last executing test programs: 14m31.009527247s ago: executing program 2 (id=1376): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f00000001c0)={0x5, 0x3}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) io_setup(0x8, &(0x7f0000002740)=0x0) io_getevents(r1, 0x4, 0x13, &(0x7f0000000000), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0x8, r2, 0x0, 0x0, 0x6}]) io_destroy(r1) 14m30.835106691s ago: executing program 2 (id=1381): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x17) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @private=0xa010102}}}], 0x20}, 0x0) 14m30.735461442s ago: executing program 2 (id=1385): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$iso9660(&(0x7f0000000b00), &(0x7f0000000040)='./file0\x00', 0x4002, &(0x7f0000000140)=ANY=[@ANYBLOB='map=off,cruft,iocharset=ascii,block=0x0000000000000200,unhide,session=0x0000000000000011,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c004238994fceef7f633ea81416b1324d35327f7ace27c590b7f9fb133af0ffd6dfc4d893195864142b1450fbace6795f6e181993255fbbca2cb54fcf79cc53b3a6c3704aed82da89741aad5205bb43ded29cfd65509ff9c85cbdb7337ef48b9412ff439da96bb3f5ac11273d94d3d75d"], 0x1, 0xa2f, &(0x7f0000001580)="$eJzs3ctvXNd9B/DvHfEl2lBlW3VVwbZGMmTTNkuRVC1B8KKWyKFEl4+WpAALbWEZllQIIurCbgHb6EIFiq5q1CiKAk02gZdZGXAW8SbQLlkFWWURIPF/EBhZKQGCCebOUOJjZihSFKnIn89gNPfxO+f87tw792iGM/eEP2b1er28b3P+0vd3M1kePecnv/78i08b93+/lb7sy+vFD5OBJNWk5/flsdI7MbkwP7tJRTeTK0luJ0WS/jQfO9i/Zu5Kiv/Ok/fmb6f4bg63KTawxY1jU3W+1fb6+AMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEfSxOTo6FiRmem5S29XOyuHAO+yfqW6r8pRv4uvVjfR16bZIika9wwMrAz1ffjQvdXPNv45nueac881R/4eyCdPPHvwjWd6KivluyS0Kz78+JOb7y4vX/vg3qLeTQv1P9yctqVve8Uu1OamF+enZ89dqFWnF+erZ0+fHj15cWqxOjWd2uLlxaXabHVioXZuaX6hOjTxSnXs7NlT1drI5flLcxcmR2ZqKwvP/MX46Ojp6lsjf1M7t7A4P3fyrZHFiYvTMzPTcxfKmMbqRsyZxoH419NL1aXaudlq9fqN5WunNkuyETTWdk1R3ZdVQeOb1TQ+Oj4+NjY+Pnb69bOvnxkd7dmwYHSdbIjY+4OWvfODh3IOh22qtPr/zGQ6c7mUt1Nte5vIZBYyn9kO61tW+v8TJ2td213d/6/08ofvrT6Ssv9/oTn3Qqf+v0Mum9/q9WbN2y2/cvswH+eT3My7Wc5yruWDB66xP+sy++2D1ti6VR98azfeLqSWuUxnMfOZzmzOlUuqrSXVnM3pnM5o3snFTGUx1UxlOjOpZTGXs5il1MojaiILqeVcljKfhVQzlIm8kmrGcjZncyrV1DKSy5nPpczlQiZzrqzlem6Uz/upLjneDRq7n6DxLkE73P/XH8X/CfKw7ej5Gx5EvdX/t3uP3gyor0wNTexaVgAAAMBO+vOf5MChp3/8y6Q3z5efy09Nz9RG9zotAAAAYAeVX9d7rvHQ25h6PoX3/wAAAPC4Kcrf2BVJBnO0OdX8JdS++BAAAAAAHhPl3/9faDwMNqaOprh7JZQre50bAAAAsDPuXmM/na6xu+lV+Ivhlcv/Vq82H6+2IlrX+R2cmp6pjUzMz7wxlpfKqwyUvzTYUNu+pOgtf37wao41o44NNh8H19Y40IgaG3ljLK/meGtDhl5sPLw41CZyvBn5cjPy5S6RpxqRAPC4O96lP77f/v/VDDcjho/09CXpOdKmZx3VswLAo2LzMXY2jSj+8t77/95WtWv6/6dz/WjzKwUjeS/vZzlXM1z+2qD8xsGaWv/+s9ZnBne/hjCa4U0+DViJ/dmZSoY7fB7Ql/X1jmd4k08EmrH5h+TUw98RALCLjnfoh7fS/w+vev+fje//7w4tdM1PCgHgkXB3BPuHOLHX2wgArKWXBgAAAAAAAAAAAAAAAAAAAAAAAAAAgJ23o1f7H9hm8V+1xvV7uMMQbJjY33oOtl/P/yTZvZyLRlv9O1dhZQfqqSfZrf21exM5mGz7WW17GPcl2fvt2srEXp6VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2C1Fsq/d8krSn2Q0ycndz2r7isYWdXFr1zLZbT/92w4r/mr1THEnd/JRDuxOTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3x6t6/9X0nx8orkoPZXkRJIrSf5ur3PcSXf2OoEdsn+b5VZd/7+xz1Mv0tPc7Sl6JyYX5mfL8RP6G+u//vyLTxv3VcX777edMrCybnCJVgvrY7/35MrUU2WpwclrH978l/f/uTp5PpX05fzS1Mzk7IWFN+8Vebb4MqmmeV+xku+/nfjRZ222/MvGlra3vt2p8smZ3Njun7Ur3b3dbm4sXxtvtLRUe3vpX//pxkerVj2dY8mLQ8nQ2pb+sXHv0NKx9HZrrfim+M/iQP4vV8r933g2inrR2EV/Um7//us3lq+NvPf+8tUOOR3M0SRXk4H7z+lo5wE5yqOu0ttodbQMavxzqF193cf0aFvjWIdteKo8ZAZb29B3X9tQ3SSBVc97pd36ZkanOmT0TF5qs6fr/UnnjF7qvqfbK74pflFczM/zH6vG/6g09v+JdH51rq2ijFx1pHSMrDQjyy0fX73infWRv/7/+8q+7TA1bNV/rXnxVlad/1v7aofOR/Wi6/loVYtbe12sa3HdUdHldVH2SIfWlWidfTqVaeV5qBnVIc8/zWtJz5FuZ8UNvfVrm53SVsq/2X71dl//3ymG8pvcMv4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw6CuSfe2WV5ITSQ6uzFeT+haq7e+0ojJYbDXFHXXr7j+PhcpWCxR3cicf5cDDSQcAAAAAAACA3XZ+8uvPv/i0cS//Hr/vTr3e+vt+NelJcrD43/2ZXJif3aSi3uRKktuN6YFOQb+rN61d2iiXJ+/N327MHW5bwcH73S4AoLM/BAAA///r9m7p") execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{0x1, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)='%pK \x00'}, 0x20) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x9, &(0x7f0000000380)=@raw=[@map_idx={0x18, 0x2, 0x5, 0x0, 0x6}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @ldst={0x3, 0x0, 0x2, 0x8, 0x0, 0x100, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe}], &(0x7f0000000680)='syzkaller\x00', 0x2, 0x33, &(0x7f00000006c0)=""/51, 0x41100, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0xd, 0x6f4c, 0x101}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000780)=[0x1, 0xffffffffffffffff, r1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r6, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0) syz_clone3(&(0x7f0000000480)={0x22044000, &(0x7f0000000400), &(0x7f0000000180), &(0x7f0000000300), {0x8}, &(0x7f0000000540)=""/169, 0xa9, &(0x7f0000000400), &(0x7f0000000440)=[0xffffffffffffffff, 0x0], 0x2, {r6}}, 0x58) (fail_nth: 1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r8}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r9}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xa, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000380)={'ip6tnl0\x00'}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0xfd, 0x0, 0x0, 0x2, 0x88094, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={&(0x7f0000000400), 0x8}, 0x100000, 0xa, 0x0, 0x4}, 0x0, 0xa, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0xb, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x9, 0x3, 0x1c0, 0x90, 0xffffffff, 0xffffffff, 0x90, 0xffffffff, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x220) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00'}, 0x18) 14m30.26771242s ago: executing program 2 (id=1389): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004004, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@user_xattr}, {@usrjquota}, {@grpjquota, 0x2e}]}, 0x81, 0x46c, &(0x7f00000004c0)="$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") sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)}, {&(0x7f0000000a00)="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", 0xfffffffffffffdea}], 0x2, 0x0, 0xfffffe5e, 0x11000000}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000001900)=0x0) timer_settime(r1, 0x1, &(0x7f0000001980)={{}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001a00)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r2, &(0x7f0000002100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) timer_gettime(0x0, &(0x7f0000002880)) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) timer_getoverrun(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r4, 0x0, 0xf7}, 0x18) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r5, 0xffffffff) ioctl$SIOCPNENABLEPIPE(r5, 0x89ed, 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) 14m29.354491695s ago: executing program 2 (id=1418): perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0xe, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='cq_drain_complete\x00', r1}, 0x18) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x100000b, 