] R13: 00007f90db3b6038 R14: 00007f90db3b5fa0 R15: 00007ffce0f36878 [ 237.793485][T26589] [ 238.076240][T26585] xt_hashlimit: size too large, truncated to 1048576 [ 238.685952][T26646] xt_hashlimit: size too large, truncated to 1048576 [ 238.711031][T26635] Cannot find add_set index 1 as target [ 238.795877][T26593] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm syz.2.2442: Freeing blocks not in datazone - block = 0, count = 16 [ 238.818978][T26649] __nla_validate_parse: 4 callbacks suppressed [ 238.819000][T26649] netlink: 648 bytes leftover after parsing attributes in process `syz.7.2463'. [ 238.863109][T26649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.870592][T26649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.905434][T26649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.912957][T26649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.994807][T26655] bpf: Bad value for 'gid' [ 239.123749][T26674] netlink: 'syz.7.2470': attribute type 1 has an invalid length. [ 239.157641][T26676] netlink: 'syz.0.2472': attribute type 1 has an invalid length. [ 239.180012][T26674] 8021q: adding VLAN 0 to HW filter on device bond1 [ 239.186667][T26682] FAULT_INJECTION: forcing a failure. [ 239.186667][T26682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.186703][T26682] CPU: 1 UID: 0 PID: 26682 Comm: syz.7.2470 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 239.186739][T26682] Tainted: [W]=WARN [ 239.186749][T26682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 239.186937][T26682] Call Trace: [ 239.186967][T26682] [ 239.186991][T26682] __dump_stack+0x1d/0x30 [ 239.187076][T26682] dump_stack_lvl+0x95/0xd0 [ 239.187153][T26682] dump_stack+0x15/0x1b [ 239.187248][T26682] should_fail_ex+0x265/0x280 [ 239.187323][T26682] should_fail+0xb/0x20 [ 239.187391][T26682] should_fail_usercopy+0x1a/0x20 [ 239.187509][T26682] _copy_from_iter+0xcf/0xe70 [ 239.187594][T26682] ? __alloc_skb+0x396/0x4b0 [ 239.187679][T26682] ? __alloc_skb+0x228/0x4b0 [ 239.187816][T26682] netlink_sendmsg+0x471/0x6b0 [ 239.188000][T26682] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.188175][T26682] __sock_sendmsg+0x145/0x180 [ 239.188263][T26682] ____sys_sendmsg+0x31e/0x4a0 [ 239.188385][T26682] ___sys_sendmsg+0x17b/0x1d0 [ 239.188562][T26682] __x64_sys_sendmsg+0xd4/0x160 [ 239.188671][T26682] x64_sys_call+0x17ba/0x3000 [ 239.188791][T26682] do_syscall_64+0xca/0x2b0 [ 239.188902][T26682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.188970][T26682] RIP: 0033:0x7f0c2f0ff749 [ 239.189024][T26682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.189198][T26682] RSP: 002b:00007f0c2db3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.189263][T26682] RAX: ffffffffffffffda RBX: 00007f0c2f356090 RCX: 00007f0c2f0ff749 [ 239.189381][T26682] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 239.189425][T26682] RBP: 00007f0c2db3e090 R08: 0000000000000000 R09: 0000000000000000 [ 239.189460][T26682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.189502][T26682] R13: 00007f0c2f356128 R14: 00007f0c2f356090 R15: 00007ffef1c5a7e8 [ 239.189566][T26682] [ 239.426370][T26676] 8021q: adding VLAN 0 to HW filter on device bond1 [ 239.434748][T26683] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 239.526178][T26761] FAULT_INJECTION: forcing a failure. [ 239.526178][T26761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.539412][T26761] CPU: 1 UID: 0 PID: 26761 Comm: syz.0.2479 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 239.539485][T26761] Tainted: [W]=WARN [ 239.539492][T26761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 239.539505][T26761] Call Trace: [ 239.539512][T26761] [ 239.539522][T26761] __dump_stack+0x1d/0x30 [ 239.539635][T26761] dump_stack_lvl+0x95/0xd0 [ 239.539726][T26761] dump_stack+0x15/0x1b [ 239.539761][T26761] should_fail_ex+0x265/0x280 [ 239.539783][T26761] should_fail+0xb/0x20 [ 239.539803][T26761] should_fail_usercopy+0x1a/0x20 [ 239.539834][T26761] _copy_from_iter+0xcf/0xe70 [ 239.539867][T26761] ? __alloc_skb+0x396/0x4b0 [ 239.539954][T26761] ? __alloc_skb+0x228/0x4b0 [ 239.539988][T26761] netlink_sendmsg+0x471/0x6b0 [ 