last executing test programs: 6m35.306203449s ago: executing program 2 (id=954): setsockopt(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) syz_io_uring_setup(0x211b, &(0x7f00000003c0)={0x0, 0x53e0, 0x2, 0x2000000, 0x2ae}, &(0x7f00000001c0), &(0x7f0000000280)) 6m33.300047958s ago: executing program 3 (id=980): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a50085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x9, [@type_tag={0x5, 0x0, 0x0, 0x12, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x2}}, @var={0xa, 0x0, 0x0, 0xe, 0x1, 0x2}]}, {0x0, [0x5376d59705b1ee74, 0x0, 0x61, 0x2e, 0x0, 0x5f, 0x61]}}, &(0x7f0000000b00)=""/4096, 0x55, 0x1000, 0x0, 0x9}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18940000000000000000000000000000e500030000f9d800854d06e4fb100000000600c919faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r6, 0x0, 0x4804}, 0x18) sendmsg$xdp(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f00000000c0)="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", 0x459}], 0x1, 0x0, 0x0, 0x10}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000002300)=ANY=[@ANYBLOB="180000060010000000000000000000001800000004000000000000000700000085100000fbffffff1864000003000000000000000200000095000000000000009721f8f99b9c32b94fa3531ed1fe6ba94a51ebae43e4e02c6702b58f46e33936345a20937f2a96fd56d9437cee57a6a28ddc0fa3e93f72c37140d76fdb2f2dba11bf3e68b3d449ed8a6e259d56194a83c83d8add0ffb3af5414ebd89"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r7, 0x0, 0xee01) newfstatat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) mount$9p_fd(0x0, &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0), 0x200008, &(0x7f0000001b00)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@noextend}, {@access_client}, {@access_uid={'access', 0x3d, r8}}, {@access_any}, {@cache_fscache}, {@noxattr}], [{@context={'context', 0x3d, 'system_u'}}, {@permit_directio}, {@smackfsfloor={'smackfsfloor', 0x3d, 'GPL\x00'}}, {@subj_user={'subj_user', 0x3d, 'kfree\x00'}}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@subj_user={'subj_user', 0x3d, '/'}}, {@permit_directio}]}}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xcfff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x42) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x18) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='.\x00', &(0x7f0000000280), 0x808008, &(0x7f0000000440)=ANY=[@ANYBLOB='tran[=unix,\x00']) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ed50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) 6m33.170910489s ago: executing program 3 (id=982): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000380)=0xc) mount$nfs4(&(0x7f0000000000)='netlink_extack\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0xa, &(0x7f00000003c0)={[{}, {'netlink_extack\x00'}], [{@uid_eq={'uid', 0x3d, r1}}, {@smackfsdef={'smackfsdef', 0x3d, 'kfree\x00'}}]}) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000080)=@sg0, r1, &(0x7f0000000180)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x588, &(0x7f0000000600)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_clone(0x623f, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) 6m33.09556524s ago: executing program 2 (id=984): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r2}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000400)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r8, 0x4, 0x6, 0x4, 0x2, 0x47, @mcast1, @mcast1, 0x1, 0x8, 0x0, 0x66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r9, 0x0, 0x0, 0x0, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x0, 0x8, 0x2}}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) r10 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000013c0)=ANY=[@ANYBLOB="140000005304010000000000000500000000000a1400"], 0x28}, 0x1, 0x0, 0x0, 0x64049}, 0x40000) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x2000884c) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xaf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r12}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r11}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x9]}, 0x8) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="9400000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0003010c0002800500010000000000080007400000000030000e"], 0x94}}, 0x48000) 6m32.9905925s ago: executing program 2 (id=985): r0 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x1c0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f00000000c0), 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000340)=ANY=[@ANYRES64=0x0, @ANYBLOB="c92d7148", @ANYRESDEC=r1, @ANYRES16=r0, @ANYRES64=r4, @ANYRES8=r2, @ANYRES32=r5, @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r9 = perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2e04eeb904053f1b}, 0x0, 0x0, r8, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0xff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r10 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) r13 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) preadv(r13, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/169, 0xa9}, {0x0}], 0x2, 0xa3, 0x7) io_uring_enter(r10, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r14}, 0xf) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r15, &(0x7f00000003c0)={0x0, 0xffffffffffffffc8, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYRES8=r0, @ANYRESHEX=r7, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00', @ANYRES16=0x0, @ANYRESOCT=r16, @ANYRES8=r10], 0x14}}, 0x4000844) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000340), 0x4) dup(0xffffffffffffffff) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m32.98201261s ago: executing program 3 (id=986): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_emit_ethernet(0xfffffffffffffe50, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x36}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22eb}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 6m32.876059571s ago: executing program 3 (id=987): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="020000000100009587f0e0d5b9938819e1add57a8f000000", @ANYRES32=0x0, @ANYBLOB="10000000000000002000050000000000"], 0x2c, 0x2) (async) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000019240)=@IORING_OP_SENDMSG={0x9, 0xc, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe3d08660d3cd4684}) (async, rerun: 64) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRES64=r1, @ANYRES16=r2, @ANYBLOB="31832abd70000000000019000000180001801400020065727370616e30"], 0x2c}, 0x1, 0x0, 0x0, 0x20040018}, 0x4886) ptrace(0x10, r0) ptrace$setregs(0xffffffffffffffff, r0, 0x7, &(0x7f0000000440)) (async) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505330, &(0x7f0000000bc0)={{0x0, 0x1}, {0xe}, 0x2, 0x6, 0x2e}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000003bc0)='net/xfrm_stat\x00') writev(r5, &(0x7f00000051c0)=[{&(0x7f0000004100)="32e2146007", 0x5}, {0x0}], 0x2) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004944) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000019480)={&(0x7f0000019200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000d00)=ANY=[@ANYRESHEX=r1, @ANYRES32=r3, @ANYBLOB="010025bd7000ffdbdf2545000000080001007063690011000200303030303a30d02886a358f98dc8bae9c2cb5146303a31302e300000000008008e00000000000e0001006e657464657673696d0000000f00021f6e657464657673696d30000008008e00000000000e0001006e6574646576736926b1e63a0f0002006e657464657673690001000008008e00000000000e0001006e3c7464657673696d00001b090002006e657464657673696d30000008008e0001947a000000080001007063690011150200303030303a30303a31302e300000000008008e0001000000080001007063690011000200303030303a17303a31302e300000000008208e00fc0000000800353f847f690011000200303030303a30303a31302e300000000008008e0001303030303a30303a31302e300000000008008e00010000d28bdba9b9a928a72d31e9d5944f9e95cf66a92b4d84944e23a78be1143daef1cab3c432562acdeea913e90a4ced7daff3cc781201a606496e4520362f7e59e6b8bb82afb7d657d8961f90e1056d4d12c8ca857c8ec8"], 0x140}, 0x1, 0x0, 0x0, 0x880}, 0x20000800) sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async) creat(&(0x7f0000000040)='./file0\x00', 0x0) (async) r7 = gettid() read$ptp(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) (async, rerun: 64) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x16, 0x0, @tid=r9}) (async) timer_settime(r8, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x15, 0x8, &(0x7f0000000140)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) 6m32.543882312s ago: executing program 3 (id=990): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000002000000000000001811000068242f173c426e21e12c26cd", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="d37a6d95c19185020000010000000000000001410001001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010014) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) close(r0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff05, 0x0, 0x0, 0x10, 0x9}, 0x94) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000b00)={0xa, 0x4e22, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(r6, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0x10f9d, @private2}}}, 0x32) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8, 0x0, 0x200000000005}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd8) r10 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r10, &(0x7f0000000440)='system_u:object_r:file_context_t:s0\x00', 0x24) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000030605000000000000000000000000060500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 6m32.094632155s ago: executing program 2 (id=996): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000380)=0xc) mount$nfs4(&(0x7f0000000000)='netlink_extack\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0xa, &(0x7f00000003c0)={[{}, {'netlink_extack\x00'}], [{@uid_eq={'uid', 0x3d, r1}}, {@smackfsdef={'smackfsdef', 0x3d, 'kfree\x00'}}]}) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000080)=@sg0, r1, &(0x7f0000000180)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x588, &(0x7f0000000600)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_clone(0x623f, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) 6m31.936075585s ago: executing program 3 (id=998): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000cc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x401}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x814}, 0x2404d004) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_bp={0x0, 0x8}, 0x120, 0x90000, 0x33f8, 0x1, 0x7, 0x20007, 0xb, 0x0, 0x400001, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r4 = getpid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00', r6}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r7 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) connect$phonet_pipe(r7, &(0x7f0000000100)={0x23, 0xa, 0x4f, 0x5}, 0x10) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000006180)=""/144, 0x90}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/91, 0x5b}], 0x1, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 6m31.902876525s ago: executing program 32 (id=998): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000cc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x401}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x814}, 0x2404d004) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_bp={0x0, 0x8}, 0x120, 0x90000, 0x33f8, 0x1, 0x7, 0x20007, 0xb, 0x0, 0x400001, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r4 = getpid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00', r6}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r7 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) connect$phonet_pipe(r7, &(0x7f0000000100)={0x23, 0xa, 0x4f, 0x5}, 0x10) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000006180)=""/144, 0x90}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/91, 0x5b}], 0x1, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 6m31.886386805s ago: executing program 2 (id=1000): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8ab8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff], 'veth1_vlan\x00', 'geneve1\x00', {}, {}, 0x29, 0x10, 0x0, 0x78}, 0x0, 0x110, 0x150, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'ipvlan0\x00', {0xff}, 'syz_tun\x00', {}, 0xc, 0x18}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0xd457}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2f}, @empty, [0xff000000, 0xff000000, 0xffffff00, 0xffffffff], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x3c, 0x1, 0x5, 0x64}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010100, 'pim6reg0\x00', {0x400000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1a000}}, 0x0) r4 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000440)={{0x0, 0x3938700}}, &(0x7f0000000480)) sendto$inet(r3, &(0x7f0000000380)="a68a", 0x2, 0x40, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) 6m31.03960915s ago: executing program 2 (id=1008): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect(r0, &(0x7f00000000c0)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x3, 0x1}}, 0x80) 6m31.01360695s ago: executing program 33 (id=1008): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect(r0, &(0x7f00000000c0)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x3, 0x1}}, 0x80) 4m14.239122348s ago: executing program 6 (id=2305): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="7f454c4604070003070020000000000002000300030000000903000038000000fcffffff0e0000000000200001000500000000000000000003"], 0x58) close(r0) (async, rerun: 32) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000080), 0x4) (rerun: 32) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) (async) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000280)=0x8000005, 0x4) (async) recvmmsg(r1, &(0x7f0000003440)=[{{&(0x7f00000000c0)=@xdp, 0x80, &(0x7f0000002980)=[{&(0x7f0000000680)=""/198, 0xc6}], 0x1, &(0x7f0000000180)=""/140, 0x8c}, 0xfffffff6}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000780)=""/133, 0x85}], 0x1, &(0x7f0000000840)=""/181, 0xb5}, 0x5}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000a00)=""/191, 0xbf}, {&(0x7f0000000540)=""/17, 0xb}, {&(0x7f0000000ac0)=""/129, 0x81}], 0x3, &(0x7f0000000940)=""/33, 0x21}, 0x1}, {{&(0x7f0000000b80)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000003680)=[{&(0x7f0000000c00)=""/2, 0x2}, {&(0x7f0000000c40)=""/125, 0x7d}, {0x0}, {&(0x7f0000000e80)=""/77, 0x4d}, {&(0x7f0000000f00)=""/248, 0xf8}, {&(0x7f0000004fc0)=""/4113, 0x1009}, {0x0}], 0x7, &(0x7f0000002140)=""/205, 0xcd}, 0x3}, {{&(0x7f0000002240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000d40)=[{&(0x7f00000022c0)=""/113, 0x71}, {&(0x7f0000002340)=""/224, 0xe0}, {&(0x7f0000002440)=""/84, 0x54}, {&(0x7f0000002000)=""/183, 0xb7}], 0x4, &(0x7f0000000d80)=""/188, 0xbc}, 0x5}, {{0x0, 0x0, &(0x7f0000002d40), 0x58}, 0x95}, {{&(0x7f0000002e00)=@vsock, 0x80, &(0x7f0000002f00)}, 0x5}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000003080)=""/53, 0x35}], 0x1, &(0x7f0000003100)=""/239, 0xef}, 0x5}], 0x8, 0x10022, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 32) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000b70000000000bc7e2f285c773714386cbc18d5a97010009500000000000000000000000000000095df0440331de6288f7f000000005f37fca886d920e186451164553b9d933a59aca2b02204ce8a8d19824a612b392b99751ad564de5e813acd027d479bb2e63139b061ea314d5cfced6ef37b05ddf5c8822822"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) unshare(0x60000600) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r8}, 0x10) (async) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x9}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) close_range(r9, 0xffffffffffffffff, 0x0) (async) r10 = dup(r7) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) 4m14.192387918s ago: executing program 6 (id=2306): bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0, 0x0, 0x25}, 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x24}}, 0x40080) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) sendto$isdn(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYRES8=r1], 0x39, 0x8040, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRES32], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x50}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x4}, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="1805004946c318a61f4074000000f9fffffffeffffffb70c0000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100030000000007019c6d82e6ffffbfa400000000000007040000f0ffffffb702000008000000", @ANYRES32, @ANYBLOB="0000000088a5dcf200ac87d38a00"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x5, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x4804}, 0x18) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)=@nfc, 0x80, 0x0, 0x0, &(0x7f00000002c0)=""/139, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4m12.148137828s ago: executing program 6 (id=2329): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) syz_read_part_table(0x1059, &(0x7f0000000000)="$eJzsz8FNw0AUBNDxYmRbogNa4Ewn7scHCuFMT0hUwDmX6EdeR0oHSQ7v3Uazs9IPD/WRlpxqfG+ZkyXJuWpK8nb0VdVakr+ehtuwP+q2ek3ycoRx2f/JsF3LVv+fa9/VsC++l6/5aH4zZf25150AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8MwuAQAA//9ZkRMF") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0xff38}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x800) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) 4m11.71935134s ago: executing program 6 (id=2339): ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffff9c, 0x800c6613, &(0x7f00000001c0)=@v2={0x2, @aes256, 0x4, '\x00', @auto="3620d3b763de62aed7dc7d4dca8208b1"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1a101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r1 = socket(0x2, 0x80805, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth0_virt_wifi\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0x13, &(0x7f0000000240)=ANY=[@ANYRES64], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x18) clock_settime(0x0, &(0x7f0000000040)) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0xc0100) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @empty}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r4, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) mount$bind(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x80440, 0x0) syz_mount_image$vfat(&(0x7f0000000940), &(0x7f0000000080)='./file1\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[], 0x1, 0x2c0, &(0x7f0000000440)="$eJzs3U9rK1UUAPAz+TOJukgWrkRwQBeuHu+9rZsUeQ/ErnxkoS60+FqQJggtFKri2JVbNy78DILgB3HjNxDcCu6sUBiZyaRJ2pg2palof79Fe3vnnLlnboZ2WujJx6+O959nsXfy5a/R7SbRGMQgTpPoRyOmvo4Fg28DAPgvOy2K+KOYWCcviYju5soCADboej//W7PhT3dSFgCwQc/e/+Ddre3tJ+9lWTeejr85Gpa/2ZefJ8e39uLTGMVuPIxenEVUDwrtqJ4WyuHToijyVlbqxxvj/GhYZo4/+rk+/9bv9R8LSv3q4/nTRpX/zvaTR9nEXH5e1vFivf6gXP9x9OLl8+SF/MdL8mOYxpuvz9X/IHrxyyfxWYzieVXELP+rR1n2dvHdn198WJZX5if50bBTxc0UzTt8WQAAAAAAAAAAAAAAAAAAAAAA+J97UPfO6UTVv6ecqvvvNM/KL9qRTfUX+/NM8qetfRb6AxVFkVftcib9dR5mWVbUgbP8VrzSmm8sCAAAAAAAAAAAAAAAAAAAAPfX4fHn+zuj0e7BrQym3QBaEfHXs4ibnmcwN/NarA7u1GvujEaNergY05qfieY0JolYWUZ5Ebe0LVcNXrhUcz344cd1T9i9Oqa9fK3D4+ZNX6/84sz07trfSZbvYSemM9160e/TiFlMGtdcPf2nQ0Wsc/ulSw/11t6N9KVqkK+IiWRVYW/9Ntm5eia5eBVptatL09v1YC79wr1xrfs5upP0y98rEt06AAAAAAAAAAAAAAAAAABgo2b//bvk4MnK1EbR2VhZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCnZu//v8Ygj4h2fYIrgtM4OPyXLxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB74O8AAAD//0aWVl0=") r5 = open(&(0x7f0000000300)='./file1\x00', 0x147842, 0x126) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x2, 0x1, 0x5, 0x4}) 4m11.348533272s ago: executing program 6 (id=2343): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") r3 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x801460, 0x0, 0x2, 0x0, &(0x7f0000000000)) r4 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x100) preadv2(r5, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x2, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000940)=[{&(0x7f0000000200)='\f', 0x1}], 0x1) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000240)=0x6001, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='xen_cpu_load_idt\x00', r1, 0x0, 0xd4c}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRESDEC=r3, @ANYRES32, @ANYBLOB="0000000000000000b7030000003e7400850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x88c02, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) 4m11.116673773s ago: executing program 6 (id=2350): r0 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003100000002cbd7000fcdbdf25020007"], 0x80}, 0x1, 0x7}, 0x0) 4m11.115958473s ago: executing program 34 (id=2350): r0 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003100000002cbd7000fcdbdf25020007"], 0x80}, 0x1, 0x7}, 0x0) 3m21.364143191s ago: executing program 5 (id=3031): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x569, &(0x7f00000002c0)="$eJzs3U1rXFUfAPD/nWT6/jxNoRQVkYALK7WTJvGlgou61mJB93VIbkPJpFMyk9LEgu3CrqW4EQviXly7LH4BF36GghaKlKALN5E7uTOdJDPJtJ0mU+f3g1vOuS8598y5/9NzcmYyAQyt8eyfQsTLEfF1EnE0IpL82GjkB8fXz1t9dGMm25JYW/v0z6RxXpZv/qzmdYfzzEsR8ctXEacKW8utLa/MlyuVdDHPT9QXrk7UlldOX14oz6Vz6ZWp6emz70xPvf/eu32r65sX/v72k3sjee7YnSTOxZE8116PZ3CzPTMe4/lrUoxzm06c7ENhgyTpuPenXb8PnsxIHufFyPqAozGSRz3w3/dlRKwBQyp54vj/rfh87gTYXc1xQHNu36d58Avj4YfrE6Ct9R9d/91IHGjMjQ6tJhtmRtl8d6wP5Wdl/PzH3TvZFv37PQTAjm7eiogzo6Nb+78k7/+e3pkeztlchv4Pds+9bPzzVqfxT6E1/okO45/DHWL3aewc/4UHfSimq2z890HH8W9r0WpsJM/9rzHmKyaXLlfSrG/7f0ScjOL+LL/des7Z1ftr3Y61j/+yLSu/ORbM7+PB6P6N18yW6+VnqXO7h7ciXuk4/k1a7Z90aP/s9bjQYxkn0ruvdTu2c/2fr7UfIt7o2P6PV7SS7dcnJxrPw0Tzqdjqr9snfu1W/l7XP2v/Q9vXfyxpX6+ttV890lMZ3x/4J43WevJGG+ofvT//+5LPGul9+b7r5Xp9cTJiX/Jxa3+huX/q8bXNfPP8rP4nX9++/+v0/B+MiM97qn3E7eM/vtrt2CC0/2zH9m/Nbje1/5Mn7n/0xXfdyu+t/3u7kTqZ7+ml/+v1Bp/ltQMAAAAAAIBBU4iII5EUSq10oVAqrb+/43gcKlSqtfqpS9WlK7PR+KzsWBQLzZXuo23vh5jMVwyb+alN+emIOBYR34wcbORLM9XK7F5XHgAAAAAAAAAAAAAAAAAAAAbE4S6f/8/8vvXPux/Y/TsEnitf+Q3Da8f478c3PQEDyf//MLzEPwwv8Q/DS/zD8BL/MLzEPwwv8Q/DS/wDAAAAAAAAAAAAAAAAAAAAAAAAAABAX104fz7b1lYf3ZjJ8rPXlpfmq9dOz6a1+dLC0kxpprp4tTRXrc5V0tJMdWGnn1epVq9OTsXS9Yl6WqtP1JZXLi5Ul67UL15eKM+lF9PirtQKAAAAAAAAAAAAAAAAAAAAXiy15ZX5cqWSLkpIPFVidDBuQ6LPib3umQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgsX8DAAD//welMww=") ftruncate(0xffffffffffffffff, 