last executing test programs: 8m27.043448496s ago: executing program 32 (id=1509): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) 8m8.027685359s ago: executing program 33 (id=1758): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x1, {0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x200}}}, 0x3a) (fail_nth: 1) 8m5.714784923s ago: executing program 34 (id=1785): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x12, &(0x7f0000000100)=0x7b, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r1, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x11, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x76, 0x76, 0x9, [@enum64={0xe, 0x1, 0x0, 0x13, 0x1, 0xe9b4659b6d5dd3ab, [{0x7, 0xe1, 0x9}]}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x2d, 0x0, 0x6a, 0x6}, @fwd={0x5}, @datasec={0x3, 0x1, 0x0, 0xf, 0x2, [{0x2, 0x6, 0x10001}], "fe83"}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x3, 0x7}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x5, 0x9}}]}, {0x0, [0x7f, 0x30, 0x5f, 0x61, 0x2e, 0x0, 0x0]}}, &(0x7f0000002240)=""/4096, 0x99, 0x1000, 0x0, 0xfffffffe, 0x10000, @value}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r2}, 0x8) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_tracing={0x1a, 0x15, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xbb41}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0x5, 0x6, 0xb, 0x1, 0x1}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x3}, @ldst={0x3, 0x0, 0x0, 0x8, 0x2, 0x2, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0x60c, 0xeb, &(0x7f0000000840)=""/235, 0x40f00, 0x20, '\x00', r4, 0x1c, r2, 0x8, &(0x7f0000000400)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0xf, 0x3666, 0x11b}, 0x10, 0x46c0, 0xffffffffffffffff, 0x1, &(0x7f00000005c0)=[r0], &(0x7f00000006c0)=[{0x3, 0x3, 0x6, 0x4}], 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4f, '\x00', r4, @fallback=0x4, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x2da, 0x7, 0x4, 0x200040000004, 0x10}) recvmsg(r1, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1, 0x0, 0x46, 0x407006}, 0x104) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) munlockall() 7m54.865299004s ago: executing program 35 (id=1890): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="3800000000000000000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000009c0)='m ', 0x2}], 0x1}, 0x8005) recvmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000800)=ANY=[@ANYRESOCT=r6, @ANYRES32, @ANYRES16=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7b, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = pidfd_getfd(0xffffffffffffffff, r8, 0x0) ioctl$PPPIOCSMAXCID(r9, 0x40047451, &(0x7f0000000040)=0x100) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000181100008ae0b47fbb307384170f5c5aeacdad6d154a088f6c05136b10755cfd699010883aeda65ed0879d9cfe3c58268b5e7408485aaf290d8f1c", @ANYRES32=0x0, @ANYRES64=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r10}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{}, &(0x7f00000007c0), &(0x7f0000000080)=r11}, 0x20) recvmsg$unix(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xb3}], 0x1}, 0x0) sendmsg$inet(r13, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 7m45.174892058s ago: executing program 36 (id=1974): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) request_key(&(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="020000000300000002c69531690450f1aa159d00000100000000000000000045113a6f46"], 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0], 0x0, 0x74, &(0x7f0000000540)=[{}], 0x8, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x66, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}]}, 0x1, 0x5e0, &(0x7f00000005c0)="$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") mkdir(&(0x7f0000000140)='./control\x00', 0x5) rmdir(&(0x7f0000000100)='./control\x00') syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) 7m25.720681508s ago: executing program 37 (id=2177): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0106000000000000000009000000240004801300010062726f6164636173742d6c696e6b00000c000780080005000200000013daa03bf6f183b93123f73121d48c"], 0x38}}, 0x0) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x78, r4, 0x1, 0x80, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x68a}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x2805}, 0x0) 4m22.118378397s ago: executing program 2 (id=5021): r0 = socket$netlink(0x10, 0x3, 0x14) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="dfbf00000000000000006700000008000300", @ANYRES8=r1, @ANYBLOB="0800c300741300000800c4"], 0x30}, 0x1, 0x0, 0x0, 0x240408c3}, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40, 0x0, r3, 0x3, '\x00', 0x0, r4, 0x1, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000060a670653266adf2acf58eff9f70104000000000000000002000000180004801400018009000100686173680000cb6e6bebf8f129bc508c9ea950294f200000040002800900010073797a300000000009000200"], 0x6c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1700000000000000008400000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000070000000000000002000900", @ANYRES32=0x0, @ANYRES32, @ANYRES8=r0], 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r6, 0x0, 0x20000000}, 0x20) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000ffffffffff"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) 4m21.94000213s ago: executing program 2 (id=5027): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000009000/0x2000)=nil) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='mm_page_alloc\x00', r0}, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)}], 0x1, 0x0, 0x0, 0x39c}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 4m21.881592291s ago: executing program 2 (id=5030): r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x80800) sendmsg$tipc(r0, &(0x7f0000001440)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x0, 0x1}}, 0x10, &(0x7f0000001340)=[{&(0x7f00000000c0)="b5", 0x1}, {&(0x7f0000000100)="f942450ca36f9d099fac7fe2ae1f23847a3d664f0983f30f0f54e5bbbfa474567d910f7d7c1d1b0a5b399720cfcd9e7947b1e567fd830a4c0c41c3c1eca7cc5638e6f1c00fddc722de56c33af5983f", 0x4f}, {&(0x7f0000000180)}, {&(0x7f00000001c0)="59276940498a24cc80d52eaaa5b98c109ffc9fb3e77611c1697f1e7f096a5db97594b173949a435e73d2729d09585c88f8672283af08ed0286214f0d796de0", 0x3f}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="6091a4e844cc2024ef1357d0c9d69f91eeaea8b53f0178282fe487d51dd88a6b3f270e01b66c846b884060df188ed3b1d3ae67008df18ba18b000b94173437ff8db39f75e8e40c2979468d9bf8ca343fa85f", 0x52}, {&(0x7f0000001280)="630d7637c83a3cc5815d7cee76c9cb428f8421f1f0c55dc70758ba8589745c5eff79f3a98affe1d81b55fab8545991e37f65c1b9e7d808ca2ed90aa0c3d99b2bfa11dbb3cc84652726ea2149eec554f0958b76c32718870000c462729845e887b239dfe142e8afaead044459411c14428249ad12ba5764273242c2ba0d682e22b351f34fb33b4f944495cb58dacf8e6203cb841b1b9d294f8fd62efe20609c2c53ed39f405", 0xa5}], 0x7, &(0x7f00000013c0)="16b1ea5bdfa364ce847d1f7ba9db560df1958cd1c375bb3afcbdcc5a01b349077a2b7709106f545f584594fc33ba6cc4c13e1fa08f9d8d5774de64451cefbcf736effccaeea47696acc109706bb01e6b5abe1afbfb2e988a185ae57553809b2772ec6f8a9f84", 0x66, 0x24008000}, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001480)={'batadv_slave_1\x00'}) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000014c0)={0x0, @in={{0x2, 0x4e24, @multicast1}}, 0x7, 0xff80, 0x0, 0x7fff, 0x20, 0x10000000, 0x6}, &(0x7f0000001580)=0x9c) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000015c0)={r2, 0xd, 0x3}, 0x8) (async, rerun: 32) r3 = add_key$keyring(&(0x7f0000001600), &(0x7f0000001640)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) (async, rerun: 32) r4 = open(&(0x7f0000001680)='./file0\x00', 0x12000, 0x48) sendmmsg$inet6(r4, &(0x7f0000002cc0)=[{{&(0x7f00000016c0)={0xa, 0x4e24, 0x800, @private1, 0xb568}, 0x1c, &(0x7f00000017c0)=[{&(0x7f0000001700)="f8d134943845e801f9a6f001ab8a9e3b2a126497474318d8bba353e91e76fe3b34a346dc52c84b24f2b6bdbb4fbee43ffbb8ae086e3d461c563ab8609a1840df869ea6559742a1fe9739a6fef6ce6177f1ddcddb4ed8588c47933e03127dc30b5236fffe8b440e202a145d8c496255bc89c55b76b8bfcc2764606607b332f45ff7a2e6545edd3a4f85220baa85b6c3ce1fd73787ba55f81509ba9a5c3dad", 0x9e}], 0x1}}, {{&(0x7f0000001800)={0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x200}, 0x1c, &(0x7f0000001a00)=[{&(0x7f0000001840)="7cabc1af6df36db1ed5bdb8bddac85f750fdc4ed3c3dbd54c627b785309a9fd83693aa24c21974231012ffc0a9341c67bdc51c001866664ed3ac75b6a9610a88ab2c13495dcdbad7ac18a622402496a2c45650afd66e3790cfd5ef210b26ca8e174b599c25cf383fd2553d45fe1a62", 0x6f}, {&(0x7f00000018c0)="6658fca3a132e44b498c13349f7af7757b626ff18f23d066306aab88953edfe33a", 0x21}, {&(0x7f0000001900)="0dc25978c59f856beecf65bc31216bc815847d833bcd01213aa2fff7096ff6f52c8b85d278874490ed47a22040ec0c3f674ed74cd69152b71bdd1d56a2203f9dea8b44f0cb09463b1c3071e5af002e0db8a2391eb01fbb0ef379cd08931c9b07cdb9a9e7ee08a0119bb14473c2572262a69e5bbd57ea2cc4d3ca8d124ebf3970b8fc6cfc49d3166dff9b8c1a8d603c3e9f9d2b7b60a3438a9f07d03ea5b9a85015a49387254f5c72d0ecd4c9b58eade6f77689820318e51eccd9968e14a18fe8d0f5694931ffb7a2e81ca38a79066c2a71fbd6bcc0a13931247e57f925c3629cdb05e551e25d20e38e7b14fee2689718358bed8d8b7c73e78ed83e8d97", 0xfd}], 0x3, &(0x7f0000001a40)=[@hopopts_2292={{0x90, 0x29, 0x36, {0x2c, 0xe, '\x00', [@ra={0x5, 0x2, 0x9}, @jumbo={0xc2, 0x4, 0xce}, @calipso={0x7, 0x18, {0x0, 0x4, 0x3, 0x7, [0x8000000000000000, 0x9]}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x10, {0x2, 0x2, 0x9, 0x7, [0x4]}}, @calipso={0x7, 0x18, {0x0, 0x4, 0x3, 0x971, [0x4, 0xfff]}}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}, @rthdrdstopts={{0xc0, 0x29, 0x37, {0x0, 0x15, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x8, {0x3, 0x0, 0x9, 0x101}}, @jumbo, @generic={0xe, 0x81, "0096e48cd7d313d4e25852485a3887b80dec60e41e6172d0b7a804fb67d0bc549231dcbad17dfbbc7d0924e3609165f433573f8d4985583d8195fc99bd5145d40eab3d99391a6778b643297f37238e42f03cd90a5a11021de7ddd6bfec18e4128c913d4a4b4130fefacffd660838624434de7d70390452d6f5c643dbb4f4173a18"}, @ra={0x5, 0x2, 0xff}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1]}}}, @dstopts_2292={{0x10b0, 0x29, 0x4, {0x3a, 0x212, '\x00', [@generic={0x5, 0x1000, "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"}, @generic={0x6, 0x80, "4b38fe87faa363e796148c9914e372cbec0b325f6ef2e2f8e97d3cc5306c47fda96797e668ca5427542bd0bfc587a74dfca87b8d8360d8a52176f8aa3f8038ba484fbbb2d7912acfe62ba89dc3d6876accc29c13b9b8ebfd5b407ae7d9594ab25b4662a5c28162c0ccd08030f427ae36d2ba5a21d79463cd43f2fd9cbeed9770"}, @jumbo={0xc2, 0x4, 0x1}, @calipso={0x7, 0x8, {0x0, 0x0, 0x7, 0x6}}, @enc_lim={0x4, 0x1, 0x89}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xff}}, @rthdr={{0x28, 0x29, 0x39, {0x16, 0x2, 0x2, 0x3, 0x0, [@private0]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x6d4b5418}}], 0x1258}}], 0x2, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000002d40), &(0x7f0000002d80)=0x4) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000002e00)={0x6, &(0x7f0000002dc0)=[{0x3, 0xe, 0x3, 0x80}, {0x8000, 0x2, 0x6, 0x7}, {0x0, 0x81, 0x2}, {0xe, 0x9, 0x4, 0x9}, {0x4, 0x6, 0x5, 0x9}, {0xf, 0x2, 0x9, 0x6}]}) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002e80), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002ec0)={'wpan4\x00', 0x0}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002f00)={'wpan3\x00', 0x0}) (rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002f40)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000033c0)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003380)={&(0x7f0000002f80)={0x3fc, r6, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_KEY={0xe8, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x54, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x555f}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_ID={0x64, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "91435313f6d473c57533a958b26e6b22960c36e0db2421b36300df4cefbc3c1b"}]}, @NL802154_ATTR_SEC_KEY={0xec, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "5c71e1738ac2c3fa9857e77ea4f87d3c"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_ID={0x4c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x10001}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "050be6cd6ad2b9c96dde88f5d46b445f"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "6f726cba939f45b009f3616e3b1a81a2c521edc9d0b438a1eaca15577be72a37"}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "edcf06bf4c6b0a9cda19a9b9484f830972a7afb3e9e73c0ac934875cb98f8913"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_KEY={0x16c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "51123c442e975646ed3292eed5fe064e8c08e7a052e4d76fc88ce3a1d68b0c0d"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "78b387b3b802bf1e386192918d53fdb4"}, @NL802154_KEY_ATTR_ID={0xb0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffffffff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80000000}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffff7fff}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "e311ce49afed86ef62c870e5c236a624e4e929237f75e601cbd27913013c91f8"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xc9}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "419416bd636b144d358ef11fa59cb06f"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8d675e250fd695c759206542767aa403"}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xd}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_KEY={0x78, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "7a5ad9f1029c5136a260260fc42e22b7145bd4ab2b194411049d409d55ee5ef9"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "7899d012bd7a3e6e637727bf97427992f89e229a8c439580c45ca014557a96f7"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "0554d6c09b639aff7f1a2d9ba57a07f5272975534aca860ddb2745866ef0c04b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xff}]}]}, 0x3fc}, 0x1, 0x0, 0x0, 0x4c800}, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000003400)={@local, @multicast2, 0x1, 0x6, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x33}, @loopback, @loopback, @remote, @rand_addr=0x64010100]}, 0x28) (async) r10 = accept$packet(r4, 0x0, &(0x7f0000003440)) getsockname$packet(r10, &(0x7f0000003480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000034c0)=0x14) (async) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000003540), r5) sendmsg$NFC_CMD_FW_DOWNLOAD(r5, &(0x7f0000003600)={&(0x7f0000003500)={0x10, 0x0, 0x0, 0x100400}, 0xc, &(0x7f00000035c0)={&(0x7f0000003580)={0x1c, r12, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x4004004) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003840)={r4, 0x0, 0x0, 0x18, &(0x7f0000003640), &(0x7f0000003680)=""/24, 0x3, 0x0, 0xb6, 0x88, &(0x7f00000036c0)="2fb0156b9365d627efcb32fc483f0b6b076689f90e4af0e8a8b2b6307bd93bc44407c55ad8aec65f26ccff440a205a8efc0269220aed261cbe4c74639dcec9ec3f0f4a5e21174d281e53a8e45117a614d6f91d73758e22482118a88277f4b14ddb2ec601585f6431a2af418f22571431c5c7de32174a2465a68b61d1db1cdad0085b39d729d2330df32b14534a5c19d2b40b6419bd0f9bd9c7a246181b2f29889174368ee4df7f04d879bf40ae44f7af5a3d44085251", &(0x7f0000003780)="54a5cb00262aa8f22e2c3d6ed2aa325aa4eee5e498ab9f4df6b5d779e29b0ebf00a7ad48eace214064f34280639d6145934ee8a30c8417ecf5ec091554da4fafbc47bb926cb8a6462ff90fc9cbbc59342de94465a9ef65c7334d5509e9533420d89648f2b0a206e4a1369bb788885e4b20d976c8be53cdbce22960e61b434623826d149a85b65190", 0x5, 0x0, 0x1}, 0x50) sendmsg$inet(r0, &(0x7f00000039c0)={&(0x7f00000038c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000003940)=[{&(0x7f0000003900)="4fcf1a938ef49f6e11bc536faf1c3b63facddd58", 0x14}], 0x1, &(0x7f0000003980)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @multicast1, @multicast2}}}], 0x20}, 0x4000000) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000003ac0)={'syztnl2\x00', &(0x7f0000003a00)={'syztnl2\x00', r11, 0x8f, 0x10, 0x100, 0x3, {{0x25, 0x4, 0x1, 0x3, 0x94, 0x66, 0x0, 0xf9, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0xc, 0xac, 0x0, 0xe, [0x7fffffff, 0x0]}, @timestamp_prespec={0x44, 0x1c, 0xc9, 0x3, 0x1, [{@remote, 0x5a2b}, {@multicast1, 0xfffffffb}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x8000}]}, @end, @end, @lsrr={0x83, 0x1f, 0x99, [@dev={0xac, 0x14, 0x14, 0x24}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @loopback, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @noop, @timestamp_prespec={0x44, 0x1c, 0xfb, 0x3, 0x7, [{@multicast2, 0x6}, {@loopback, 0x1000}, {@remote, 0x8}]}, @generic={0x44, 0x9, "d98541ed501186"}, @generic={0x44, 0xf, "32068a3c10d8470020d12076c9"}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000003b00)=@bloom_filter={0x1e, 0x2, 0xe, 0x0, 0x5000, 0x1, 0x220, '\x00', r13, r4, 0x0, 0x5, 0x5, 0x3, @void, @value, @void, @value}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000003b80)=0xd, 0x4) keyctl$get_persistent(0x16, 0x0, r3) 4m21.788277602s ago: executing program 2 (id=5036): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000002480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000000)='console\x00', r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000680003806400"], 0x118}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffa3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x9403, 0x0, 0x230, 0x2c0, 0x340, 0x3d8, 0x3d8, 0x340, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@unspec=@physdev={{0x68}, {'ip6tnl0\x00', {0xff}, 'erspan0\x00', {}, 0x8, 0x2}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0xfffffffc]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x3, 0x0, 0x1}, 0xc) setsockopt$MRT6_DEL_MIF(r7, 0x29, 0xcb, &(0x7f0000000540), 0xc) 4m21.574390245s ago: executing program 2 (id=5045): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000080)={'mangle\x00', 0x4, "d1a2d6e7"}, &(0x7f0000000180)=0x2c) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x3f) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r4) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x9f, 0x25dfdbfc, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x3, 0x4) pipe2(0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 4m21.501790206s ago: executing program 38 (id=5047): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r2, 0xffffffffffffffff, r3, 0x0) (fail_nth: 2) 4m20.934017365s ago: executing program 39 (id=5049): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000340)={[{@init_itable_val={'init_itable', 0x3d, 0xfffffffffffffffc}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@nojournal_checksum}, {@dioread_lock}, {@quota}]}, 0x3, 0x42f, &(0x7f0000001600)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='mm_page_alloc\x00', r2}, 0x10) sendfile(r0, r1, 0x0, 0xf0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = io_uring_setup(0x3815, &(0x7f0000000140)={0x0, 0x15c2, 0x20000, 0x1, 0x65}) io_uring_setup(0x1eaa, &(0x7f0000001080)={0x0, 0xfffffffa, 0x1000, 0x3, 0x2d0, 0x0, r4}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(r5, 0x4, 0x2000) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000280)={{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x8000}, {0xa, 0x4e22, 0x7f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0xffffffffffffffff, {[0x4, 0x5, 0x0, 0x5, 0x3ff, 0x6, 0xfffffffd, 0x63]}}, 0x5c) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000d80)={0x2, 0xf9, "539bc3473879e33ddd145749e93dbf187f54110c7233f363d286fc7ac43f490c467f23fa7ee1614e1a01a358bc4dda9d3ff6578d81847836d6fbf37a8bd080e951ed4990f9ed67cc7d454194d3e8cb85912b98d2d15299177732ac9d6621b88b54174b56616309cc38a6a2dc90f5b2e832a6ed55e34b556a322f1adb7962d8b10c7309b62bfc6620123897c97211a1498f65f3055aabc52ad2444a2c4d636efaae14e895f1c9ecd8853dacfe47ab004b988396accc0906a9b245fcd4ec17895472e418a0948d9cb23b57c336ef50adc40f1c8446851f697d22a25d301e101bd8e4a9e9da91159587652d639ac4d936c6b568b61ac951ba55df"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_bp={0x0, 0x1}, 0x1100, 0x5dd8, 0x3a65, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(r6, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x29, @multicast2}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001040)="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", 0x595}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0x4) 4m20.893151445s ago: executing program 40 (id=5050): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000380)='kfree\x00', r1}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500000016fccf493d1875f33666ad9a0052000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) socket$kcm(0x10, 0x2, 0x0) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x5}, 0x18) (async) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) (async) connect$inet(r4, &(0x7f0000000380)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e0000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) statfs(&(0x7f0000000200)='.