0x8c4b815a5465c2b1, r2, 0x0) r3 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x1aeb, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000001200)='./file0\x00', 0x1000001, &(0x7f00000012c0)=ANY=[@ANYBLOB="646f74732c64b5a774260cb629f478666c6f7070792c646f74732c6e6f646f74732c666c7577682c61707072616973655f747970653d696d617369672c646f6e745f686173682c726f6f74636f6e746578743d706f6f742c0016fca4bf53cbd8518157a331bf418b39cbe5d67eb16e2c7685535d16c9c45891a56495f3bd590e3cbb88e2"], 0x1, 0x11b6, &(0x7f0000002440)="$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") move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x2) r4 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r5 = getpgid(0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000300e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfe33) sched_rr_get_interval(r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) getgroups(0x1, &(0x7f0000000100)=[0xee01]) setresgid(0x0, 0x0, 0x0) 14m28.849319873s ago: executing program 2 (id=1427): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000003d000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b700000000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r6, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000300)={@random="6ea88d319b8c", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@x25={0x805, {0x0, 0x1, 0xb}}}}, 0x0) 14m28.848977363s ago: executing program 32 (id=1427): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000003d000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b700000000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r6, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000300)={@random="6ea88d319b8c", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@x25={0x805, {0x0, 0x1, 0xb}}}}, 0x0) 13m57.513056607s ago: executing program 4 (id=1887): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x2004000, &(0x7f0000000040), 0xfe, 0x563, &(0x7f00000007c0)="$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") lsetxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_destroy(r2) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r3 = msgget$private(0x0, 0x2) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000240)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) r6 = getpgid(0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) arch_prctl$ARCH_GET_CPUID(0x1011) chown(&(0x7f0000000040)='./file1\x00', r8, r9) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)=[{{&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000340)="c7205ec4c9a507e7f97b0671dcff5349f2c4cc742198d1d2e7318b2b45de86a037291f74d7c21033b27986bdf1b1497b5aac1831d4f49950a2bf707664f6145e08008426d08cae4b14ea1779cd72163d6355582b1a52384eae4edeb8e1c80366489aab3181495c203703a137f2b8a26b908713f5003a58dd9e3d05fe8a33a31b46e6b94ec17f9b114635a347f1ba617e7059abf6192601efccb0274998699386bb396ecf31b6e448b7d132a3927d4f6dd14274791f640c2e00dee76e2bec77798ab8d5982ac030417d5509ddf866a9b962985c700f99b7a8841868cb9aeaccdb94deb0f32d98eb4b73eb1d8b5e7098a7", 0xf0}], 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="240000000000000001000000812f5f00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x60, 0x80}}, {{&(0x7f0000000780)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000980)="4919ffab9c8836ed84aae0f9af1b6f7f2e2f908fe250e81f216d08f27df76ee7281e669c5b8a48f64d6cb903f6f28c31e1463f58116bdd2b6ea0579d1a5484d15c0666105252d78f1df50ad9d462972f6101af27ff252837c55afde6f52c951ac5717506c468d08d438792b4328ba429b5feb58a22ba889362da6f55558a8ac7de691add6938a9d19277966c13f790a8971a5acfb29b5f31b9", 