0x3) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) fstat(r3, &(0x7f00000009c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x9, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_io_uring_setup(0x31ac, &(0x7f0000000180)={0x0, 0x136f, 0x8000, 0x2, 0x346}, &(0x7f0000000240), &(0x7f0000000400)) io_uring_enter(r4, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x2b06, &(0x7f0000000040)={0x0, 0x0, 0x800, 0x0, 0x100000}, 0x0, 0x0) io_uring_enter(r4, 0x1f6e, 0xab04, 0x2, 0x0, 0x0) io_uring_enter(r4, 0x1e61, 0x9296, 0x1, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000280), &(0x7f0000000940)=ANY=[], 0x361, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0xb, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000002200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1a4a438, &(0x7f0000000480)=ANY=[@ANYRES16, @ANYRESOCT, @ANYRES32, @ANYRES64], 0xb, 0x0, &(0x7f0000000000)) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000540)={0x0, 0x12, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r9, 0x0, 0x3, 0x4000}}, 0x20) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf) r10 = fcntl$dupfd(r5, 0x0, r5) ioctl$TCFLSH(r5, 0x400455c8, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000140)=0x3) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000400)=0x7) 3m18.964991937s ago: executing program 5 (id=3045): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000005c0)) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 3m18.593297419s ago: executing program 5 (id=3048): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffc, '\x00', 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000240)='4', 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000080000000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020600) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r3, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendto(r4, &(0x7f00000005c0)="a1bfc48ba931fb1ceb70ba6de68925f84d607ce82b9339dda7f5adf00381be33ea1558c858be9d3a5b2aff8f4f59bd095d7034b500b19e0d0524e7bf37b4cec2aad04aacfac1eeca892aa86fe2f21df0a4619b459cb53e0cadf8e3486c5506c18326e1a39911052c19fee16f57ff67c91e3576d08cbca1dbfbdf03bc42498ba5fe9316ab4a80fdaab89a6461775b8f4f23b0f5", 0x93, 0x0, &(0x7f0000000700)=@ax25={{0x3, @bcast, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x4, 0x0, 0x2, 0x0, {0xa, 0x4e21, 0x8000, @empty}}}, 0x32) writev(r6, &(0x7f0000000180), 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad1f50ad32d3fd25dfd73a015e0ca6a0f68a7d007f15451dfb265a0e3ccae669e173a64bc1cfd5587d452d64e7cc957d77578f4c25235138d5521f9453559c35da860e8efbc64e57cbb7aee976f2b54421eed73d5661ca3dbe74bd09de8793dbcceef76b2e5feecf9c66c54c3b3ffe1b4ce25d7c983c044c06cd0a48dfe3e26e7a23129d6606fd28a69989d552af6d9a9df2c3af36e0360050011bbecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f163d1a13ed38ae82f87925bfacba83109753f541cd027edd68149ee99eebc6f7d6dd4aed4af7588c8e1b44ccb19e810879b70a7000000e7ffffff00000000d7900a820b63278f4e9a217b98ef7042ad2a92895614cd50cbe43a1ed25268816b00000000000009d27d753a30a147b24a48435bd8a568669596e9e0867958e1dd7a0defb6670c06054002238260000000000040587c1ed797aa21a38e1e389f640a0b8b0000000000a835ad0f61ba73c31b05c00fba8a4aee676d7c45bb29671a68ee2e60da7b01a2e5785a238afa4aba70c07fcd95bf8b0d71b6f72d6a8d87fb08533d97ad96d3943c4cc8306dac433a5cdf334178b04963d67dd5a5707e618a1ef9057fec00f9e930219fa8d30e716de8cde9c60f0000000c3b64d10f0939b42b788daa7075fa542242b00f6bf9b64ad460e386b6f388351fbdacb3ad074574ee9d450f9dcfaef1be95ff3c449e6482e4403174618c20e887d6f320616d31d78a0e5421d5742cc52509fd90cf2df6d1404f6b8f810d7b94d421971b77a3270153a0d57cccfe27872f3e8e44480f93c33421986a7737842627301fb2fee8cabab074adaa2024ff57e609ba2f4d83b3bbf52309484532416f48f43b31395c6f45fee8f1682a4e8d5e3b9ae634ed24fb0e8b5fadaf5cb7eea62b7bb4264e72950c9dc791d771acc24c08cdb6ef24c813d082a86d9b879bdf5aefdfd905a2bd4ea36b0b54915a68fe149db154a8340017e1855511e9c0fe62d0cf55"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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") 3m16.849341521s ago: executing program 5 (id=3057): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000680)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xe7c) fallocate(r2, 0x8, 0x4000, 0x4000) setxattr$trusted_overlay_upper(&(0x7f0000001240)='./file1\x00', &(0x7f0000000180), &(0x7f0000000180)=ANY=[], 0x841, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0xfffffffffffffffc}, 0x18) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB], 0x6c}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_clone(0x20324000, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x10000000, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x0, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 3m16.464024064s ago: executing program 5 (id=3062): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) mount$9p_unix(&(0x7f0000003600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='.\x00', 0x0, 0x301200a, 0x0) 3m16.152039186s ago: executing program 5 (id=3064): close(0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) clock_gettime(0x0, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000003020102"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4004) recvmmsg(r2, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xd8, 0x3, 0x3, 0x101, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x9}, [@generic="be940d27fdc81885a2f01ff473a49caaf0c75c7a4b9b8f22439057a440313e653da844577735c5f1448570bad607f230ac81516ce1294bce721c8f56cfefa1fca62334bae02c6666da4f7a43e02fbee4dc888493a7b016fb5106581270d135b96fb429708b32b981b8d2c0a5f14181eea7e00c63f8261d4303d80ee64d63a353ab2093ec18aad36f00632c21de0fb4b48bb1c60f284e3c7a3ca5c242efea8575d04fb1103f3b029b88fdc8c296c76dcebe5851d85d424cda1ad66521d144ac25a0ae3666"]}, 0xd8}, 0x1, 0x0, 0x0, 0x80}, 0x4002000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='mm_page_alloc\x00', r3}, 0x10) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x4c004) 3m16.118710266s ago: executing program 35 (id=3064): close(0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) clock_gettime(0x0, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000003020102"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4004) recvmmsg(r2, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xd8, 0x3, 0x3, 0x101, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x9}, [@generic="be940d27fdc81885a2f01ff473a49caaf0c75c7a4b9b8f22439057a440313e653da844577735c5f1448570bad607f230ac81516ce1294bce721c8f56cfefa1fca62334bae02c6666da4f7a43e02fbee4dc888493a7b016fb5106581270d135b96fb429708b32b981b8d2c0a5f14181eea7e00c63f8261d4303d80ee64d63a353ab2093ec18aad36f00632c21de0fb4b48bb1c60f284e3c7a3ca5c242efea8575d04fb1103f3b029b88fdc8c296c76dcebe5851d85d424cda1ad66521d144ac25a0ae3666"]}, 0xd8}, 0x1, 0x0, 0x0, 0x80}, 0x4002000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='mm_page_alloc\x00', r3}, 0x10) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x4c004) 13.32976762s ago: executing program 0 (id=6699): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffc, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800", @ANYRES32, @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)='4', 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000080000000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020600) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r1, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendto(r2, &(0x7f00000005c0)="a1bfc48ba931fb1ceb70ba6de68925f84d607ce82b9339dda7f5adf00381be33ea1558c858be9d3a5b2aff8f4f59bd095d7034b500b19e0d0524e7bf37b4cec2aad04aacfac1eeca892aa86fe2f21df0a4619b459cb53e0cadf8e3486c5506c18326e1a39911052c19fee16f57ff67c91e3576d08cbca1dbfbdf03bc42498ba5fe9316ab4a80fdaab89a6461775b8f4f23b0f5", 0x93, 0x0, &(0x7f0000000700)=@ax25={{0x3, @bcast, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x4, 0x0, 0x2, 0x0, {0xa, 0x4e21, 0x8000, @empty}}}, 0x32) writev(r4, &(0x7f0000000180), 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000001800038014000200000074"], 0xe8}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad1f50ad32d3fd25dfd73a015e0ca6a0f68a7d007f15451dfb265a0e3ccae669e173a64bc1cfd5587d452d64e7cc957d77578f4c25235138d5521f9453559c35da860e8efbc64e57cbb7aee976f2b54421eed73d5661ca3dbe74bd09de8793dbcceef76b2e5feecf9c66c54c3b3ffe1b4ce25d7c983c044c06cd0a48dfe3e26e7a23129d6606fd28a69989d552af6d9a9df2c3af36e0360050011bbecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f163d1a13ed38ae82f87925bfacba83109753f541cd027edd68149ee99eebc6f7d6dd4aed4af7588c8e1b44ccb19e810879b70a7000000e7ffffff00000000d7900a820b63278f4e9a217b98ef7042ad2a92895614cd50cbe43a1ed25268816b00000000000009d27d753a30a147b24a48435bd8a568669596e9e0867958e1dd7a0defb6670c06054002238260000000000040587c1ed797aa21a38e1e389f640a0b8b0000000000a835ad0f61ba73c31b05c00fba8a4aee676d7c45bb29671a68ee2e60da7b01a2e5785a238afa4aba70c07fcd95bf8b0d71b6f72d6a8d87fb08533d97ad96d3943c4cc8306dac433a5cdf334178b04963d67dd5a5707e618a1ef9057fec00f9e930219fa8d30e716de8cde9c60f0000000c3b64d10f0939b42b788daa7075fa542242b00f6bf9b64ad460e386b6f388351fbdacb3ad074574ee9d450f9dcfaef1be95ff3c449e6482e4403174618c20e887d6f320616d31d78a0e5421d5742cc52509fd90cf2df6d1404f6b8f810d7b94d421971b77a3270153a0d57cccfe27872f3e8e44480f93c33421986a7737842627301fb2fee8cabab074adaa2024ff57e609ba2f4d83b3bbf52309484532416f48f43b31395c6f45fee8f1682a4e8d5e3b9ae634ed24fb0e8b5fadaf5cb7eea62b7bb4264e72950c9dc791d771acc24c08cdb6ef24c813d082a86d9b879bdf5aefdfd905a2bd4ea36b0b54915a68fe149db154a8340017e1855511e9c0fe62d0cf55"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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") 13.031935642s ago: executing program 0 (id=6703): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x8}, 0x94) r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x10e0, 0xb, 0x0, 0x7, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000030010000301020004"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r2, &(0x7f0000000040), 0x0}, 0x20) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/97, 0x1000000, 0x1000, 0x5, 0x1}, 0x20) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000180)={0x0, 0x1229000, 0x800, 0x5, 0x2}, 0x20) syz_emit_ethernet(0x7c, &(0x7f0000000080)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x7, 0x6, "1000", 0x46, 0x2f, 0xe78c6d029ffc7582, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x3, [0x1ff]}, {0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x6488, 0x88be, 0x4, {{0x5, 0x1, 0x3, 0x3, 0x1, 0x0, 0x0, 0x35}, 0x1, {0x4c28b}}}, {0x8, 0x22eb, 0x1, {{0xe, 0x2, 0x0, 0x1, 0x0, 0x3, 0x1, 0x4}, 0x2, {0x200004, 0x2, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095", @ANYRES16=r1, @ANYBLOB="00b4cb5eef584fb356a9045b9f365ef42dd708a97a05ac", @ANYRESHEX=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x200}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6(0xa, 0x80802, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0x1) sendmmsg$inet6(r6, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x1c000) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000001c0)={0x2000}) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f00000004c0)) sendmmsg$inet6(r6, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000011) signalfd4(r1, &(0x7f0000000000)={[0x7]}, 0x8, 0x80000) unshare(0x8040600) vmsplice(r5, 0x0, 0x0, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@ifindex, 0x2f, 0x0, 0x1, &(0x7f0000000680)=[0x0], 0x1, 0x0, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)={@map=r2, r0, 0x25, 0x34, 0x0, @void, @void, @void, @value, r8}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r9}, 0x10) 12.598145665s ago: executing program 0 (id=6715): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000200b703000000000000850000000400000018110000", @ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x60, &(0x7f0000001100)}, 0x10) socket(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) 12.201850628s ago: executing program 0 (id=6726): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000e40)={[{@bh}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYRES32], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) tkill(r2, 0x2f) ptrace$peeksig(0x4209, r2, &(0x7f0000000140)={0x1, 0x0, 0x7b}, &(0x7f0000000fc0)) socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000fc0)='syzkaller\x00', 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={0x0, r3, 0x0, 0x1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRESOCT=r1, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000004900000000000000010024ff"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x10}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a310000007a3200000000140000001100011d7bd310a1c63365275b73aa98383656588d5b7eaf46cc19d62374d36649755c2d76e76ab854776d0c2fcbb6e19d45dbbcea847d36f4311caf4f8f049660592f458b22708e81649146fa4fe9908d6751908a106fa8a9ac30d0c76f30c9cb822d07dba5dba6426684d47e59017d6f3f6ed7c18f7f09b9ee824cc842901d6db2cdc79513e3104a5674d8457c09934f96cca1"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000f40)=ANY=[@ANYBLOB="180000008000000000001f005c00e3ffff1711009d", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400080000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "565ce7f188af4657", "8a8aad46b407bb17499432673bdbc318", "6d692ddf", "5c4de1113881914e"}, 0x1f) 11.93445333s ago: executing program 0 (id=6732): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000240)=[{{&(0x7f00000007c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f0000000000)="53340081ba60ccbb9d000000000000", 0xf}], 0x2}}], 0x1, 0x4004040) 11.288488604s ago: executing program 0 (id=6739): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x7}, 0x20) 11.247440774s ago: executing program 36 (id=6739): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x7}, 0x20) 3.559214176s ago: executing program 1 (id=6891): copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000006c0)=0x8, 0x4, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @broadcast}, {0xfffe, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000500)=0x5, 0xe66, 0x2) r0 = openat$binfmt_format(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r0, &(0x7f0000001a80), 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0xa, 0x58740, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xa}, 0x0, 0x10000, 0x0, 0x8, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x8014, &(0x7f0000000100)={0xa, 0x4e23, 0x1, @loopback, 0x10000}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000640)={0x0, 0x6}, &(0x7f0000000680)=0x8) dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000000)="9c73dd586d791b571282308c2478d1a0170322429d98ebaca1dbdc619c9f73f05f4669430cf182e529b5ede0009b827b89f49544678b61507783f5cdfafa880b9599266597a804af", 0x48, 0x4, &(0x7f0000000080)={0xa, 0x4e23, 0x2, @mcast2, 0x40}, 0x1c) 3.434421797s ago: executing program 1 (id=6893): r0 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@local, 0x78, r1}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x100000000) syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x8b7c, 0x800, 0x200007, 0x22}, &(0x7f0000000940), &(0x7f0000000280)) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000001c0)={0x60, 0x3, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{0x7, 0x0, 0x83}, {0x5, 0x0, 0xb187}], 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x2, 0x5c}) r3 = gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002"], 0xb4}, 0x1, 0x0, 0x0, 0x400c0d1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000100)) timer_settime(0x0, 0x0, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001200), 0xa0000) read(r5, &(0x7f0000000200)=""/209, 0xd1) 2.576313743s ago: executing program 1 (id=6922): r0 = socket$igmp(0x2, 0x3, 0x2) io_uring_setup(0x7155, 0x0) setsockopt$MRT_FLUSH(r0, 0x0, 0xd0, 0x0, 0x0) 2.500185403s ago: executing program 1 (id=6923): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0, 0xfff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 2.499929653s ago: executing program 1 (id=6924): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)=0x0) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x8f) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000380)='sched_switch\x00', r5}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000000c0), 0x1, 0x560, &(0x7f00000003c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r6, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 1.281720691s ago: executing program 8 (id=6938): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0x700, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x400}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x8}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x9c}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x36}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0xe126}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040880}, 0x10000000) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000240)=r3) syz_open_pts(r0, 0x400000) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f00000002c0)={0x380, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_TX_RATES={0x354, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xd8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x2, 0x9}, {0x1, 0x7}, {0x6, 0x7}, {0x0, 0x3}, {0x3, 0x7}, {0x4, 0x2}, {0x1, 0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x0, 0x8}, {0x2, 0x4}, {0x3, 0x9}, {0x4}, {0x3, 0x7}, {0x5, 0x5}, {0x3, 0x7}, {0x3, 0x2}, {0x1, 0x2}, {0x3, 0x7}, {0x0, 0x6}, {0x5, 0x4}, {0x0, 0x1}, {0x1, 0x9}, {0x3, 0x9}, {0x5, 0xa}, {0x0, 0x2}, {0x4, 0x1}, {0x4, 0x4}, {0x7, 0x1}, {0x5, 0xa}, {0x7, 0x6}, {0x5, 0x6}, {0x3, 0x9}, {0x5, 0xa}, {0x5, 0x1}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0xa}, {0x2, 0x2}, {0x6, 0x4}, {0x5, 0x5}, {0x0, 0x8}, {0x5}, {0x6, 0x7}, {0x7, 0x9}, {0x7, 0x2}, {0x6, 0x4}, {0x7, 0x9}, {0x0, 0xa}, {0x3, 0x5}, {0x5, 0x7}, {0x2, 0x8}, {0x7, 0x1}, {0x3, 0xa}, {0x3, 0x3}, {0x5}, {0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x715, 0x200, 0x7, 0x3cf, 0x4, 0xb, 0xd, 0x4c47]}}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x7}, {0x2, 0x5}, {0x2, 0x1}, {0x2, 0x5}, {0x3, 0x4}, {0x6}, {0x4, 0xa}, {0x1, 0x9}, {}, {0x5, 0x5}, {0x0, 0xa}, {0x3, 0x3}, {0x3, 0x7}, {0x3, 0xa}, {0x2, 0x3}, {0x1, 0x4}, {0x0, 0xa}, {0x0, 0x2}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x4}, {0x3, 0x6}, {0x0, 0x8}, {0x4, 0x6}, {0x6, 0x2}, {0x5, 0x7}, {0x4, 0x2}, {0x6, 0x2}, {0x3, 0x2}, {0x7, 0x7}, {0x6, 0x4}, {0x6, 0x8}, {0x6, 0x3}, {0x3, 0x3}, {0x2, 0x3}, {0x1, 0x4}, {0x5}, {0x6}, {0x5, 0x1}, {0x3, 0x4}, {0x6, 0x7}, {0x2, 0x5}, {0x0, 0x1}, {0x7, 0xa}, {0x2, 0x9}, {0x1, 0x5}, {0x1, 0x9}, {0x4, 0xa}, {0x0, 0x2}, {0x0, 0x2}, {0x4, 0x5}, {}, {0x0, 0x2}, {0x7, 0x7}, {0x6, 0x9}, {0x3, 0x8}, {}, {0x5, 0x1}, {0x5, 0x4}, {0x6, 0x6}, {0x5, 0x8}, {0x4, 0xa}, {0x1, 0x8}, {0x2, 0x5}, {0x4, 0x8}, {0x5, 0x1}, {0x6, 0x3}, {0x1, 0x7}, {0x1, 0x1}, {0x7, 0x2}, {0x7, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7d22, 0x3, 0x0, 0x9, 0xaf, 0x6, 0xf8f8]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4, 0xd89, 0x7ff, 0xc6ab, 0x7, 0x9, 0x6]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x6, 0x3}, {0x4, 0xa}, {0x5, 0x7}, {0x3, 0x6}, {0x5, 0xa}, {0x4}, {0x4, 0x8}, {0x2, 0x4}, {0x2, 0x2}, {0x0, 0x4}, {0x6, 0x7}, {0x4}, {0x2, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x0, 0xc, 0x6, 0x36, 0x16, 0x9, 0x36, 0x12, 0x0, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x4, 0x1, 0x7, 0x0, 0x4, 0xffff, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0xb, 0x0, 0x9, 0x3, 0xfff9]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0xd8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x5, 0x5}, {0x6, 0x7}, {0x7, 0x7}, {0x6}, {0x2, 0x1}, {0x6, 0x8}, {0x4, 0x1}, {0x3, 0x7}, {0x6, 0x1}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x60, 0x12, 0x16, 0x5, 0x12, 0x5, 0x3, 0x6c, 0x48, 0x36, 0x3, 0x5, 0x30, 0x1b, 0x5, 0x1b, 0x1b, 0x5b4255f530ea9d18, 0x60, 0xc, 0x36, 0x6c, 0x60, 0x5, 0x12, 0x6, 0x16, 0x48, 0x5]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xc, 0x9, 0x3, 0xc, 0x6, 0xc, 0x18, 0x12, 0x19, 0x5, 0xc, 0x4, 0x1b, 0x9, 0x1, 0xc, 0x5, 0x22, 0x12, 0x1, 0x2, 0x18, 0x36]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf000, 0x2, 0x7, 0x0, 0x6, 0x10, 0x0, 0x5]}}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x7, 0x6}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x4}, {0x7, 0x4}, {0x5, 0x9}, {0x5}, {0x7}, {0x6, 0x2}, {0x1, 0x1}, {0x6, 0x9}, {0x3, 0x8}, {0x5, 0x9}, {0x0, 0xa}, {0x5, 0x4}, {0x0, 0x3}, {0x5, 0x8}, {0x3, 0x6}, {0x4, 0x3}, {0x5, 0x1}, {0x6, 0x3}, {0x0, 0x4}, {0x1, 0x4}, {0x3, 0x8}, {0x3, 0x4}, {0x0, 0x5}]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x7, 0x1}, {}, {0x3, 0x9}, {0x5, 0x6}, {0x7, 0x3}, {0x1}, {0x6, 0x2}, {0x4, 0x4}, {0x6, 0x4}, {0x0, 0x9}, {0x0, 0x8}, {}, {0x0, 0x3}, {0x2, 0x6}, {0x6, 0x1}, {0x7, 0x8}, {0x4, 