\x00', &(0x7f0000000440)=""/137) (async, rerun: 64) sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@getqdisc={0x28, 0x26, 0x100, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff2}, {0x5}, {0x4, 0xffff}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044840}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x82, 0x7ffc1ffb}]}) (async, rerun: 64) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) 4m20.892964136s ago: executing program 2 (id=5051): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x800000000000, 0x0, 0x0, 0x751, 0x7, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000200000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)=ANY=[], 0x48) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"]}, 0x1df) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000808, &(0x7f00000003c0), 0x0, 0x534, &(0x7f0000000400)="$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") 4m20.892764876s ago: executing program 41 (id=5051): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x800000000000, 0x0, 0x0, 0x751, 0x7, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000200000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)=ANY=[], 0x48) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"]}, 0x1df) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000808, &(0x7f00000003c0), 0x0, 0x534, &(0x7f0000000400)="$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") 3m8.505406971s ago: executing program 5 (id=7012): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000034ed00000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000540)=@assoc_value={0x0, 0x4}, 0x8) 3m6.978446444s ago: executing program 5 (id=7034): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000340)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={0x0, 0xf8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0xe, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="61154c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x50a5, @void, @value}, 0x94) r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x2, 0x34f}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f0000000200)}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x22, 0x0, @fd_index=0x4}) io_uring_enter(r3, 0x45bc, 0x0, 0x0, 0x0, 0x0) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000003c0), 0x185001, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x9, '\x00', r1, r6, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) 3m6.838286776s ago: executing program 5 (id=7040): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000fcffff0318110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x41, 0x3, 0x2b8, 0x0, 0x19, 0x0, 0x140, 0x0, 0x220, 0x1f0, 0x1f0, 0x220, 0x1f0, 0x3, 0x0, {[{{@uncond, 0x0, 0xe0, 0x140, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@limit={{0x48}, {0x0, 0x2, 0x7e}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x28f5c, 0x6]}, {0xffffffffffffffff, [0x0, 0x0, 0x4, 0x4, 0x1], 0x0, 0x3}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x10, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x318) 3m6.795435287s ago: executing program 5 (id=7042): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x3e96, 0x400, 0x3, 0x10000288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x12b) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) move_mount(r5, &(0x7f0000000080)='./file0/file0\x00', r5, &(0x7f0000000040)='./file0/../file0\x00', 0x0) close_range(r0, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r2, 0x40f9, 0x217, 0xa5, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f00000000c0)=[{{}, {0x4, 0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}, {{0x2, 0x1, 0x1}, {0x2, 0x1, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x4, 0x0, 0x1, 0x1}}, {{0x1, 0x0, 0x1}, {0x2}}, {{0x1, 0x1, 0x1, 0x1}, {0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x0, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x100, 0x1, 0x1}}], 0x40) close_range(r0, r1, 0x0) 3m6.676137599s ago: executing program 5 (id=7048): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0) syz_open_procfs$namespace(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3m6.56926744s ago: executing program 5 (id=7054): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb3}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xa5d4}, 0x4c58, 0x0, 0x0, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) gettid() socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) getegid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000e8010000030a01020000000000000000010000000900030073797a3200000000280004800800024000000000080001400000000514000300626174616476300000000000000000000900010073797a31000000000900010073797a3100000000340008800c00024000000000000080010c00024000000000000000040c00014000"], 0x25c}}, 0x0) 3m6.531541971s ago: executing program 42 (id=7054): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb3}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xa5d4}, 0x4c58, 0x0, 0x0, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) gettid() socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) getegid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000e8010000030a01020000000000000000010000000900030073797a3200000000280004800800024000000000080001400000000514000300626174616476300000000000000000000900010073797a31000000000900010073797a3100000000340008800c00024000000000000080010c00024000000000000000040c00014000"], 0x25c}}, 0x0) 2m49.476391684s ago: executing program 4 (id=7395): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0xd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) 2m48.100948015s ago: executing program 4 (id=7400): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000540)=@assoc_value={0x0, 0x4}, 0x8) 2m46.483243179s ago: executing program 4 (id=7424): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x80805, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000f1ffff000002000000000000010000007b000000957d868b91b2d1a8405da82e3b842b2ad6509d6a5813cb423053e53fda13f903fe"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e, @void, @value}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x101}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendfile(r6, r5, 0x0, 0x17) 2m46.43095386s ago: executing program 4 (id=7427): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f00005ae000/0x1000)=nil, 0x1000, 0x3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000100)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@mblk_io_submit}, {@bh}, {@auto_da_alloc}, {@barrier}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x7}, 0x18) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c4000000190001000000000000000000e00000020000000000000000000000000000400000000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000700000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000c00150059073500290b0000"], 0xc4}}, 0x4004) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b88ef", 0x8, 0x3a, 0x0, @private1, @local, {[], @echo_reply}}}}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap$IORING_OFF_SQES(&(0x7f0000759000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x10000000) lseek(r4, 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8be799f3f8385b30}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r6, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x7fff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8041) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='virtio_transport_alloc_pkt\x00', r5}, 0x18) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 2m45.810451729s ago: executing program 4 (id=7438): socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 2m44.114815364s ago: executing program 4 (id=7449): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x80805, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000f1ffff000002000000000000010000007b000000957d868b91b2d1a8405da82e3b842b2ad6509d6a5813cb423053e53fda13f903fe"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e, @void, @value}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x101}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendfile(r6, r5, 0x0, 0x17) 2m44.114334514s ago: executing program 43 (id=7449): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x80805, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000f1ffff000002000000000000010000007b000000957d868b91b2d1a8405da82e3b842b2ad6509d6a5813cb423053e53fda13f903fe"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e, @void, @value}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x101}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendfile(r6, r5, 0x0, 0x17) 2m32.785424272s ago: executing program 8 (id=7603): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'geneve1\x00', 0x600}) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x40, 0x1800}], 0x1, 0x0) unshare(0x20060400) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futimesat(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r6, 0x1, 0x50, &(0x7f0000000000)=0x4, 0x4) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRESHEX=r2, @ANYRES16=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r7}, &(0x7f0000000400), &(0x7f00000004c0)=r8}, 0x20) 2m32.505747317s ago: executing program 8 (id=7605): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x8205, &(0x7f0000001340)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x15}}, {@stripe}, {@grpid}, {@dioread_nolock}, {@data_err_ignore}, {@noblock_validity}, {@minixdf}, {@orlov}]}, 0x1, 0x60a, &(0x7f0000001c40)="$eJzs3c9rHNcdAPDvzEqqZKuVXYqpTUsFPdhQrB+uqduebF/qg6GG+lBCDhaW5AivbGHJEDuGyJBDAgmEkGsIvuQfyD2YXHMLgSS3nANOCA45JMEbZnbHXla78lrR/pDn84FZvXkzu+999+lp3uzo7QRQWtPZQxpxOCIuJRFTTdsmo75xurHfw+/uXM6WJGq1/32bRNLIK/Z/1Pi5P3tIIsYj4tOzEb+vbC13/dbtqwvVWt2rEbMbq2uz67duH19ZXbiydGXp2vyJf548Nfev+ZPzuxJnEde58//901uvvfSP5c+qx5M4HRdHX1mMljh2y3RMx6NGiM35IxFxKku0eV/2miKEZMD1YGcqjd/H0Yg4FFNRydfqpmLlzYFWDuipWiWiBpRUov9DSRXjgOLcvhfnwcPswZn6CdDW+Efqn43EeH5utO9h0nRmVD/fPbAL5Wdl/HznyHvZEh0+hxjZhXI62bwbEX9sF3+S1+1A/ilOFn8aadPzsvRcRIw13ot0h+VPt6z3+/fvWeJvbocs3tONn1n+2R2WP+j4ASin+2caB/LNbO3J8S8bGRbjn2gz/plsc+zaiUEf/zqP/4rj/Xj+GXnaMg7LxjwX2r/kaGvGV2+ce6dT+c3jv2zJyi/Ggv3w4G7EkZb4X88Hc8nj9k/atH+2y6Uuy/jP59+c67Rt0PHX7kUcbXv+8+SKVpaa3VhdK/Jark/OLq9Ul+bqj23L+OiTFz/oVP6g48/aPzrEv137Z3lrXZbx4YV7q522TT41/vTrseRinhpr5Ly8sLFxYz5iLDnf2KUp/8T2dSn2KV4ji//YX9v3/23izxt6s8v41/5/9WE9tfUqadftv+WvSu5Rrcs6dJLFv7jD9n+7yzJ+eOHmn1uyJorEdvFPbH2ppNv3HAAAAAAAAMooza/BJunM43SazszU5/D+Ifal1evrG39bvn7z2mLEsfz/IUfT4kr3VH09ydbnG/8PW6yfaFn/e0QcjIh3KxP5+szl69XFQQcPAAAAAAAAAAAAAAAAAAAAQ2J/Y/5/cZ/q7yv1+f9d2TjU49oBPdfLG8wBw03/h/LK+/9O7+AK7GmO/1Be+j+Ul/4P5aX/Q3np/1Be+j+Ul/4P5aX/AwAAAMBz6eBf7n+ZRMTmvyfyJTPW2DY60JoBvfbsfXy6J/UA+q/S16cBw+TxpX/T/6F0uhr//9j4csDeVwcYgKRdZj44qG3f+e+3fSYAAAAAAAAAAAAA0ANHD5v/D2WVxseDrgIwIL9iIr/vAIA9zlf/Q3k5xweeNot/vNMG8/8BAAAAAAAAAAAAoG8m8yVJZxq3AJ2MNJ2ZifhtRByI0WR5pbo0FxG/i4gvKqO/ydbnB11pAAAAAAAAAAAAAAAAAAAAeM6s37p9daFaXbrRnPhpS87znSjugjos9WlORNL/QiciYhhi701ipCknidjMWn4oKnZjPYaiGmlejQH/YQIAAAAAAAAAAAAAAAAAgBJqmnvc3pH3+1wjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOi/J/f/33kiecrrDDpGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBv+iUAAP//q+Q5KA==") socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00') lseek(r1, 0x38, 0x0) lseek(r1, 0x100, 0x1) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @empty}, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f00000006c0), &(0x7f0000000400)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070002000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r4, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 2m32.478879198s ago: executing program 8 (id=7607): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x4013, &(0x7f0000000200), 0x1, 0x5c0, &(0x7f0000001040)="$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") connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000100)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@usrjquota_path={'usrjquota', 0x3d, './bus'}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x3, 0x4f3, &(0x7f00000012c0)="$eJzs3F1oXFUeAPD/nXz2a5vd7Xa33e5uut1lwxaTNq02D4JUFHxQECuojyFJS23aSJOCLVWmIPVRCr6Lj7764Kv6UsQnwdf6KEihSF/aCuLInbl3vjKTNJNkxpjfD27mnHtn7jnnnnvunHtO5gawbY2mf5JK+E5E7I2IQvMbRisvD+9fn3l0//pMFEulMz8m5Y89SOOZbDexK4uMFSIK7yW1DXUWr167MD0/P3c5i08sXXxrYvHqtSfOD2drpqaS/g4L1SK9tFwPDr67cOjAC2/cemmmuuc8tfpybJTRGG2VlbL/bnRiPbanLtxxvdF16fmfVtdAuf3vjb5YqfKKXcwZsNlKpVJpqP3mYqnZjWVrgC0rhnudA6A38i/69P43X1p1BAY3p/vRc/dOV26A0nI/zJaIf5VX5uMgA033txtpNCJeL/70UbrEJo1DAADU++J03hNs6v+NVGZGfr5y+5n09Q/ZHMpIRPwxIv4UEX+OiH0R8ZeI2B8Rf42IvzXtvy8iSiukP9oUr6ZfnYQq3N2goraU9v+ezua20qU291UNjfRlsT0ReYd57lh2TMZiYOjs+fm54yuk8eVz337Qblt9/y9d0jzkfcEsH3f7mwboZqeXpjsr7XL3bkQc7K+Vv9L/TfojkupMQBIRByLi4Br2O1IXPv//Tw5VIwON71u9/GWllvNoGzDPVPo44n+V+i9GtfzRMImYNMxPXpw+N3du7tLk1NTJE8dPPTX55MRwzM8dm0jPgmMt0/j6m5svt0t/1fJ/9n3zR54/9fmZrGWtX1r/O+vO/8jnb2vlH0kikup87eLa07j53ftt72k6Pf8Hk1fL4fy+9O3ppaXLxyMGkxeXr5+sfTaPp69RrJR/7Ejz+V9Ot3yNy4/E3yMiPYn/ERH/jModYpr3wxHx74g4skL5v3r2P292Xv7NlZZ/NhrLX6n5hvqvzde3CyTZ3GDDpsFIA30XDt951Obi8Xj1f7IcGsvWtL7+JQ2XiHY5zb/t0jW/rPvoAQAAwNZQiIjddWNJu6NQGB+vjAHti52F+YXFpaNnF65cmk23RYzEQCEf6aqMBw8k+fjnSF18sil+Ihs3/rBvRzk+PrMwP9vTkgO7ym0+KYxHvNZX1/5TP2zMEDPwW+b3WrB9rdT+0078/ltdzAzQVY///X/7nU3NCNB1de2/3S/8ix383xewBbj/B2pWf9CPawZsfSVtGba1NbX/ox4CCL8n/fFKNVzoaU6AbtP/h21p1d/1rytQGmq9aTiWvzmGV95hX3SWjR0t0upJIO1Z9ST1HZ18Kn+aQtv3RGFtOxyKxjWDHdbp2XUejeLlxXP7ayd//myRdR7nUva/8htdg592pZ22CnT9UgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALApfg0AAP//XhrXwA==") r3 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) 2m32.28165634s ago: executing program 8 (id=7611): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r0], 0x28}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x29, 0xda, 0x3, 0x6b9cc4fa, 0x0, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x3}}) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000180)=@ll={0x11, 0x6, r1, 0x1, 0x5}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)="a18d5aab82f02146e5d564631a56268e29eaf9ccf05f4553f951e8911545f701ee898c75a6be206750439f00944d9543ccc2afc38affd6440408ab4c664147a50a0ad608", 0x44}], 0x1}, 0x8015) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x100001f, &(0x7f0000000400)={[{@errors_remount}, {@grpquota}, {@i_version}, {@data_err_ignore}]}, 0x21, 0x44b, &(0x7f0000000dc0)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1600000000000000020000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000006d020000004aa2359d098c6d0207e1ed2de01e823de6b4904cdb5a9b917a591872b51d405dcf3e60261d8ce3efc65a15d5e504000000da749f2a39471243af1dbae58c175c744ccfdcee288a42898d1558956bc8044e5485dc9023500a111882ed4306448bc820a52a163f0d989b0f3c90f9d05f15082f56bd029a346afde9140f1773f74f2ebf442b16b603a77cee7f8a"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x8, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f00000008c0)='./file0/file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) getdents64(r5, &(0x7f0000002ec0)=""/4096, 0x1000) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000000200)=@v3={0x3000000, [{0x46, 0x75}, {0x1, 0x4}]}, 0x18, 0x1) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000b00)={{{@in6=@private2, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x4e22, 0xff, 0x4e22, 0x0, 0xa, 0x80, 0x0, 0x73}, {0x101, 0xc1, 0x7, 0x3, 0x8, 0x2, 0x35, 0x3}, {0x6, 0xd32, 0xa28a, 0xffffffffffffff89}, 0x9, 0x6e6bb6, 0x1, 0x0, 0x3, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, 0x4d2, 0x33}, 0xa, @in=@multicast1, 0x3506, 0x2, 0x3, 0x9, 0x2, 0x3, 0x5}}, 0xe8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x4}]}}]}, 0x38}}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000300)={0xcea, 0x3}, &(0x7f0000000380)) rmdir(0x0) r8 = syz_clone(0x16800180, &(0x7f00000004c0)="852491f3c6a58055645be3a71a27c99552c737222e79993f8671b20ccdf132ff24b08c12c7d380558da8374086a4515f387a70b3985ed91c376db640edeeeeb27216e13e54179c18e0a466234ccdf4114d7a3c0b33ba6763890824be9ea27487c2410fcd9f7fb95644ed6d0999d8a26af46ecb4dc8e2e41a38c50fd3e908", 0x7e, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="28e3f7e2ca5cfdc93aaaa2d294ba493d7aa6adfe2bc6b4dd5a91fc3045e5c345bcb00afaf798f7e2d6889389989d9a75531fa3bfd0c25e84d885a673e93dca136a4c03c87efd860cab2c9f6f30df481d5624717aa9fb62b79a719dd3a9e3c8e77745a7aa6dd53e721b990b912de469262cd1b338389500e1d946e5196813369cf8159c46cb71d96c803d35f756b36c5c7ab41dd260535ac3e497c6b56986d72f7c74310fd56ddbeb9928190e8146e3c9aa67bfc4") syz_open_procfs(r8, &(0x7f0000000680)='io\x00') 2m32.139950863s ago: executing program 8 (id=7613): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000140)={[{@abort}, {@nodioread_nolock}, {@block_validity}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}]}, 0x2, 0x564, &(0x7f0000000700)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f00000006c0)=ANY=[], 0xffd7, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0xfb2514f08c55c983, 0x0, 0x0, 0x0, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000208e052500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040), 0x0, 0x0, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r5}, &(0x7f0000000200), &(0x7f0000000400)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000300)) fcntl$dupfd(r7, 0x0, r7) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x20000023896) 2m31.882349336s ago: executing program 8 (id=7615): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2010) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$USBDEVFS_IOCTL(r0, 0xc0105500, &(0x7f0000000040)=@usbdevfs_connect={0x6a0}) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$msr(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x7fff, 0x400300, 0x4000000000005}, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="913077000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 2m31.817723057s ago: executing program 44 (id=7615): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2010) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$USBDEVFS_IOCTL(r0, 0xc0105500, &(0x7f0000000040)=@usbdevfs_connect={0x6a0}) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$msr(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x7fff, 0x400300, 0x4000000000005}, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="913077000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 6.545613449s ago: executing program 3 (id=9925): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000500)) r2 = socket(0x2d, 0xa, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='jbd2_run_stats\x00', r3, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000840)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}], [{@obj_role={'obj_role', 0x3d, 'ext4\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@appraise_type}, {@uid_eq}, {@euid_eq}, {@obj_user={'obj_user', 0x3d, 'h%'}}, {@pcr={'pcr', 0x3d, 0x22}}]}, 0x1, 0x581, &(0x7f0000002800)="$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") r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x90) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x441, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) readv(r4, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r4, &(0x7f0000000200), 0x4) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 5.585827932s ago: executing program 3 (id=9939): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r3}, 0x10) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYBLOB="0198", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000027c0)=@newtfilter={0x40, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x2, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffff}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) sendmsg$nl_route(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x1, {0x0, 0x0, 0x0, r8, {}, {0x0, 0x5}}}, 0x24}}, 0x10) 5.537593553s ago: executing program 3 (id=9940): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000efffffff850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) setgroups(0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00'}, 0x10) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000006740)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@jqfmt_vfsold}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@nobarrier}, {@jqfmt_vfsold}, {@nojournal_checksum}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='cpu>\t\t') 5.409318234s ago: executing program 3 (id=9944): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x41, &(0x7f0000000080)=ANY=[], 0x68) r7 = socket(0x10, 0x803, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0xf2ff, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r10, {0x0, 0xc}, {}, {0xb, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x81, 0x1}, {0x2, 0xa5, 0x2}}}]}}]}]}]}}]}, 0x5c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r12 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r12, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r13 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r13, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x655c, 0x2, 0x1ffffffe, 0x9, 0x800}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 5.264733737s ago: executing program 3 (id=9947): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'geneve1\x00', 0x600}) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext, 0x3, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x40, 0x1800}], 0x1, 0x0) unshare(0x20060400) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, 0x0, &(0x7f00000001c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futimesat(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r7, 0x1, 0x50, &(0x7f0000000000)=0x4, 0x4) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRESHEX=r3, @ANYRES16=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r8}, &(0x7f0000000400), &(0x7f00000004c0)=r9}, 0x20) 5.166361078s ago: executing program 3 (id=9948): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x100000004}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000200000000000000080001000100000004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 5.166227348s ago: executing program 45 (id=9948): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x100000004}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000200000000000000080001000100000004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.776621341s ago: executing program 6 (id=10013): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f00000000c0)) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r2, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c) 2.678888613s ago: executing program 6 (id=10015): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xa5d4}, 0x4c58, 0x0, 0x0, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2, 0x0, 0x600}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) 2.501596085s ago: executing program 6 (id=10021): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x3780, 0x4dd8, 0x0, 0x9, 0x5, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) socket(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x48000) 2.496173135s ago: executing program 9 (id=10022): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) tkill(0x0, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa10000000000000701000000ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="090000000400000006000000ff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r0}, 0x38) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES8=r1, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x10) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x110070, r2, 0xcaf9a000) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x6}, 0x18) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x3) 2.416201946s ago: executing program 9 (id=10025): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000a80)='mm_page_free_batched\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000100000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x18) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x5, 0x20}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000000c0)={r3, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000180)=0x84) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000711036000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file4\x00', 0x1c0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff}) socket(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x143842, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121c00, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r7, 0x6628) ioctl$SG_GET_REQUEST_TABLE(r7, 0x2286, &(0x7f0000000340)) r8 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000004000000000000000000000a03000000000000000000000400000000020000000000000f0200000000005f"], 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, @void, @value}, 0x28) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) 2.12218717s ago: executing program 9 (id=10028): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xea, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000006c0)='kmem_cache_free\x00', r1, 0x0, 0x2000}, 0x18) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 2.106059641s ago: executing program 9 (id=10029): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000004c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x7, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0xa01c0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) 1.879767073s ago: executing program 9 (id=10031): r0 = socket(0xa, 0x3, 0x3a) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x80a008, &(0x7f0000000080)=ANY=[@ANYBLOB="d7dbb98e1c00"/15, @ANYRES32=0x0, @ANYBLOB="2c00000100663d", @ANYRES16=r5, @ANYBLOB=',\x00']) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@llc={0x1a, 0x10e, 0x8, 0x4, 0x3, 0x2, @multicast}, 0x80, 