239.540058][T26761] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.540109][T26761] __sock_sendmsg+0x145/0x180 [ 239.540207][T26761] ____sys_sendmsg+0x31e/0x4a0 [ 239.540250][T26761] ___sys_sendmsg+0x17b/0x1d0 [ 239.540296][T26761] __x64_sys_sendmsg+0xd4/0x160 [ 239.540329][T26761] x64_sys_call+0x17ba/0x3000 [ 239.540374][T26761] do_syscall_64+0xca/0x2b0 [ 239.540417][T26761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.540466][T26761] RIP: 0033:0x7fad7dc5f749 [ 239.540485][T26761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.540503][T26761] RSP: 002b:00007fad7c6c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.540591][T26761] RAX: ffffffffffffffda RBX: 00007fad7deb5fa0 RCX: 00007fad7dc5f749 [ 239.540607][T26761] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 239.540624][T26761] RBP: 00007fad7c6c7090 R08: 0000000000000000 R09: 0000000000000000 [ 239.540641][T26761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.540658][T26761] R13: 00007fad7deb6038 R14: 00007fad7deb5fa0 R15: 00007ffeb222afe8 [ 239.540682][T26761] [ 239.742986][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 239.749208][ T3595] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 239.807495][T26779] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 240.060814][T26803] loop7: detected capacity change from 0 to 512 [ 240.067618][T26803] EXT4-fs: Ignoring removed orlov option [ 240.073321][T26803] EXT4-fs: Ignoring removed mblk_io_submit option [ 240.082219][T26803] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 240.091508][T26803] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.2492: attempt to clear invalid blocks 2 len 1 [ 240.105006][T26803] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 240.119865][T26803] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2492: invalid indirect mapped block 1819239214 (level 0) [ 240.134392][T26803] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2492: invalid indirect mapped block 1819239214 (level 1) [ 240.149094][T26803] EXT4-fs (loop7): 1 truncate cleaned up [ 240.155168][T26803] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.216106][T26803] EXT4-fs (loop7): Quota file not on filesystem root. Journaled quota will not work [ 240.240658][T25080] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.263140][T26810] FAULT_INJECTION: forcing a failure. [ 240.263140][T26810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.276302][T26810] CPU: 0 UID: 0 PID: 26810 Comm: syz.7.2493 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 240.276422][T26810] Tainted: [W]=WARN [ 240.276432][T26810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 240.276449][T26810] Call Trace: [ 240.276458][T26810] [ 240.276468][T26810] __dump_stack+0x1d/0x30 [ 240.276500][T26810] dump_stack_lvl+0x95/0xd0 [ 240.276535][T26810] dump_stack+0x15/0x1b [ 240.276555][T26810] should_fail_ex+0x265/0x280 [ 240.276581][T26810] should_fail+0xb/0x20 [ 240.276606][T26810] should_fail_usercopy+0x1a/0x20 [ 240.276639][T26810] _copy_to_user+0x20/0xa0 [ 240.276681][T26810] simple_read_from_buffer+0xb5/0x130 [ 240.276702][T26810] proc_fail_nth_read+0x10e/0x150 [ 240.276811][T26810] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 240.276842][T26810] vfs_read+0x1a8/0x770 [ 240.276864][T26810] ? __rcu_read_unlock+0x4f/0x70 [ 240.276885][T26810] ? __fget_files+0x184/0x1c0 [ 240.276955][T26810] ? mutex_lock+0x58/0x90 [ 240.276991][T26810] ksys_read+0xda/0x1a0 [ 240.277010][T26810] __x64_sys_read+0x40/0x50 [ 240.277028][T26810] x64_sys_call+0x2889/0x3000 [ 240.277114][T26810] do_syscall_64+0xca/0x2b0 [ 240.277156][T26810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.277229][T26810] RIP: 0033:0x7f0c2f0fe15c [ 240.277245][T26810] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 240.277334][T26810] RSP: 002b:00007f0c2db5f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 240.277407][T26810] RAX: ffffffffffffffda RBX: 00007f0c2f355fa0 RCX: 00007f0c2f0fe15c [ 240.277423][T26810] RDX: 000000000000000f RSI: 00007f0c2db5f0a0 RDI: 0000000000000005 [ 240.277436][T26810] RBP: 00007f0c2db5f090 R08: 0000000000000000 R09: 0000000000000000 [ 240.277448][T26810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.277460][T26810] R13: 