0x3}, {0x1, 0x8}, {0x0, 0x5}, {0x5, 0x7}, {0x2, 0x2}, {0x5, 0x8}, {0x3}, {0x0, 0x1}, {}, {0x7, 0x4}, {0x0, 0x4}, {0x7, 0x2}, {0x5, 0x8}, {0x1, 0x4}, {0x0, 0x5}, {0x3}, {0x7, 0x7}, {}, {0x0, 0xa}, {0x4, 0x7}, {0x2, 0x2}, {0x1, 0xa}, {0x1, 0x7}, {0x0, 0x6}, {0x4, 0x9}, {0x4, 0x3}, {0x1, 0x1}, {0x2, 0x2}, {0x6}, {0x4, 0x4}, {0x6, 0x6}, {0x1, 0x2}, {0x3, 0xa}, {0x1, 0x8}, {0x1, 0x8}, {0x3, 0x3}]}]}, @NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x30, 0x9, 0x48, 0x6, 0xc, 0x24, 0xb, 0x30, 0x60, 0x6c, 0x2, 0x6, 0x4, 0x1, 0x16, 0x36, 0x6c, 0x4, 0x34, 0xc, 0x5, 0x6e, 0x18, 0x2, 0x3, 0x1]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x4, 0x2}, {0x1, 0x8}, {0x2, 0x4}, {0x4}, {0x3, 0x8}, {0x3, 0xa}, {0x4, 0x1}, {0x7, 0x5}, {0x4, 0xa}, {0x0, 0x6}, {0x6, 0x6}, {0x3, 0xa}, {0x4, 0x1}, {0x3}, {0x0, 0x9}, {0x4, 0x3}, {0x5, 0x6}, {0x3, 0xa}, {0x5, 0x5}, {0x7, 0x3}, {0x5, 0x2}, {0x7, 0x8}, {0x7, 0x5}, {0x1, 0x6}, {0x3, 0x6}, {0x7, 0x9}, {0x5, 0x9}, {0x4, 0x9}, {0x7, 0x4}, {0x5}, {0x4, 0x5}, {0x4, 0x9}, {0x4, 0x3}, {0x3, 0x9}, {0x6, 0x6}, {0x2, 0x6}, {0x5, 0x6}, {0x7, 0x8}, {0x1, 0x4}, {0x1}, {0x0, 0x5}, {0x3, 0x8}, {0x7, 0x2}, {0x6}, {0x5, 0x2}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0x3}, {0x1, 0x8}, {0x4, 0x4}, {0x7, 0x2}, {0x5, 0x6}, {0x1, 0x2}, {0x4, 0x6}, {0x4, 0x1}, {0x6, 0x2}, {0x6, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x2, 0xc473, 0xbeb, 0x8, 0x2, 0x5, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x40dbd783308d52c6}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x4, 0x9, 0x2, 0x24, 0x48]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7, 0x2, 0x8, 0x41, 0xf, 0x5, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x24f7, 0xbf, 0x763, 0x7cd3, 0x9, 0x8, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1, 0x7f, 0x6, 0x8, 0xf, 0x3ff, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0x7, 0x2, 0x6, 0x1, 0xff89, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, 0x380}, 0x1, 0x0, 0x0, 0x40}, 0x4808) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000740)={'wg0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000880)={'sit0\x00', &(0x7f0000000780)={'syztnl0\x00', 0x0, 0x80, 0x80, 0x8e7f, 0x3, {{0x35, 0x4, 0x3, 0x7, 0xd4, 0x67, 0x0, 0x4b, 0x0, 0x0, @loopback, @broadcast, {[@cipso={0x86, 0x57, 0x3, [{0x1, 0x6, "649c5662"}, {0x5, 0x11, "fb9782413344ba40b80b443f28b6bd"}, {0x6, 0xa, "112dca6ffb52204e"}, {0x2, 0x8, "64e379d11fee"}, {0x5, 0x8, "ec4a443a9d2b"}, {0x6, 0x12, "d5ee656b44edc59659ced88715489501"}, {0x7, 0x6, "3396bd4a"}, {0x1, 0x8, "27ae1ee84adf"}]}, @lsrr={0x83, 0x23, 0x93, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast1, @local, @loopback, @local, @loopback, @multicast1]}, @timestamp_prespec={0x44, 0x44, 0x7c, 0x3, 0x9, [{@local, 0xe8a}, {@multicast2, 0x2}, {@remote, 0x9}, {@empty, 0x8}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x9}, {@broadcast, 0x3}, {@broadcast, 0x7f}, {@multicast2, 0x4}]}, @noop]}}}}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000a00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xf8, r5, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xf0}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x131}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000a40)={'\x00', 0x8, 0x10001, 0x7, 0x1, 0x3, r4}) ptrace$setopts(0x4200, r8, 0x3, 0x2) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000ac0)={0x0, 0x8001, 0x1, 0x200}, &(0x7f0000000b00)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000b40)={r9, @in={{0x2, 0x4e20, @local}}}, &(0x7f0000000c00)=0x84) renameat(r0, &(0x7f0000000c40)='./file0\x00', r0, &(0x7f0000000c80)='./file0\x00') sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x2c, 0x2, 0x7, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r10 = syz_open_procfs(r4, &(0x7f0000000dc0)='net/ip_tables_names\x00') ioctl$BTRFS_IOC_BALANCE(r10, 0x5000940c, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000e00), r10) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r11, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x2c, r12, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x840) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x19) inotify_init() r13 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0xa340, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r13, &(0x7f0000003500)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000034c0)={&(0x7f0000001000)={0x24c0, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x34, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x2d, 0x4, "eec178d8694cc4bca589a4ff8ffdd631fc543314b4677fda4d979155ebd4d97e33aa93e5fa0e18555f"}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_FEATURES_WANTED={0x1294, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[.{\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_VALUE={0xf4, 0x4, "ebac86d3dc87727d09a1f4629628c968a97df3eca67b481c8181a09b386ad8c25aec3e922940614cb67f77f664fbfbe04af897639130c604c7c4f4876c8401489154d50d48c33afc16f63704df254eaba7d94f62ef35c9ca06e60dfaa904700e1946932a8819ad3d9981876d50b84a498a54efa4a5d8592360e309c0a7b26cdc5c406aeb0ebbe68bd0a3dd53915b5dec98ce67cb746f6cc9398ce905ca109e80528016d082b297e1c536d01d56c5f0eb00c9a4aa4fded554b07a15b8a88b853a92bf4fd9f26d7d404bfe200ec6f6496f5fa2246b72ced3f84fdb0bf86268ff8b4c3de922281629aa0131f90027ee157e"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xec, 0x4, "a73adddd9f10764de524549ade35c106b5103dc7403f01dd36080a02f8ff87fbf78edd5d6d3f88c027eca78d0d689371418301d6c7fedde418d5ef83adbef16fc563c27c91e16ebd3fb8b2d734db787092df2993aeac0088e85919f7bca70b323da86ff7f393b5a5fd714c40815756578556b449688b0a7233767498d0e6402e4bda3b49b728bd6ace68d1dc0a23e00452c0f043869ea1c568c4e7663954d68e2d5e0c0db7994e0545018cbd4bb20a9eea363fc29a0e706244faf2c1d4311f0796044bb71bbfc7ed4cff9a8447fdae1b4c422b065810aefb9aa32a96e7254a5acaddf8efb37f7868"}, @ETHTOOL_A_BITSET_MASK={0x46, 0x5, "4100c5ca0703e091e6b85c224d6fb739bb5e9612fdba0e8346e779050384c07efaf355328de2bbe1a8c140cc7f5149e3c78f8f214eeed3b6fb430075cd4e003a7fb9"}]}, @ETHTOOL_A_FEATURES_WANTED={0x10c8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x6f, 0x5, "f1f5b4af33c6e41c6115bef746fc59e985c7f27e1f542819111153975ea9ec3f85b3bc4ef67a34d48b2ad7766832664c059e38f027b3bf490b305e6b78ffe9b0de6ac1b8a30e05ceaaad6487eabc2b0dd82a00ad45f510cec2b53c2906fc223dde24ce5edc1b49f8f522ab"}, @ETHTOOL_A_BITSET_VALUE={0x4e, 0x4, "556e1ea094146b06b6bc0a5d1e8c95b645646048376bbead125358b9ec98ea9667ac8a42677a0d0b5ece2ba3498d6a859302e339ebef207e97b46d9a94680af50a5791149457c6feb9c3"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}]}]}, 0x24c0}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) 1.225949792s ago: executing program 8 (id=6939): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000240)=[{{&(0x7f00000007c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f0000000000)="53340081ba60ccbb9d000000000000", 0xf}], 0x2}}, {{&(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000780)="5825be06000000000000007ca2746314d178", 0x12}, {&(0x7f0000000300)="010f208434bca5a9473166c6c68f4ad51253b2980231eb157798b41aa0c235", 0x1f}], 0x2}}], 0x2, 0x4004040) 1.224915852s ago: executing program 8 (id=6940): r0 = dup(0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000100)) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) read$qrtrtun(r2, 0x0, 0xeffd) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) fallocate(0xffffffffffffffff, 0x0, 0xeffb, 0x9) sendmsg$inet6(r4, &(0x7f0000000100)={&(0x7f00000001c0)={0xa, 0x80c6, 0x2, @remote, 0xfffffffd}, 0x18, 0x0, 0x0, &(0x7f00000004c0)=[@tclass={{0x14, 0x29, 0x43, 0xfffffffe}}], 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000300)={0xd, {{0x2, 0x4e21, @empty}}}, 0x88) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r3, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xfa, &(0x7f0000000640)=[{}, {}], 0x10, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x86, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_ext={0x1c, 0x19, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000fcffffff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008710ffff08000000852000000100925f0000000020646c2500000000002020207b1af8ff00000000bfa1000000001d3272200000f8ffffffb702000008000000b7030000090000008500000006000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000980)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000009c0)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x1c9b6, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)=[r0, r0], 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0xb, 0xd, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000}, [@map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x6}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xa}]}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x34, &(0x7f0000000080)=""/52, 0x41100, 0x5, '\x00', r6, @fallback=0x11, r0, 0x8, &(0x7f0000000480)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0x7, 0x9, 0x9}, 0x10, r7, r8, 0x3, 0x0, &(0x7f0000000b00)=[{0x3, 0x2, 0x9, 0xc}, {0x0, 0x5, 0xe, 0xb}, {0x2, 0x5, 0x8, 0xb}], 0x10, 0x9}, 0x94) 927.855454ms ago: executing program 7 (id=6944): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r1}) 917.992454ms ago: executing program 7 (id=6945): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000ae000000b703000007000000850000000e000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x15, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 898.218054ms ago: executing program 7 (id=6946): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000000)='net/raw6\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdc02}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000140)='device_pm_callback_start\x00', 0xffffffffffffffff, 0x0, 0x8000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) uname(0x0) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000480)={0x77359400}, &(0x7f00000004c0)={[0x1b94]}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x1ffffffffffffffd}, 0x59) pipe2(&(0x7f0000001cc0), 0x800) set_robust_list(&(0x7f0000000100)={&(0x7f0000000040)={&(0x7f0000000000)}, 0x1, &(0x7f00000000c0)={&(0x7f0000000080)}}, 0x18) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = gettid() fcntl$setownex(r5, 0xf, &(0x7f0000000180)={0x1, r6}) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) readv(r8, &(0x7f0000000300)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1) 853.793844ms ago: executing program 9 (id=6948): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0, 0xfff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 804.427835ms ago: executing program 9 (id=6949): copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000006c0)=0x8, 0x4, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @broadcast}, {0xfffe, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000500)=0x5, 0xe66, 0x2) r0 = openat$binfmt_format(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r0, &(0x7f0000001a80), 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0xa, 0x58740, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xa}, 0x0, 0x10000, 0x0, 0x8, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x8014, &(0x7f0000000100)={0xa, 0x4e23, 0x1, @loopback, 0x10000}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000640)={0x0, 0x6}, &(0x7f0000000680)=0x8) dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000000)="9c73dd586d791b571282308c2478d1a0170322429d98ebaca1dbdc619c9f73f05f4669430cf182e529b5ede0009b827b89f49544678b61507783f5cdfafa880b9599266597a804af", 0x48, 0x4, &(0x7f0000000080)={0xa, 0x4e23, 0x2, @mcast2, 0x40}, 0x1c) 735.791265ms ago: executing program 9 (id=6952): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x28, 0x0, &(0x7f0000000000)='GPL\x00', 0x38, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0x7fc, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c, &(0x7f0000000c40)=[{0x0}], 0x1}}], 0x1, 0x20080058) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0xffff, 0xb7, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a1e03558545115509e1c34caab9", "59f7766d", "5e33931677e0f2d7"}, 0x28) close(0xffffffffffffffff) 700.323776ms ago: executing program 9 (id=6953): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='kmem_cache_free\x00', r1}, 0x18) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES16=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r5}, 0x10) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) connect$netlink(0xffffffffffffffff, &(0x7f0000000300)=@proc={0x10, 0x0, 0x25dfdffc}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000005900000095"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r8}, 0x9) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r9 = io_uring_setup(0x330b, &(0x7f0000000640)={0x0, 0xffffffee, 0x1, 0x103fc, 0x14e}) close_range(r9, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 616.988746ms ago: executing program 4 (id=6954): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000000240)=[{{&(0x7f00000007c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f0000000000)="53340081ba60ccbb9d000000000000", 0xf}], 0x2}}, {{&(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000780)="5825be06000000000000007ca2746314d178", 0x12}, {&(0x7f0000000300)="010f208434bca5a9473166c6c68f4ad51253b2980231eb157798b41aa0c23506d3f69ec77148fbae83bd9245a82a29222b52ce85a2e23901e45f46aeed7c87afb212affe97471e94eae0e97bddacd8dd4ed219b413e4f663a43105879714a3809dd78d36230c67d9b44a6e44d68f95896b8cc9155293b639bd948833c8a78028a3c777af21f409f2de86f9bf6a131b9c7de7b5e30d1ccd9868d42c79573931a4f9d2a5f618229c9fc1e767c87c0000c6c36e71a057e8f336692b31451b9dd08d429fa211969ed06b2023a88e554d01062c5b8b5592176cb207c93cd2297f714ad92f29523e72815eba928ba6a9f3ff73d080", 0xf2}], 0x2}}], 0x2, 0x4004040) 613.918556ms ago: executing program 1 (id=6955): r0 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@local, 0x78, r1}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x100000000) syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x8b7c, 0x800, 0x200007, 0x22}, &(0x7f0000000940), &(0x7f0000000280)) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000001c0)={0x60, 0x3, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{0x7, 0x0, 0x83}, {0x5, 0x0, 0xb187}], 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x2, 0x5c}) r3 = gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002"], 0xb4}, 0x1, 0x0, 0x0, 0x400c0d1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000100)) timer_settime(0x0, 0x0, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001200), 0xa0000) read(r5, &(0x7f0000000200)=""/209, 0xd1) 592.615456ms ago: executing program 4 (id=6956): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000ae000000b703000007000000850000000e000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x15, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 511.319417ms ago: executing program 4 (id=6957): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18655ffb00000000000000181100000008000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r3}, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1d, 0x4, 0x5c, 0x4, 0x7a402, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x0, 0x0, @value=r3, @void, @value=r4}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x18) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000f20a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}}]}, 0x0, 0xcc11, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffe}, 0x94) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r8, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 507.821737ms ago: executing program 4 (id=6958): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) bind$can_j1939(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x404c083}, 0x20000050) 452.030877ms ago: executing program 4 (id=6959): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) 446.111307ms ago: executing program 9 (id=6960): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0, 0xfff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 433.260577ms ago: executing program 4 (id=6961): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_usb_connect$cdc_ncm(0x2, 0x73, &(0x7f0000000700)={{0x12, 0x1, 0x671ee721b486137a, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0x1, 0x38, 0x50, 0xb, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x8e61, 0x30, 0x1c, 0x4}, {0x6, 0x24, 0x1a, 0x2, 0x519e44e6a144706a}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x57}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x92, 0x6, 0xe}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x7, 0x1, 0x5d}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xf0, 0xf4, 0xa1}}}}}}}]}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4000004}, 0x10) write(r1, &(0x7f0000000080)="240000001a007f0214f9f407000904080a000000000000050002000008000f40a600000e", 0x24) 384.193947ms ago: executing program 9 (id=6962): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_usb_connect$cdc_ncm(0x2, 0x73, &(0x7f0000000700)={{0x12, 0x1, 0x671ee721b486137a, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0x1, 0x38, 0x50, 0xb, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x8e61, 0x30, 0x1c, 0x4}, {0x6, 0x24, 0x1a, 0x2, 0x519e44e6a144706a}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x57}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x92, 0x6, 0xe}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x7, 0x1, 0x5d}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xf0, 0xf4, 0xa1}}}}}}}]}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4000004}, 0x10) write(r1, &(0x7f0000000080)="240000001a007f0214f9f407000904080a000000000000050002000008000f40a600000e", 0x24) 375.938998ms ago: executing program 8 (id=6963): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000020000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 358.986338ms ago: executing program 8 (id=6964): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000001500)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES16=r0], 0xff, 0x2b6, &(0x7f00000008c0)="$eJzs3M1qE1EUwPGTj2bSSj9Wgm486EY3Q41LFRqlBTGgpI2oC2FKpxoSkzITNBHBrF3V1yguXSmIL9C9D+CuCNJVV450MhknMf0wxkTT/w/K3HvP3PTcXArnFmZ27m8+La275rpVk3haJS7SlD2ROSlKWyy4pvx2KhyX6xlpyqX5Z7uvlx88vJ3N5RbzqkvZlSsZVZ059/H5y7fnP9VO3Xs3YxiyPfdo51vmy/bp7TM731eeFF0tulqp1tTS1Wq1Zq2WbV0ruiVT9W7ZtlxbixXXdjri6+XqxkZDrcra9NSGY7uuWpWGxqWhtaqmg6wqapqmTk/tt9NygqR+e0ZhK5+3sj1DJ+qbG2+Ok7USIjL5y54WtkaTEQAAGKWD6/94eE+7/o931f9vPDmi/n8V3DnzYeD1f0LC+r9k+/V/zWmo9dgqRut/HKqw0Fn/LxxrVvzvJYR+xZqRzo2OkONkJ3tPov4HAAAAAAAAAAAAAAAAAAAAAOB/sOd5s57nze5f4yLiBX1DRBKRfo+pPCE+BqL770V+jGCDD9l/jAH/wb33sphXTYt8bdYL9ULMv7biS7dyi/Pqi7xeYrdeLyTC+OVWXDvjEzIVxDM94ym5eKEV34/dvJOLxjfrhUlZ68o10dFrDvJrAAAAAABgrJkamgsH0xKe701TDemO++d3v5EUkfb/B7rO90k5mxziQgAAAAAAwIHcxouSVS7bznAaiSH+rr4bIv1Nv+oZA0kjISKRESPYqug9+WWRwS05JUcuWY/1gYbY7WyHu3Gfs31OTw491T9sXBvYB3oxkdbIRLBnXX8FAAAAAMbLz/PAqDMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODkGsary0a9RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBf8SMAAP//kduzXw==") r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x7b1, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x50) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x6, 0xd, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_fd={0x18, 0x8, 0x1, 0x0, r1}]}, &(0x7f0000000040)='syzkaller\x00', 0x8000, 0xed, &(0x7f00000002c0)=""/237, 0x61980, 0x4, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000200)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0xe, 0x4, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[0x1, r3, r5], 0x0, 0x10, 0x5}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) 268.014788ms ago: executing program 8 (id=6965): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) r3 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r5, &(0x7f0000002280)=@abs={0x1, 0x0, 0x4e22}, 0x6e) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getrandom(0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000c0000000b"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0x20000000000000b9, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = getpid() fcntl$lock(r1, 0x21, &(0x7f0000000380)={0x2, 0x2, 0xa, 0x7, r11}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r10}, 0x10) r12 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) write$binfmt_register(r12, &(0x7f00000004c0)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x6, 0x3a, '', 0x3a, 'b\x1b\xcd~;w\xaa\xae\x00\x00\x00', 0x3a, './file0', 0x3a, [0x50, 0x4f, 0x50, 0x43, 0x46]}, 0x37) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r13, 0x1, 0x1d, &(0x7f00000001c0), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x18) write$selinux_context(r3, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 36.00799ms ago: executing program 7 (id=6966): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x28, 0x0, &(0x7f0000000000)='GPL\x00', 0x38, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0x7fc, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000180)}], 0x1}}], 0x1, 0x20080058) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0xffff, 0xb7, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a1e03558545115509e1c34caab9", "59f7766d", "5e33931677e0f2d7"}, 0x28) close(0xffffffffffffffff) 17.95844ms ago: executing program 7 (id=6967): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000ae000000b703000007000000850000000e000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x15, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 0s ago: executing program 7 (id=6968): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) (async) process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) getpgrp(r2) (async) getpgrp(r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r3, 0x0, 0x1000000000000}, 0x18) (async) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r3, 0x0, 0x1000000000000}, 0x18) r5 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004", @ANYRES16=r4, @ANYRES8=r3], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000640)=0x13) (async) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000640)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xa) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xa) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000280)={0xfeff, 0x8, 0x8, 0xfffe, 0x11, "0100000000000080"}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$UHID_CREATE2(r6, &(0x7f00000002c0)=ANY=[@ANYRES8=r8, @ANYRESOCT=r9], 0x118) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) mlockall(0x7) (async) mlockall(0x7) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000006c0)=0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) r12 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) kernel console output (not intermixed with test programs): er_driver returned -16 [ 473.336072][T25507] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5847'. [ 473.434783][T25518] loop8: detected capacity change from 0 to 128 [ 473.446675][T25518] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 473.462121][T25426] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 473.471494][T25426] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 473.480716][T25426] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 473.490165][T25426] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 473.491321][T16434] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 473.536288][T25426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.548383][T25426] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.557614][T14834] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.564706][T14834] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.575732][ T7167] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.582878][ T7167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.604776][T25426] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 473.615392][T25426] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 473.637608][T25533] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5854'. [ 473.650021][T25533] loop8: detected capacity change from 0 to 512 [ 473.656662][T25533] EXT4-fs: Ignoring removed nobh option [ 473.669108][T25533] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #3: comm syz.8.5854: corrupted inode contents [ 473.681256][T25533] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #3: comm syz.8.5854: mark_inode_dirty error [ 473.681996][T25426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.697515][T25533] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #3: comm syz.8.5854: corrupted inode contents [ 473.711624][T25533] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #3: comm syz.8.5854: mark_inode_dirty error [ 473.723290][T25533] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.5854: Failed to acquire dquot type 0 [ 473.735254][T25533] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.5854: corrupted inode contents [ 473.747486][T25533] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #16: comm syz.8.5854: mark_inode_dirty error [ 473.759263][T25533] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.5854: corrupted inode contents [ 473.771650][T25533] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #16: comm syz.8.5854: mark_inode_dirty error [ 473.783306][T25533] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.5854: corrupted inode contents [ 473.795422][T25533] EXT4-fs error (device loop8) in ext4_orphan_del:301: Corrupt filesystem [ 473.795584][T25426] veth0_vlan: entered promiscuous mode [ 473.804373][T25533] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.5854: corrupted inode contents [ 473.813948][T25426] veth1_vlan: entered promiscuous mode [ 473.821939][T25533] EXT4-fs error (device loop8): ext4_truncate:4637: inode #16: comm syz.8.5854: mark_inode_dirty error [ 473.838322][T25533] EXT4-fs error (device loop8) in ext4_process_orphan:343: Corrupt filesystem [ 473.847987][T25533] EXT4-fs (loop8): 1 truncate cleaned up [ 473.854147][T25533] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 473.861585][T25426] veth0_macvtap: entered promiscuous mode [ 473.883054][T25426] veth1_macvtap: entered promiscuous mode [ 473.901000][T25426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.913883][T25426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.928190][ T7167] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.939373][ T7167] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.948762][T25549] tipc: Enabled bearer , priority 0 [ 473.949679][T16434] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.955596][ T7167] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.975174][ T7167] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.986085][T25549] tipc: Disabling bearer [ 474.060994][T25559] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5859'. [ 474.161359][T25568] loop0: detected capacity change from 0 to 512 [ 474.197579][T25568] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 474.229510][T25568] EXT4-fs (loop0): orphan cleanup on readonly fs [ 474.263110][T25568] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.5862: corrupted inode contents [ 474.265496][T25578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.275995][T25568] EXT4-fs (loop0): Remounting filesystem read-only [ 474.284758][T25578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.307947][T25568] EXT4-fs (loop0): 1 truncate cleaned up [ 474.313909][ T7167] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 474.324510][ T7167] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 474.347352][ T7167] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 474.358197][T25568] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 474.383196][T14954] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.417538][ T3735] hid_parser_main: 8 callbacks suppressed [ 474.417560][ T3735] hid-generic 0003:80000004:0000.0006: unknown main item tag 0x0 [ 474.431118][ T3735] hid-generic 0003:80000004:0000.0006: unknown main item tag 0x0 [ 474.438933][ T3735] hid-generic 0003:80000004:0000.0006: unknown main item tag 0x0 [ 474.446705][ T3735] hid-generic 0003:80000004:0000.0006: unknown main item tag 0x0 [ 474.454609][ T3735] hid-generic 0003:80000004:0000.0006: unknown main item tag 0x0 [ 474.462401][ T3735] hid-generic 0003:80000004:0000.0006: unknown main item tag 0x0 [ 474.470201][ T3735] hid-generic 0003:80000004:0000.0006: unknown main item tag 0x0 [ 474.478207][ T3735] hid-generic 0003:80000004:0000.0006: unknown main item tag 0x0 [ 474.486158][ T3735] hid-generic 0003:80000004:0000.0006: unknown main item tag 0x0 [ 474.494210][ T3735] hid-generic 0003:80000004:0000.0006: unknown main item tag 0x0 [ 474.507988][ T3735] hid-generic 0003:80000004:0000.0006: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 474.599085][T25601] tipc: Enabled bearer , priority 0 [ 474.609402][T25601] tipc: Disabling bearer [ 474.647230][T22276] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.662094][T25582] chnl_net:caif_netlink_parms(): no params data found [ 474.695596][T22276] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.723459][T25582] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.730794][T25582] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.738692][T25582] bridge_slave_0: entered allmulticast mode [ 474.745454][T25582] bridge_slave_0: entered promiscuous mode [ 474.753905][T22276] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.765583][T25582] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.772876][T25582] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.780514][T25582] bridge_slave_1: entered allmulticast mode [ 474.787641][T25582] bridge_slave_1: entered promiscuous mode [ 474.818209][T25582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.831369][T22276] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.844360][T25582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.857626][T25613] loop0: detected capacity change from 0 to 736 [ 474.888003][T25582] team0: Port device team_slave_0 added [ 474.894929][T25582] team0: Port device team_slave_1 added [ 474.913334][T25582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.920383][T25582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.946487][T25582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.958103][T25582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.965067][T25582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.991083][T25582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.034447][T25582] hsr_slave_0: entered promiscuous mode [ 475.044987][T25582] hsr_slave_1: entered promiscuous mode [ 475.051151][T25582] debugfs: 'hsr0' already exists in 'hsr' [ 475.056922][T25582] Cannot create hsr debugfs directory [ 475.079873][T25625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.088519][T25625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.101066][T22276] bridge_slave_1: left allmulticast mode [ 475.106779][T22276] bridge_slave_1: left promiscuous mode [ 475.112680][T22276] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.126635][T22276] bridge_slave_0: left allmulticast mode [ 475.132456][T22276] bridge_slave_0: left promiscuous mode [ 475.138270][T22276] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.270075][T22276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.280489][T22276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.290378][T22276] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 475.299414][T22276] bond0 (unregistering): Released all slaves [ 475.308076][T22276] bond1 (unregistering): Released all slaves [ 475.317049][T22276] bond2 (unregistering): Released all slaves [ 475.329940][T25632] tipc: Enabled bearer , priority 0 [ 475.352599][T25631] tipc: Disabling bearer [ 475.365963][T22276] tipc: Left network mode [ 475.436510][ T29] kauditd_printk_skb: 587 callbacks suppressed [ 475.436524][ T29] audit: type=1326 audit(988.414:26191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25638 comm="syz.7.5883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b89bbefc9 code=0x7ffc0000 [ 475.466402][ T29] audit: type=1326 audit(988.414:26192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25638 comm="syz.7.5883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8b89bbefc9 code=0x7ffc0000 [ 475.489571][ T29] audit: type=1326 audit(988.414:26193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25638 comm="syz.7.5883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8b89bbf003 code=0x7ffc0000 [ 475.512723][ T29] audit: type=1326 audit(988.414:26194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25638 comm="syz.7.5883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8b89bbda7f code=0x7ffc0000 [ 475.535579][ T29] audit: type=1326 audit(988.414:26195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25638 comm="syz.7.5883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f8b89bbf057 code=0x7ffc0000 [ 475.558596][ T29] audit: type=1326 audit(988.434:26196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25638 comm="syz.7.5883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8b89bbd810 code=0x7ffc0000 [ 475.581666][ T29] audit: type=1326 audit(988.434:26197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25638 comm="syz.7.5883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8b89bbdc2a code=0x7ffc0000 [ 475.604495][ T29] audit: type=1326 audit(988.434:26198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25638 comm="syz.7.5883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b89bbefc9 code=0x7ffc0000 [ 475.627531][ T29] audit: type=1326 audit(988.434:26199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25638 comm="syz.7.5883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b89bbefc9 code=0x7ffc0000 [ 475.650693][ T29] audit: type=1326 audit(988.434:26200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25638 comm="syz.7.5883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8b89bbefc9 code=0x7ffc0000 [ 475.678291][T22276] hsr_slave_0: left promiscuous mode [ 475.684013][T22276] hsr_slave_1: left promiscuous mode [ 475.691210][T22276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.698685][T22276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.716421][T22276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.723970][T22276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.744126][T22276] veth1_macvtap: left promiscuous mode [ 475.749769][T22276] veth0_macvtap: left promiscuous mode [ 475.755417][T22276] veth1_vlan: left promiscuous mode [ 475.761000][T22276] veth0_vlan: left promiscuous mode [ 475.798585][T25655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5885'. [ 475.884140][T22276] team0 (unregistering): Port device team_slave_1 removed [ 475.894264][T22276] team0 (unregistering): Port device team_slave_0 removed [ 476.005688][T25664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5892'. [ 476.076711][T25672] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.5895' sets config #-1 [ 476.086720][T25672] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.5895' sets config #1 [ 476.115772][T25674] loop0: detected capacity change from 0 to 128 [ 476.124727][T25674] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 476.166384][T14954] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 476.209911][T25680] loop0: detected capacity change from 0 to 512 [ 476.216753][T25680] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 476.217673][T25582] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 476.233983][T25680] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm wÞ££‘: invalid indirect mapped block 4294967295 (level 0) [ 476.248667][T25680] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm wÞ££‘: invalid indirect mapped block 4294967295 (level 1) [ 476.250122][T25582] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 476.263899][T25680] EXT4-fs (loop0): 1 orphan inode deleted [ 476.275026][T25680] EXT4-fs (loop0): 1 truncate cleaned up [ 476.281166][T25680] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.282939][T25582] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 476.303100][T25582] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 476.312538][T25680] bridge: RTM_NEWNEIGH with invalid ether address [ 476.335491][T14954] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.354088][T25582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.368676][T25582] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.378818][T25691] loop0: detected capacity change from 0 to 512 [ 476.380345][ T7167] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.392330][ T7167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.404233][T22276] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.404497][T25691] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.411380][T22276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.453652][T25582] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 476.464098][T25582] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 476.524524][T25582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.568938][T25702] xt_hashlimit: max too large, truncated to 1048576 [ 476.576244][T25702] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 476.689888][T25582] veth0_vlan: entered promiscuous mode [ 476.703130][T25582] veth1_vlan: entered promiscuous mode [ 476.722459][T25718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5903'. [ 476.735097][T25582] veth0_macvtap: entered promiscuous mode [ 476.749786][T14954] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.775797][T25582] veth1_macvtap: entered promiscuous mode [ 476.789207][T25582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.801556][T25582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.812844][ T7171] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.822298][ T7171] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.846689][ T7171] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.866150][ T7171] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.906751][T25724] loop0: detected capacity change from 0 to 512 [ 476.920601][T25724] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5905: bg 0: block 248: padding at end of block bitmap is not set [ 476.948086][T25724] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.5905: Failed to acquire dquot type 1 [ 476.969527][T25724] EXT4-fs (loop0): 1 truncate cleaned up [ 476.988311][T25724] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.029975][T25737] loop8: detected capacity change from 0 to 512 [ 477.050878][T25737] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.069224][T14954] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.327915][T25744] xt_hashlimit: max too large, truncated to 1048576 [ 477.344072][T25744] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 477.381327][T25745] chnl_net:caif_netlink_parms(): no params data found [ 477.429352][T25745] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.436457][T25745] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.461909][T25745] bridge_slave_0: entered allmulticast mode [ 477.474328][T16434] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.483902][T25745] bridge_slave_0: entered promiscuous mode [ 477.491561][T25745] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.498808][T25745] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.506168][T25745] bridge_slave_1: entered allmulticast mode [ 477.512873][T25745] bridge_slave_1: entered promiscuous mode [ 477.545543][T25745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.567855][T25745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.607792][T25745] team0: Port device team_slave_0 added [ 477.626368][T25745] team0: Port device team_slave_1 added [ 477.648414][T25745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.655485][T25745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.681762][T25745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.703618][T25778] xt_hashlimit: max too large, truncated to 1048576 [ 477.711437][T25778] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 477.721162][T25745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.728173][T25745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.754218][T25745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.784579][T25745] hsr_slave_0: entered promiscuous mode [ 477.790935][T25745] hsr_slave_1: entered promiscuous mode [ 477.796958][T25745] debugfs: 'hsr0' already exists in 'hsr' [ 477.802766][T25745] Cannot create hsr debugfs directory [ 477.872397][T25745] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.909063][T25745] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.959054][T25745] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.999923][T25745] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.081085][T25745] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 478.090777][T25745] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 478.100223][T25745] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 478.110042][T25745] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 478.135837][T25793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.136118][T25745] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.151348][T25745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.158803][T25745] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.165863][T25745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.172076][T25793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.185873][ T7167] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.195213][ T7167] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.229586][T25745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.252635][T25745] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.279742][ T7171] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.286889][ T7171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.298245][ T7167] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.305415][ T7167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.389711][T25745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.468448][T25745] veth0_vlan: entered promiscuous mode [ 478.483766][T25745] veth1_vlan: entered promiscuous mode [ 478.510618][T25745] veth0_macvtap: entered promiscuous mode [ 478.520600][T25745] veth1_macvtap: entered promiscuous mode [ 478.545815][T25745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.561201][T25745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.578252][ T7167] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.597356][ T7167] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.614774][ T7167] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.638529][ T7167] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.943779][T25832] tipc: Enabled bearer , priority 0 [ 478.961691][T25832] tipc: Disabling bearer [ 479.163057][T25844] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.5938' sets config #-1 [ 479.195758][T25844] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.5938' sets config #1 [ 