0x0, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800400001000115ed9b20a94db89cb1a00c236c00001001000001"], 0x13}, 0x1) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) sendmsg$kcm(r6, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75d51900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r7, 0x11c, 0x2, &(0x7f0000000000)=""/245, &(0x7f0000000100)=0xf5) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000000c0)={[{@noquota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x3, 0x4c5, &(0x7f0000001cc0)="$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") r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) r9 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r9, r9, 0x0, 0x800000009) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0xc, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0xfffffffd, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x8c9200268ef9770f, 0xffffffff, 0x6, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) 1.827321394s ago: executing program 0 (id=10032): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000800)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x200}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r6 = socket(0x2b, 0x80801, 0x1) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10) r8 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r9, 0x5452, &(0x7f0000b28000)=0x4000000009) fcntl$setsig(r9, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r10}], 0x2c, 0xffffffffffbffff8) dup2(r9, r10) fcntl$setown(r9, 0x8, r8) tkill(r8, 0x13) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000a80)) r11 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r1, &(0x7f0000000040)={0xf6c447fee59251f4}) close_range(r0, r1, 0x0) r12 = socket(0x22, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000304016100000000bf0000000000", @ANYRES32=0x0, @ANYBLOB="d3ddd1de000000002800128008000100767469001c0002800800030006000000080002000600000008000400e0000002"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 1.621271657s ago: executing program 7 (id=10034): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4002}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRESOCT=r2, @ANYRES32, @ANYRESHEX=r2], &(0x7f0000000400)='GPL\x00', 0x20000, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x6}, 0x18) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002fc0)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x810, 0x4, 0x5, 0xfffffffe}, {0x4a5, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x97, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x1, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x8000002, 0x1, 0x7fff}, {0x0, 0x3, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x1, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x2, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x6}, {0x9b9b, 0xffff, 0x6, 0xd, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0xeac}, {0x9, 0x2, 0x4, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x8, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x20001, 0x9df}, {0x9, 0x1, 0x65, 0x9}, {0x401, 0x10001, 0x9, 0x200, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0x7}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x8, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x7, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0xffff, 0x8}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x6, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x6, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x6, 0x1000, 0x9, 0x9}, {0xa, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0x2, 0x8, 0xfffffff7, 0x1, 0x6, 0xa}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x7, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x80, 0x69b, 0x3, 0x8, 0x10001}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0x8, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x3, 0x9, 0x1, 0x401}, {0xd, 0xc4, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x5, 0x5, 0x3, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x7, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x0, 0xfc, 0x7, 0x6, 0xc}, {0xf, 0x1, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfefff001, 0x8001, 0x2, 0x2}, {0x4, 0xd9, 0x6, 0x1, 0x9, 0xfffffff7}, {0x3, 0x3, 0x7, 0x69a0, 0x10, 0x1}, {0x8f000000, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x800, 0x10000, 0x9, 0x0, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0xfce, 0x80000005, 0x4, 0x4, 0x1ff}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x100, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x0, 0x3, 0x6, 0x800, 0x3}, {0x0, 0x0, 0x3, 0x8, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x5, 0x7, 0xf7fffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x5, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x6}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xa, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6c}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x3}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x2, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe71, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x7, 0x9, 0x10001, 0xce7, 0xec, 0x1000}, {0x3, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0x6}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0x4}, {}, {0x3}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x3}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {0x5}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) mount$9p_tcp(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x800000, &(0x7f0000000140)={'trans=tcp,', {'port', 0x3d, 0x20000004e23}}) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000)=0x4, 0x4) 1.469451399s ago: executing program 0 (id=10036): r0 = socket$unix(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x6000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2ffb703000008000000b70400000000000085"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0x11) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) sendmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0xfe42, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x2c, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}}], 0x30, 0x4048015}, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x140, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01030000000000000000010000000800010012000000080003"], 0x30}}, 0x40) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r6 = io_uring_setup(0x709e, &(0x7f0000000000)={0x0, 0x132, 0x8000, 0x1, 0x2c6}) io_uring_setup(0x7757, &(0x7f0000000080)={0x0, 0xe3e2, 0x800, 0x1, 0x3ab, 0x0, r6}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x4, 0x0) 1.40497547s ago: executing program 6 (id=10038): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000c, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r2, 0x1bc60, 0x1a704}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x8010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f73"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) syz_genetlink_get_family_id$nl80211(0x0, r3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000a00)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=r4, @ANYRESOCT=r4], 0x58}, 0x1, 0x0, 0x0, 0x44040008}, 0x4004008) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="04000090", @ANYRES16=0x0, @ANYBLOB="020027bd7000fddbdf251400000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900040000003c00000008001400", @ANYRES32=r4, @ANYBLOB="0600120109000000"], 0x38}, 0x1, 0x0, 0x0, 0x4044084}, 0x40000) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f00000006c0)={0x244, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0x14d, 0x2a, [@fast_bss_trans={0x37, 0xbf, {0x80, 0x6, "33a6aa346a864cc6d26f67b41f051eb2", "3d792574afc95a8dc4d60eb914b2e2ef17efe2f869f9bfaa1a988306333ca051", "98dd3279b0be6b7a1373ebe7d1dd483f0c477524399bb56652ac4216585adc98", [{0x4, 0xd, "61784135752003914181a8d6cb"}, {0x2}, {0x2, 0x1c, "2628c7734a393f724eb9e7bcfbff5195b6169abe232fe43bd5f07b63"}, {0x3, 0xb, "55870ce936d2488e0cdc4a"}, {0x2, 0xc, "19e4b391426143467906323f"}, {0x3, 0x21, "ea1bbc9060ff3b1492f89a00481838b253a9c328e6d08e3e794f1287f20cfcfd59"}]}}, @link_id={0x65, 0x12, {@random="c389009a5140", @device_b, @device_b}}, @mesh_id={0x72, 0x6}, @channel_switch={0x25, 0x3, {0x0, 0x56, 0xf7}}, @ibss={0x6, 0x2, 0x1}, @random_vendor={0xdd, 0x61, "4bf11cde979e96e7e38f9978568130f92973c084727120b634e24b5e22acb33432c014baa6b4a949d3212610906b72d95d0de4eb36f6a985ed93ca138a38e21b9b4eefc6c4d9d52ca67544e0d697cde5dac1b89cdaeedbdf94ff886b69ea34d04a"}]}, @NL80211_ATTR_IE={0xd6, 0x2a, [@measure_req={0x26, 0x79, {0x1, 0x81, 0x4a, "29a9534bc0d9a59be8364e4fcb4b13a82e6bcca7f41952e5684180b15d1554f7c54593fcdcf624157236c0e600a9887bad67dd3b634bc9e0a797484eca347b83e4ed612255af94b555bbd923cb0b6fe7e1fdc4790b227856f31686e9d8769aa8afc70892458e2c1f4b357a05a3cb9bf4f2480d0c3a2c"}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @supported_rates={0x1, 0x6, [{0x9, 0x1}, {0x30}, {0x12}, {}, {0x30}, {0x48}]}, @tim={0x5, 0x30, {0x1, 0x80, 0x9, "07d3f2c4f9db3f38c4d49782edfa31dd1c33b1c4cd1f8d16e4acb8fc2e4a19151c2451009890caed12c0ff5ec7"}}, @dsss={0x3, 0x1, 0x88}, @challenge={0x10, 0x1, 0xc6}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x60}}, @gcr_ga={0xbd, 0x6, @broadcast}]}]}, 0x244}, 0x1, 0x0, 0x0, 0xc804}, 0x8880) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x3c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x105}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x44) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x62) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x44040000) 1.177455713s ago: executing program 1 (id=10040): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x9}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000140)={0x1, 0x0, 0x6, 0x17, 0x81, 0x0}) sendmmsg$inet6(r1, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000000c0)="8f", 0x1}], 0x1}}], 0x1, 0x0) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000040)='./file1\x00', 0x4000, &(0x7f0000000880)=ANY=[], 0x1, 0x5d8, &(0x7f0000000240)="$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") shutdown(r1, 0x1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}], 0x1) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8090) bpf$MAP_CREATE(0x0, 0x0, 0x7dd2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000680), 0x80c02, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$cgroup_int(r5, 0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB, @ANYRES8=r3, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xfffffffffffffec6, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2020000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x20004000) 1.130121674s ago: executing program 1 (id=10041): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xea, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000006c0)='kmem_cache_free\x00', r1, 0x0, 0x2000}, 0x18) inotify_init1(0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRESDEC=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='mm_page_free\x00', r3, 0x0, 0x6}, 0x18) gettid() r4 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) 1.125417034s ago: executing program 0 (id=10042): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x23, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x90, 0x0, 0x9, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xc}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x60}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x5}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) readv(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8}, @IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}]}}}]}, 0x44}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) socket$qrtr(0x2a, 0x2, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000c40)=[@rdma_args={0x48, 0x114, 0x1, {{0x1, 0x40c}, {0x0}, &(0x7f0000000bc0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x8f}}], 0x48, 0x4000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x10}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x110}}, 0x0) 1.091357345s ago: executing program 1 (id=10043): epoll_create1(0x80000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') 1.071036915s ago: executing program 1 (id=10044): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x3780, 0x4dd8, 0x0, 0x9, 0x5, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) socket(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00'}, 0x10) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x48000) 784.052649ms ago: executing program 0 (id=10045): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'geneve1\x00', 0x600}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext, 0x3, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x40, 0x1800}], 0x1, 0x0) unshare(0x20060400) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futimesat(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r6, 0x1, 0x50, &(0x7f0000000000)=0x4, 0x4) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRESHEX=r2, @ANYRES16=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r7}, &(0x7f0000000400), &(0x7f00000004c0)=r8}, 0x20) 541.553802ms ago: executing program 7 (id=10046): r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000100)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket(0x2, 0x80805, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 325.156145ms ago: executing program 6 (id=10047): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x4a0, 0xffffffff, 0x2e8, 0xb0, 0x2e8, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @broadcast, 0x0, 0x0, 'team_slave_0\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0x210, 0x238, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'hsr0\x00', {0x4000000000000, 0x8, 0x34, 0x0, 0x0, 0x9, 0x1000}}}, @common=@unspec=@helper={{0x48}, {0x0, 'snmp\x00'}}]}, @REJECT={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'batadv_slave_0\x00', 'rose0\x00'}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@ttl={{0x28}}, @common=@ttl={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) socket$nl_generic(0x10, 0x3, 0x10) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x5924c9b589942ab3) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r2}, 0x10) socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'bridge0\x00'}) sendmsg$nl_route(r3, 0x0, 0x84) socket$kcm(0x29, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRES8=r4], 0x20) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0xb, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) 226.839997ms ago: executing program 7 (id=10048): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x6}, 0x18) lsm_get_self_attr(0x67, 0x0, &(0x7f0000000080), 0x2000) 216.180627ms ago: executing program 0 (id=10049): prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x8, 0x5, 0x7f, 0xa}, {0xfff, 0x6, 0x4, 0x5}, {0x401, 0x3, 0x9, 0xfffffff8}, {0x6, 0x2, 0x10, 0x6}, {0x1ff, 0x14, 0x8, 0x3}, {0x9, 0x2, 0xe, 0x1}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000049500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r2, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="82", 0x1}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r2, &(0x7f00000003c0)="5cdc9bfe5f2c16c46382e87d41140f1d16cbeaaca5b317f99940932785ffffffff00000000f491b2a47d16a26500108a29b9470f6aaab4a1158a534ce5bb04150f4b03ff95ce1137a937546e537db05efbeef437ff345f9bce7636ed00672e6834eba93fffcee0c3a57e036f1212d76e93d64735360ce9c1bb2d715265", 0x7d, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=0x0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000190081044e81f782db4cb90402200800fd007c05e8fe55a108001e000140cde8dfe90e4190000900ac00060211000000160012000a0002000d48035c3b61c1d67f01282e8d614230a68000a007a290457f01a705000000000000009100005ee4e11b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e603a6a8a9826835d3a71d95667e006dcdf63951f2155e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e971ad9d3ac052f6dfe4f36bcf903ece981e8df37df7f8af2f28f", 0xfcc0}], 0x1}, 0x40000) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) linkat(0xffffffffffffffff, &(0x7f0000002d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, 0x0, 0x1800) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x80, 0x0, 0x8000, 0x80, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x4320, 0x5, 0x3a64, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x2000000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c000100636f756e7465720004000280"], 0x118}}, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) socket$nl_generic(0x10, 0x3, 0x10) 157.664448ms ago: executing program 7 (id=10050): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x40, 0x0}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kfree\x00', r2, 0x0, 0x8000000000}, 0x18) r3 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x7}, 0x1c) 139.438958ms ago: executing program 0 (id=10051): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x30, r2, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x4}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x9}]}, 0x30}}, 0x4000054) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="200028bd7000fddbdf25590000000800867ff55d6e0d1b220e0300", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x39c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x36c, 0x2, [@TCA_CHOKE_PARMS={0xffffff90, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x5}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x751}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1ffff, 0xfffffffd}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x39c}}, 0x0) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x97, r9, 0x6fd64efd}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) (async) syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0x0) (async) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x30, r2, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x4}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x9}]}, 0x30}}, 0x4000054) (async) socket$igmp6(0xa, 0x3, 0x2) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="200028bd7000fddbdf25590000000800867ff55d6e0d1b220e0300", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x39c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x36c, 0x2, [@TCA_CHOKE_PARMS={0xffffff90, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x5}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x751}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1ffff, 0xfffffffd}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x39c}}, 0x0) (async) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x97, r9, 0x6fd64efd}, 0xc) (async) 132.487128ms ago: executing program 6 (id=10052): r0 = socket$unix(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x6000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2ffb703000008000000b70400000000000085"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0x11) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) sendmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0xfe42, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x2c, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}}], 0x30, 0x4048015}, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x140, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01030000000000000000010000000800010012000000080003"], 0x30}}, 0x40) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r6 = io_uring_setup(0x709e, &(0x7f0000000000)={0x0, 0x132, 0x8000, 0x1, 0x2c6}) io_uring_setup(0x7757, &(0x7f0000000080)={0x0, 0xe3e2, 0x800, 0x1, 0x3ab, 0x0, r6}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x4, 0x0) 109.912818ms ago: executing program 7 (id=10053): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xea, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000006c0)='kmem_cache_free\x00', r1, 0x0, 0x2000}, 0x18) inotify_init1(0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRESDEC=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='mm_page_free\x00', r3, 0x0, 0x6}, 0x18) gettid() r4 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) 52.357089ms ago: executing program 1 (id=10054): epoll_create1(0x80000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') 51.846899ms ago: executing program 9 (id=10055): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={r1, 0x0, 0x7f}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r2, 0x3, r0}) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000c"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r7, 0x0, 0xf7}, 0x18) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x0, 0x0) 4.31762ms ago: executing program 7 (id=10056): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x1000, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r2, 0x0, 0xffffffffffff7fff}, 0x18) r3 = syz_open_procfs(0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000002060102000000000000000000000e0003006269746ebb703a697000000005000400000000000900020073797a31000000001800078005000300210000000c00018008000140ac1e010105000500020000000500010006000000"], 0x60}, 0x1, 0x0, 0x0, 0x4040041}, 0x44000) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7, 0x0, 0xfffffffffffffffc}, 0x18) r8 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r8, 0x2285, 0x0) writev(r8, &(0x7f0000000400), 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@noinit_itable}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r9 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r9, 0x2007ffc) sendfile(r1, r1, 0x0, 0xfffffffffffffffc) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) tkill(r6, 0x41) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r3) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)=ANY=[@ANYRES16=r6], &(0x7f0000000180), 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000000225bd700000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000024000d4bc34200936a0036746e6c000014000280080008000b00000006001f"], 0x44}}, 0x0) 0s ago: executing program 1 (id=10057): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x48) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000740)=@assoc_value, &(0x7f0000000580)=0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffc00, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {0x0, 0x4}, {0x10000000, 0x4, 0x10008, 0x5}], 0x10, 0xfffffff4, @void, @value}, 0x94) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c022300040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) kernel console output (not intermixed with test programs): k_alloc_large_skb+0xba/0xf0 [ 609.245922][T29203] netlink_sendmsg+0x3cf/0x6b0 [ 609.245958][T29203] ? __pfx_netlink_sendmsg+0x10/0x10 [ 609.246017][T29203] __sock_sendmsg+0x142/0x180 [ 609.246040][T29203] ____sys_sendmsg+0x31e/0x4e0 [ 609.246075][T29203] ___sys_sendmsg+0x17b/0x1d0 [ 609.246173][T29203] __x64_sys_sendmsg+0xd4/0x160 [ 609.246220][T29203] x64_sys_call+0x2999/0x2fb0 [ 609.246242][T29203] do_syscall_64+0xd2/0x200 [ 609.246356][T29203] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 609.246388][T29203] ? clear_bhb_loop+0x40/0x90 [ 609.246417][T29203] ? clear_bhb_loop+0x40/0x90 [ 609.246447][T29203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.246550][T29203] RIP: 0033:0x7f71e9b8e969 [ 609.246572][T29203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 