00007f0c2f356038 R14: 00007f0c2f355fa0 R15: 00007ffef1c5a7e8 [ 240.277485][T26810] [ 240.498515][ T3969] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:18: bg 0: block 112: padding at end of block bitmap is not set [ 240.518045][ T3969] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 240.530582][ T3969] EXT4-fs (loop2): This should not happen!! Data will be lost [ 240.530582][ T3969] [ 240.540613][ T3969] EXT4-fs (loop2): Total free blocks count 0 [ 240.546817][ T3969] EXT4-fs (loop2): Free/Dirty block details [ 240.553398][ T3969] EXT4-fs (loop2): free_blocks=16 [ 240.558698][ T3969] EXT4-fs (loop2): dirty_blocks=16400 [ 240.564093][ T3969] EXT4-fs (loop2): Block reservation details [ 240.570168][ T3969] EXT4-fs (loop2): i_reserved_data_blocks=1025 [ 240.580857][ T3969] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 29 with max blocks 2048 with error 28 [ 240.671376][T24620] Bluetooth: hci0: Frame reassembly failed (-84) [ 240.720677][T26825] lo speed is unknown, defaulting to 1000 [ 240.799160][T26825] lo speed is unknown, defaulting to 1000 [ 240.858138][T26825] lo speed is unknown, defaulting to 1000 [ 240.892756][T26825] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 240.949005][T26825] lo speed is unknown, defaulting to 1000 [ 240.956355][T26883] xt_hashlimit: size too large, truncated to 1048576 [ 240.970889][T26825] lo speed is unknown, defaulting to 1000 [ 240.976729][T26878] xt_hashlimit: size too large, truncated to 1048576 [ 240.987127][T26825] lo speed is unknown, defaulting to 1000 [ 240.994571][T26885] netlink: 648 bytes leftover after parsing attributes in process `syz.0.2508'. [ 241.003781][T26825] lo speed is unknown, defaulting to 1000 [ 241.012263][T26825] lo speed is unknown, defaulting to 1000 [ 241.023389][T26825] lo speed is unknown, defaulting to 1000 [ 241.059040][T26887] netlink: 648 bytes leftover after parsing attributes in process `syz.4.2509'. [ 241.070257][T26887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.077778][T26887] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.089269][T26887] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.096812][T26887] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.197546][T26899] netlink: 'syz.5.2513': attribute type 3 has an invalid length. [ 241.372626][T26915] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 241.386431][T26915] loop4: detected capacity change from 0 to 512 [ 241.395813][T26915] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 241.413529][T26915] EXT4-fs (loop4): 1 truncate cleaned up [ 241.419894][T26915] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.477493][T26925] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2521'. [ 241.537274][T24526] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.570596][T26944] xt_hashlimit: size too large, truncated to 1048576 [ 241.628087][T26948] netlink: 648 bytes leftover after parsing attributes in process `syz.4.2525'. [ 241.761391][T26957] loop4: detected capacity change from 0 to 1024 [ 241.773933][T26957] EXT4-fs: inline encryption not supported [ 241.779964][T26957] EXT4-fs: Ignoring removed orlov option [ 241.788161][T26957] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 241.815168][T26957] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 241.823461][T26957] System zones: 0-1, 3-12 [ 241.828824][T26957] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.955565][T24526] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.432128][T26992] xt_hashlimit: size too large, truncated to 1048576 [ 242.547433][T26995] netlink: 648 bytes leftover after parsing attributes in process `syz.5.2539'. [ 242.560933][ T29] kauditd_printk_skb: 1462 callbacks suppressed [ 242.560950][ T29] audit: type=1326 audit(1768018586.389:19217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26991 comm="syz.5.2539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b738ff749 code=0x7ffc0000 [ 242.633429][ T29] audit: type=1326 audit(1768018586.419:19218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26991 comm="syz.5.2539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f4b738ff749 code=0x7ffc0000 [ 242.657225][ T29] audit: type=1326 audit(1768018586.419:19219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26991 comm="syz.5.2539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b738ff749 code=0x7ffc0000 [ 242.680896][ T29] audit: type=1326 audit(1768018586.419:19220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26991 comm="syz.5.2539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b738ff749 code=0x7ffc0000 [ 242.704503][ T29] audit: type=1326 audit(1768018586.419:19221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26991 comm="syz.5.2539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b738ff749 code=0x7ffc0000 [ 242.728240][ T29] audit: type=1326 audit(1768018586.419:19222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26991 comm="syz.5.2539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b738ff749 code=0x7ffc0000 [ 242.752038][ T29] audit: type=1326 audit(1768018586.419:19223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26991 comm="syz.5.2539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b738ff749 code=0x7ffc0000 [ 242.775730][ T29] audit: type=1326 audit(1768018586.419:19224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26991 comm="syz.5.2539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f4b738ff749 code=0x7ffc0000 [ 242.799548][ T29] audit: type=1326 audit(1768018586.419:19225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26991 comm="syz.5.2539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b738ff749 code=0x7ffc0000 [ 242.823287][ T29] audit: type=1326 audit(1768018586.419:19226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26991 comm="syz.5.2539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f4b738ff749 code=0x7ffc0000 [ 242.831426][ T3595] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 242.853149][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 243.054072][T27019] FAULT_INJECTION: forcing a failure. [ 243.054072][T27019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.067244][T27019] CPU: 1 UID: 0 PID: 27019 Comm: syz.4.2545 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 243.067277][T27019] Tainted: [W]=WARN [ 243.067286][T27019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 243.067310][T27019] Call Trace: [ 243.067323][T27019] [ 243.067332][T27019] __dump_stack+0x1d/0x30 [ 243.067398][T27019] dump_stack_lvl+0x95/0xd0 [ 243.067427][T27019] dump_stack+0x15/0x1b [ 243.067453][T27019] should_fail_ex+0x265/0x280 [ 243.067482][T27019] should_fail+0xb/0x20 [ 243.067503][T27019] should_fail_usercopy+0x1a/0x20 [ 243.067553][T27019] _copy_to_user+0x20/0xa0 [ 243.067583][T27019] simple_read_from_buffer+0xb5/0x130 [ 243.067605][T27019] proc_fail_nth_read+0x10e/0x150 [ 243.067684][T27019] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 243.067711][T27019] vfs_read+0x1a8/0x770 [ 243.067780][T27019] ? __rcu_read_unlock+0x4f/0x70 [ 243.067806][T27019] ? __fget_files+0x184/0x1c0 [ 243.067830][T27019] ? mutex_lock+0x58/0x90 [ 243.067901][T27019] ksys_read+0xda/0x1a0 [ 243.068003][T27019] __x64_sys_read+0x40/0x50 [ 243.068026][T27019] x64_sys_call+0x2889/0x3000 [ 243.068126][T27019] do_syscall_64+0xca/0x2b0 [ 243.068163][T27019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.068188][T27019] RIP: 0033:0x7f90db15e15c [ 243.068203][T27019] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 243.068257][T27019] RSP: 002b:00007f90d9bc7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 243.068279][T27019] RAX: ffffffffffffffda RBX: 00007f90db3b5fa0 RCX: 00007f90db15e15c [ 243.068294][T27019] RDX: 000000000000000f RSI: 00007f90d9bc70a0 RDI: 0000000000000005 [ 243.068306][T27019] RBP: 00007f90d9bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 243.068318][T27019] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 243.068331][T27019] R13: 00007f90db3b6038 R14: 00007f90db3b5fa0 R15: 00007ffce0f36878 [ 243.068481][T27019] [ 243.585585][T27045] loop4: detected capacity change from 0 to 128 [ 243.704064][T27045] bio_check_eod: 75 callbacks suppressed [ 243.704083][T27045] syz.4.2555: attempt to access beyond end of device [ 243.704083][T27045] loop4: rw=2049, sector=145, nr_sectors = 96 