479.210646][T25847] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.5939' sets config #1 [ 479.317915][T25860] tipc: Started in network mode [ 479.322871][T25860] tipc: Node identity 46084e207f72, cluster identity 4711 [ 479.330197][T25860] tipc: Enabled bearer , priority 0 [ 479.338935][T25860] tipc: Disabling bearer [ 479.421059][T25864] loop0: detected capacity change from 0 to 512 [ 479.458219][T25864] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 479.466382][T25864] EXT4-fs (loop0): orphan cleanup on readonly fs [ 479.490650][T25864] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.5948: corrupted inode contents [ 479.504267][T25864] EXT4-fs (loop0): Remounting filesystem read-only [ 479.511075][T25864] EXT4-fs (loop0): 1 truncate cleaned up [ 479.517421][ T7167] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 479.528116][ T7167] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 479.611024][ T7167] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 479.628159][T25864] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 479.658259][T25745] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.769225][T25873] loop0: detected capacity change from 0 to 512 [ 479.811235][T25873] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5949: bg 0: block 248: padding at end of block bitmap is not set [ 479.844330][T25873] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.5949: Failed to acquire dquot type 1 [ 479.867924][T25873] EXT4-fs (loop0): 1 truncate cleaned up [ 479.873978][T25873] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.926364][T25881] hub 1-0:1.0: USB hub found [ 479.931595][T25881] hub 1-0:1.0: 8 ports detected [ 479.938039][T25873] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.996777][T25887] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.5954' sets config #1 [ 480.074851][T25893] tipc: Enabled bearer , priority 0 [ 480.092999][T25893] tipc: Disabling bearer [ 480.198583][T25903] loop0: detected capacity change from 0 to 128 [ 480.280324][T25903] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 480.450736][ T29] kauditd_printk_skb: 516 callbacks suppressed [ 480.450751][ T29] audit: type=1400 audit(993.434:26707): avc: denied { create } for pid=25912 comm="syz.4.5966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 480.576315][ T29] audit: type=1400 audit(993.454:26708): avc: denied { write } for pid=25912 comm="syz.4.5966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 480.595347][ T29] audit: type=1400 audit(993.524:26709): avc: denied { read write } for pid=16434 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 480.619109][ T29] audit: type=1400 audit(993.524:26710): avc: denied { open } for pid=16434 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 480.642823][ T29] audit: type=1400 audit(993.524:26711): avc: denied { ioctl } for pid=16434 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 480.653515][T25920] hub 1-0:1.0: USB hub found [ 480.703200][T25920] hub 1-0:1.0: 8 ports detected [ 480.741408][ T29] audit: type=1400 audit(993.584:26712): avc: denied { create } for pid=25918 comm="syz.4.5969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 480.760640][ T29] audit: type=1400 audit(993.634:26713): avc: denied { write } for pid=25916 comm="syz.8.5968" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 480.786080][ T29] audit: type=1400 audit(993.744:26714): avc: denied { read write } for pid=25921 comm="syz.4.5970" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 480.810173][ T29] audit: type=1400 audit(993.744:26715): avc: denied { open } for pid=25921 comm="syz.4.5970" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 480.834949][ T29] audit: type=1400 audit(993.744:26716): avc: denied { create } for pid=25921 comm="syz.4.5970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 480.892023][T25931] loop8: detected capacity change from 0 to 1024 [ 480.915485][T25927] xt_hashlimit: max too large, truncated to 1048576 [ 480.925482][T25931] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 480.931817][T25927] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 480.985244][ T7159] Bluetooth: hci0: Frame reassembly failed (-84) [ 481.063218][T25745] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 481.277218][T25954] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.5978' sets config #1 [ 481.377000][T25960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.385670][T25960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.619211][T22276] bond0 (unregistering): Released all slaves [ 481.628731][T22276] bond1 (unregistering): Released all slaves [ 481.669810][T22276] tipc: Disabling bearer [ 481.674868][T22276] tipc: Left network mode [ 481.686351][T22276] hsr_slave_0: left promiscuous mode [ 481.698051][T22276] hsr_slave_1: left promiscuous mode [ 481.703789][T22276] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 481.710930][T22276] batman_adv: batadv0: Removing interface: veth1_vlan [ 481.719842][T22276] veth1_macvtap: left promiscuous mode [ 481.725412][T22276] veth0_macvtap: left promiscuous mode [ 481.731066][T22276] veth1_vlan: left promiscuous mode [ 481.736417][T22276] veth0_vlan: left promiscuous mode [ 481.829223][T17052] infiniband syz1: ib_query_port failed (-19) [ 481.864040][T25969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5985'. [ 482.043641][T25980] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.5989' sets config #1 [ 482.273818][T25996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.282530][T25996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.037803][ T5900] Bluetooth: hci0: command 0x1003 tx timeout [ 483.044090][ T4891] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 483.069461][T16434] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.403529][T26038] loop8: detected capacity change from 0 to 512 [ 483.416094][T26038] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.6015: inode has both inline data and extents flags [ 483.429755][T26038] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.6015: couldn't read orphan inode 15 (err -117) [ 483.442788][T26038] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.498729][T26050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.507489][T26050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.032732][T26068] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6025'. [ 484.186052][T26085] hub 1-0:1.0: USB hub found [ 484.194978][T26085] hub 1-0:1.0: 8 ports detected [ 484.276401][T16434] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.358988][T26094] loop8: detected capacity change from 0 to 512 [ 484.378892][T26094] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 484.395405][T26094] EXT4-fs (loop8): orphan cleanup on readonly fs [ 484.408358][T26098] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6039'. [ 484.433247][T26094] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.6037: corrupted inode contents [ 484.450153][T26094] EXT4-fs (loop8): Remounting filesystem read-only [ 484.459445][T26094] EXT4-fs (loop8): 1 truncate cleaned up [ 484.465751][T22266] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 484.476357][T22266] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 484.506340][T22266] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 484.527789][T26094] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 484.558302][T26112] hub 1-0:1.0: USB hub found [ 484.565413][T26112] hub 1-0:1.0: 8 ports detected [ 484.615602][T16434] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.663794][T26122] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.6050' sets config #-1 [ 484.677591][T26122] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.6050' sets config #1 [ 484.727609][T26129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6052'. [ 484.743411][T26131] loop8: detected capacity change from 0 to 1024 [ 484.758851][T26131] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 484.828694][T26138] xt_hashlimit: max too large, truncated to 1048576 [ 484.840265][T26138] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 485.270312][T26153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.279027][T26153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.459370][T26157] loop0: detected capacity change from 0 to 512 [ 485.479038][T26157] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.512320][ T29] kauditd_printk_skb: 349 callbacks suppressed [ 485.512394][ T29] audit: type=1400 audit(998.494:27060): avc: denied { create } for pid=26156 comm="syz.0.6062" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 485.546211][ T29] audit: type=1400 audit(998.524:27061): avc: denied { read write } for pid=26156 comm="syz.0.6062" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 485.568687][ T29] audit: type=1400 audit(998.524:27062): avc: denied { open } for pid=26156 comm="syz.0.6062" path="/28/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 485.591460][ T29] audit: type=1400 audit(998.534:27063): avc: denied { append } for pid=26156 comm="syz.0.6062" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 485.614349][ T29] audit: type=1400 audit(998.574:27064): avc: denied { setattr } for pid=26156 comm="syz.0.6062" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 485.691419][ T29] audit: type=1326 audit(998.674:27065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26163 comm="syz.1.6065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a8b3efc9 code=0x7ffc0000 [ 485.715161][ T29] audit: type=1326 audit(998.674:27066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26163 comm="syz.1.6065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a8b3efc9 code=0x7ffc0000 [ 485.738267][ T29] audit: type=1326 audit(998.674:27067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26163 comm="syz.1.6065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fe1a8b3efc9 code=0x7ffc0000 [ 485.761352][ T29] audit: type=1326 audit(998.674:27068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26163 comm="syz.1.6065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a8b3efc9 code=0x7ffc0000 [ 485.784441][ T29] audit: type=1326 audit(998.674:27069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26163 comm="syz.1.6065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1a8b3efc9 code=0x7ffc0000 [ 485.864574][T26157] xt_hashlimit: max too large, truncated to 1048576 [ 485.872412][T26157] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 485.911585][T25745] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.955326][T26177] loop0: detected capacity change from 0 to 512 [ 486.000718][T26177] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.103990][T26188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.112519][T26188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.146206][T26189] xt_hashlimit: max too large, truncated to 1048576 [ 486.153587][T26189] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 486.267996][T25745] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.306071][T26193] loop0: detected capacity change from 0 to 512 [ 486.314254][T26193] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.6074: inode has both inline data and extents flags [ 486.327823][T26193] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.6074: couldn't read orphan inode 15 (err -117) [ 486.340443][T26193] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.797335][ T4891] Bluetooth: hci0: command 0x1003 tx timeout [ 486.803533][ T5900] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 486.846431][T16434] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.917844][T26221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6082'. [ 487.182567][T25745] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.275870][T26243] loop0: detected capacity change from 0 to 1024 [ 487.289731][T26243] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.311422][T22266] Bluetooth: hci0: Frame reassembly failed (-84) [ 487.500957][T26247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6094'. [ 487.803139][T26263] hub 1-0:1.0: USB hub found [ 487.807946][T26263] hub 1-0:1.0: 8 ports detected [ 487.894095][T26271] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.6104' sets config #-1 [ 487.904371][T26271] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.6104' sets config #1 [ 488.038538][T26281] xt_hashlimit: max too large, truncated to 1048576 [ 488.047428][T26281] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 488.209470][T26288] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6108'. [ 488.372272][T26308] usb usb8: usbfs: process 26308 (syz.7.6117) did not claim interface 0 before use [ 488.414203][T26312] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.6119' sets config #1 [ 488.442946][T26314] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.6120' sets config #-1 [ 488.452685][T26314] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.6120' sets config #1 [ 488.481876][T26317] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.6121' sets config #-1 [ 488.491278][T26317] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.6121' sets config #1 [ 488.534964][T26319] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6122'. [ 488.569915][T26323] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.6124' sets config #1 [ 488.731368][T26342] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.6132' sets config #-1 [ 488.747463][T26342] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.6132' sets config #1 [ 488.961346][T26356] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.6138' sets config #1 [ 489.301376][T26391] loop8: detected capacity change from 0 to 512 [ 489.338281][T26391] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6155: bg 0: block 248: padding at end of block bitmap is not set [ 489.353083][T26391] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.6155: Failed to acquire dquot type 1 [ 489.357514][ T5900] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 489.364878][ T4891] Bluetooth: hci0: command 0x1003 tx timeout [ 489.373668][T26391] EXT4-fs (loop8): 1 truncate cleaned up [ 489.392868][T26391] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 489.406616][T25745] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.428678][T16434] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.548968][T26422] loop8: detected capacity change from 0 to 1024 [ 489.561471][T26422] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 489.602954][T22276] Bluetooth: hci0: Frame reassembly failed (-84) [ 489.750435][T26445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6179'. [ 489.791908][T26454] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.6184' sets config #1 [ 489.832091][T26458] loop0: detected capacity change from 0 to 512 [ 489.841640][T26458] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.6186: inode has both inline data and extents flags [ 489.855633][T26458] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.6186: couldn't read orphan inode 15 (err -117) [ 489.874527][T26458] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.085079][T26481] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.6196' sets config #1 [ 490.279703][T26504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.292415][T26504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.700310][T25745] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.859293][T26516] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.6212' sets config #-1 [ 490.868781][T26516] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.6212' sets config #1 [ 491.040468][T26533] usb usb8: usbfs: process 26533 (syz.1.6220) did not claim interface 0 before use [ 491.045992][T26534] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6221'. [ 491.049982][ T29] kauditd_printk_skb: 1322 callbacks suppressed [ 491.050071][ T29] audit: type=1400 audit(1004.024:28390): avc: denied { ioctl } for pid=26532 comm="syz.7.6221" path="socket:[73878]" dev="sockfs" ino=73878 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 491.169032][ T29] audit: type=1400 audit(1004.144:28391): avc: denied { prog_load } for pid=26541 comm="syz.1.6225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 491.187947][ T29] audit: type=1400 audit(1004.144:28392): avc: denied { bpf } for pid=26541 comm="syz.1.6225" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 491.208199][ T29] audit: type=1400 audit(1004.144:28393): avc: denied { perfmon } for pid=26541 comm="syz.1.6225" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 491.228910][ T29] audit: type=1400 audit(1004.144:28394): avc: denied { prog_run } for pid=26541 comm="syz.1.6225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 491.247904][ T29] audit: type=1400 audit(1004.174:28395): avc: denied { map_create } for pid=26543 comm="syz.4.6226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 491.266738][ T29] audit: type=1400 audit(1004.174:28396): avc: denied { map_read } for pid=26543 comm="syz.4.6226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 491.285536][ T29] audit: type=1400 audit(1004.174:28397): avc: denied { write } for pid=26543 comm="syz.4.6226" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 491.308101][ T29] audit: type=1400 audit(1004.204:28398): avc: denied { map_write } for pid=26541 comm="syz.1.6225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 491.326927][ T29] audit: type=1400 audit(1004.204:28399): avc: denied { read } for pid=26541 comm="syz.1.6225" dev="nsfs" ino=4026532689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 491.494637][T26559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6232'. [ 491.677296][ T4891] Bluetooth: hci0: command 0x1003 tx timeout [ 491.677645][ T5900] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 491.703243][T16434] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.750180][T26580] hub 1-0:1.0: USB hub found [ 491.755113][T26580] hub 1-0:1.0: 8 ports detected [ 491.809308][T26584] loop8: detected capacity change from 0 to 512 [ 491.821670][T26584] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 491.830048][T26584] EXT4-fs (loop8): orphan cleanup on readonly fs [ 491.837939][T26584] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.6242: corrupted inode contents [ 491.850921][T26584] EXT4-fs (loop8): Remounting filesystem read-only [ 491.859031][T26584] EXT4-fs (loop8): 1 truncate cleaned up [ 491.864866][T22276] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 491.875429][T22276] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 491.896108][T22276] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 491.907098][T26584] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 491.932296][T16434] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.058245][T26594] loop8: detected capacity change from 0 to 512 [ 492.068055][T26594] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 492.076343][T26594] EXT4-fs (loop8): orphan cleanup on readonly fs [ 492.091301][T26594] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.6245: corrupted inode contents [ 492.108351][T26594] EXT4-fs (loop8): Remounting filesystem read-only [ 492.115172][T26594] EXT4-fs (loop8): 1 truncate cleaned up [ 492.121586][T22276] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 492.132370][T22276] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 492.156887][T22276] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 492.182355][T26594] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 492.236972][T16434] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.266519][T26611] loop8: detected capacity change from 0 to 512 [ 492.279253][T26611] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 492.360915][T26615] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6253'. [ 492.411495][T26617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.431086][T26617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.499720][T26619] xt_hashlimit: max too large, truncated to 1048576 [ 492.507388][T26619] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 492.660428][T16434] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.899973][T26632] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.6261' sets config #1 [ 493.060990][T26648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.069724][T26648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.218294][T26654] hub 1-0:1.0: USB hub found [ 493.223180][T26654] hub 1-0:1.0: 8 ports detected [ 493.689047][T26660] bridge: RTM_NEWNEIGH with invalid ether address [ 493.868007][T26667] xt_hashlimit: max too large, truncated to 1048576 [ 493.875541][T26667] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 493.920244][T26671] loop8: detected capacity change from 0 to 512 [ 494.087308][T26671] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 494.226714][T26679] loop0: detected capacity change from 0 to 1024 [ 494.269158][T26679] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.307646][T26671] xt_hashlimit: max too large, truncated to 1048576 [ 494.318155][T26671] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 494.330655][T25745] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.368130][T26685] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6281'. [ 494.509972][T16434] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.548276][T26700] usb usb8: usbfs: process 26700 (syz.8.6289) did not claim interface 0 before use [ 494.569379][T26698] vhci_hcd: invalid port number 96 [ 494.574612][T26698] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 494.587036][T26702] loop8: detected capacity change from 0 to 512 [ 494.612148][T26702] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 494.620968][T26702] EXT4-fs (loop8): orphan cleanup on readonly fs [ 494.628931][T26702] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.6290: corrupted inode contents [ 494.646028][T26702] EXT4-fs (loop8): Remounting filesystem read-only [ 494.652978][T26702] EXT4-fs (loop8): 1 truncate cleaned up [ 494.659265][T22266] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 494.669998][T22266] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 494.684789][T22266] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 494.695747][T26702] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 494.724905][T16434] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.799939][T26722] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6299'. [ 494.844297][T26731] usb usb8: usbfs: process 26731 (syz.7.6302) did not claim interface 0 before use [ 494.864931][T26729] vhci_hcd: invalid port number 96 [ 494.870189][T26729] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 495.004224][T26753] hub 1-0:1.0: USB hub found [ 495.010040][T26753] hub 1-0:1.0: 8 ports detected [ 495.013347][T26749] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6310'. [ 495.046711][T26756] usb usb8: usbfs: process 26756 (syz.7.6314) did not claim interface 0 before use [ 495.070219][T26758] loop8: detected capacity change from 0 to 512 [ 495.098637][T26758] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6311: bg 0: block 248: padding at end of block bitmap is not set [ 495.113615][T26758] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.6311: Failed to acquire dquot type 1 [ 495.119145][T26762] vhci_hcd: invalid port number 96 [ 495.128562][T26758] EXT4-fs (loop8): 1 truncate cleaned up [ 495.130129][T26762] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 495.136703][T26758] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.170551][T16434] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.256454][T26774] loop0: detected capacity change from 0 to 1024 [ 495.270243][T26774] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.270771][T26778] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.6323' sets config #1 [ 495.348049][T25745] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.359008][T26782] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6324'. [ 495.518104][T26808] vhci_hcd: invalid port number 96 [ 495.523401][T26808] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 495.547982][T26812] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.6337' sets config #1 [ 495.579292][T26814] loop0: detected capacity change from 0 to 1024 [ 495.599187][T26814] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.660580][T25745] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.709252][T26825] xt_hashlimit: max too large, truncated to 1048576 [ 495.722663][T26825] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 495.752420][T26828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6342'. [ 495.878414][T26841] vhci_hcd: invalid port number 96 [ 495.883635][T26841] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 495.914925][T26845] loop0: detected capacity change from 0 to 1024 [ 495.931515][T26845] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.945503][T26849] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.6351' sets config #1 [ 495.985259][T25745] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.030640][T26854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6354'. [ 496.065594][T26861] usb usb8: usbfs: process 26861 (syz.1.6356) did not claim interface 0 before use [ 496.082992][ T29] kauditd_printk_skb: 243 callbacks suppressed [ 496.083010][ T29] audit: type=1400 audit(1009.064:28623): avc: denied { tracepoint } for pid=26862 comm="syz.0.6357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 496.228030][T26871] vhci_hcd: invalid port number 96 [ 496.233232][T26871] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 496.296166][T26878] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.6362' sets config #1 [ 496.387611][ T29] audit: type=1400 audit(1009.344:28624): avc: denied { prog_load } for pid=26883 comm="syz.7.6367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 496.406520][ T29] audit: type=1400 audit(1009.344:28625): avc: denied { bpf } for pid=26883 comm="syz.7.6367" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 496.426849][ T29] audit: type=1400 audit(1009.344:28626): avc: denied { perfmon } for pid=26883 comm="syz.7.6367" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 496.447567][ T29] audit: type=1400 audit(1009.344:28627): avc: denied { prog_run } for pid=26883 comm="syz.7.6367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 496.466352][ T29] audit: type=1400 audit(1009.354:28628): avc: denied { map_create } for pid=26883 comm="syz.7.6367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 496.485351][ T29] audit: type=1400 audit(1009.354:28629): avc: denied { map_read map_write } for pid=26883 comm="syz.7.6367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 496.504951][ T29] audit: type=1400 audit(1009.354:28630): avc: denied { read } for pid=26883 comm="syz.7.6367" dev="nsfs" ino=4026533039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 496.511048][T26887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6366'. [ 496.525814][ T29] audit: type=1400 audit(1009.354:28631): avc: denied { open } for pid=26883 comm="syz.7.6367" path="net:[4026533039]" dev="nsfs" ino=4026533039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 496.557773][ T29] audit: type=1400 audit(1009.354:28632): avc: denied { create } for pid=26883 comm="syz.7.6367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 496.717113][T26900] usb usb8: usbfs: process 26900 (syz.8.6373) did not claim interface 0 before use [ 496.864062][T26916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6380'. [ 496.960189][T26924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.970114][T26908] loop8: detected capacity change from 0 to 512 [ 496.977459][T26924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.087229][T26908] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6376: bg 0: block 248: padding at end of block bitmap is not set [ 497.102180][T26908] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.6376: Failed to acquire dquot type 1 [ 497.114295][T26908] EXT4-fs (loop8): 1 truncate cleaned up [ 497.121086][T26908] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 497.121917][T26932] hub 1-0:1.0: USB hub found [ 497.147748][T26932] hub 1-0:1.0: 8 ports detected [ 497.159914][T16434] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.543296][T26948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6392'. [ 497.591873][T26956] loop0: detected capacity change from 0 to 1024 [ 497.615602][T26956] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 497.642985][T25745] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.701970][T26966] hub 1-0:1.0: USB hub found [ 497.706910][T26966] hub 1-0:1.0: 8 ports detected [ 497.933362][T26981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6405'. [ 498.007915][T26987] vhci_hcd: invalid port number 96 [ 498.013096][T26987] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 498.020457][T26988] xt_hashlimit: max too large, truncated to 1048576 [ 498.061492][T26988] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 498.090050][T26990] loop0: detected capacity change from 0 to 1024 [ 498.178029][T26990] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 498.282773][T25745] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.353956][T27003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.378822][T27003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.402049][T27004] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6411'. [ 498.723092][T27019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6416'. [ 498.797735][T27023] vhci_hcd: invalid port number 96 [ 498.802911][T27023] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 498.849293][T27031] usb usb8: usbfs: process 27031 (syz.7.6422) did not claim interface 0 before use [ 498.991415][T27042] xt_hashlimit: max too large, truncated to 1048576 [ 499.008267][T27042] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 499.120632][T27046] loop8: detected capacity change from 0 to 512 [ 499.146619][T27046] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 499.167137][T27050] hub 1-0:1.0: USB hub found [ 499.178170][T27050] hub 1-0:1.0: 8 ports detected [ 499.257388][T27059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6430'. [ 499.367893][T27046] xt_hashlimit: max too large, truncated to 1048576 [ 499.379896][T27046] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 499.398449][T27070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.417146][T27070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.447785][T27074] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6436'. [ 499.541249][T16434] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.688725][T27087] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6442'. [ 499.777682][T27093] hub 1-0:1.0: USB hub found [ 499.787128][T27093] hub 1-0:1.0: 8 ports detected [ 499.843869][T27095] loop0: detected capacity change from 0 to 512 [ 499.878121][T27095] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.6445: bg 0: block 248: padding at end of block bitmap is not set [ 499.932666][T27095] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.6445: Failed to acquire dquot type 1 [ 500.000766][T27095] EXT4-fs (loop0): 1 truncate cleaned up [ 500.035413][T27104] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.6448' sets config #1 [ 500.046200][T27095] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 500.235055][T27095] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.340744][T27116] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 500.349016][T27116] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 500.416168][T27122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6453'. [ 500.480851][T27127] xt_hashlimit: max too large, truncated to 1048576 [ 500.502449][T27127] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 500.817136][T27142] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.6459' sets config #1 [ 501.089090][ T29] kauditd_printk_skb: 742 callbacks suppressed [ 501.089138][ T29] audit: type=1400 audit(1014.074:29371): avc: denied { write } for pid=27158 comm="syz.4.6466" path="socket:[75731]" dev="sockfs" ino=75731 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 501.148533][T27157] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6465'. [ 501.218257][ T29] audit: type=1400 audit(1014.194:29372): avc: denied { execmem } for pid=27165 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 501.246801][ T29] audit: type=1400 audit(1014.224:29373): avc: denied { mounton } for pid=27170 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 501.314568][ T29] audit: type=1400 audit(1014.294:29374): avc: denied { prog_load } for pid=27175 comm="syz.4.6472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 501.333455][ T29] audit: type=1400 audit(1014.294:29375): avc: denied { bpf } for pid=27175 comm="syz.4.6472" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 501.402431][ T29] audit: type=1400 audit(1014.294:29376): avc: denied { read write } for pid=25745 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1492 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 501.425514][ T29] audit: type=1400 audit(1014.294:29377): avc: denied { open } for pid=25745 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1492 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 501.448549][ T29] audit: type=1400 audit(1014.294:29378): avc: denied { ioctl } for pid=25745 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1492 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 501.473008][ T29] audit: type=1400 audit(1014.304:29379): avc: denied { read } for pid=27151 comm="syz.1.6464" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 501.496130][ T29] audit: type=1400 audit(1014.304:29380): avc: denied { perfmon } for pid=27175 comm="syz.4.6472" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 501.521571][T27185] usb usb8: usbfs: process 27185 (syz.7.6474) did not claim interface 0 before use [ 501.589837][ T7158] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.603543][T27170] chnl_net:caif_netlink_parms(): no params data found [ 501.656455][ T7158] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.666739][T27196] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6478'. [ 501.730422][ T7158] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.746631][T27170] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.753937][T27170] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.799934][T27170] bridge_slave_0: entered allmulticast mode [ 501.815904][T27170] bridge_slave_0: entered promiscuous mode [ 501.831282][ T7158] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.856211][T27170] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.863391][T27170] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.971269][T27170] bridge_slave_1: entered allmulticast mode [ 501.991436][T27170] bridge_slave_1: entered promiscuous mode [ 502.045026][T27170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.054544][ T7158] bridge0: port 3(batadv0) entered disabled state [ 502.064957][ T7158] bridge_slave_1: left allmulticast mode [ 502.070674][ T7158] bridge_slave_1: left promiscuous mode [ 502.074081][T27217] xt_hashlimit: max too large, truncated to 1048576 [ 502.076475][ T7158] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.097593][ T7158] bridge_slave_0: left allmulticast mode [ 502.103268][ T7158] bridge_slave_0: left promiscuous mode [ 502.109202][ T7158] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.119698][T27217] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 502.261852][T27223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.270678][T27223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.311528][ T7158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.322014][ T7158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.331725][ T7158] bond0 (unregistering): Released all slaves [ 502.348321][ T7158] bond1 (unregistering): Released all slaves [ 502.357214][ T7158] bond2 (unregistering): Released all slaves [ 502.369481][T27170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.391251][T27170] team0: Port device team_slave_0 added [ 502.408307][T27170] team0: Port device team_slave_1 added [ 502.452251][ T7158] tipc: Left network mode [ 502.457138][T27170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.464200][T27170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.490245][T27170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.529551][T27170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.536735][T27170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.562810][T27170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.610168][ T7158] hsr_slave_0: left promiscuous mode [ 502.617604][ T7158] hsr_slave_1: left promiscuous mode [ 502.623258][ T7158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.630684][ T7158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.677866][ T7158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.685353][ T7158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.711939][ T7158] veth1_macvtap: left promiscuous mode [ 502.727679][ T7158] veth0_macvtap: left promiscuous mode [ 502.733288][ T7158] veth1_vlan: left promiscuous mode [ 502.743962][ T7158] veth0_vlan: left promiscuous mode [ 502.839779][ T7158] team0 (unregistering): Port device team_slave_1 removed [ 502.850170][ T7158] team0 (unregistering): Port device team_slave_0 removed [ 502.876681][T27233] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6489'. [ 502.915960][T27170] hsr_slave_0: entered promiscuous mode [ 502.923007][T27170] hsr_slave_1: entered promiscuous mode [ 502.929741][T27170] debugfs: 'hsr0' already exists in 'hsr' [ 502.935506][T27170] Cannot create hsr debugfs directory [ 503.084693][T27248] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.6494' sets config #-1 [ 503.101730][T27248] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.6494' sets config #1 [ 503.121362][T27251] 9pnet_fd: Insufficient options for proto=fd [ 503.172470][T27257] loop0: detected capacity change from 0 to 1024 [ 503.188303][ T7158] IPVS: stop unused estimator thread 0... [ 503.204507][T27257] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.241643][T25745] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.261263][T27266] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6501'. [ 503.279131][T27170] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 503.295293][T27170] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 503.305121][T27170] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 503.322195][T27170] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 503.329500][T27276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.342055][T27276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.383930][T27170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.397687][T27170] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.407865][ T7158] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.415051][ T7158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 503.437441][ T7158] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.444504][T27288] usb usb8: usbfs: process 27288 (syz.0.6509) did not claim interface 0 before use [ 503.453954][ T7158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.492349][T27291] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.6510' sets config #1 [ 503.542883][T27295] loop0: detected capacity change from 0 to 512 [ 503.559192][T27170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.579237][T27295] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.6511: bg 0: block 248: padding at end of block bitmap is not set [ 503.597880][T27295] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.6511: Failed to acquire dquot type 1 [ 503.615308][T27295] EXT4-fs (loop0): 1 truncate cleaned up [ 503.628309][T27295] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.667319][T27295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.741739][T27310] loop0: detected capacity change from 0 to 1024 [ 503.761215][T27310] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.800108][T25745] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.833924][T27170] veth0_vlan: entered promiscuous mode [ 503.855385][T27170] veth1_vlan: entered promiscuous mode [ 503.896217][T27170] veth0_macvtap: entered promiscuous mode [ 503.915272][T27322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.935964][T27170] veth1_macvtap: entered promiscuous mode [ 503.954652][T27170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.965215][T27322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.974935][T27170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.977978][T27326] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.6518' sets config #1 [ 503.986527][T22276] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.006213][T22276] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.023665][T22276] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.045902][T22276] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.146781][T27340] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.6523' sets config #-1 [ 504.166967][T27340] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.6523' sets config #1 [ 504.210469][T27342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6524'. [ 504.243623][T27346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.255888][T27346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.680931][T27370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6536'. [ 504.713539][T27379] loop0: detected capacity change from 0 to 512 [ 504.968747][T27403] xt_hashlimit: max too large, truncated to 1048576 [ 504.994603][T27403] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 505.057340][T27406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6549'. [ 505.190994][T27430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6560'. [ 505.233613][T27437] loop8: detected capacity change from 0 to 1024 [ 505.340577][T27442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6565'. [ 505.409824][T27467] usb usb8: usbfs: process 27467 (syz.0.6573) did not claim interface 0 before use [ 505.495423][T27479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.504142][T27479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.591503][T27487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6582'. [ 505.832707][T27506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.841552][T27506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.055494][T27508] loop0: detected capacity change from 0 to 512 [ 506.072032][T27508] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.6590: bg 0: block 248: padding at end of block bitmap is not set [ 506.087461][T27508] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.6590: Failed to acquire dquot type 1 [ 506.099832][T27508] EXT4-fs (loop0): 1 truncate cleaned up [ 506.106343][ T29] kauditd_printk_skb: 675 callbacks suppressed [ 506.106360][ T29] audit: type=1400 audit(1019.084:30052): avc: denied { mount } for pid=27507 comm="syz.0.6590" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 506.171058][ T29] audit: type=1400 audit(1019.154:30053): avc: denied { allowed } for pid=27516 comm="syz.4.6594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 506.190140][ T29] audit: type=1400 audit(1019.154:30054): avc: denied { create } for pid=27517 comm="syz.0.6593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 506.215138][ T29] audit: type=1400 audit(1019.154:30055): avc: denied { create } for pid=27516 comm="syz.4.6594" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 506.236302][ T29] audit: type=1400 audit(1019.174:30056): avc: denied { write } for pid=27520 comm="syz.4.6595" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 506.258945][ T29] audit: type=1400 audit(1019.174:30057): avc: denied { open } for pid=27520 comm="syz.4.6595" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 506.281887][ T29] audit: type=1400 audit(1019.194:30058): avc: denied { ioctl } for pid=27517 comm="syz.0.6593" path="socket:[77794]" dev="sockfs" ino=77794 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 506.306619][ T29] audit: type=1400 audit(1019.194:30059): avc: denied { setopt } for pid=27517 comm="syz.0.6593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 506.326018][ T29] audit: type=1400 audit(1019.194:30060): avc: denied { write } for pid=27517 comm="syz.0.6593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 506.345365][ T29] audit: type=1400 audit(1019.194:30061): avc: denied { create } for pid=27520 comm="syz.4.6595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 506.436349][T27531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.451877][T27531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.610841][T27539] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.6602' sets config #1 [ 506.643096][T27541] loop0: detected capacity change from 0 to 512 [ 506.788810][T27555] 9pnet_fd: p9_fd_create_tcp (27555): problem connecting socket to 127.0.0.1 [ 506.804996][T27553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6607'. [ 506.823351][T27541] xt_hashlimit: max too large, truncated to 1048576 [ 506.834389][T27541] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 507.026721][T27573] 9pnet_fd: Insufficient options for proto=fd [ 507.137205][T27586] netlink: 4608 bytes leftover after parsing attributes in process `syz.8.6620'. [ 507.202458][T27597] loop0: detected capacity change from 0 to 512 [ 507.336673][T27605] 9pnet_fd: Insufficient options for proto=fd [ 507.353345][T27606] xt_hashlimit: max too large, truncated to 1048576 [ 507.362097][T27606] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 507.380633][T27608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.389311][T27608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.807172][T27622] loop0: detected capacity change from 0 to 512 [ 508.110876][T27637] xt_hashlimit: max too large, truncated to 1048576 [ 508.128615][T27637] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 508.543527][T27635] xt_hashlimit: max too large, truncated to 1048576 [ 508.666642][T27635] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 508.808189][T27647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6639'. [ 509.119847][T27663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.131352][T27665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.137551][T27663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.147791][T27665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.168851][T27667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.177487][T27667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.275187][T27673] program syz.4.6649 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 509.314984][T27675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6650'. [ 509.814047][T27695] xt_hashlimit: max too large, truncated to 1048576 [ 509.829222][T27695] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 510.069751][T27707] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6661'. [ 510.103673][T27709] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98 [ 510.149917][T27713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.161344][T27713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.181369][T27709] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 510.188089][T27709] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 510.196320][T27709] vhci_hcd vhci_hcd.0: Device attached [ 510.223712][T27714] vhci_hcd: connection closed [ 510.224107][T22266] vhci_hcd: stop threads [ 510.233326][T22266] vhci_hcd: release socket [ 510.237825][T22266] vhci_hcd: disconnect device [ 510.346758][T27720] xt_hashlimit: max too large, truncated to 1048576 [ 510.364527][T27720] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 510.728364][T27736] loop8: detected capacity change from 0 to 512 [ 510.736534][T27736] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.6671: inode has both inline data and extents flags [ 510.756493][T27736] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.6671: couldn't read orphan inode 15 (err -117) [ 510.768900][T27736] EXT4-fs mount: 12 callbacks suppressed [ 510.768913][T27736] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 510.806699][T27170] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.824196][T27742] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6673'. [ 510.948985][T27751] loop0: detected capacity change from 0 to 2048 [ 510.998605][T27751] GPT:first_usable_lbas don't match. [ 511.003975][T27751] GPT:34 != 290 [ 511.007531][T27751] GPT: Use GNU Parted to correct GPT errors. [ 511.013594][T27751] loop0: p1 p2 p3 [ 511.107675][ T29] kauditd_printk_skb: 486 callbacks suppressed [ 511.107691][ T29] audit: type=1400 audit(1537.093:30548): avc: denied { read } for pid=27726 comm="syz.1.6667" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 511.145382][ T29] audit: type=1400 audit(1537.093:30549): avc: denied { read } for pid=27765 comm="syz.8.6679" dev="nsfs" ino=4026532402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 511.166447][ T29] audit: type=1400 audit(1537.093:30550): avc: denied { open } for pid=27765 comm="syz.8.6679" path="net:[4026532402]" dev="nsfs" ino=4026532402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 511.189384][ T29] audit: type=1400 audit(1537.093:30551): avc: denied { create } for pid=27765 comm="syz.8.6679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 511.208707][ T29] audit: type=1400 audit(1537.093:30552): avc: denied { write } for pid=27765 comm="syz.8.6679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 511.227870][ T29] audit: type=1400 audit(1537.093:30553): avc: denied { create } for pid=27765 comm="syz.8.6679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 511.229391][T27769] loop8: detected capacity change from 0 to 512 [ 511.248335][ T29] audit: type=1400 audit(1537.093:30554): avc: denied { create } for pid=27765 comm="syz.8.6679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 511.273998][ T29] audit: type=1400 audit(1537.103:30555): avc: denied { write } for pid=27767 comm="syz.0.6680" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 511.296558][ T29] audit: type=1400 audit(1537.103:30556): avc: denied { open } for pid=27767 comm="syz.0.6680" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 511.320139][ T29] audit: type=1326 audit(1537.123:30557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27721 comm="syz.7.6666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8b89bb5e67 code=0x7ffc0000 [ 511.353791][T27769] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6679: bg 0: block 248: padding at end of block bitmap is not set [ 511.376561][T27769] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.6679: Failed to acquire dquot type 1 [ 511.388661][T27769] EXT4-fs (loop8): 1 truncate cleaned up [ 511.394906][T27769] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 511.455719][T27781] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6685'. [ 511.581930][T27794] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6690'. [ 511.632652][T27808] FAULT_INJECTION: forcing a failure. [ 511.632652][T27808] name failslab, interval 1, probability 0, space 0, times 0 [ 511.645456][T27808] CPU: 1 UID: 0 PID: 27808 Comm: syz.7.6692 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 511.645498][T27808] Tainted: [W]=WARN [ 511.645506][T27808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 511.645523][T27808] Call Trace: [ 511.645531][T27808] [ 511.645603][T27808] __dump_stack+0x1d/0x30 [ 511.645630][T27808] dump_stack_lvl+0xe8/0x140 [ 511.645656][T27808] dump_stack+0x15/0x1b [ 511.645729][T27808] should_fail_ex+0x265/0x280 [ 511.645828][T27808] should_failslab+0x8c/0xb0 [ 511.645865][T27808] kmem_cache_alloc_noprof+0x50/0x480 [ 511.646025][T27808] ? security_inode_alloc+0x37/0x100 [ 511.646070][T27808] security_inode_alloc+0x37/0x100 [ 511.646121][T27808] inode_init_always_gfp+0x4b7/0x500 [ 511.646214][T27808] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 511.646250][T27808] alloc_inode+0x58/0x170 [ 511.646279][T27808] new_inode+0x1d/0xe0 [ 511.646306][T27808] hugetlbfs_get_inode+0x7b/0x370 [ 511.646359][T27808] hugetlb_file_setup+0x192/0x3d0 [ 511.646440][T27808] ksys_mmap_pgoff+0x157/0x310 [ 511.646465][T27808] x64_sys_call+0x14a3/0x3000 [ 511.646495][T27808] do_syscall_64+0xd2/0x200 [ 511.646518][T27808] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 511.646657][T27808] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 511.646697][T27808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.646724][T27808] RIP: 0033:0x7f8b89bbefc9 [ 511.646743][T27808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.646837][T27808] RSP: 002b:00007f8b8861f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 511.646861][T27808] RAX: ffffffffffffffda RBX: 00007f8b89e15fa0 RCX: 00007f8b89bbefc9 [ 511.646875][T27808] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 511.646888][T27808] RBP: 00007f8b8861f090 R08: ffffffffffffffff R09: 0000000000000000 [ 511.646945][T27808] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000001 [ 511.647028][T27808] R13: 00007f8b89e16038 R14: 00007f8b89e15fa0 R15: 00007ffccbc310e8 [ 511.647047][T27808] [ 511.875461][T27814] xt_hashlimit: max too large, truncated to 1048576 [ 511.883013][T27814] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 512.072365][T27828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6699'. [ 512.088130][T27828] loop0: detected capacity change from 0 to 512 [ 512.120861][T27828] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.6699: bg 0: block 248: padding at end of block bitmap is not set [ 512.135901][T27828] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.6699: Failed to acquire dquot type 1 [ 512.152042][T27828] EXT4-fs (loop0): 1 truncate cleaned up [ 512.176036][T27828] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 512.273656][T27170] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.283938][T27828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.321303][T27839] xt_hashlimit: max too large, truncated to 1048576 [ 512.328979][T27839] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 512.347031][T27840] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6702'. [ 512.608785][T27867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.628219][T27867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.799680][T27876] loop8: detected capacity change from 0 to 512 [ 512.830381][T27876] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6714: bg 0: block 248: padding at end of block bitmap is not set [ 512.848232][T27876] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.6714: Failed to acquire dquot type 1 [ 512.873158][T27876] EXT4-fs (loop8): 1 truncate cleaned up [ 512.879341][T27876] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 512.917986][T27170] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.087487][T27887] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6718'. [ 513.228410][T27907] loop0: detected capacity change from 0 to 512 [ 513.247526][T27907] EXT4-fs: Ignoring removed bh option [ 513.265476][T27907] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 513.278616][T27907] EXT4-fs (loop0): 1 truncate cleaned up [ 513.284638][T27907] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.393280][T25745] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /143/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 513.430090][T27915] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.6731' sets config #1 [ 513.438046][T25745] EXT4-fs error (device loop0): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 513.474995][T25745] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /143/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 513.497584][T25745] EXT4-fs error (device loop0): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 513.519081][T25745] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /143/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 513.543651][T25745] EXT4-fs error (device loop0): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 513.564147][T25745] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /143/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 513.587106][T25745] EXT4-fs error (device loop0): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 513.611126][T25745] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /143/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 513.642548][T25745] EXT4-fs error (device loop0): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 513.674357][T27921] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6734'. [ 513.971348][T27930] SELinux: failed to load policy [ 513.998488][T27930] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6737'. [ 514.007516][T27930] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6737'. [ 514.019508][T27913] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.030915][T27930] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6737'. [ 514.039930][T27930] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6737'. [ 514.068000][ T7159] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.102570][T27935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.132575][T27935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.146344][T27941] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.6743' sets config #1 [ 514.160453][ T7159] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.216105][T27939] loop8: detected capacity change from 0 to 512 [ 514.228585][T27945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6746'. [ 514.270164][ T7159] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.331240][ T7159] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.417846][T27939] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6744: bg 0: block 248: padding at end of block bitmap is not set [ 514.436178][T27948] chnl_net:caif_netlink_parms(): no params data found [ 514.437340][T27939] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.6744: Failed to acquire dquot type 1 [ 514.474502][ T7159] bridge_slave_1: left allmulticast mode [ 514.480275][ T7159] bridge_slave_1: left promiscuous mode [ 514.486089][ T7159] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.494402][ T7159] bridge_slave_0: left allmulticast mode [ 514.500135][ T7159] bridge_slave_0: left promiscuous mode [ 514.505889][ T7159] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.574751][T27939] EXT4-fs (loop8): 1 truncate cleaned up [ 514.617644][ T7159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 514.634272][ T7159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.647161][T27942] syz.4.6745 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 514.658320][T27942] CPU: 0 UID: 0 PID: 27942 Comm: syz.4.6745 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 514.658431][T27942] Tainted: [W]=WARN [ 514.658437][T27942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 514.658449][T27942] Call Trace: [ 514.658456][T27942] [ 514.658466][T27942] __dump_stack+0x1d/0x30 [ 514.658489][T27942] dump_stack_lvl+0xe8/0x140 [ 514.658567][T27942] dump_stack+0x15/0x1b [ 514.658588][T27942] dump_header+0x81/0x220 [ 514.658609][T27942] oom_kill_process+0x342/0x400 [ 514.658646][T27942] out_of_memory+0x979/0xb80 [ 514.658695][T27942] try_charge_memcg+0x610/0xa10 [ 514.658736][T27942] charge_memcg+0x51/0xc0 [ 514.658762][T27942] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 514.658805][T27942] __read_swap_cache_async+0x17b/0x2d0 [ 514.658836][T27942] swap_cluster_readahead+0x262/0x3c0 [ 514.658871][T27942] swapin_readahead+0xde/0x6f0 [ 514.658968][T27942] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 514.659001][T27942] ? css_rstat_updated+0xb7/0x240 [ 514.659088][T27942] ? __rcu_read_unlock+0x4f/0x70 [ 514.659115][T27942] ? swap_cache_get_folio+0x277/0x280 [ 514.659136][T27942] do_swap_page+0x2ae/0x2370 [ 514.659213][T27942] ? _raw_spin_unlock+0x26/0x50 [ 514.659241][T27942] ? finish_task_switch+0xad/0x2b0 [ 514.659325][T27942] ? __pfx_default_wake_function+0x10/0x10 [ 514.659352][T27942] handle_mm_fault+0x9a5/0x2be0 [ 514.659377][T27942] ? vma_start_read+0x141/0x1f0 [ 514.659468][T27942] do_user_addr_fault+0x630/0x1080 [ 514.659494][T27942] ? fpregs_restore_userregs+0xe2/0x1d0 [ 514.659525][T27942] ? switch_fpu_return+0xe/0x20 [ 514.659576][T27942] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 514.659611][T27942] exc_page_fault+0x62/0xa0 [ 514.659668][T27942] asm_exc_page_fault+0x26/0x30 [ 514.659738][T27942] RIP: 0033:0x7f397b781888 [ 514.659761][T27942] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 514.659778][T27942] RSP: 002b:00007ffc9f459eb0 EFLAGS: 00010293 [ 514.659793][T27942] RAX: 0000000000000000 RBX: 00007f397b9a5fa0 RCX: 00007f397b781885 [ 514.659812][T27942] RDX: 00007ffc9f459ef0 RSI: 0000000000000000 RDI: 0000000000000000 [ 514.659908][T27942] RBP: 00007f397b9a7da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 514.659920][T27942] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000007dbab [ 514.660006][T27942] R13: 00007ffc9f45a010 R14: ffffffffffffffff R15: 00007ffc9f45a030 [ 514.660029][T27942] [ 514.660038][T27942] memory: usage 303560kB, limit 307200kB, failcnt 580 [ 514.901696][T27939] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 514.902694][T27942] memory+swap: usage 1040kB, limit 9007199254740988kB, failcnt 0 [ 514.932744][T27942] kmem: usage 284kB, limit 9007199254740988kB, failcnt 0 [ 514.939872][T27942] Memory cgroup stats for /syz4: [ 514.940793][T27942] cache 528384 [ 514.940793][ T7159] bond0 (unregistering): Released all slaves [ 514.955127][T27942] rss 28672 [ 514.958283][T27942] shmem 0 [ 514.961222][T27942] mapped_file 65536 [ 514.965020][T27942] dirty 0 [ 514.968023][T27942] writeback 0 [ 514.971310][T27942] workingset_refault_anon 11361 [ 514.976252][T27942] workingset_refault_file 64 [ 514.980903][T27942] swap 131072 [ 514.984245][T27942] swapcached 49152 [ 514.988100][T27942] pgpgin 682243 [ 514.991556][T27942] pgpgout 682099 [ 514.995096][T27942] pgfault 752868 [ 514.998651][T27942] pgmajfault 1479 [ 515.002279][T27942] inactive_anon 16384 [ 515.006326][T27942] active_anon 45056 [ 515.010169][T27942] inactive_file 4096 [ 515.014095][T27942] active_file 524288 [ 515.018004][T27942] unevictable 0 [ 515.021605][T27942] hierarchical_memory_limit 314572800 [ 515.027054][T27942] hierarchical_memsw_limit 9223372036854771712 [ 515.033218][T27942] total_cache 528384 [ 515.037183][T27942] total_rss 28672 [ 515.041201][T27942] total_shmem 0 [ 515.044659][T27942] total_mapped_file 65536 [ 515.049017][T27942] total_dirty 0 [ 515.052550][T27942] total_writeback 0 [ 515.056358][T27942] total_workingset_refault_anon 11361 [ 515.061781][T27942] total_workingset_refault_file 64 [ 515.066889][T27942] total_swap 131072 [ 515.070727][T27942] total_swapcached 49152 [ 515.074984][T27942] total_pgpgin 682243 [ 515.079070][T27942] total_pgpgout 682099 [ 515.083145][T27942] total_pgfault 752868 [ 515.087207][T27942] total_pgmajfault 1479 [ 515.091417][T27942] total_inactive_anon 16384 [ 515.095917][T27942] total_active_anon 45056 [ 515.100304][T27942] total_inactive_file 4096 [ 515.104717][T27942] total_active_file 524288 [ 515.109171][T27942] total_unevictable 0 [ 515.113178][T27942] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.6745,pid=27942,uid=0 [ 515.127913][T27942] Memory cgroup out of memory: Killed process 27942 (syz.4.6745) total-vm:95804kB, anon-rss:1104kB, file-rss:22456kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 515.147550][T27982] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.6755' sets config #1 [ 515.160184][ T3399] infiniband syb2: ib_query_port failed (-19) [ 515.162908][T27974] netlink: 180 bytes leftover after parsing attributes in process `syz.1.6752'. [ 515.176084][T27939] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.209475][T27948] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.216608][T27948] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.224465][T27948] bridge_slave_0: entered allmulticast mode [ 515.224696][T27990] usb usb8: usbfs: process 27990 (syz.1.6757) did not claim interface 0 before use [ 515.231283][T27948] bridge_slave_0: entered