609.246595][T29203] RSP: 002b:00007f71e81f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 609.246619][T29203] RAX: ffffffffffffffda RBX: 00007f71e9db5fa0 RCX: 00007f71e9b8e969 [ 609.246636][T29203] RDX: 0000000000000004 RSI: 0000200000000240 RDI: 0000000000000005 [ 609.246653][T29203] RBP: 00007f71e81f7090 R08: 0000000000000000 R09: 0000000000000000 [ 609.246669][T29203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 609.246743][T29203] R13: 0000000000000000 R14: 00007f71e9db5fa0 R15: 00007ffd332b6288 [ 609.246769][T29203] [ 609.487179][T29201] loop6: detected capacity change from 0 to 1024 [ 609.525571][T29201] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 609.540509][T29201] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 609.590339][T24879] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.637035][T29216] loop6: detected capacity change from 0 to 1024 [ 609.751001][ T3390] hid-generic 0000:0004:0000.0029: unknown main item tag 0x0 [ 609.758489][ T3390] hid-generic 0000:0004:0000.0029: unknown main item tag 0x0 [ 609.765988][ T3390] hid-generic 0000:0004:0000.0029: unknown main item tag 0x0 [ 609.775387][ T3390] hid-generic 0000:0004:0000.0029: hidraw0: HID v0.00 Device [syz0] on syz1 [ 610.851433][T29254] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 610.955569][T29256] pim6reg: entered allmulticast mode [ 610.963028][T29256] pim6reg: left allmulticast mode [ 611.431479][T29269] loop7: detected capacity change from 0 to 164 [ 611.530428][T29278] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9452'. [ 611.539490][T29278] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9452'. [ 611.694316][T29286] loop0: detected capacity change from 0 to 1024 [ 611.701122][T29286] ext4: Unknown parameter 'obj_role' [ 611.745976][T29288] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 611.868417][T29293] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61204 sclass=netlink_route_socket pid=29293 comm=syz.1.9457 [ 611.909003][T29296] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9458'. [ 611.919511][T29296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9458'. [ 611.947756][ T29] kauditd_printk_skb: 470 callbacks suppressed [ 611.947775][ T29] audit: type=1400 audit(585.671:44858): avc: denied { create } for pid=29297 comm="syz.3.9459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 611.975208][ T29] audit: type=1400 audit(585.709:44859): avc: denied { create } for pid=29297 comm="syz.3.9459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 611.996613][ T29] audit: type=1400 audit(585.727:44860): avc: denied { write } for pid=29297 comm="syz.3.9459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 612.089957][T29301] loop3: detected capacity change from 0 to 8192 [ 612.092378][ T29] audit: type=1400 audit(585.812:44861): avc: denied { unmount } for pid=25487 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 612.116203][ T29] audit: type=1400 audit(585.812:44862): avc: denied { mount } for pid=29297 comm="syz.3.9459" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 612.360588][T29311] loop6: detected capacity change from 0 to 1024 [ 612.367327][T29311] ext4: Unknown parameter 'obj_role' [ 612.620791][ T29] audit: type=1400 audit(586.307:44863): avc: denied { search } for pid=29319 comm="syz.0.9466" name="/" dev="configfs" ino=2050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 612.642873][ T29] audit: type=1400 audit(586.307:44864): avc: denied { search } for pid=29319 comm="syz.0.9466" name="/" dev="configfs" ino=2050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 612.670256][ T29] audit: type=1400 audit(586.354:44865): avc: denied { search } for pid=29319 comm="syz.0.9466" name="/" dev="configfs" ino=2050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 612.701769][ T29] audit: type=1400 audit(586.382:44866): avc: denied { execmem } for pid=29322 comm="syz.7.9467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 612.725485][ T29] audit: type=1400 audit(586.401:44867): avc: denied { create } for pid=29319 comm="syz.0.9466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 613.039334][T29329] loop3: detected capacity change from 0 to 1024 [ 613.151966][T29329] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #15: block 3: comm syz.3.9468: lblock 3 mapped to illegal pblock 3 (length 1) [ 613.191014][T29329] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 613.203429][T29329] EXT4-fs (loop3): This should not happen!! Data will be lost [ 613.203429][T29329] [ 613.336590][T29337] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #15: block 4: comm syz.3.9468: lblock 4 mapped to illegal pblock 4 (length 12) [ 613.410405][ T3390] hid-generic 0000:0004:0000.002A: unknown main item tag 0x0 [ 613.418088][ T3390] hid-generic 0000:0004:0000.002A: unknown main item tag 0x0 [ 613.425576][ T3390] hid-generic 0000:0004:0000.002A: unknown main item tag 0x0 [ 613.437049][T29337] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 12 with error 117 [ 613.449582][T29337] EXT4-fs (loop3): This should not happen!! Data will be lost [ 613.449582][T29337] [ 613.467106][ T3390] hid-generic 0000:0004:0000.002A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 613.620510][T29340] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9471'. [ 613.671845][T29350] loop3: detected capacity change from 0 to 1024 [ 613.680408][T29350] ext4: Unknown parameter 'obj_role' [ 613.859476][T29360] lo speed is unknown, defaulting to 1000 [ 613.946056][T29364] loop7: detected capacity change from 0 to 1024 [ 613.953081][T29364] ext4: Unknown parameter 'obj_role' [ 614.306664][T29369] loop6: detected capacity change from 0 to 1024 [ 614.313456][T29369] ext4: Unknown parameter 'obj_role' [ 614.520552][T29374] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 614.530607][T29374] SELinux: failed to load policy [ 614.540278][T29374] can0: slcan on ttyS3. [ 614.594302][T29382] FAULT_INJECTION: forcing a failure. [ 614.594302][T29382] name failslab, interval 1, probability 0, space 0, times 0 [ 614.607094][T29382] CPU: 1 UID: 0 PID: 29382 Comm: syz.0.9485 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(voluntary) [ 614.607192][T29382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 614.607208][T29382] Call Trace: [ 614.607216][T29382] [ 614.607226][T29382] __dump_stack+0x1d/0x30 [ 614.607252][T29382] dump_stack_lvl+0xe8/0x140 [ 614.607347][T29382] dump_stack+0x15/0x1b [ 614.607369][T29382] should_fail_ex+0x265/0x280 [ 614.607397][T29382] should_failslab+0x8c/0xb0 [ 614.607428][T29382] __kmalloc_noprof+0xa5/0x3e0 [ 614.607537][T29382] ? io_cache_alloc_new+0x2a/0xb0 [ 614.607582][T29382] io_cache_alloc_new+0x2a/0xb0 [ 614.607626][T29382] io_sqe_buffer_register+0xf2/0x12f0 [ 614.607703][T29382] ? __memcg_slab_post_alloc_hook+0x44c/0x580 [ 614.607739][T29382] ? __kvmalloc_node_noprof+0x39b/0x4f0 [ 614.607811][T29382] ? io_sqe_buffers_register+0xc2/0x530 [ 614.607874][T29382] io_sqe_buffers_register+0x2ac/0x530 [ 614.607907][T29382] __se_sys_io_uring_register+0xa9f/0xeb0 [ 614.607930][T29382] ? fput+0x8f/0xc0 [ 614.608028][T29382] ? ksys_write+0x192/0x1a0 [ 614.608055][T29382] __x64_sys_io_uring_register+0x55/0x70 [ 614.608089][T29382] x64_sys_call+0xc91/0x2fb0 [ 614.608197][T29382] do_syscall_64+0xd2/0x200 [ 614.608248][T29382] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 614.608282][T29382] ? clear_bhb_loop+0x40/0x90 [ 614.608301][T29382] ? clear_bhb_loop+0x40/0x90 [ 614.608369][T29382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.608389][T29382] RIP: 0033:0x7f910413e969 [ 614.608402][T29382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 614.608419][T29382] RSP: 002b:00007f91027a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 614.608436][T29382] RAX: ffffffffffffffda RBX: 00007f9104365fa0 RCX: 00007f910413e969 [ 614.608501][T29382] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000003 [ 614.608512][T29382] RBP: 00007f91027a7090 R08: 0000000000000000 R09: 0000000000000000 [ 614.608523][T29382] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000001 [ 614.608535][T29382] R13: 0000000000000000 R14: 00007f9104365fa0 R15: 00007ffe42c2a148 [ 614.608553][T29382] [ 614.608688][T29374] can0 (unregistered): slcan off ttyS3. [ 614.663392][T29385] lo: entered promiscuous mode [ 614.840301][T29385] lo: entered allmulticast mode [ 614.846432][T29385] tunl0: entered promiscuous mode [ 614.851543][T29385] tunl0: entered allmulticast mode [ 614.857889][T29385] gre0: entered promiscuous mode [ 614.862927][T29385] gre0: entered allmulticast mode [ 614.869483][T29385] gretap0: entered promiscuous mode [ 614.874935][T29385] gretap0: entered allmulticast mode [ 614.886358][T29385] erspan0: entered promiscuous mode [ 614.891671][T29385] erspan0: entered allmulticast mode [ 614.899208][T29385] ip_vti0: entered promiscuous mode [ 614.904629][T29385] ip_vti0: entered allmulticast mode [ 614.911495][T29385] ip6_vti0: entered promiscuous mode [ 614.916887][T29385] ip6_vti0: entered allmulticast mode [ 614.999311][T29385] sit0: entered promiscuous mode [ 615.004361][T29385] sit0: entered allmulticast mode [ 615.015596][T29385] ip6tnl0: entered promiscuous mode [ 615.020983][T29385] ip6tnl0: entered allmulticast mode [ 615.031430][T29385] ip6gre0: entered promiscuous mode [ 615.036717][T29385] ip6gre0: entered allmulticast mode [ 615.043380][T29385] syz_tun: entered promiscuous mode [ 615.048688][T29385] syz_tun: entered allmulticast mode [ 615.055281][T29385] ip6gretap0: entered promiscuous mode [ 615.060781][T29385] ip6gretap0: entered allmulticast mode [ 615.067933][T29385] bridge0: entered promiscuous mode [ 615.073238][T29385] bridge0: entered allmulticast mode [ 615.079635][T29385] vcan0: entered promiscuous mode [ 615.084818][T29385] vcan0: entered allmulticast mode [ 615.090718][T29385] bond0: entered promiscuous mode [ 615.095861][T29385] bond0: entered allmulticast mode [ 615.102703][T29385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 615.111419][T29385] dummy0: entered promiscuous mode [ 615.116705][T29385] dummy0: entered allmulticast mode [ 615.123296][T29385] nlmon0: entered promiscuous mode [ 615.128581][T29385] nlmon0: entered allmulticast mode [ 615.137249][T29385] caif0: entered promiscuous mode [ 615.142451][T29385] caif0: entered allmulticast mode [ 615.147635][T29385] net_ratelimit: 12 callbacks suppressed [ 615.147651][T29385] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 615.180874][T29387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9481'. [ 615.316083][T29395] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 615.348541][T29397] netlink: 'syz.1.9489': attribute type 1 has an invalid length. [ 615.356473][T29397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9489'. [ 615.384256][T29399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9490'. [ 615.393179][T29399] netlink: 'syz.0.9490': attribute type 1 has an invalid length. [ 615.401091][T29399] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9490'. [ 615.415923][T29400] lo speed is unknown, defaulting to 1000 [ 615.902586][T29423] loop7: detected capacity change from 0 to 128 [ 615.913454][T29423] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 615.921440][T29423] FAT-fs (loop7): Filesystem has been set read-only [ 615.928176][T29423] bio_check_eod: 102 callbacks suppressed [ 615.928189][T29423] syz.7.9498: attempt to access beyond end of device [ 615.928189][T29423] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 615.947927][T29423] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 615.955962][T29423] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 615.966258][T29423] syz.7.9498: attempt to access beyond end of device [ 615.966258][T29423] loop7: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 615.979576][T29423] Buffer I/O error on dev loop7, logical block 2065, async page read [ 615.987789][T29423] syz.7.9498: attempt to access beyond end of device [ 615.987789][T29423] loop7: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 616.001045][T29423] Buffer I/O error on dev loop7, logical block 2066, async page read [ 616.009209][T29423] syz.7.9498: attempt to access beyond end of device [ 616.009209][T29423] loop7: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 616.022534][T29423] Buffer I/O error on dev loop7, logical block 2067, async page read [ 616.030738][T29423] syz.7.9498: attempt to access beyond end of device [ 616.030738][T29423] loop7: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 616.044440][T29423] Buffer I/O error on dev loop7, logical block 2068, async page read [ 616.052554][T29423] syz.7.9498: attempt to access beyond end of device [ 616.052554][T29423] loop7: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 616.065892][T29423] Buffer I/O error on dev loop7, logical block 2069, async page read [ 616.074045][T29423] syz.7.9498: attempt to access beyond end of device [ 616.074045][T29423] loop7: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 616.087395][T29423] Buffer I/O error on dev loop7, logical block 2070, async page read [ 616.095742][T29423] syz.7.9498: attempt to access beyond end of device [ 616.095742][T29423] loop7: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 616.109149][T29423] Buffer I/O error on dev loop7, logical block 2071, async page read [ 616.117280][T29423] syz.7.9498: attempt to access beyond end of device [ 616.117280][T29423] loop7: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 616.130575][T29423] Buffer I/O error on dev loop7, logical block 2072, async page read [ 616.138922][T29423] syz.7.9498: attempt to access beyond end of device [ 616.138922][T29423] loop7: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 616.152508][T29423] Buffer I/O error on dev loop7, logical block 2065, async page read [ 616.160734][T29423] Buffer I/O error on dev loop7, logical block 2066, async page read [ 616.393108][T29432] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 616.614173][T29443] netlink: 'syz.0.9504': attribute type 1 has an invalid length. [ 616.614763][T29442] loop3: detected capacity change from 0 to 512 [ 616.622016][T29443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9504'. [ 616.643724][T29442] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.9503: Parent and EA inode have the same ino 15 [ 616.665222][T29442] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.9503: Parent and EA inode have the same ino 15 [ 616.683410][T29442] EXT4-fs (loop3): 1 orphan inode deleted [ 617.033429][T29458] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 617.100710][T29462] loop6: detected capacity change from 0 to 1024 [ 617.105640][T29459] lo speed is unknown, defaulting to 1000 [ 617.203679][T29462] netlink: 596 bytes leftover after parsing attributes in process `syz.6.9510'. [ 617.548917][ T29] kauditd_printk_skb: 218 callbacks suppressed [ 617.548937][ T29] audit: type=1326 audit(590.919:45086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29466 comm="syz.3.9511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f6d35e969 code=0x7ffc0000 [ 617.579693][ T29] audit: type=1326 audit(590.947:45087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29466 comm="syz.3.9511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f8f6d35e969 code=0x7ffc0000 [ 617.602917][ T29] audit: type=1326 audit(590.947:45088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29466 comm="syz.3.9511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f6d35e969 code=0x7ffc0000 [ 617.626195][ T29] audit: type=1326 audit(590.947:45089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29466 comm="syz.3.9511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f6d35e969 code=0x7ffc0000 [ 617.716714][ T9] hid-generic 0000:0004:0000.002B: unknown main item tag 0x0 [ 617.724340][ T9] hid-generic 0000:0004:0000.002B: unknown main item tag 0x0 [ 617.732054][ T9] hid-generic 0000:0004:0000.002B: unknown main item tag 0x0 [ 617.740346][ T9] hid-generic 0000:0004:0000.002B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 617.857510][T29482] netlink: 'syz.1.9515': attribute type 1 has an invalid length. [ 617.865380][T29482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9515'. [ 617.892907][ T29] audit: type=1326 audit(591.237:45090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29481 comm="syz.1.9515" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f71e9b8e969 code=0x0 [ 617.916725][ T29] audit: type=1400 audit(591.237:45091): avc: denied { create } for pid=29485 comm="syz.7.9518" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 617.940742][T29491] FAULT_INJECTION: forcing a failure. [ 617.940742][T29491] name failslab, interval 1, probability 0, space 0, times 0 [ 617.953562][T29491] CPU: 0 UID: 0 PID: 29491 Comm: syz.6.9517 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(voluntary) [ 617.953667][T29491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 617.953683][T29491] Call Trace: [ 617.953692][T29491] [ 617.953703][T29491] __dump_stack+0x1d/0x30 [ 617.953731][T29491] dump_stack_lvl+0xe8/0x140 [ 617.953757][T29491] dump_stack+0x15/0x1b [ 617.953779][T29491] should_fail_ex+0x265/0x280 [ 617.953803][T29491] ? __pfx_cond_bools_destroy+0x10/0x10 [ 617.953862][T29491] should_failslab+0x8c/0xb0 [ 617.953892][T29491] __kmalloc_noprof+0xa5/0x3e0 [ 617.953922][T29491] ? hashtab_duplicate+0x55/0x360 [ 617.953949][T29491] ? __pfx_cond_bools_destroy+0x10/0x10 [ 617.954039][T29491] hashtab_duplicate+0x55/0x360 [ 617.954066][T29491] ? __kmalloc_noprof+0x1dd/0x3e0 [ 617.954095][T29491] ? cond_policydb_dup+0xa3/0x4e0 [ 617.954118][T29491] ? __pfx_cond_bools_copy+0x10/0x10 [ 617.954225][T29491] cond_policydb_dup+0xd2/0x4e0 [ 617.954287][T29491] security_set_bools+0xa0/0x340 [ 617.954323][T29491] sel_commit_bools_write+0x1ea/0x270 [ 617.954447][T29491] vfs_writev+0x403/0x8b0 [ 617.954481][T29491] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 617.954541][T29491] ? mutex_lock+0xd/0x30 [ 617.954596][T29491] do_writev+0xe7/0x210 [ 617.954679][T29491] __x64_sys_writev+0x45/0x50 [ 617.954710][T29491] x64_sys_call+0x2006/0x2fb0 [ 617.954825][T29491] do_syscall_64+0xd2/0x200 [ 617.954865][T29491] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 617.954949][T29491] ? clear_bhb_loop+0x40/0x90 [ 617.954996][T29491] ? clear_bhb_loop+0x40/0x90 [ 617.955049][T29491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.955124][T29491] RIP: 0033:0x7f12f1a3e969 [ 617.955139][T29491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 617.955155][T29491] RSP: 002b:00007f12f00a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 617.955173][T29491] RAX: ffffffffffffffda RBX: 00007f12f1c65fa0 RCX: 00007f12f1a3e969 [ 617.955185][T29491] RDX: 0000000000000001 RSI: 00002000000025c0 RDI: 0000000000000005 [ 617.955196][T29491] RBP: 00007f12f00a7090 R08: 0000000000000000 R09: 0000000000000000 [ 617.955268][T29491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 617.955279][T29491] R13: 0000000000000000 R14: 00007f12f1c65fa0 R15: 00007ffee3fe7de8 [ 617.955297][T29491] [ 618.228556][ T29] audit: type=1400 audit(591.555:45092): avc: denied { unlink } for pid=25158 comm="syz-executor" name="file2" dev="tmpfs" ino=1614 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 618.266388][T29498] loop6: detected capacity change from 0 to 1024 [ 618.273818][T29498] ext4: Unknown parameter 'obj_role' [ 618.484277][T29504] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 618.598405][T29508] can0: slcan on ttyS3. [ 618.606135][T29504] SELinux: failed to load policy [ 618.654681][T29508] can0 (unregistered): slcan off ttyS3. [ 618.721610][T29504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9522'. [ 618.778189][T29510] IPv6: Can't replace route, no match found [ 618.862688][T29518] loop3: detected capacity change from 0 to 1024 [ 618.869568][T29518] ext4: Unknown parameter 'obj_role' [ 618.874774][T29516] netlink: 596 bytes leftover after parsing attributes in process `syz.1.9526'. [ 619.076021][ T29] audit: type=1400 audit(592.341:45093): avc: denied { create } for pid=29523 comm="syz.7.9528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 619.095753][ T29] audit: type=1400 audit(592.341:45094): avc: denied { ioctl } for pid=29523 comm="syz.7.9528" path="socket:[98928]" dev="sockfs" ino=98928 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 619.120131][ T29] audit: type=1400 audit(592.341:45095): avc: denied { connect } for pid=29523 comm="syz.7.9528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 619.158115][T29528] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 619.177735][T29531] netlink: 32 bytes leftover after parsing attributes in process `syz.6.9530'. [ 619.293135][T29543] netlink: 'syz.7.9535': attribute type 1 has an invalid length. [ 619.526544][T29560] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.535414][T29560] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.544206][T29560] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.553096][T29560] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.615190][T29568] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 619.850944][T29581] FAULT_INJECTION: forcing a failure. [ 619.850944][T29581] name failslab, interval 1, probability 0, space 0, times 0 [ 619.863973][T29581] CPU: 1 UID: 0 PID: 29581 Comm: syz.3.9548 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(voluntary) [ 619.864012][T29581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 619.864029][T29581] Call Trace: [ 619.864037][T29581] [ 619.864046][T29581] __dump_stack+0x1d/0x30 [ 619.864148][T29581] dump_stack_lvl+0xe8/0x140 [ 619.864169][T29581] dump_stack+0x15/0x1b [ 619.864247][T29581] should_fail_ex+0x265/0x280 [ 619.864270][T29581] should_failslab+0x8c/0xb0 [ 619.864326][T29581] kmem_cache_alloc_node_noprof+0x57/0x320 [ 619.864367][T29581] ? __alloc_skb+0x101/0x320 [ 619.864401][T29581] __alloc_skb+0x101/0x320 [ 619.864499][T29581] netlink_alloc_large_skb+0xba/0xf0 [ 619.864596][T29581] netlink_sendmsg+0x3cf/0x6b0 [ 619.864633][T29581] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.864677][T29581] __sock_sendmsg+0x142/0x180 [ 619.864755][T29581] ____sys_sendmsg+0x31e/0x4e0 [ 619.864791][T29581] ___sys_sendmsg+0x17b/0x1d0 [ 619.864848][T29581] __x64_sys_sendmsg+0xd4/0x160 [ 619.864943][T29581] x64_sys_call+0x2999/0x2fb0 [ 619.864972][T29581] do_syscall_64+0xd2/0x200 [ 619.865079][T29581] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 619.865118][T29581] ? clear_bhb_loop+0x40/0x90 [ 619.865146][T29581] ? clear_bhb_loop+0x40/0x90 [ 619.865176][T29581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.865198][T29581] RIP: 0033:0x7f8f6d35e969 [ 619.865215][T29581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 619.865271][T29581] RSP: 002b:00007f8f6b9a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 619.865293][T29581] RAX: ffffffffffffffda RBX: 00007f8f6d586080 RCX: 00007f8f6d35e969 [ 619.865310][T29581] RDX: 0000000000048004 RSI: 00002000000007c0 RDI: 0000000000000004 [ 619.865327][T29581] RBP: 00007f8f6b9a6090 R08: 0000000000000000 R09: 0000000000000000 [ 619.865344][T29581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 619.865360][T29581] R13: 0000000000000000 R14: 00007f8f6d586080 