limit=128 [ 243.747658][T27062] loop2: detected capacity change from 0 to 128 [ 243.784837][T27045] syz.4.2555: attempt to access beyond end of device [ 243.784837][T27045] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 243.798618][T27045] syz.4.2555: attempt to access beyond end of device [ 243.798618][T27045] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 243.812148][T27045] syz.4.2555: attempt to access beyond end of device [ 243.812148][T27045] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 243.828486][T27068] loop7: detected capacity change from 0 to 128 [ 243.835940][T27045] syz.4.2555: attempt to access beyond end of device [ 243.835940][T27045] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 243.855780][T27068] 9p: Unknown access argument ¤: -22 [ 243.861545][T27068] xt_hashlimit: max too large, truncated to 1048576 [ 243.877059][T27068] xt_CT: You must specify a L4 protocol and not use inversions on it [ 243.903130][T27045] syz.4.2555: attempt to access beyond end of device [ 243.903130][T27045] loop4: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 243.917077][T27045] syz.4.2555: attempt to access beyond end of device [ 243.917077][T27045] loop4: rw=2049, sector=329, nr_sectors = 8 limit=128 [ 243.930984][T27045] syz.4.2555: attempt to access beyond end of device [ 243.930984][T27045] loop4: rw=2049, sector=345, nr_sectors = 8 limit=128 [ 243.981258][T27045] syz.4.2555: attempt to access beyond end of device [ 243.981258][T27045] loop4: rw=2049, sector=361, nr_sectors = 8 limit=128 [ 243.995044][T27045] syz.4.2555: attempt to access beyond end of device [ 243.995044][T27045] loop4: rw=2049, sector=377, nr_sectors = 8 limit=128 [ 244.017543][T27073] bridge: RTM_NEWNEIGH with invalid ether address [ 244.109914][T27083] loop7: detected capacity change from 0 to 2048 [ 244.161259][T27100] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2569'. [ 244.232711][T27107] xt_CT: No such helper "pptp" [ 244.401684][T27126] sctp: [Deprecated]: syz.2.2577 (pid 27126) Use of int in maxseg socket option. [ 244.401684][T27126] Use struct sctp_assoc_value instead [ 244.430608][ T3309] printk: udevd: 3 output lines suppressed due to ratelimiting [ 244.488989][T27120] lo speed is unknown, defaulting to 1000 [ 244.738117][T27224] xt_CT: No such helper "pptp" [ 244.748779][T27229] loop4: detected capacity change from 0 to 128 [ 244.895216][T27232] lo speed is unknown, defaulting to 1000 [ 244.937107][ T2899] ================================================================== [ 244.945243][ T2899] BUG: KCSAN: data-race in copy_process / free_pid [ 244.951773][ T2899] [ 244.954109][ T2899] read-write to 0xffffffff86860008 of 4 bytes by task 27259 on cpu 0: [ 244.962281][ T2899] free_pid+0xb9/0x1d0 [ 244.966385][ T2899] free_pids+0x7a/0xb0 [ 244.970565][ T2899] release_task+0x9a7/0xb60 [ 244.975090][ T2899] do_exit+0xd4d/0x1590 [ 244.979273][ T2899] call_usermodehelper_exec_async+0x247/0x250 [ 244.985372][ T2899] ret_from_fork+0x149/0x290 [ 244.989990][ T2899] ret_from_fork_asm+0x1a/0x30 [ 244.994780][ T2899] [ 244.997115][ T2899] read to 0xffffffff86860008 of 4 bytes by task 2899 on cpu 1: [ 245.004671][ T2899] copy_process+0x16d4/0x1ef0 [ 245.009362][ T2899] kernel_clone+0x16c/0x5c0 [ 245.013882][ T2899] user_mode_thread+0x7d/0xb0 [ 245.018608][ T2899] call_usermodehelper_exec_work+0x41/0x160 [ 245.024524][ T2899] process_scheduled_works+0x4ce/0x9d0 [ 245.030007][ T2899] worker_thread+0x582/0x770 [ 245.034623][ T2899] kthread+0x489/0x510 [ 245.038750][ T2899] ret_from_fork+0x149/0x290 [ 245.043407][ T2899] ret_from_fork_asm+0x1a/0x30 [ 245.048216][ T2899] [ 245.050555][ T2899] value changed: 0x8000010a -> 0x80000109 [ 245.056309][ T2899] [ 245.058652][ T2899] Reported by Kernel Concurrency Sanitizer on: [ 245.064822][ T2899] CPU: 1 UID: 0 PID: 2899 Comm: kworker/u8:12 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 245.076387][ T2899] Tainted: [W]=WARN [ 245.080214][ T2899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 245.090306][ T2899] Workqueue: events_unbound call_usermodehelper_exec_work [ 245.097464][ T2899] ==================================================================