promiscuous mode [ 515.248112][ T7159] tipc: Left network mode [ 515.253035][T27948] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.253451][T27986] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6756'. [ 515.260253][T27948] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.276569][T27948] bridge_slave_1: entered allmulticast mode [ 515.283283][T27948] bridge_slave_1: entered promiscuous mode [ 515.299347][ T7159] hsr_slave_0: left promiscuous mode [ 515.307313][ T7159] hsr_slave_1: left promiscuous mode [ 515.313219][ T7159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.320716][ T7159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 515.330638][ T7159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.338127][ T7159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 515.358816][ T7159] veth1_macvtap: left promiscuous mode [ 515.364383][ T7159] veth0_macvtap: left promiscuous mode [ 515.370065][ T7159] veth1_vlan: left promiscuous mode [ 515.375362][ T7159] veth0_vlan: left promiscuous mode [ 515.463309][T28005] IPv6: NLM_F_CREATE should be specified when creating new route [ 515.500320][ T7159] team0 (unregistering): Port device team_slave_1 removed [ 515.511755][ T7159] team0 (unregistering): Port device team_slave_0 removed [ 515.579785][T27948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.591652][T27948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.624290][T27948] team0: Port device team_slave_0 added [ 515.633226][T27948] team0: Port device team_slave_1 added [ 515.649138][T28012] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.6765' sets config #1 [ 515.682412][T27948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.689490][T27948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.715489][T27948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.727259][T27948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.734299][T27948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.760305][T27948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.829698][T27948] hsr_slave_0: entered promiscuous mode [ 515.840855][T28019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6767'. [ 515.850671][T27948] hsr_slave_1: entered promiscuous mode [ 515.856762][T27948] debugfs: 'hsr0' already exists in 'hsr' [ 515.862577][T27948] Cannot create hsr debugfs directory [ 516.015944][T27948] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 516.032946][T27948] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 516.044957][T28033] loop8: detected capacity change from 0 to 8192 [ 516.054365][T27948] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 516.065574][T27948] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 516.088921][T27948] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.096042][T27948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.103534][T27948] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.110696][T27948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.148649][T27948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.162167][ T7158] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.171764][ T7158] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.187659][T27948] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.194430][ T29] kauditd_printk_skb: 497 callbacks suppressed [ 516.194443][ T29] audit: type=1400 audit(3081.177:31047): avc: denied { unmount } for pid=27170 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 516.225311][ T7159] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.232450][ T7159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.255464][ T6066] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.262649][ T6066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.309518][ T29] audit: type=1400 audit(3081.297:31048): avc: denied { read } for pid=28029 comm="syz.1.6772" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 516.332997][ T29] audit: type=1400 audit(3081.297:31049): avc: denied { prog_load } for pid=28044 comm="syz.8.6775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 516.352121][ T29] audit: type=1400 audit(3081.297:31050): avc: denied { bpf } for pid=28044 comm="syz.8.6775" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 516.372443][ T29] audit: type=1400 audit(3081.297:31051): avc: denied { perfmon } for pid=28044 comm="syz.8.6775" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 516.393142][ T29] audit: type=1400 audit(3081.297:31052): avc: denied { prog_run } for pid=28044 comm="syz.8.6775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 516.394014][T27948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.413212][ T29] audit: type=1400 audit(3081.297:31053): avc: denied { module_request } for pid=27948 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 516.440666][ T29] audit: type=1400 audit(3081.297:31054): avc: denied { sys_module } for pid=27948 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 516.471731][ T29] audit: type=1400 audit(3081.447:31055): avc: denied { map_create } for pid=28044 comm="syz.8.6775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 516.490654][ T29] audit: type=1400 audit(3081.447:31056): avc: denied { map_read map_write } for pid=28044 comm="syz.8.6775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 516.521380][T28045] loop8: detected capacity change from 0 to 512 [ 516.609659][T27948] veth0_vlan: entered promiscuous mode [ 516.618354][T27948] veth1_vlan: entered promiscuous mode [ 516.634389][T27948] veth0_macvtap: entered promiscuous mode [ 516.642365][T27948] veth1_macvtap: entered promiscuous mode [ 516.654066][T27948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.665825][T27948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.676826][ T7159] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.685900][ T7159] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.700639][ T7159] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.726750][T28045] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6775: bg 0: block 248: padding at end of block bitmap is not set [ 516.746987][ T7159] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.768872][T28066] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.6776' sets config #1 [ 516.780580][T28045] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.6775: Failed to acquire dquot type 1 [ 516.819264][T28073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.828278][T28073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.837790][T28045] EXT4-fs (loop8): 1 truncate cleaned up [ 516.844250][T28045] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.872103][T28045] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.887118][T28077] loop9: detected capacity change from 0 to 512 [ 516.899829][T28077] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 517.071288][T28099] usb usb8: usbfs: process 28099 (syz.4.6789) did not claim interface 0 before use [ 517.133701][T28077] xt_hashlimit: max too large, truncated to 1048576 [ 517.149080][T28077] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 517.243435][T28105] IPv6: NLM_F_CREATE should be specified when creating new route [ 517.292247][T27948] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.361119][T28107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6794'. [ 518.014531][T28142] xt_hashlimit: max too large, truncated to 1048576 [ 518.031997][T28142] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 518.059941][T28143] loop8: detected capacity change from 0 to 512 [ 518.087930][T28143] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6807: bg 0: block 248: padding at end of block bitmap is not set [ 518.112710][T28143] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.6807: Failed to acquire dquot type 1 [ 518.136575][T28143] EXT4-fs (loop8): 1 truncate cleaned up [ 518.142830][T28143] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.173586][T27170] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.348539][T28155] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.377008][T28157] usb usb8: usbfs: process 28157 (syz.9.6812) did not claim interface 0 before use [ 518.410064][T28155] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.471117][T28155] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.521102][T28155] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.540258][T28162] loop9: detected capacity change from 0 to 512 [ 518.571950][ T7159] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.602854][ T7159] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.638895][ T7159] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.657803][ T7159] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.744084][T28162] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.6814: bg 0: block 248: padding at end of block bitmap is not set [ 518.759562][T28162] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.6814: Failed to acquire dquot type 1 [ 518.771474][T28162] EXT4-fs (loop9): 1 truncate cleaned up [ 518.777845][T28173] SELinux: failed to load policy [ 518.777905][T28162] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.836924][T28175] xt_hashlimit: max too large, truncated to 1048576 [ 518.841097][T28162] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.850792][T28175] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 519.273543][T28189] usb usb8: usbfs: process 28189 (syz.7.6823) did not claim interface 0 before use [ 519.328035][T28193] IPv6: NLM_F_CREATE should be specified when creating new route [ 519.376832][T28197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.396992][T28197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.546254][T28201] loop8: detected capacity change from 0 to 512 [ 519.560427][T28201] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6829: bg 0: block 248: padding at end of block bitmap is not set [ 519.591590][T28201] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.6829: Failed to acquire dquot type 1 [ 519.604382][T28201] EXT4-fs (loop8): 1 truncate cleaned up [ 519.630273][T28201] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 519.656958][T28208] SELinux: failed to load policy [ 519.663497][T28201] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.959131][T28221] netlink: 'syz.7.6837': attribute type 21 has an invalid length. [ 519.967419][T28221] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6837'. [ 520.337996][T28240] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6846'. [ 520.371872][T28248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.380528][T28248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.391242][T28245] loop9: detected capacity change from 0 to 512 [ 520.410410][T28245] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.6848: bg 0: block 248: padding at end of block bitmap is not set [ 520.437555][T28245] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.6848: Failed to acquire dquot type 1 [ 520.449590][T28245] EXT4-fs (loop9): 1 truncate cleaned up [ 520.455652][T28245] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 520.482584][T28245] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.796737][T28287] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 520.824276][T28289] SELinux: policydb version 0 does not match my version range 15-35 [ 520.832846][T28289] SELinux: failed to load policy [ 520.838238][T28289] FAULT_INJECTION: forcing a failure. [ 520.838238][T28289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 520.851383][T28289] CPU: 1 UID: 0 PID: 28289 Comm: syz.8.6868 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 520.851423][T28289] Tainted: [W]=WARN [ 520.851431][T28289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 520.851445][T28289] Call Trace: [ 520.851454][T28289] [ 520.851465][T28289] __dump_stack+0x1d/0x30 [ 520.851489][T28289] dump_stack_lvl+0xe8/0x140 [ 520.851590][T28289] dump_stack+0x15/0x1b [ 520.851615][T28289] should_fail_ex+0x265/0x280 [ 520.851641][T28289] should_fail+0xb/0x20 [ 520.851663][T28289] should_fail_usercopy+0x1a/0x20 [ 520.851683][T28289] _copy_to_user+0x20/0xa0 [ 520.851775][T28289] simple_read_from_buffer+0xb5/0x130 [ 520.851874][T28289] proc_fail_nth_read+0x10e/0x150 [ 520.852003][T28289] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 520.852050][T28289] vfs_read+0x1a8/0x770 [ 520.852128][T28289] ? __rcu_read_unlock+0x4f/0x70 [ 520.852151][T28289] ? __fget_files+0x184/0x1c0 [ 520.852241][T28289] ksys_read+0xda/0x1a0 [ 520.852269][T28289] __x64_sys_read+0x40/0x50 [ 520.852290][T28289] x64_sys_call+0x27c0/0x3000 [ 520.852369][T28289] do_syscall_64+0xd2/0x200 [ 520.852393][T28289] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 520.852417][T28289] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 520.852445][T28289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.852498][T28289] RIP: 0033:0x7f4f8473d9dc [ 520.852582][T28289] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 520.852598][T28289] RSP: 002b:00007f4f831a7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 520.852615][T28289] RAX: ffffffffffffffda RBX: 00007f4f84995fa0 RCX: 00007f4f8473d9dc [ 520.852690][T28289] RDX: 000000000000000f RSI: 00007f4f831a70a0 RDI: 0000000000000009 [ 520.852705][T28289] RBP: 00007f4f831a7090 R08: 0000000000000000 R09: 0000000000000000 [ 520.852721][T28289] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 520.852736][T28289] R13: 00007f4f84996038 R14: 00007f4f84995fa0 R15: 00007ffcf564f2d8 [ 520.852754][T28289] [ 521.092829][T28291] loop8: detected capacity change from 0 to 512 [ 521.123003][T28291] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6869: bg 0: block 248: padding at end of block bitmap is not set [ 521.138026][T28291] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.6869: Failed to acquire dquot type 1 [ 521.150264][T28291] EXT4-fs (loop8): 1 truncate cleaned up [ 521.157436][T28291] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 521.197065][T28291] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.206318][ T29] kauditd_printk_skb: 1142 callbacks suppressed [ 521.206336][ T29] audit: type=1326 audit(3599.183:32187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28257 comm="syz.9.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff013fd5e67 code=0x7ffc0000 [ 521.235883][ T29] audit: type=1326 audit(3599.183:32188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28257 comm="syz.9.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff013f7b099 code=0x7ffc0000 [ 521.259217][ T29] audit: type=1326 audit(3599.183:32189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28257 comm="syz.9.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7ff013fdefc9 code=0x7ffc0000 [ 521.289362][ T29] audit: type=1326 audit(3599.193:32190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28257 comm="syz.9.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff013fd5e67 code=0x7ffc0000 [ 521.312486][ T29] audit: type=1326 audit(3599.193:32191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28257 comm="syz.9.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff013f7b099 code=0x7ffc0000 [ 521.335753][ T29] audit: type=1326 audit(3599.193:32192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28257 comm="syz.9.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7ff013fdefc9 code=0x7ffc0000 [ 521.358954][ T29] audit: type=1326 audit(3599.213:32193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28257 comm="syz.9.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff013fd5e67 code=0x7ffc0000 [ 521.382119][ T29] audit: type=1326 audit(3599.213:32194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28257 comm="syz.9.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff013f7b099 code=0x7ffc0000 [ 521.405367][ T29] audit: type=1326 audit(3599.213:32195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28257 comm="syz.9.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7ff013fdefc9 code=0x7ffc0000 [ 521.428648][ T29] audit: type=1326 audit(3599.223:32196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28257 comm="syz.9.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff013fd5e67 code=0x7ffc0000 [ 521.461970][T28314] loop8: detected capacity change from 0 to 128 [ 521.469218][T28314] EXT4-fs: Ignoring removed nobh option [ 521.476451][T28314] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 521.509979][T27170] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 521.525512][T28316] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6878'. [ 521.890982][T28353] 9pnet_fd: p9_fd_create_unix (28353): problem connecting socket: ./file0: -2 [ 521.901338][T28353] netlink: 'syz.8.6892': attribute type 4 has an invalid length. [ 521.927941][T28353] netlink: 'syz.8.6892': attribute type 4 has an invalid length. [ 522.285562][T28378] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6904'. [ 522.336153][T28390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.344748][T28390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.359588][T28382] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.380901][T28389] loop8: detected capacity change from 0 to 512 [ 522.410004][T28389] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6908: bg 0: block 248: padding at end of block bitmap is not set [ 522.424782][T28389] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.6908: Failed to acquire dquot type 1 [ 522.436774][T28389] EXT4-fs (loop8): 1 truncate cleaned up [ 522.443168][T28389] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 522.444135][T28382] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.480502][T28389] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.536733][T28382] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.625747][T28382] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.662511][T28407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.671125][T28407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.702911][T22266] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.711348][T22266] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.723288][T22266] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.734590][T22266] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.757748][T28409] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6917'. [ 522.993805][T28433] SELinux: policydb version 0 does not match my version range 15-35 [ 523.002475][T28433] SELinux: failed to load policy [ 523.028881][T28433] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=28433 comm=syz.9.6926 [ 523.042384][T28433] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6926'. [ 523.053145][T28433] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=28433 comm=syz.9.6926 [ 523.346291][T28446] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6930'. [ 524.005214][T28459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.024437][T28459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.227156][T28473] loop9: detected capacity change from 0 to 512 [ 524.240760][T28473] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.6941: bg 0: block 248: padding at end of block bitmap is not set [ 524.255584][T28473] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.6941: Failed to acquire dquot type 1 [ 524.267903][T28473] EXT4-fs (loop9): 1 truncate cleaned up [ 524.274036][T28473] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.301564][T28473] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.410902][T28480] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6943'. [ 524.900773][T28516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6958'. [ 524.946789][T28524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.955285][T28526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.955655][T28524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.964209][T28526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.020147][T28530] loop8: detected capacity change from 0 to 128 [ 525.399435][T28541] ================================================================== [ 525.407598][T28541] BUG: KCSAN: data-race in _copy_from_iter / _copy_from_iter [ 525.415093][T28541] [ 525.417443][T28541] write to 0xffff8881257c4000 of 4096 bytes by task 28542 on cpu 0: [ 525.425427][T28541] _copy_from_iter+0x133/0xe80 [ 525.430207][T28541] copy_page_from_iter+0x178/0x2a0 [ 525.435330][T28541] process_vm_rw+0x659/0x960 [ 525.439938][T28541] __x64_sys_process_vm_writev+0x78/0x90 [ 525.445586][T28541] x64_sys_call+0x2a80/0x3000 [ 525.450283][T28541] do_syscall_64+0xd2/0x200 [ 525.454794][T28541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.460700][T28541] [ 525.463073][T28541] write to 0xffff8881257c4000 of 4096 bytes by task 28541 on cpu 1: [ 525.471152][T28541] _copy_from_iter+0x133/0xe80 [ 525.475930][T28541] copy_page_from_iter+0x178/0x2a0 [ 525.481051][T28541] process_vm_rw+0x659/0x960 [ 525.485692][T28541] __x64_sys_process_vm_writev+0x78/0x90 [ 525.491447][T28541] x64_sys_call+0x2a80/0x3000 [ 525.496147][T28541] do_syscall_64+0xd2/0x200 [ 525.500662][T28541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.506562][T28541] [ 525.508890][T28541] Reported by Kernel Concurrency Sanitizer on: [ 525.515046][T28541] CPU: 1 UID: 0 PID: 28541 Comm: syz.7.6968 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 525.526442][T28541] Tainted: [W]=WARN [ 525.530256][T28541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 525.540420][T28541] ==================================================================