R15: 00007ffe6b61daf8 [ 619.865501][T29581] [ 620.320438][T29600] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 620.427424][T29598] wg2: left promiscuous mode [ 620.432176][T29598] wg2: left allmulticast mode [ 620.543276][T29606] netlink: 'syz.6.9558': attribute type 1 has an invalid length. [ 620.551089][T29606] __nla_validate_parse: 6 callbacks suppressed [ 620.551157][T29606] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9558'. [ 620.624431][T29611] netlink: 180 bytes leftover after parsing attributes in process `syz.0.9560'. [ 620.654018][T29615] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 620.740609][T29622] netlink: 'syz.0.9564': attribute type 1 has an invalid length. [ 620.748413][T29622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9564'. [ 620.819407][T29628] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 620.925429][T29626] netlink: 'syz.7.9566': attribute type 27 has an invalid length. [ 620.938629][T29634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9568'. [ 620.947573][T29634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9568'. [ 620.966264][T29636] FAULT_INJECTION: forcing a failure. [ 620.966264][T29636] name failslab, interval 1, probability 0, space 0, times 0 [ 620.979126][T29636] CPU: 0 UID: 0 PID: 29636 Comm: syz.1.9569 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(voluntary) [ 620.979163][T29636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 620.979181][T29636] Call Trace: [ 620.979190][T29636] [ 620.979200][T29636] __dump_stack+0x1d/0x30 [ 620.979228][T29636] dump_stack_lvl+0xe8/0x140 [ 620.979254][T29636] dump_stack+0x15/0x1b [ 620.979283][T29636] should_fail_ex+0x265/0x280 [ 620.979311][T29636] ? __pfx_ppp_ioctl+0x10/0x10 [ 620.979394][T29636] ? slhc_init+0x57/0x390 [ 620.979496][T29636] should_failslab+0x8c/0xb0 [ 620.979524][T29636] __kmalloc_cache_noprof+0x4c/0x320 [ 620.979573][T29636] ? __pfx_ppp_ioctl+0x10/0x10 [ 620.979613][T29636] slhc_init+0x57/0x390 [ 620.979643][T29636] ? __pfx_ppp_ioctl+0x10/0x10 [ 620.979676][T29636] ppp_ioctl+0xe9c/0x11c0 [ 620.979791][T29636] ? __fget_files+0x184/0x1c0 [ 620.979841][T29636] ? __pfx_ppp_ioctl+0x10/0x10 [ 620.979951][T29636] __se_sys_ioctl+0xcb/0x140 [ 620.979976][T29636] __x64_sys_ioctl+0x43/0x50 [ 620.979994][T29636] x64_sys_call+0x19a8/0x2fb0 [ 620.980018][T29636] do_syscall_64+0xd2/0x200 [ 620.980054][T29636] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 620.980121][T29636] ? clear_bhb_loop+0x40/0x90 [ 620.980219][T29636] ? clear_bhb_loop+0x40/0x90 [ 620.980241][T29636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.980263][T29636] RIP: 0033:0x7f71e9b8e969 [ 620.980295][T29636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 620.980357][T29636] RSP: 002b:00007f71e81f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 620.980378][T29636] RAX: ffffffffffffffda RBX: 00007f71e9db5fa0 RCX: 00007f71e9b8e969 [ 620.980390][T29636] RDX: 0000200000000040 RSI: 0000000040047451 RDI: 0000000000000006 [ 620.980403][T29636] RBP: 00007f71e81f7090 R08: 0000000000000000 R09: 0000000000000000 [ 620.980459][T29636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 620.980475][T29636] R13: 0000000000000000 R14: 00007f71e9db5fa0 R15: 00007ffd332b6288 [ 620.980500][T29636] [ 621.221291][T29642] netlink: 180 bytes leftover after parsing attributes in process `syz.7.9572'. [ 621.296051][T29648] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 621.667568][T29664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9580'. [ 621.676694][T29664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9580'. [ 621.846547][T29671] syz!: rxe_newlink: already configured on team_slave_0 [ 621.948312][T29680] netlink: 180 bytes leftover after parsing attributes in process `syz.6.9586'. [ 621.987419][T29687] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 622.060601][T29691] netlink: 'syz.0.9590': attribute type 1 has an invalid length. [ 622.068452][T29691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9590'. [ 622.376098][T29708] FAULT_INJECTION: forcing a failure. [ 622.376098][T29708] name failslab, interval 1, probability 0, space 0, times 0 [ 622.388947][T29708] CPU: 1 UID: 0 PID: 29708 Comm: syz.3.9597 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(voluntary) [ 622.388995][T29708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 622.389012][T29708] Call Trace: [ 622.389021][T29708] [ 622.389029][T29708] __dump_stack+0x1d/0x30 [ 622.389100][T29708] dump_stack_lvl+0xe8/0x140 [ 622.389125][T29708] dump_stack+0x15/0x1b [ 622.389146][T29708] should_fail_ex+0x265/0x280 [ 622.389174][T29708] should_failslab+0x8c/0xb0 [ 622.389283][T29708] kmem_cache_alloc_node_noprof+0x57/0x320 [ 622.389322][T29708] ? __alloc_skb+0x101/0x320 [ 622.389352][T29708] __alloc_skb+0x101/0x320 [ 622.389454][T29708] netlink_alloc_large_skb+0xba/0xf0 [ 622.389486][T29708] netlink_sendmsg+0x3cf/0x6b0 [ 622.389525][T29708] ? __pfx_netlink_sendmsg+0x10/0x10 [ 622.389658][T29708] __sock_sendmsg+0x142/0x180 [ 622.389766][T29708] ____sys_sendmsg+0x31e/0x4e0 [ 622.389800][T29708] ___sys_sendmsg+0x17b/0x1d0 [ 622.389916][T29708] __x64_sys_sendmsg+0xd4/0x160 [ 622.389951][T29708] x64_sys_call+0x2999/0x2fb0 [ 622.390045][T29708] do_syscall_64+0xd2/0x200 [ 622.390191][T29708] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 622.390233][T29708] ? clear_bhb_loop+0x40/0x90 [ 622.390313][T29708] ? clear_bhb_loop+0x40/0x90 [ 622.390341][T29708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.390399][T29708] RIP: 0033:0x7f8f6d35e969 [ 622.390496][T29708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 622.390520][T29708] RSP: 002b:00007f8f6b9c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 622.390544][T29708] RAX: ffffffffffffffda RBX: 00007f8f6d585fa0 RCX: 00007f8f6d35e969 [ 622.390558][T29708] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 622.390571][T29708] RBP: 00007f8f6b9c7090 R08: 0000000000000000 R09: 0000000000000000 [ 622.390584][T29708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 622.390597][T29708] R13: 0000000000000000 R14: 00007f8f6d585fa0 R15: 00007ffe6b61daf8 [ 622.390663][T29708] [ 622.650078][T29706] loop7: detected capacity change from 0 to 512 [ 622.679092][T29706] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 622.703560][T29706] EXT4-fs (loop7): mount failed [ 622.767265][T29727] loop6: detected capacity change from 0 to 1024 [ 622.833988][T29736] loop7: detected capacity change from 0 to 1024 [ 622.850123][T29736] ext4: Unknown parameter 'obj_role' [ 622.865324][T29727] EXT4-fs mount: 8 callbacks suppressed [ 622.865359][T29727] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 622.892584][T29741] netlink: 'syz.1.9602': attribute type 13 has an invalid length. [ 622.932161][T29741] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.941202][T29741] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.950236][T29741] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.959225][T29741] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.021944][ T29] kauditd_printk_skb: 341 callbacks suppressed [ 623.021965][ T29] audit: type=1400 audit(596.036:45436): avc: denied { write } for pid=29725 comm="syz.6.9603" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 623.055685][ T29] audit: type=1400 audit(596.064:45437): avc: denied { create } for pid=29745 comm="syz.0.9608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 623.215040][ T29] audit: type=1400 audit(596.213:45438): avc: denied { unmount } for pid=24439 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 623.245891][ T29] audit: type=1400 audit(596.241:45439): avc: denied { read } for pid=29750 comm="syz.0.9610" dev="nsfs" ino=4026533099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 623.266742][ T29] audit: type=1400 audit(596.241:45440): avc: denied { open } for pid=29750 comm="syz.0.9610" path="net:[4026533099]" dev="nsfs" ino=4026533099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 623.290090][ T29] audit: type=1400 audit(596.241:45441): avc: denied { create } for pid=29750 comm="syz.0.9610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 623.310574][ T29] audit: type=1400 audit(596.307:45442): avc: denied { getopt } for pid=29750 comm="syz.0.9610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 623.357401][ T29] audit: type=1400 audit(596.344:45443): avc: denied { write } for pid=29753 comm="syz.0.9611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 623.358164][T29754] tipc: Started in network mode [ 623.377510][ T29] audit: type=1400 audit(596.344:45444): avc: denied { nlmsg_write } for pid=29753 comm="syz.0.9611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 623.382182][T29754] tipc: Node identity ac14140f, cluster identity 4711 [ 623.382793][T29754] tipc: Enabled bearer , priority 10 [ 623.613339][ T29] audit: type=1400 audit(596.587:45445): avc: denied { unmount } for pid=24879 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 623.636220][T24879] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.690060][T29764] netlink: 'syz.0.9614': attribute type 13 has an invalid length. [ 623.825361][T29766] loop7: detected capacity change from 0 to 1024 [ 623.835247][T29771] SELinux: Context system_u:object_r:devtty_t:s0 is not valid (left unmapped). [ 623.857764][T29768] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 623.866648][T29768] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 623.875710][T29768] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 623.884575][T29768] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 623.928134][T29766] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 623.962658][T29775] netlink: 'syz.3.9618': attribute type 1 has an invalid length. [ 623.991960][T29766] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 624.007151][T29768] geneve2: entered allmulticast mode [ 624.076709][T25158] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.284266][ T23] hid-generic 0000:0004:0000.002C: unknown main item tag 0x0 [ 624.291934][ T23] hid-generic 0000:0004:0000.002C: unknown main item tag 0x0 [ 624.299501][ T23] hid-generic 0000:0004:0000.002C: unknown main item tag 0x0 [ 624.302906][T29792] loop6: detected capacity change from 0 to 1024 [ 624.325217][ T23] hid-generic 0000:0004:0000.002C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 624.348038][T29792] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 624.599012][ T23] tipc: Node number set to 2886997007 [ 624.908710][T24879] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.301363][T29809] loop7: detected capacity change from 0 to 1024 [ 625.337895][T29809] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 625.398316][T29809] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 625.524368][T25158] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.746316][T29834] lo speed is unknown, defaulting to 1000 [ 625.951537][T29834] lo speed is unknown, defaulting to 1000 [ 626.019852][T29834] lo speed is unknown, defaulting to 1000 [ 626.109755][T29834] lo speed is unknown, defaulting to 1000 [ 626.314914][T29844] SELinux: failed to load policy [ 626.423704][T29834] lo speed is unknown, defaulting to 1000 [ 626.478165][T29839] netlink: 'syz.1.9641': attribute type 27 has an invalid length. [ 626.691650][T29855] __nla_validate_parse: 10 callbacks suppressed [ 626.691672][T29855] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9644'. [ 626.704758][T29857] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 626.729523][T29857] SELinux: failed to load policy [ 626.743270][T29857] can0: slcan on ttyS3. [ 626.809465][T29857] can0 (unregistered): slcan off ttyS3. [ 626.872769][T29876] netlink: 256 bytes leftover after parsing attributes in process `syz.6.9649'. [ 626.930379][T29884] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9651'. [ 626.973696][T29891] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9649'. [ 626.982724][T29891] netlink: 2 bytes leftover after parsing attributes in process `syz.6.9649'. [ 627.016257][T29891] loop6: detected capacity change from 0 to 1024 [ 627.052053][T29891] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 627.079873][T29889] serio: Serial port ptm0 [ 627.097484][T29891] EXT4-fs error (device loop6): ext4_map_blocks:816: inode #15: block 3: comm syz.6.9649: lblock 3 mapped to illegal pblock 3 (length 1) [ 627.122140][T29891] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 627.134709][T29891] EXT4-fs (loop6): This should not happen!! Data will be lost [ 627.134709][T29891] [ 627.144941][T29905] netlink: 'syz.0.9652': attribute type 2 has an invalid length. [ 627.152831][T29905] netlink: 'syz.0.9652': attribute type 9 has an invalid length. [ 627.160654][T29905] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.9652'. [ 627.187373][T29891] EXT4-fs error (device loop6): ext4_map_blocks:816: inode #15: block 4: comm syz.6.9649: lblock 4 mapped to illegal pblock 4 (length 12) [ 627.231254][ T9] hid-generic 0000:0004:0000.002D: unknown main item tag 0x0 [ 627.238762][ T9] hid-generic 0000:0004:0000.002D: unknown main item tag 0x0 [ 627.246237][ T9] hid-generic 0000:0004:0000.002D: unknown main item tag 0x0 [ 627.254083][T29891] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 12 with error 117 [ 627.256158][ T9] hid-generic 0000:0004:0000.002D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 627.266594][T29891] EXT4-fs (loop6): This should not happen!! Data will be lost [ 627.266594][T29891] [ 627.437039][T29916] netlink: 'syz.7.9656': attribute type 13 has an invalid length. [ 627.921242][T24879] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.223511][T29938] SELinux: failed to load policy [ 628.239403][T29938] SELinux: failed to load policy [ 628.244692][T29938] SELinux: failed to load policy [ 628.249813][T29938] SELinux: failed to load policy [ 628.256542][T29938] SELinux: failed to load policy [ 628.266145][T29942] FAULT_INJECTION: forcing a failure. [ 628.266145][T29942] name failslab, interval 1, probability 0, space 0, times 0 [ 628.278834][T29942] CPU: 1 UID: 0 PID: 29942 Comm: syz.3.9662 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(voluntary) [ 628.278865][T29942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 628.278886][T29942] Call Trace: [ 628.278896][T29942] [ 628.278906][T29942] __dump_stack+0x1d/0x30 [ 628.278934][T29942] dump_stack_lvl+0xe8/0x140 [ 628.278961][T29942] dump_stack+0x15/0x1b [ 628.278984][T29942] should_fail_ex+0x265/0x280 [ 628.279125][T29942] should_failslab+0x8c/0xb0 [ 628.279155][T29942] __kmalloc_cache_node_noprof+0x54/0x320 [ 628.279197][T29942] ? __get_vm_area_node+0x106/0x1d0 [ 628.279243][T29942] __get_vm_area_node+0x106/0x1d0 [ 628.279362][T29942] __vmalloc_node_range_noprof+0x273/0xe00 [ 628.279399][T29942] ? copy_process+0x399/0x1fe0 [ 628.279479][T29942] ? __rcu_read_unlock+0x4f/0x70 [ 628.279515][T29942] __vmalloc_node_noprof+0x89/0xc0 [ 628.279631][T29942] ? copy_process+0x399/0x1fe0 [ 628.279663][T29942] ? copy_process+0x399/0x1fe0 [ 628.279690][T29942] dup_task_struct+0x449/0x6a0 [ 628.279721][T29942] ? _parse_integer+0x27/0x40 [ 628.279765][T29942] copy_process+0x399/0x1fe0 [ 628.279866][T29942] ? kstrtouint+0x76/0xc0 [ 628.279906][T29942] ? kstrtouint_from_user+0x9f/0xf0 [ 628.279935][T29942] ? __rcu_read_unlock+0x4f/0x70 [ 628.280038][T29942] kernel_clone+0x16c/0x5b0 [ 628.280135][T29942] ? vfs_write+0x75e/0x8e0 [ 628.280168][T29942] __x64_sys_clone+0xe6/0x120 [ 628.280215][T29942] x64_sys_call+0x2c59/0x2fb0 [ 628.280307][T29942] do_syscall_64+0xd2/0x200 [ 628.280347][T29942] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 628.280411][T29942] ? clear_bhb_loop+0x40/0x90 [ 628.280433][T29942] ? clear_bhb_loop+0x40/0x90 [ 628.280455][T29942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.280509][T29942] RIP: 0033:0x7f8f6d35e969 [ 628.280526][T29942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 628.280544][T29942] RSP: 002b:00007f8f6b9a5fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 628.280564][T29942] RAX: ffffffffffffffda RBX: 00007f8f6d586080 RCX: 00007f8f6d35e969 [ 628.280580][T29942] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042000000 [ 628.280597][T29942] RBP: 00007f8f6b9a6090 R08: 0000000000000000 R09: 0000000000000000 [ 628.280613][T29942] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 628.280710][T29942] R13: 0000000000000000 R14: 00007f8f6d586080 R15: 00007ffe6b61daf8 [ 628.280737][T29942] [ 628.280746][T29942] syz.3.9662: vmalloc error: size 16384, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 628.456096][T29938] SELinux: failed to load policy [ 628.460186][T29942] ,cpuset=/ [ 628.465106][T29938] SELinux: failed to load policy [ 628.484312][T29942] ,mems_allowed=0 [ 628.518217][T29938] SELinux: failed to load policy [ 628.525442][T29942] [ 628.525528][T29942] CPU: 1 UID: 0 PID: 29942 Comm: syz.3.9662 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(voluntary) [ 628.525605][T29942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 628.525625][T29942] Call Trace: [ 628.525635][T29942] [ 628.525647][T29942] __dump_stack+0x1d/0x30 [ 628.525678][T29942] dump_stack_lvl+0xe8/0x140 [ 628.525698][T29942] dump_stack+0x15/0x1b [ 628.525749][T29942] warn_alloc+0x12b/0x1a0 [ 628.525881][T29942] __vmalloc_node_range_noprof+0x297/0xe00 [ 628.525953][T29942] ? __rcu_read_unlock+0x4f/0x70 [ 628.525994][T29942] __vmalloc_node_noprof+0x89/0xc0 [ 628.526040][T29942] ? copy_process+0x399/0x1fe0 [ 628.526150][T29942] ? copy_process+0x399/0x1fe0 [ 628.526196][T29942] dup_task_struct+0x449/0x6a0 [ 628.526232][T29942] ? _parse_integer+0x27/0x40 [ 628.526321][T29942] copy_process+0x399/0x1fe0 [ 628.526354][T29942] ? kstrtouint+0x76/0xc0 [ 628.526436][T29942] ? kstrtouint_from_user+0x9f/0xf0 [ 628.526466][T29942] ? __rcu_read_unlock+0x4f/0x70 [ 628.526502][T29942] kernel_clone+0x16c/0x5b0 [ 628.526606][T29942] ? vfs_write+0x75e/0x8e0 [ 628.526639][T29942] __x64_sys_clone+0xe6/0x120 [ 628.526739][T29942] x64_sys_call+0x2c59/0x2fb0 [ 628.526769][T29942] do_syscall_64+0xd2/0x200 [ 628.526892][T29942] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 628.526936][T29942] ? clear_bhb_loop+0x40/0x90 [ 628.526967][T29942] ? clear_bhb_loop+0x40/0x90 [ 628.527001][T29942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.527090][T29942] RIP: 0033:0x7f8f6d35e969 [ 628.527112][T29942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 628.527138][T29942] RSP: 002b:00007f8f6b9a5fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 628.527164][T29942] RAX: ffffffffffffffda RBX: 00007f8f6d586080 RCX: 00007f8f6d35e969 [ 628.527182][T29942] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042000000 [ 628.527226][T29942] RBP: 00007f8f6b9a6090 R08: 0000000000000000 R09: 0000000000000000 [ 628.527244][T29942] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 628.527261][T29942] R13: 0000000000000000 R14: 00007f8f6d586080 R15: 00007ffe6b61daf8 [ 628.527288][T29942] [ 628.527298][T29942] Mem-Info: [ 628.797971][T29942] active_anon:59232 inactive_anon:55 isolated_anon:0 [ 628.797971][T29942] active_file:14458 inactive_file:13503 isolated_file:0 [ 628.797971][T29942] unevictable:1 dirty:237 writeback:0 [ 628.797971][T29942] slab_reclaimable:3464 slab_unreclaimable:85483 [ 628.797971][T29942] mapped:42762 shmem:48822 pagetables:1156 [ 628.797971][T29942] sec_pagetables:0 bounce:0 [ 628.797971][T29942] kernel_misc_reclaimable:0 [ 628.797971][T29942] free:1750781 free_pcp:16124 free_cma:0 [ 628.844044][T29942] Node 0 active_anon:238320kB inactive_anon:220kB active_file:57832kB inactive_file:54012kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:171396kB dirty:948kB writeback:0kB shmem:196448kB writeback_tmp:0kB kernel_stack:3168kB pagetables:4624kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 628.873631][T29942] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 628.902270][T29942] lowmem_reserve[]: 0 2882 7861 7861 [ 628.907823][T29942] Node 0 DMA32 free:2947812kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951440kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:3528kB free_cma:0kB [ 628.938264][T29942] lowmem_reserve[]: 0 0 4978 4978 [ 628.943419][T29942] Node 0 Normal free:4039952kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:241684kB inactive_anon:220kB active_file:57832kB inactive_file:54012kB unevictable:4kB writepending:948kB present:5242880kB managed:5098232kB mlocked:0kB bounce:0kB free_pcp:56064kB local_pcp:26388kB free_cma:0kB [ 628.975867][T29942] lowmem_reserve[]: 0 0 0 0 [ 628.980672][T29942] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 628.993562][T29942] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 3*16kB (M) 1*32kB (M) 2*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947812kB [ 629.009920][T29942] Node 0 Normal: 758*4kB (UME) 311*8kB (UE) 102*16kB (UM) 155*32kB (UME) 106*64kB (UME) 125*128kB (UME) 73*256kB (UME) 218*512kB (UME) 164*1024kB (UM) 54*2048kB (U) 878*4096kB (UM) = 4040016kB [ 629.029368][T29942] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 629.038704][T29942] 78121 total pagecache pages [ 629.043420][T29942] 57 pages in swap cache [ 629.047747][T29942] Free swap = 124768kB [ 629.048734][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 629.048752][ T29] audit: type=1400 audit(601.601:45610): avc: denied { unmount } for pid=25487 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 629.052071][T29942] Total swap = 124996kB [ 629.082512][T29942] 2097051 pages RAM [ 629.086364][T29942] 0 pages HighMem/MovableOnly [ 629.091095][T29942] 80793 pages reserved [ 629.150814][ T29] audit: type=1326 audit(601.703:45611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29950 comm="syz.6.9667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f1a3e969 code=0x7ffc0000 [ 629.174087][ T29] audit: type=1326 audit(601.703:45612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29950 comm="syz.6.9667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f12f1a3e969 code=0x7ffc0000 [ 629.197081][ T29] audit: type=1326 audit(601.703:45613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29950 comm="syz.6.9667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f1a3e969 code=0x7ffc0000 [ 629.220229][ T29] audit: type=1326 audit(601.703:45614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29950 comm="syz.6.9667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f1a3e969 code=0x7ffc0000 [ 629.266657][T29956] netlink: 180 bytes leftover after parsing attributes in process `syz.0.9669'. [ 629.267310][T29958] netlink: 256 bytes leftover after parsing attributes in process `syz.1.9670'. [ 629.321771][T29955] loop3: detected capacity change from 0 to 1024 [ 629.328724][T29955] ext4: Unknown parameter 'obj_role' [ 629.338399][ T29] audit: type=1326 audit(601.795:45615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29950 comm="syz.6.9667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f1a3e969 code=0x7ffc0000 [ 629.361599][ T29] audit: type=1326 audit(601.795:45616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29950 comm="syz.6.9667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f1a3e969 code=0x7ffc0000 [ 629.384779][ T29] audit: type=1326 audit(601.795:45617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29950 comm="syz.6.9667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f12f1a3e969 code=0x7ffc0000 [ 629.397824][T29960] FAULT_INJECTION: forcing a failure. [ 629.397824][T29960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 629.407992][ T29] audit: type=1326 audit(601.795:45618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29950 comm="syz.6.9667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f1a3e969 code=0x7ffc0000 [ 629.421020][T29960] CPU: 1 UID: 0 PID: 29960 Comm: syz.0.9671 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(voluntary) [ 629.421096][T29960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 629.421110][T29960] Call Trace: [ 629.421119][T29960] [ 629.421130][T29960] __dump_stack+0x1d/0x30 [ 629.421206][T29960] dump_stack_lvl+0xe8/0x140 [ 629.421293][T29960] dump_stack+0x15/0x1b [ 629.421317][T29960] should_fail_ex+0x265/0x280 [ 629.421348][T29960] should_fail+0xb/0x20 [ 629.421374][T29960] should_fail_usercopy+0x1a/0x20 [ 629.421478][T29960] _copy_from_iter+0xcf/0xe40 [ 629.421560][T29960] ? mntput+0x4b/0x80 [ 629.421602][T29960] ? terminate_walk+0x27f/0x2a0 [ 629.421665][T29960] tun_get_user+0x144/0x2500 [ 629.421813][T29960] ? ref_tracker_alloc+0x1f2/0x2f0 [ 629.421847][T29960] ? selinux_file_permission+0x1e4/0x320 [ 629.421890][T29960] tun_chr_write_iter+0x15e/0x210 [ 629.421979][T29960] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 629.422022][T29960] vfs_write+0x4a0/0x8e0 [ 629.422119][T29960] ksys_write+0xda/0x1a0 [ 629.422152][T29960] __x64_sys_write+0x40/0x50 [ 629.422184][T29960] x64_sys_call+0x2cdd/0x2fb0 [ 629.422270][T29960] do_syscall_64+0xd2/0x200 [ 629.422313][T29960] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 629.422422][T29960] ? clear_bhb_loop+0x40/0x90 [ 629.422452][T29960] ? clear_bhb_loop+0x40/0x90 [ 629.422520][T29960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.422556][T29960] RIP: 0033:0x7f910413e969 [ 629.422580][T29960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 629.422607][T29960] RSP: 002b:00007f91027a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 629.422635][T29960] RAX: ffffffffffffffda RBX: 00007f9104365fa0 RCX: 00007f910413e969 [ 629.422672][T29960] RDX: 00000000000000d6 RSI: 0000200000000540 RDI: 0000000000000007 [ 629.422690][T29960] RBP: 00007f91027a7090 R08: 0000000000000000 R09: 0000000000000000 [ 629.422707][T29960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 629.422725][T29960] R13: 0000000000000000 R14: 00007f9104365fa0 R15: 00007ffe42c2a148 [ 629.422834][T29960] [ 629.534956][T29963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9670'. [ 629.540458][ T29] audit: type=1326 audit(601.795:45619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29950 comm="syz.6.9667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f12f1a3e969 code=0x7ffc0000 [ 629.692662][T29963] netlink: 2 bytes leftover after parsing attributes in process `syz.1.9670'. [ 629.814095][T29970] sctp: [Deprecated]: syz.0.9672 (pid 29970) Use of int in max_burst socket option. [ 629.814095][T29970] Use struct sctp_assoc_value instead [ 630.132327][T29981] syz!: rxe_newlink: already configured on team_slave_0 [ 630.192332][T29983] loop6: detected capacity change from 0 to 1024 [ 630.220976][T29986] FAULT_INJECTION: forcing a failure. [ 630.220976][T29986] name failslab, interval 1, probability 0, space 0, times 0 [ 630.233922][T29986] CPU: 0 UID: 0 PID: 29986 Comm: syz.3.9678 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(voluntary) [ 630.233953][T29986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 630.233970][T29986] Call Trace: [ 630.233979][T29986] [ 630.233990][T29986] __dump_stack+0x1d/0x30 [ 630.234019][T29986] dump_stack_lvl+0xe8/0x140 [ 630.234068][T29986] dump_stack+0x15/0x1b [ 630.234160][T29986] should_fail_ex+0x265/0x280 [ 630.234198][T29986] should_failslab+0x8c/0xb0 [ 630.234233][T29986] kmem_cache_alloc_noprof+0x50/0x310 [ 630.234265][T29986] ? audit_log_start+0x365/0x6c0 [ 630.234342][T29986] audit_log_start+0x365/0x6c0 [ 630.234519][T29986] audit_seccomp+0x48/0x100 [ 630.234558][T29986] ? __seccomp_filter+0x68c/0x10d0 [ 630.234584][T29986] __seccomp_filter+0x69d/0x10d0 [ 630.234612][T29986] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 630.234668][T29986] ? vfs_write+0x75e/0x8e0 [ 630.234705][T29986] __secure_computing+0x82/0x150 [ 630.234734][T29986] syscall_trace_enter+0xcf/0x1e0 [ 630.234825][T29986] do_syscall_64+0xac/0x200 [ 630.234861][T29986] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 630.234900][T29986] ? clear_bhb_loop+0x40/0x90 [ 630.235023][T29986] ? clear_bhb_loop+0x40/0x90 [ 630.235057][T29986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.235082][T29986] RIP: 0033:0x7f8f6d35d41f [ 630.235100][T29986] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 630.235123][T29986] RSP: 002b:00007f8f6b9c7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 630.235147][T29986] RAX: ffffffffffffffda RBX: 00007f8f6d585fa0 RCX: 00007f8f6d35d41f [ 630.235163][T29986] RDX: 00000000fffffdc3 RSI: 0000200000000500 RDI: 00000000000000c8 [ 630.235176][T29986] RBP: 00007f8f6b9c7090 R08: 0000000000000000 R09: 0000000000000000 [ 630.235225][T29986] R10: fffffffffffffdc3 R11: 0000000000000293 R12: 0000000000000001 [ 630.235242][T29986] R13: 0000000000000000 R14: 00007f8f6d585fa0 R15: 00007ffe6b61daf8 [ 630.235267][T29986] [ 630.237094][T29987] lo speed is unknown, defaulting to 1000 [ 630.441643][T29986] x_tables: duplicate underflow at hook 1 [ 630.453343][T29983] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 630.473659][T29983] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 630.530339][T24879] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.754864][T30016] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 630.850733][T30021] pim6reg1: entered promiscuous mode [ 631.206978][T30051] netlink: zone id is out of range [ 631.212334][T30051] netlink: zone id is out of range [ 631.217505][T30051] netlink: zone id is out of range [ 631.222748][T30051] netlink: zone id is out of range [ 631.228112][T30051] netlink: zone id is out of range [ 631.233356][T30051] netlink: zone id is out of range [ 631.238564][T30051] netlink: zone id is out of range [ 631.243774][T30051] netlink: zone id is out of range [ 631.248929][T30051] netlink: zone id is out of range [ 631.254444][T30051] netlink: zone id is out of range [ 631.640435][T30075] netlink: 'syz.7.9711': attribute type 13 has an invalid length. [ 632.234104][T30084] lo speed is unknown, defaulting to 1000 [ 632.456883][T30101] tmpfs: Bad value for 'mpol' [ 632.712333][T30112] __nla_validate_parse: 9 callbacks suppressed [ 632.712355][T30112] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9727'. [ 632.752950][T30113] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30113 comm=syz.1.9726 [ 632.812885][T30112] loop3: detected capacity change from 0 to 1024 [ 632.903141][T30112] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 632.919186][T30112] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 632.948861][T23970] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.164317][T30124] loop3: detected capacity change from 0 to 1024 [ 633.172885][T30124] ext4: Unknown parameter 'obj_role' [ 633.983762][T30146] loop7: detected capacity change from 0 to 128 [ 634.031275][T30151] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9739'. [ 634.040269][T30151] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9739'. [ 634.049745][T30151] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9739'. [ 634.069868][T30151] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9739'. [ 634.078787][T30151] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9739'. [ 634.089245][T30151] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9739'. [ 634.120555][T30151] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9739'. [ 634.129553][T30151] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9739'. [ 634.149394][T30151] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9739'. [ 634.184615][ T3390] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 634.193755][ T3390] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 634.261649][T30180] IPv6: NLM_F_CREATE should be specified when creating new route [ 634.306893][T30185] FAULT_INJECTION: forcing a failure. [ 634.306893][T30185] name failslab, interval 1, probability 0, space 0, times 0 [ 634.319846][T30185] CPU: 0 UID: 0 PID: 30185 Comm: syz.6.9753 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(voluntary) [ 634.319952][T30185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 634.319968][T30185] Call Trace: [ 634.319977][T30185] [ 634.319988][T30185] __dump_stack+0x1d/0x30 [ 634.320015][T30185] dump_stack_lvl+0xe8/0x140 [ 634.320049][T30185] dump_stack+0x15/0x1b [ 634.320069][T30185] should_fail_ex+0x265/0x280 [ 634.320092][T30185] should_failslab+0x8c/0xb0 [ 634.320119][T30185] __kmalloc_noprof+0xa5/0x3e0 [ 634.320155][T30185] ? fib6_info_alloc+0x2e/0x90 [ 634.320211][T30185] fib6_info_alloc+0x2e/0x90 [ 634.320246][T30185] ip6_route_info_create+0xe7/0x390 [ 634.320273][T30185] ip6_route_add+0x28/0x150 [ 634.320314][T30185] inet6_rtm_newroute+0x196/0x1020 [ 634.320427][T30185] ? __rcu_read_unlock+0x4f/0x70 [ 634.320550][T30185] ? xa_load+0xb1/0xe0 [ 634.320655][T30185] ? security_capable+0x83/0x90 [ 634.320693][T30185] ? ns_capable+0x7d/0xb0 [ 634.320779][T30185] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 634.320813][T30185] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 634.320840][T30185] ? avc_has_perm_noaudit+0x1b1/0x200 [ 634.320946][T30185] netlink_rcv_skb+0x123/0x220 [ 634.320975][T30185] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 634.321003][T30185] rtnetlink_rcv+0x1c/0x30 [ 634.321079][T30185] netlink_unicast+0x5a1/0x670 [ 634.321115][T30185] netlink_sendmsg+0x58b/0x6b0 [ 634.321161][T30185] ? __pfx_netlink_sendmsg+0x10/0x10 [ 634.321219][T30185] __sock_sendmsg+0x142/0x180 [ 634.321249][T30185] ____sys_sendmsg+0x31e/0x4e0 [ 634.321343][T30185] ___sys_sendmsg+0x17b/0x1d0 [ 634.321439][T30185] __x64_sys_sendmsg+0xd4/0x160 [ 634.321565][T30185] x64_sys_call+0x2999/0x2fb0 [ 634.321595][T30185] do_syscall_64+0xd2/0x200 [ 634.321633][T30185] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 634.321661][T30185] ? clear_bhb_loop+0x40/0x90 [ 634.321722][T30185] ? clear_bhb_loop+0x40/0x90 [ 634.321745][T30185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.321766][T30185] RIP: 0033:0x7f12f1a3e969 [ 634.321782][T30185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 634.321804][T30185] RSP: 002b:00007f12f00a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 634.321907][T30185] RAX: ffffffffffffffda RBX: 00007f12f1c65fa0 RCX: 00007f12f1a3e969 [ 634.321924][T30185] RDX: 0000000000000004 RSI: 00002000000004c0 RDI: 0000000000000003 [ 634.321941][T30185] RBP: 00007f12f00a7090 R08: 0000000000000000 R09: 0000000000000000 [ 634.321956][T30185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.321968][T30185] R13: 0000000000000000 R14: 00007f12f1c65fa0 R15: 00007ffee3fe7de8 [ 634.321988][T30185] [ 634.605279][T30188] netlink: 'syz.1.9743': attribute type 13 has an invalid length. [ 634.642493][ T29] kauditd_printk_skb: 326 callbacks suppressed [ 634.642510][ T29] audit: type=1326 audit(606.733:45944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30177 comm="syz.3.9751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f6d35e969 code=0x7ffc0000 [ 634.671984][ T29] audit: type=1326 audit(606.733:45945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30177 comm="syz.3.9751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f6d35e969 code=0x7ffc0000 [ 634.695126][ T29] audit: type=1326 audit(606.733:45946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30177 comm="syz.3.9751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8f6d35e969 code=0x7ffc0000 [ 634.718138][ T29] audit: type=1326 audit(606.733:45947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30177 comm="syz.3.9751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f6d35e969 code=0x7ffc0000 [ 634.741269][ T29] audit: type=1326 audit(606.733:45948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30177 comm="syz.3.9751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f8f6d35e969 code=0x7ffc0000 [ 634.764426][ T29] audit: type=1326 audit(606.733:45949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30177 comm="syz.3.9751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f6d35e969 code=0x7ffc0000 [ 634.788322][ T29] audit: type=1326 audit(606.733:45950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30177 comm="syz.3.9751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f6d35e969 code=0x7ffc0000 [ 634.811307][ T29] audit: type=1326 audit(606.733:45951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30177 comm="syz.3.9751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f6d35e969 code=0x7ffc0000 [ 634.834324][ T29] audit: type=1326 audit(606.733:45952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30177 comm="syz.3.9751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f6d35e969 code=0x7ffc0000 [ 634.857454][ T29] audit: type=1326 audit(606.733:45953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30177 comm="syz.3.9751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f6d35e969 code=0x7ffc0000 [ 634.995815][T30195] loop6: detected capacity change from 0 to 1024 [ 635.013239][T30195] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 635.287401][T30207] loop7: detected capacity change from 0 to 1024 [ 635.293903][ T3390] IPVS: starting estimator thread 0... [ 635.302255][T30207] ext4: Unknown parameter 'obj_role' [ 635.340878][T30213] netlink: 'syz.0.9761': attribute type 21 has an invalid length. [ 635.402002][T30210] IPVS: using max 2448 ests per chain, 122400 per kthread [ 635.564540][T24879] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.612615][T30221] loop6: detected capacity change from 0 to 512 [ 635.619510][T30221] EXT4-fs: dax option not supported [ 635.633024][T30223] loop3: detected capacity change from 0 to 1024 [ 635.659277][T30223] ext4: Unknown parameter 'obj_role' [ 635.676034][T30225] loop6: detected capacity change from 0 to 512 [ 635.696400][T30225] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 635.711512][T30225] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 635.782613][ T3390] hid-generic 0000:0004:0000.002F: unknown main item tag 0x0 [ 635.790134][ T3390] hid-generic 0000:0004:0000.002F: unknown main item tag 0x0 [ 635.797641][ T3390] hid-generic 0000:0004:0000.002F: unknown main item tag 0x0 [ 635.817747][ T3390] hid-generic 0000:0004:0000.002F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 636.017756][T30224] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.9764: bg 0: block 217: padding at end of block bitmap is not set [ 636.192437][T30234] FAULT_INJECTION: forcing a failure. [ 636.192437][T30234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 636.205656][T30234] CPU: 1 UID: 0 PID: 30234 Comm: syz.7.9765 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(voluntary) [ 636.205764][T30234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 636.205781][T30234] Call Trace: [ 636.205789][T30234] [ 636.205800][T30234] __dump_stack+0x1d/0x30 [ 636.205825][T30234] dump_stack_lvl+0xe8/0x140 [ 636.205899][T30234] dump_stack+0x15/0x1b [ 636.205922][T30234] should_fail_ex+0x265/0x280 [ 636.205950][T30234] should_fail+0xb/0x20 [ 636.206021][T30234] should_fail_usercopy+0x1a/0x20 [ 636.206044][T30234] strncpy_from_user+0x25/0x230 [ 636.206076][T30234] ? kmem_cache_alloc_noprof+0x186/0x310 [ 636.206115][T30234] ? getname_flags+0x80/0x3b0 [ 636.206210][T30234] getname_flags+0xae/0x3b0 [ 636.206240][T30234] user_path_at+0x28/0x130 [ 636.206282][T30234] vfs_open_tree+0x198/0x540 [ 636.206321][T30234] __x64_sys_open_tree+0x45/0xc0 [ 636.206364][T30234] x64_sys_call+0x28d3/0x2fb0 [ 636.206388][T30234] do_syscall_64+0xd2/0x200 [ 636.206427][T30234] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 636.206539][T30234] ? clear_bhb_loop+0x40/0x90 [ 636.206567][T30234] ? clear_bhb_loop+0x40/0x90 [ 636.206654][T30234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.206680][T30234] RIP: 0033:0x7f9c04c6e969 [ 636.206696][T30234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.206714][T30234] RSP: 002b:00007f9c032d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 636.206808][T30234] RAX: ffffffffffffffda RBX: 00007f9c04e95fa0 RCX: 00007f9c04c6e969 [ 636.206827][T30234] RDX: 0000000000089901 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 636.206844][T30234] RBP: 00007f9c032d7090 R08: 0000000000000000 R09: 0000000000000000 [ 636.206861][T30234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.206947][T30234] R13: 0000000000000000 R14: 00007f9c04e95fa0 R15: 00007ffc9966e548 [ 636.206972][T30234] [ 636.423019][T24879] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.496275][T30243] loop6: detected capacity change from 0 to 1024 [ 636.509422][T30243] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 636.769981][T30263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 636.780691][T30263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 636.792145][T30263] bond0 (unregistering): Released all slaves [ 636.831387][T30266] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1016 sclass=netlink_route_socket pid=30266 comm=syz.3.9776 [ 636.899903][T30268] loop3: detected capacity change from 0 to 1024 [ 636.907347][T30268] ext4: Unknown parameter 'obj_role' [ 637.441682][T24879] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.487884][T30275] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 637.521097][T30279] loop7: detected capacity change from 0 to 1024 [ 637.527915][T30279] ext4: Unknown parameter 'obj_role' [ 637.561194][T30275] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 637.601603][T30275] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 637.648146][ T9] hid-generic 0000:0004:0000.0030: unknown main item tag 0x0 [ 637.655756][ T9] hid-generic 0000:0004:0000.0030: unknown main item tag 0x0 [ 637.663350][ T9] hid-generic 0000:0004:0000.0030: unknown main item tag 0x0 [ 637.672355][T30275] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 637.683980][ T9] hid-generic 0000:0004:0000.0030: hidraw0: HID v0.00 Device [syz0] on syz1 [ 637.744615][T30292] netlink: 'syz.0.9784': attribute type 13 has an invalid length. [ 637.760785][T30275] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 637.774414][T30275] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 637.786949][T30275] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 637.810073][T30275] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 638.173821][T30303] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 639.121118][T30329] vhci_hcd: invalid port number 255 [ 639.126387][T30329] vhci_hcd: invalid port number 255 [ 639.340636][T30331] lo speed is unknown, defaulting to 1000 [ 639.347021][T30333] loop3: detected capacity change from 0 to 2048 [ 639.397863][T30333] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 639.477040][T30338] FAULT_INJECTION: forcing a failure. [ 639.477040][T30338] name failslab, interval 1, probability 0, space 0, times 0 [ 639.489946][T30338] CPU: 1 UID: 0 PID: 30338 Comm: syz.1.9801 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(voluntary) [ 639.489984][T30338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 639.490056][T30338] Call Trace: [ 639.490064][T30338] [ 639.490073][T30338] __dump_stack+0x1d/0x30 [ 639.490095][T30338] dump_stack_lvl+0xe8/0x140 [ 639.490114][T30338] dump_stack+0x15/0x1b [ 639.490131][T30338] should_fail_ex+0x265/0x280 [ 639.490223][T30338] ? rtnl_newlink+0x5c/0x12d0 [ 639.490243][T30338] should_failslab+0x8c/0xb0 [ 639.490276][T30338] __kmalloc_cache_noprof+0x4c/0x320 [ 639.490319][T30338] rtnl_newlink+0x5c/0x12d0 [ 639.490345][T30338] ? htab_map_hash+0x1cc/0x1d0 [ 639.490420][T30338] ? __htab_map_lookup_elem+0x129/0x150 [ 639.490471][T30338] ? css_rstat_updated+0xcd/0x5b0 [ 639.490505][T30338] ? htab_lru_percpu_map_lookup_percpu_elem+0x7e/0xf0 [ 639.490553][T30338] ? xas_load+0x413/0x430 [ 639.490608][T30338] ? xas_load+0x413/0x430 [ 639.490639][T30338] ? __rcu_read_unlock+0x4f/0x70 [ 639.490661][T30338] ? xas_load+0x413/0x430 [ 639.490785][T30338] ? __rcu_read_unlock+0x4f/0x70 [ 639.490867][T30338] ? __rcu_read_unlock+0x4f/0x70 [ 639.490950][T30338] ? avc_has_perm_noaudit+0x1b1/0x200 [ 639.491053][T30338] ? selinux_capable+0x1f9/0x270 [ 639.491077][T30338] ? security_capable+0x83/0x90 [ 639.491114][T30338] ? ns_capable+0x7d/0xb0 [ 639.491163][T30338] ? __pfx_rtnl_newlink+0x10/0x10 [ 639.491185][T30338] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 639.491207][T30338] ? avc_has_perm_noaudit+0x1b1/0x200 [ 639.491299][T30338] netlink_rcv_skb+0x123/0x220 [ 639.491330][T30338] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 639.491411][T30338] rtnetlink_rcv+0x1c/0x30 [ 639.491435][T30338] netlink_unicast+0x5a1/0x670 [ 639.491474][T30338] netlink_sendmsg+0x58b/0x6b0 [ 639.491512][T30338] ? __pfx_netlink_sendmsg+0x10/0x10 [ 639.491588][T30338] __sock_sendmsg+0x142/0x180 [ 639.491619][T30338] ____sys_sendmsg+0x31e/0x4e0 [ 639.491661][T30338] ___sys_sendmsg+0x17b/0x1d0 [ 639.491745][T30338] __x64_sys_sendmsg+0xd4/0x160 [ 639.491842][T30338] x64_sys_call+0x2999/0x2fb0 [ 639.491865][T30338] do_syscall_64+0xd2/0x200 [ 639.491909][T30338] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 639.491946][T30338] ? clear_bhb_loop+0x40/0x90 [ 639.492016][T30338] ? clear_bhb_loop+0x40/0x90 [ 639.492039][T30338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.492115][T30338] RIP: 0033:0x7f71e9b8e969 [ 639.492131][T30338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 639.492156][T30338] RSP: 002b:00007f71e81f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 639.492182][T30338] RAX: ffffffffffffffda RBX: 00007f71e9db5fa0 RCX: 00007f71e9b8e969 [ 639.492197][T30338] RDX: 0000000000004054 RSI: 00002000000002c0 RDI: 0000000000000007 [ 639.492282][T30338] RBP: 00007f71e81f7090 R08: 0000000000000000 R09: 0000000000000000 [ 639.492298][T30338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.492315][T30338] R13: 0000000000000000 R14: 00007f71e9db5fa0 R15: 00007ffd332b6288 [ 639.492341][T30338] [ 639.865721][T30345] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 639.889544][T23970] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.914960][T30347] FAULT_INJECTION: forcing a failure. [ 639.914960][T30347] name failslab, interval 1, probability 0, space 0, times 0 [ 639.927688][T30347] CPU: 0 UID: 0 PID: 30347 Comm: syz.7.9806 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(voluntary) [ 639.927805][T30347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 639.927822][T30347] Call Trace: [ 639.927868][T30347] [ 639.927876][T30347] __dump_stack+0x1d/0x30 [ 639.927898][T30347] dump_stack_lvl+0xe8/0x140 [ 639.927940][T30347] dump_stack+0x15/0x1b [ 639.927963][T30347] should_fail_ex+0x265/0x280 [ 639.928024][T30347] ? alloc_lookup_fw_priv+0x147/0x350 [ 639.928063][T30347] should_failslab+0x8c/0xb0 [ 639.928091][T30347] __kmalloc_cache_noprof+0x4c/0x320 [ 639.928124][T30347] alloc_lookup_fw_priv+0x147/0x350 [ 639.928228][T30347] _request_firmware+0x28b/0xbb0 [ 639.928247][T30347] ? __rcu_read_unlock+0x4f/0x70 [ 639.928270][T30347] ? avc_has_perm_noaudit+0x1b1/0x200 [ 639.928372][T30347] ? __rcu_read_unlock+0x4f/0x70 [ 639.928397][T30347] request_firmware+0x36/0x50 [ 639.928418][T30347] devlink_compat_flash_update+0xb2/0x1b0 [ 639.928484][T30347] dev_ethtool+0x148b/0x1650 [ 639.928508][T30347] ? full_name_hash+0x92/0xe0 [ 639.928545][T30347] dev_ioctl+0x2e0/0x960 [ 639.928586][T30347] sock_do_ioctl+0x197/0x220 [ 639.928616][T30347] sock_ioctl+0x41b/0x610 [ 639.928702][T30347] ? __pfx_sock_ioctl+0x10/0x10 [ 639.928727][T30347] __se_sys_ioctl+0xcb/0x140 [ 639.928825][T30347] __x64_sys_ioctl+0x43/0x50 [ 639.928844][T30347] x64_sys_call+0x19a8/0x2fb0 [ 639.928891][T30347] do_syscall_64+0xd2/0x200 [ 639.928926][T30347] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 639.928994][T30347] ? clear_bhb_loop+0x40/0x90 [ 639.929021][T30347] ? clear_bhb_loop+0x40/0x90 [ 639.929094][T30347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.929118][T30347] RIP: 0033:0x7f9c04c6e969 [ 639.929138][T30347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 639.929163][T30347] RSP: 002b:00007f9c032d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 639.929187][T30347] RAX: ffffffffffffffda RBX: 00007f9c04e95fa0 RCX: 00007f9c04c6e969 [ 639.929200][T30347] RDX: 0000200000000340 RSI: 0000000000008946 RDI: 0000000000000003 [ 639.929280][T30347] RBP: 00007f9c032d7090 R08: 0000000000000000 R09: 0000000000000000 [ 639.929298][T30347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.929313][T30347] R13: 0000000000000000 R14: 00007f9c04e95fa0 R15: 00007ffc9966e548 [ 639.929338][T30347] [ 640.361994][T30361] loop7: detected capacity change from 0 to 1024 [ 640.392677][T30361] ext4: Unknown parameter 'obj_role' [ 640.440324][T30362] netlink: 'syz.3.9805': attribute type 4 has an invalid length. [ 640.448188][T30362] __nla_validate_parse: 1 callbacks suppressed [ 640.448276][T30362] netlink: 17 bytes leftover after parsing attributes in process `syz.3.9805'. [ 640.525261][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 640.525277][ T29] audit: type=1326 audit(612.197:46143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30358 comm="syz.6.9810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f1a3e969 code=0x7ffc0000 [ 640.554563][ T29] audit: type=1326 audit(612.197:46144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30358 comm="syz.6.9810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f1a3e969 code=0x7ffc0000 [ 640.577572][ T29] audit: type=1326 audit(612.197:46145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30358 comm="syz.6.9810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12f1a3e969 code=0x7ffc0000 [ 640.776966][ T29] audit: type=1326 audit(612.271:46146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30358 comm="syz.6.9810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f1a3e969 code=0x7ffc0000 [ 640.800184][ T29] audit: type=1326 audit(612.271:46147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30358 comm="syz.6.9810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f1a3e969 code=0x7ffc0000 [ 640.823213][ T29] audit: type=1326 audit(612.271:46148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30358 comm="syz.6.9810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12f1a3e969 code=0x7ffc0000 [ 640.846464][ T29] audit: type=1326 audit(612.271:46149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30358 comm="syz.6.9810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f1a3e969 code=0x7ffc0000 [ 640.869527][ T29] audit: type=1326 audit(612.271:46150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30358 comm="syz.6.9810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f1a3e969 code=0x7ffc0000 [ 640.892775][ T29] audit: type=1326 audit(612.271:46151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30358 comm="syz.6.9810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12f1a3e969 code=0x7ffc0000 [ 640.915869][ T29] audit: type=1326 audit(612.271:46152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30358 comm="syz.6.9810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f1a3e969 code=0x7ffc0000 [ 641.252419][T30383] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.9817'. [ 641.262416][T30383] net_ratelimit: 16 callbacks suppressed [ 641.262500][T30383] netlink: zone id is out of range [ 641.273478][T30383] netlink: zone id is out of range [ 641.278688][T30383] netlink: zone id is out of range [ 641.284079][T30383] netlink: zone id is out of range [ 641.289219][T30383] netlink: zone id is out of range [ 641.294354][T30383] netlink: zone id is out of range [ 641.299669][T30383] netlink: zone id is out of range [ 641.304897][T30383] netlink: zone id is out of range [ 641.310096][T30383] netlink: zone id is out of range [ 641.320284][T30385] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 641.327759][T30383] netlink: zone id is out of range [ 642.018977][T30404] netlink: 'syz.6.9825': attribute type 27 has an invalid length. [ 642.056093][T30404] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 642.063483][T30406] netlink: 'syz.1.9826': attribute type 4 has an invalid length. [ 642.064663][T30404] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 642.072480][T30406] netlink: 17 bytes leftover after parsing attributes in process `syz.1.9826'. [ 642.090067][T30404] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 642.098602][T30404] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 642.125622][T30404] geneve2: left allmulticast mode [ 642.162024][T30408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 642.170435][T30408] 8021q: adding VLAN 0 to HW filter on device team0 [ 642.187688][T30413] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.9828'. [ 642.189153][T30404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30404 comm=syz.6.9825 [ 642.233995][T30404] 9pnet_virtio: no channels available for device [ 642.347512][T30418] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 642.381383][T30424] can: request_module (can-proto-0) failed. [ 642.415112][T30430] netlink: 'syz.3.9835': attribute type 4 has an invalid length. [ 642.422996][T30430] netlink: 17 bytes leftover after parsing attributes in process `syz.3.9835'. [ 642.435418][T30424] vhci_hcd: invalid port number 96 [ 642.440565][T30424] vhci_hcd: default hub control req: 000e vfffc i0060 l0 [ 642.472089][T30434] netlink: 256 bytes leftover after parsing attributes in process `syz.0.9837'. [ 642.502779][T30440] netlink: 10 bytes leftover after parsing attributes in process `syz.6.9839'. [ 642.543403][T30447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9837'. [ 642.552377][T30447] netlink: 2 bytes leftover after parsing attributes in process `syz.0.9837'. [ 642.561920][T30446] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=30446 comm=syz.3.9840 [ 642.574649][T30446] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=30446 comm=syz.3.9840 [ 642.611006][T30449] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.9841'. [ 642.721079][T30453] loop3: detected capacity change from 0 to 1024 [ 642.728167][T30453] ext4: Unknown parameter 'obj_role' [ 642.764912][T30451] netlink: 'syz.6.9842': attribute type 27 has an invalid length. [ 642.955928][T30464] loop6: detected capacity change from 0 to 1024 [ 642.962653][T30464] EXT4-fs: Ignoring removed i_version option [ 642.968865][T30464] EXT4-fs: Ignoring removed mblk_io_submit option [ 642.975627][T30464] EXT4-fs: Ignoring removed nobh option [ 642.981214][T30464] EXT4-fs: Ignoring removed bh option [ 643.008030][T30464] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 643.022011][T30464] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.9846: Allocating blocks 385-513 which overlap fs metadata [ 643.036898][T30464] EXT4-fs (loop6): pa ffff888106d72310: logic 16, phys. 129, len 24 [ 643.044992][T30464] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 643.055562][T30464] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 643.067983][T30464] EXT4-fs (loop6): This should not happen!! Data will be lost [ 643.067983][T30464] [ 643.077860][T30464] EXT4-fs (loop6): Total free blocks count 0 [ 643.083947][T30464] EXT4-fs (loop6): Free/Dirty block details [ 643.089926][T30464] EXT4-fs (loop6): free_blocks=128 [ 643.095208][T30464] EXT4-fs (loop6): dirty_blocks=0 [ 643.100614][T30464] EXT4-fs (loop6): Block reservation details [ 643.106652][T30464] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 643.132609][T30469] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 643.528123][T30479] lo speed is unknown, defaulting to 1000 [ 643.804635][T30485] netlink: 'syz.3.9854': attribute type 27 has an invalid length. [ 643.968950][T30491] x_tables: unsorted underflow at hook 1 [ 644.277849][T30502] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 644.392528][T30513] loop3: detected capacity change from 0 to 1024 [ 644.399958][T30513] ext4: Unknown parameter 'obj_role' [ 644.523126][T30523] FAULT_INJECTION: forcing a failure. [ 644.523126][T30523] name failslab, interval 1, probability 0, space 0, times 0 [ 644.535853][T30523] CPU: 0 UID: 0 PID: 30523 Comm: syz.7.9868 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(voluntary) [ 644.535888][T30523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 644.535911][T30523] Call Trace: [ 644.535920][T30523] [ 644.535931][T30523] __dump_stack+0x1d/0x30 [ 644.536014][T30523] dump_stack_lvl+0xe8/0x140 [ 644.536040][T30523] dump_stack+0x15/0x1b [ 644.536062][T30523] should_fail_ex+0x265/0x280 [ 644.536090][T30523] should_failslab+0x8c/0xb0 [ 644.536116][T30523] kmem_cache_alloc_node_noprof+0x57/0x320 [ 644.536158][T30523] ? __alloc_skb+0x101/0x320 [ 644.536186][T30523] __alloc_skb+0x101/0x320 [ 644.536286][T30523] netlink_alloc_large_skb+0xba/0xf0 [ 644.536318][T30523] netlink_sendmsg+0x3cf/0x6b0 [ 644.536359][T30523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 644.536393][T30523] __sock_sendmsg+0x142/0x180 [ 644.536445][T30523] ____sys_sendmsg+0x31e/0x4e0 [ 644.536479][T30523] ___sys_sendmsg+0x17b/0x1d0 [ 644.536545][T30523] __x64_sys_sendmsg+0xd4/0x160 [ 644.536591][T30523] x64_sys_call+0x2999/0x2fb0 [ 644.536616][T30523] do_syscall_64+0xd2/0x200 [ 644.536710][T30523] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 644.536748][T30523] ? clear_bhb_loop+0x40/0x90 [ 644.536777][T30523] ? clear_bhb_loop+0x40/0x90 [ 644.536806][T30523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.536875][T30523] RIP: 0033:0x7f9c04c6e969 [ 644.536896][T30523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 644.536921][T30523] RSP: 002b:00007f9c032d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 644.536946][T30523] RAX: ffffffffffffffda RBX: 00007f9c04e95fa0 RCX: 00007f9c04c6e969 [ 644.536962][T30523] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 644.537046][T30523] RBP: 00007f9c032d7090 R08: 0000000000000000 R09: 0000000000000000 [ 644.537062][T30523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.537076][T30523] R13: 0000000000000000 R14: 00007f9c04e95fa0 R15: 00007ffc9966e548 [ 644.537096][T30523] [ 644.921929][T30538] netlink: 'syz.6.9873': attribute type 27 has an invalid length. [ 644.956535][T30547] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 645.344725][T30567] lo speed is unknown, defaulting to 1000 [ 645.423920][T30574] loop3: detected capacity change from 0 to 1024 [ 645.476964][T30574] ext4: Unknown parameter 'obj_role' [ 645.878813][T30589] __nla_validate_parse: 3 callbacks suppressed [ 645.878834][T30589] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9892'. [ 645.918815][T30589] FAULT_INJECTION: forcing a failure. [ 645.918815][T30589] name failslab, interval 1, probability 0, space 0, times 0 [ 645.931578][T30589] CPU: 0 UID: 0 PID: 30589 Comm: syz.7.9892 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(voluntary) [ 645.931662][T30589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 645.931680][T30589] Call Trace: [ 645.931690][T30589] [ 645.931700][T30589] __dump_stack+0x1d/0x30 [ 645.931723][T30589] dump_stack_lvl+0xe8/0x140 [ 645.931743][T30589] dump_stack+0x15/0x1b [ 645.931807][T30589] should_fail_ex+0x265/0x280 [ 645.931830][T30589] ? alloc_netdev_mqs+0x86a/0xab0 [ 645.931869][T30589] should_failslab+0x8c/0xb0 [ 645.931909][T30589] __kmalloc_cache_noprof+0x4c/0x320 [ 645.931948][T30589] alloc_netdev_mqs+0x86a/0xab0 [ 645.931991][T30589] rtnl_create_link+0x239/0x710 [ 645.932040][T30589] rtnl_newlink_create+0x14c/0x620 [ 645.932073][T30589] ? __schedule+0x6a8/0xb30 [ 645.932103][T30589] rtnl_newlink+0xf29/0x12d0 [ 645.932133][T30589] ? xas_load+0x413/0x430 [ 645.932163][T30589] ? __rcu_read_unlock+0x4f/0x70 [ 645.932220][T30589] ? xa_load+0xb1/0xe0 [ 645.932251][T30589] ? __rcu_read_unlock+0x4f/0x70 [ 645.932279][T30589] ? avc_has_perm_noaudit+0x1b1/0x200 [ 645.932337][T30589] ? selinux_capable+0x1f9/0x270 [ 645.932396][T30589] ? security_capable+0x83/0x90 [ 645.932433][T30589] ? ns_capable+0x7d/0xb0 [ 645.932460][T30589] ? __pfx_rtnl_newlink+0x10/0x10 [ 645.932486][T30589] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 645.932508][T30589] ? avc_has_perm_noaudit+0x1b1/0x200 [ 645.932554][T30589] netlink_rcv_skb+0x123/0x220 [ 645.932593][T30589] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 645.932652][T30589] rtnetlink_rcv+0x1c/0x30 [ 645.932676][T30589] netlink_unicast+0x5a1/0x670 [ 645.932713][T30589] netlink_sendmsg+0x58b/0x6b0 [ 645.932747][T30589] ? __pfx_netlink_sendmsg+0x10/0x10 [ 645.932826][T30589] __sock_sendmsg+0x142/0x180 [ 645.932856][T30589] ____sys_sendmsg+0x31e/0x4e0 [ 645.932936][T30589] ___sys_sendmsg+0x17b/0x1d0 [ 645.932995][T30589] __x64_sys_sendmsg+0xd4/0x160 [ 645.933033][T30589] x64_sys_call+0x2999/0x2fb0 [ 645.933058][T30589] do_syscall_64+0xd2/0x200 [ 645.933099][T30589] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 645.933216][T30589] ? clear_bhb_loop+0x40/0x90 [ 645.933244][T30589] ? clear_bhb_loop+0x40/0x90 [ 645.933272][T30589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.933319][T30589] RIP: 0033:0x7f9c04c6e969 [ 645.933383][T30589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 645.933405][T30589] RSP: 002b:00007f9c032d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 645.933434][T30589] RAX: ffffffffffffffda RBX: 00007f9c04e95fa0 RCX: 00007f9c04c6e969 [ 645.933447][T30589] RDX: 000000000000c010 RSI: 00002000000002c0 RDI: 000000000000000c [ 645.933459][T30589] RBP: 00007f9c032d7090 R08: 0000000000000000 R09: 0000000000000000 [ 645.933474][T30589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 645.933490][T30589] R13: 0000000000000000 R14: 00007f9c04e95fa0 R15: 00007ffc9966e548 [ 645.933515][T30589] [ 645.960469][T30586] netlink: 'syz.1.9891': attribute type 27 has an invalid length. [ 646.268409][T30596] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 646.303122][T30594] pim6reg1: entered promiscuous mode [ 646.367977][T30600] loop3: detected capacity change from 0 to 2048 [ 646.396887][T30600] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 646.431097][T23970] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.458855][ T29] kauditd_printk_skb: 287 callbacks suppressed [ 646.458873][ T29] audit: type=1400 audit(617.671:46440): avc: denied { relabelto } for pid=30611 comm="syz.7.9900" name="392" dev="tmpfs" ino=2124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 646.491471][ T29] audit: type=1400 audit(617.671:46441): avc: denied { associate } for pid=30611 comm="syz.7.9900" name="392" dev="tmpfs" ino=2124 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 646.529394][ T29] audit: type=1400 audit(617.708:46442): avc: denied { create } for pid=30611 comm="syz.7.9900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 646.550857][T30612] audit: audit_lost=59 audit_rate_limit=0 audit_backlog_limit=64 [ 646.558642][T30612] audit: out of memory in audit_log_start [ 646.588519][ T29] audit: type=1400 audit(617.772:46443): avc: denied { create } for pid=30611 comm="syz.7.9900" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 646.629963][ T29] audit: type=1400 audit(617.772:46444): avc: denied { associate } for pid=30611 comm="syz.7.9900" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 646.675791][ T29] audit: type=1400 audit(617.883:46445): avc: denied { bind } for pid=30611 comm="syz.7.9900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 646.696847][ T29] audit: type=1400 audit(617.902:46446): avc: denied { listen } for pid=30611 comm="syz.7.9900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 646.742614][ T29] audit: type=1400 audit(617.938:46447): avc: denied { create } for pid=30626 comm="syz.6.9906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 646.890091][T30635] netlink: 'syz.1.9909': attribute type 27 has an invalid length. [ 646.970014][T30638] macvlan2: entered promiscuous mode [ 646.975465][T30638] bridge0: entered promiscuous mode [ 646.986258][T30638] bridge0: port 3(macvlan2) entered blocking state [ 646.992958][T30638] bridge0: port 3(macvlan2) entered disabled state [ 646.999803][T30638] macvlan2: entered allmulticast mode [ 647.005306][T30638] bridge0: entered allmulticast mode [ 647.011687][T30638] macvlan2: left allmulticast mode [ 647.016900][T30638] bridge0: left allmulticast mode [ 647.027711][T30638] bridge0: left promiscuous mode [ 647.053304][T30646] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 647.195403][T30648] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9913'. [ 647.205307][T30648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9913'. [ 647.347722][T30659] netlink: 180 bytes leftover after parsing attributes in process `syz.0.9918'. [ 647.392557][T30663] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9920'. [ 647.401533][T30663] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9920'. [ 647.478928][T30666] pim6reg1: entered promiscuous mode [ 647.511524][T30670] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 647.627996][T30668] netlink: 'syz.7.9921': attribute type 27 has an invalid length. [ 647.729282][T30676] netlink: 'syz.7.9926': attribute type 3 has an invalid length. [ 647.741744][T30673] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9924'. [ 647.759241][T30677] loop3: detected capacity change from 0 to 1024 [ 647.775397][T30673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9924'. [ 647.776908][T30677] ext4: Unknown parameter 'obj_role' [ 647.798790][T30679] FAULT_INJECTION: forcing a failure. [ 647.798790][T30679] name failslab, interval 1, probability 0, space 0, times 0 [ 647.811530][T30679] CPU: 1 UID: 0 PID: 30679 Comm: syz.6.9927 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(voluntary) [ 647.811559][T30679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 647.811575][T30679] Call Trace: [ 647.811584][T30679] [ 647.811593][T30679] __dump_stack+0x1d/0x30 [ 647.811673][T30679] dump_stack_lvl+0xe8/0x140 [ 647.811693][T30679] dump_stack+0x15/0x1b [ 647.811714][T30679] should_fail_ex+0x265/0x280 [ 647.811742][T30679] should_failslab+0x8c/0xb0 [ 647.811781][T30679] __kmalloc_noprof+0xa5/0x3e0 [ 647.811811][T30679] ? nla_strdup+0x78/0xc0 [ 647.811838][T30679] nla_strdup+0x78/0xc0 [ 647.811868][T30679] nf_tables_newtable+0x3ba/0xea0 [ 647.811916][T30679] nfnetlink_rcv+0xb96/0x1690 [ 647.812022][T30679] netlink_unicast+0x5a1/0x670 [ 647.812059][T30679] netlink_sendmsg+0x58b/0x6b0 [ 647.812202][T30679] ? __pfx_netlink_sendmsg+0x10/0x10 [ 647.812239][T30679] __sock_sendmsg+0x142/0x180 [ 647.812264][T30679] ____sys_sendmsg+0x31e/0x4e0 [ 647.812369][T30679] ___sys_sendmsg+0x17b/0x1d0 [ 647.812420][T30679] __x64_sys_sendmsg+0xd4/0x160 [ 647.812529][T30679] x64_sys_call+0x2999/0x2fb0 [ 647.812551][T30679] do_syscall_64+0xd2/0x200 [ 647.812584][T30679] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 647.812633][T30679] ? clear_bhb_loop+0x40/0x90 [ 647.812661][T30679] ? clear_bhb_loop+0x40/0x90 [ 647.812690][T30679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.812717][T30679] RIP: 0033:0x7f12f1a3e969 [ 647.812734][T30679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 647.812778][T30679] RSP: 002b:00007f12f00a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 647.812797][T30679] RAX: ffffffffffffffda RBX: 00007f12f1c65fa0 RCX: 00007f12f1a3e969 [ 647.812810][T30679] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 647.812827][T30679] RBP: 00007f12f00a7090 R08: 0000000000000000 R09: 0000000000000000 [ 647.812840][T30679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.812856][T30679] R13: 0000000000000000 R14: 00007f12f1c65fa0 R15: 00007ffee3fe7de8 [ 647.812922][T30679] [ 648.094648][T30683] pim6reg1: entered promiscuous mode [ 648.101400][T30681] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 648.120266][T30681] sel_write_load: 25 callbacks suppressed [ 648.120316][T30681] SELinux: failed to load policy [ 648.129308][T30688] FAULT_INJECTION: forcing a failure. [ 648.129308][T30688] name failslab, interval 1, probability 0, space 0, times 0 [ 648.144253][T30688] CPU: 1 UID: 0 PID: 30688 Comm: syz.7.9931 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(voluntary) [ 648.144288][T30688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 648.144305][T30688] Call Trace: [ 648.144339][T30688] [ 648.144348][T30688] __dump_stack+0x1d/0x30 [ 648.144376][T30688] dump_stack_lvl+0xe8/0x140 [ 648.144401][T30688] dump_stack+0x15/0x1b [ 648.144449][T30688] should_fail_ex+0x265/0x280 [ 648.144478][T30688] should_failslab+0x8c/0xb0 [ 648.144510][T30688] __kmalloc_noprof+0xa5/0x3e0 [ 648.144621][T30688] ? security_tun_dev_alloc_security+0x3f/0x130 [ 648.144658][T30688] ? should_fail_ex+0xdb/0x280 [ 648.144720][T30688] security_tun_dev_alloc_security+0x3f/0x130 [ 648.144757][T30688] tun_net_init+0x58/0x2b0 [ 648.144783][T30688] register_netdevice+0x281/0xf00 [ 648.144853][T30688] ? dev_addr_mod+0x1a4/0x1d0 [ 648.144886][T30688] tun_set_iff+0x5f1/0x890 [ 648.144981][T30688] __tun_chr_ioctl+0x5f0/0x14c0 [ 648.145084][T30688] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 648.145119][T30688] tun_chr_ioctl+0x27/0x40 [ 648.145150][T30688] __se_sys_ioctl+0xcb/0x140 [ 648.145248][T30688] __x64_sys_ioctl+0x43/0x50 [ 648.145266][T30688] x64_sys_call+0x19a8/0x2fb0 [ 648.145305][T30688] do_syscall_64+0xd2/0x200 [ 648.145414][T30688] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 648.145444][T30688] ? clear_bhb_loop+0x40/0x90 [ 648.145470][T30688] ? clear_bhb_loop+0x40/0x90 [ 648.145552][T30688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.145577][T30688] RIP: 0033:0x7f9c04c6e969 [ 648.145595][T30688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 648.145617][T30688] RSP: 002b:00007f9c032d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 648.145710][T30688] RAX: ffffffffffffffda RBX: 00007f9c04e95fa0 RCX: 00007f9c04c6e969 [ 648.145725][T30688] RDX: 0000200000000100 RSI: 00000000400454ca RDI: 0000000000000004 [ 648.145740][T30688] RBP: 00007f9c032d7090 R08: 0000000000000000 R09: 0000000000000000 [ 648.145754][T30688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 648.145768][T30688] R13: 0000000000000000 R14: 00007f9c04e95fa0 R15: 00007ffc9966e548 [ 648.145789][T30688] [ 648.423452][T30691] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9928'. [ 648.523090][T30699] pim6reg1: entered promiscuous mode [ 648.596279][ T3390] hid-generic 0000:0004:0000.0031: unknown main item tag 0x0 [ 648.603898][ T3390] hid-generic 0000:0004:0000.0031: unknown main item tag 0x0 [ 648.611377][ T3390] hid-generic 0000:0004:0000.0031: unknown main item tag 0x0 [ 648.619368][ T3390] hid-generic 0000:0004:0000.0031: hidraw0: HID v0.00 Device [syz0] on syz1 [ 648.632564][T30704] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 648.676561][T30709] loop7: detected capacity change from 0 to 1024 [ 648.683448][T30709] EXT4-fs: inline encryption not supported [ 648.684144][T30711] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9939'. [ 648.689604][T30709] ext4: Unknown parameter 'uid' [ 648.712032][T30709] team0 (unregistering): Port device team_slave_0 removed [ 648.727436][T30709] team0 (unregistering): Port device team_slave_1 removed [ 648.738815][T30713] loop3: detected capacity change from 0 to 1024 [ 648.750464][T30713] EXT4-fs: Ignoring removed nobh option [ 648.761398][T30713] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 648.803687][T30722] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 648.804032][T23970] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.813644][T30722] SELinux: failed to load policy [ 648.901603][ T1040] hid-generic 0000:0004:0000.0032: unknown main item tag 0x0 [ 648.909166][ T1040] hid-generic 0000:0004:0000.0032: unknown main item tag 0x0 [ 648.916712][ T1040] hid-generic 0000:0004:0000.0032: unknown main item tag 0x0 [ 648.924870][ T1040] hid-generic 0000:0004:0000.0032: hidraw0: HID v0.00 Device [syz0] on syz1 [ 648.956368][T30731] net_ratelimit: 53 callbacks suppressed [ 648.956387][T30731] netlink: zone id is out of range [ 648.967614][T30731] netlink: zone id is out of range [ 648.972837][T30731] netlink: zone id is out of range [ 648.978523][T30731] netlink: zone id is out of range [ 648.983682][T30731] netlink: zone id is out of range [ 648.988985][T30731] netlink: zone id is out of range [ 648.994295][T30731] netlink: zone id is out of range [ 648.999474][T30731] netlink: zone id is out of range [ 649.004592][T30731] netlink: zone id is out of range [ 649.009871][T30731] netlink: zone id is out of range [ 649.124120][T30738] bridge: RTM_NEWNEIGH with invalid ether address [ 649.157966][T30744] loop7: detected capacity change from 0 to 256 [ 649.222167][T30739] lo speed is unknown, defaulting to 1000 [ 649.298648][T11280] bridge_slave_1: left allmulticast mode [ 649.304530][T11280] bridge_slave_1: left promiscuous mode [ 649.310318][T11280] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.318530][T11280] bridge_slave_0: left allmulticast mode [ 649.324410][T11280] bridge_slave_0: left promiscuous mode [ 649.330257][T11280] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.352231][T11280] bond1 (unregistering): (slave gretap1): Releasing active interface [ 649.487328][T11280] bond1 (unregistering): Released all slaves [ 649.496225][T11280] bond0 (unregistering): Released all slaves [ 649.505680][T11280] bond2 (unregistering): Released all slaves [ 649.591180][T11280] hsr_slave_0: left promiscuous mode [ 649.598618][T11280] hsr_slave_1: left promiscuous mode [ 649.605147][T11280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 649.612850][T11280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 649.651637][T11280] team0 (unregistering): Port device team_slave_1 removed [ 649.662468][T11280] team0 (unregistering): Port device team_slave_0 removed [ 649.709282][T30739] chnl_net:caif_netlink_parms(): no params data found [ 649.761066][T30739] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.768649][T30739] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.776107][T30739] bridge_slave_0: entered allmulticast mode [ 649.782766][T30739] bridge_slave_0: entered promiscuous mode [ 649.790311][T30739] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.797484][T30739] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.804794][T30739] bridge_slave_1: entered allmulticast mode [ 649.811494][T30739] bridge_slave_1: entered promiscuous mode [ 649.836798][T30739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 649.850148][T30739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 649.867883][T30805] netlink: 'syz.6.9970': attribute type 1 has an invalid length. [ 649.892456][T30739] team0: Port device team_slave_0 added [ 649.899326][T30739] team0: Port device team_slave_1 added [ 649.923156][T30739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 649.930179][T30739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.956449][T30739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 649.968274][T30739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.975264][T30739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 650.001753][T30739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 650.046930][T30739] hsr_slave_0: entered promiscuous mode [ 650.061225][T30739] hsr_slave_1: entered promiscuous mode [ 650.067956][T30739] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 650.077051][T30739] Cannot create hsr debugfs directory [ 650.086494][T30819] loop6: detected capacity change from 0 to 1024 [ 650.095409][T30819] ext4: Unknown parameter 'obj_role' [ 650.183776][T30833] FAULT_INJECTION: forcing a failure. [ 650.183776][T30833] name failslab, interval 1, probability 0, space 0, times 0 [ 650.196525][T30833] CPU: 1 UID: 0 PID: 30833 Comm: syz.0.9981 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(voluntary) [ 650.196621][T30833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 650.196635][T30833] Call Trace: [ 650.196642][T30833] [ 650.196650][T30833] __dump_stack+0x1d/0x30 [ 650.196674][T30833] dump_stack_lvl+0xe8/0x140 [ 650.196695][T30833] dump_stack+0x15/0x1b [ 650.196765][T30833] should_fail_ex+0x265/0x280 [ 650.196788][T30833] ? alloc_netdev_mqs+0x829/0xab0 [ 650.196821][T30833] should_failslab+0x8c/0xb0 [ 650.196849][T30833] __kmalloc_cache_noprof+0x4c/0x320 [ 650.196958][T30833] alloc_netdev_mqs+0x829/0xab0 [ 650.197025][T30833] rtnl_create_link+0x239/0x710 [ 650.197059][T30833] rtnl_newlink_create+0x14c/0x620 [ 650.197084][T30833] ? __list_del_entry_valid_or_report+0x65/0x130 [ 650.197122][T30833] rtnl_newlink+0xf29/0x12d0 [ 650.197226][T30833] ? __pfx_rtnl_newlink+0x10/0x10 [ 650.197247][T30833] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 650.197268][T30833] ? avc_has_perm_noaudit+0x1b1/0x200 [ 650.197350][T30833] netlink_rcv_skb+0x123/0x220 [ 650.197383][T30833] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 650.197411][T30833] rtnetlink_rcv+0x1c/0x30 [ 650.197429][T30833] netlink_unicast+0x5a1/0x670 [ 650.197494][T30833] netlink_sendmsg+0x58b/0x6b0 [ 650.197603][T30833] ? __pfx_netlink_sendmsg+0x10/0x10 [ 650.197638][T30833] __sock_sendmsg+0x142/0x180 [ 650.197662][T30833] ____sys_sendmsg+0x31e/0x4e0 [ 650.197712][T30833] ___sys_sendmsg+0x17b/0x1d0 [ 650.197766][T30833] __x64_sys_sendmsg+0xd4/0x160 [ 650.197840][T30833] x64_sys_call+0x2999/0x2fb0 [ 650.197864][T30833] do_syscall_64+0xd2/0x200 [ 650.197897][T30833] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 650.197926][T30833] ? clear_bhb_loop+0x40/0x90 [ 650.197991][T30833] ? clear_bhb_loop+0x40/0x90 [ 650.198017][T30833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.198055][T30833] RIP: 0033:0x7f910413e969 [ 650.198071][T30833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 650.198092][T30833] RSP: 002b:00007f91027a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 650.198149][T30833] RAX: ffffffffffffffda RBX: 00007f9104365fa0 RCX: 00007f910413e969 [ 650.198163][T30833] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 650.198177][T30833] RBP: 00007f91027a7090 R08: 0000000000000000 R09: 0000000000000000 [ 650.198190][T30833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 650.198203][T30833] R13: 0000000000000000 R14: 00007f9104365fa0 R15: 00007ffe42c2a148 [ 650.198224][T30833] [ 650.578156][T30857] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 650.584291][T30858] lo: entered promiscuous mode [ 650.590239][T30858] lo: entered allmulticast mode [ 650.681407][T30864] loop7: detected capacity change from 0 to 1024 [ 650.695366][T30864] ext4: Unknown parameter 'obj_role' [ 650.749890][T30869] SELinux: syz.0.9995 (30869) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 650.752874][T30739] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 650.773574][T30739] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 650.794075][T30739] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 650.810270][T30739] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 650.826326][T30873] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.835189][T30873] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.843988][T30873] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.852747][T30873] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.862712][T30873] geneve3: entered promiscuous mode [ 650.906720][T30739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 650.931226][T30739] 8021q: adding VLAN 0 to HW filter on device team0 [ 650.940946][T11313] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.948075][T11313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.984104][T11279] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.991274][T11279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.104436][T30739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 651.145176][T30894] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 651.258079][T30904] loop6: detected capacity change from 0 to 2048 [ 651.306465][T30904] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 651.345848][T30739] veth0_vlan: entered promiscuous mode [ 651.375895][T30904] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 651.394362][T30923] __nla_validate_parse: 15 callbacks suppressed [ 651.394428][T30923] netlink: 180 bytes leftover after parsing attributes in process `syz.0.10012'. [ 651.415507][T30739] veth1_vlan: entered promiscuous mode [ 651.447824][T30739] veth0_macvtap: entered promiscuous mode [ 651.460614][T24879] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.467096][T30739] veth1_macvtap: entered promiscuous mode [ 651.499902][T30739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 651.509260][T30739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 651.523535][T30739] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.532394][T30739] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.541376][T30739] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.550211][T30739] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.647616][T30936] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 651.775429][T30947] netlink: 'syz.9.10022': attribute type 10 has an invalid length. [ 651.788538][T30947] team0: Device hsr_slave_0 failed to register rx_handler [ 651.798034][T30951] netlink: 180 bytes leftover after parsing attributes in process `syz.7.10023'. [ 651.950735][ T29] kauditd_printk_skb: 333 callbacks suppressed [ 651.950755][ T29] audit: type=1400 audit(622.738:46781): avc: denied { bind } for pid=30954 comm="syz.9.10025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 651.976630][ T29] audit: type=1326 audit(622.738:46782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30954 comm="syz.9.10025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c3b6e969 code=0x7ffc0000 [ 651.999965][ T29] audit: type=1326 audit(622.738:46783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30954 comm="syz.9.10025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2c3b6e969 code=0x7ffc0000 [ 652.017793][T30963] netlink: 'syz.6.10021': attribute type 4 has an invalid length. [ 652.023233][ T29] audit: type=1326 audit(622.738:46784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30954 comm="syz.9.10025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c3b6e969 code=0x7ffc0000 [ 652.030912][T30963] netlink: 17 bytes leftover after parsing attributes in process `syz.6.10021'. [ 652.054055][ T29] audit: type=1326 audit(622.738:46785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30954 comm="syz.9.10025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2c3b6e969 code=0x7ffc0000 [ 652.054150][ T29] audit: type=1326 audit(622.738:46786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30954 comm="syz.9.10025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c3b6e969 code=0x7ffc0000 [ 652.054216][ T29] audit: type=1326 audit(622.738:46787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30954 comm="syz.9.10025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fe2c3b6e969 code=0x7ffc0000 [ 652.133174][ T29] audit: type=1326 audit(623.747:46788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30954 comm="syz.9.10025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c3b6e969 code=0x7ffc0000 [ 652.156474][ T29] audit: type=1326 audit(623.747:46789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30954 comm="syz.9.10025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe2c3b6e969 code=0x7ffc0000 [ 652.183082][ T29] audit: type=1326 audit(623.747:46790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30954 comm="syz.9.10025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c3b6e969 code=0x7ffc0000 [ 652.207521][T30967] netlink: 28 bytes leftover after parsing attributes in process `syz.9.10029'. [ 652.216965][T30967] netlink: 108 bytes leftover after parsing attributes in process `syz.9.10029'. [ 652.228477][T30962] FAULT_INJECTION: forcing a failure. [ 652.228477][T30962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 652.229285][T30967] netlink: 28 bytes leftover after parsing attributes in process `syz.9.10029'. [ 652.251162][T30962] CPU: 1 UID: 0 PID: 30962 Comm: syz.7.10026 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(voluntary) [ 652.251205][T30962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 652.251223][T30962] Call Trace: [ 652.251231][T30962] [ 652.251316][T30962] __dump_stack+0x1d/0x30 [ 652.251342][T30962] dump_stack_lvl+0xe8/0x140 [ 652.251367][T30962] dump_stack+0x15/0x1b [ 652.251388][T30962] should_fail_ex+0x265/0x280 [ 652.251415][T30962] should_fail+0xb/0x20 [ 652.251543][T30962] should_fail_usercopy+0x1a/0x20 [ 652.251577][T30962] _copy_from_user+0x1c/0xb0 [ 652.251625][T30962] ___sys_recvmsg+0xaa/0x370 [ 652.251686][T30962] __x64_sys_recvmsg+0xd1/0x160 [ 652.251796][T30962] x64_sys_call+0xf19/0x2fb0 [ 652.251826][T30962] do_syscall_64+0xd2/0x200 [ 652.251867][T30962] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 652.251931][T30962] ? clear_bhb_loop+0x40/0x90 [ 652.251960][T30962] ? clear_bhb_loop+0x40/0x90 [ 652.251990][T30962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.252100][T30962] RIP: 0033:0x7f9c04c6e969 [ 652.252122][T30962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 652.252212][T30962] RSP: 002b:00007f9c032d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 652.252238][T30962] RAX: ffffffffffffffda RBX: 00007f9c04e95fa0 RCX: 00007f9c04c6e969 [ 652.252256][T30962] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 000000000000000a [ 652.252273][T30962] RBP: 00007f9c032d7090 R08: 0000000000000000 R09: 0000000000000000 [ 652.252290][T30962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 652.252307][T30962] R13: 0000000000000000 R14: 00007f9c04e95fa0 R15: 00007ffc9966e548 [ 652.252336][T30962] [ 652.307824][T30971] FAULT_INJECTION: forcing a failure. [ 652.307824][T30971] name failslab, interval 1, probability 0, space 0, times 0 [ 652.435630][T30974] netlink: 9 bytes leftover after parsing attributes in process `syz.0.10032'. [ 652.441949][T30971] CPU: 1 UID: 0 PID: 30971 Comm: syz.7.10030 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(voluntary) [ 652.442007][T30971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 652.442026][T30971] Call Trace: [ 652.442040][T30971] [ 652.442132][T30971] __dump_stack+0x1d/0x30 [ 652.442172][T30971] dump_stack_lvl+0xe8/0x140 [ 652.442201][T30971] dump_stack+0x15/0x1b [ 652.442225][T30971] should_fail_ex+0x265/0x280 [ 652.442257][T30971] ? __pfx_cond_bools_destroy+0x10/0x10 [ 652.442299][T30971] should_failslab+0x8c/0xb0 [ 652.442336][T30971] __kmalloc_noprof+0xa5/0x3e0 [ 652.442420][T30971] ? hashtab_duplicate+0x55/0x360 [ 652.442460][T30971] ? __pfx_cond_bools_destroy+0x10/0x10 [ 652.442487][T30971] hashtab_duplicate+0x55/0x360 [ 652.442523][T30971] ? __kmalloc_noprof+0x1dd/0x3e0 [ 652.442644][T30971] ? cond_policydb_dup+0xa3/0x4e0 [ 652.442671][T30971] ? __pfx_cond_bools_copy+0x10/0x10 [ 652.442702][T30971] cond_policydb_dup+0xd2/0x4e0 [ 652.442737][T30971] security_set_bools+0xa0/0x340 [ 652.442799][T30971] sel_commit_bools_write+0x1ea/0x270 [ 652.442860][T30971] vfs_writev+0x403/0x8b0 [ 652.442970][T30971] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 652.443057][T30971] ? mutex_lock+0xd/0x30 [ 652.443173][T30971] do_writev+0xe7/0x210 [ 652.443218][T30971] __x64_sys_writev+0x45/0x50 [ 652.443269][T30971] x64_sys_call+0x2006/0x2fb0 [ 652.443300][T30971] do_syscall_64+0xd2/0x200 [ 652.443415][T30971] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 652.443456][T30971] ? clear_bhb_loop+0x40/0x90 [ 652.443520][T30971] ? clear_bhb_loop+0x40/0x90 [ 652.443562][T30971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.443592][T30971] RIP: 0033:0x7f9c04c6e969 [ 652.443615][T30971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 652.443696][T30971] RSP: 002b:00007f9c032d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 652.443723][T30971] RAX: ffffffffffffffda RBX: 00007f9c04e95fa0 RCX: 00007f9c04c6e969 [ 652.443741][T30971] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000006 [ 652.443759][T30971] RBP: 00007f9c032d7090 R08: 0000000000000000 R09: 0000000000000000 [ 652.443776][T30971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 652.443793][T30971] R13: 0000000000000000 R14: 00007f9c04e95fa0 R15: 00007ffc9966e548 [ 652.443827][T30971] [ 652.695865][T30974] gretap0: left allmulticast mode [ 652.730078][T30986] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 652.814219][T30990] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 652.826309][T30990] SELinux: failed to load policy [ 652.838437][T30990] can0: slcan on ttyS3. [ 652.959955][T30995] netlink: 180 bytes leftover after parsing attributes in process `syz.1.10037'. [ 652.999634][T30997] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.10039'. [ 653.011000][T30998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10036'. [ 653.049851][T30990] can0 (unregistered): slcan off ttyS3. [ 653.408129][T31013] netlink: 'syz.1.10044': attribute type 4 has an invalid length. [ 653.863159][T31015] pim6reg1: entered promiscuous mode [ 653.943078][T31022] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 653.949517][T31018] netlink: 'syz.7.10046': attribute type 27 has an invalid length. [ 654.136075][T31033] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 654.150235][T31033] SELinux: failed to load policy [ 654.215820][T31033] can0: slcan on ttyS3. [ 654.271252][T31044] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 654.280300][T31044] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 654.280463][T31033] ================================================================== [ 654.289313][T31044] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 654.297416][T31033] BUG: KCSAN: data-race in data_alloc / prb_reserve [ 654.306139][T31044] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 654.312880][T31033] [ 654.312892][T31033] write to 0xffffffff86869e58 of 8 bytes by task 31044 on cpu 0: [ 654.312912][T31033] data_alloc+0x27d/0x2b0 [ 654.336172][T31033] prb_reserve+0x808/0xaf0 [ 654.340631][T31033] vprintk_store+0x56d/0x860 [ 654.345248][T31033] vprintk_emit+0x178/0x650 [ 654.349780][T31033] dev_vprintk_emit+0x242/0x2a0 [ 654.354661][T31033] dev_printk_emit+0x84/0xb0 [ 654.359286][T31033] __netdev_printk+0x35c/0x3e0 [ 654.364110][T31033] netdev_info+0x9b/0xd0 [ 654.368532][T31033] nsim_udp_tunnel_set_port+0x171/0x190 [ 654.374126][T31033] __udp_tunnel_nic_device_sync+0x564/0x9c0 [ 654.380062][T31033] __udp_tunnel_nic_add_port+0x6a9/0x720 [ 654.385722][T31033] udp_tunnel_notify_add_rx_port+0x12b/0x190 [ 654.391817][T31033] geneve_sock_add+0x3c2/0x5b0 [ 654.396621][T31033] geneve_open+0x66/0xf0 [ 654.400889][T31033] __dev_open+0x2d2/0x530 [ 654.405267][T31033] __dev_change_flags+0x163/0x400 [ 654.410323][T31033] rtnl_newlink_create+0x36b/0x620 [ 654.415463][T31033] rtnl_newlink+0xf29/0x12d0 [ 654.420065][T31033] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 654.425021][T31033] netlink_rcv_skb+0x123/0x220 [ 654.429899][T31033] rtnetlink_rcv+0x1c/0x30 [ 654.434419][T31033] netlink_unicast+0x5a1/0x670 [ 654.439207][T31033] netlink_sendmsg+0x58b/0x6b0 [ 654.444014][T31033] __sock_sendmsg+0x142/0x180 [ 654.448730][T31033] ____sys_sendmsg+0x31e/0x4e0 [ 654.453540][T31033] ___sys_sendmsg+0x17b/0x1d0 [ 654.458274][T31033] __x64_sys_sendmsg+0xd4/0x160 [ 654.463163][T31033] x64_sys_call+0x2999/0x2fb0 [ 654.467865][T31033] do_syscall_64+0xd2/0x200 [ 654.472407][T31033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.478331][T31033] [ 654.480699][T31033] read to 0xffffffff86869e58 of 8 bytes by task 31033 on cpu 1: [ 654.488382][T31033] prb_reserve+0x221/0xaf0 [ 654.492853][T31033] vprintk_store+0x56d/0x860 [ 654.497464][T31033] vprintk_emit+0x178/0x650 [ 654.501989][T31033] vprintk_default+0x26/0x30 [ 654.506770][T31033] vprintk+0x1d/0x30 [ 654.510820][T31033] _printk+0x79/0xa0 [ 654.514761][T31033] __netdev_printk+0x321/0x3e0 [ 654.519572][T31033] netdev_info+0x9b/0xd0 [ 654.523846][T31033] slcan_close+0xb8/0xe0 [ 654.528128][T31033] tty_ldisc_close+0x74/0xa0 [ 654.532737][T31033] tty_set_ldisc+0x1b9/0x380 [ 654.537629][T31033] tiocsetd+0x51/0x60 [ 654.541634][T31033] tty_ioctl+0xa7f/0xb80 [ 654.545897][T31033] __se_sys_ioctl+0xcb/0x140 [ 654.550600][T31033] __x64_sys_ioctl+0x43/0x50 [ 654.555235][T31033] x64_sys_call+0x19a8/0x2fb0 [ 654.559938][T31033] do_syscall_64+0xd2/0x200 [ 654.564481][T31033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.570403][T31033] [ 654.572741][T31033] value changed: 0x000000000010b6d0 -> 0x00000000001a4600 [ 654.579860][T31033] [ 654.582193][T31033] Reported by Kernel Concurrency Sanitizer on: [ 654.588412][T31033] CPU: 1 UID: 0 PID: 31033 Comm: syz.6.10052 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(voluntary) [ 654.600678][T31033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 654.610769][T31033] ================================================================== [ 654.280343][T31033] can0 (unregistered): slcan off ttyS3. [ 654.645846][T31044] loop7: detected capacity change from 0 to 512 [ 654.653133][T31044] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 654.664872][T31044] EXT4-fs (loop7): 1 truncate cleaned up [ 654.671139][T31044] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 654.676914][T31046] netlink: 'syz.1.10057': attribute type 1 has an invalid length. [ 654.786642][T25158] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.