0x99}], 0x1, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {r7, 0xee01, r9}}}], 0x20, 0x4081}}], 0x2, 0x80) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000300)={{0x3, r4, 0xee00, 0xee01, r5, 0x1, 0x2}, 0x0, 0x0, 0x8, 0xce6, 0x5, 0x7fffffff, 0x6, 0x0, 0xc98, 0x6, r6, r7}) listxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) io_destroy(r2) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r11, &(0x7f0000000f80)=""/4096, 0x1000) 13m57.34946983s ago: executing program 4 (id=1888): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="01dfffffff9a2600000021", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 13m57.269002781s ago: executing program 4 (id=1890): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x1b) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) 13m57.223180232s ago: executing program 4 (id=1893): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r1, &(0x7f00000005c0)=[{&(0x7f0000001cc0)="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", 0x341}], 0x1, 0x0) fcntl$setpipe(r1, 0x407, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x20a00000, 0x0, 0x0, 0x0, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f0000000000), 0xbc, 0x55a, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) keyctl$session_to_parent(0x12) r6 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r6, 0x111, 0x4, 0x0, &(0x7f0000000080)) syz_usbip_server_init(0x3) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TIOCGPGRP(r7, 0x5437, 0x0) 13m55.020413158s ago: executing program 4 (id=1911): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000000)='inet_sock_set_state\x00', r0, 0x0, 0x3}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x9]}, 0x8) syz_io_uring_setup(0xddf, &(0x7f0000000300)={0x0, 0xd95b, 0x10100, 0x4, 0x136, 0x0, r3}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)="0f0f9a0926451062967885f297a064218cb11c638afbda8dcad4a049d0af1b0aa0ce4ea15026acc5a99808c594ce332ae4a085eccda291ea59287134bdb0b34b14771e16eaccb7794988eb9403", 0x4d, 0x10000}) signalfd(r3, &(0x7f0000002340), 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001200230b00"/20, @ANYRES32=0x0, @ANYBLOB="ccd2f8b6e397efff37ece70000"], 0x28}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0xc, &(0x7f0000002380)=ANY=[@ANYRES8=r1, @ANYRESOCT=r6, @ANYBLOB="637a8f06cc4e2ca24889d8c008bc669d89b0e2978b59841cc037c7bc39aeaf1f3317f2597848ee86b4cd8cdf9a782a51c209892aba0a19597dc99cf05893ed21f82d50d6296805bce5a28349765089cb7a206fc6277c943a16e80df1cbbf157b7556e0ea85f7ca110a56537cfcd3f9929d292513a0e0d41f1d3d9fd3bb05d281d866928d9c903b45d3ac47971e4cf35c6d89b56804521484f44c5860e3b2cfaaa0351d45e0ad00437c49d160e5f34f156bade93edd68d9", @ANYBLOB="969c2c3d1af7832c41ba1c7c1237d2f6ab3ab1dcb19ad3dd5bbd10e3b9cda9a3be482a7c7c3e1259164cca7410b119b1b372335449d22e4ff739a9b74355b85038a725356a5bc63ced3d35459a", @ANYRES8, @ANYBLOB="71bd588a7ad50d50360524c8061145b7ae8693fc3fcf4c38527513de11283fd9c8ff38e8c3e655d4692360536d368f8253fe9177a1309c52c85e770b5c4018ac5aee735323e4d259f0421342ccc606ab1a3060a481690248e48766a051356d2e3823c068dafe501a82362e340024299ddb8b7d86e48b84dd1ff5b5733bdf49da9600a5e3184ea813e2894ee79350a282ec1a65d96dfcced09eecffa69d41e047cab4259c2bdaa436a13f32db79a92e5f66de089c3b69f46f96c65f5109cbae6ceee285d36551b603c267fdd9ab57b9d290150424606959991402ddc1527194d012d1038a6a04f4363db8ae04e436c6da8a15361a62fa9578df1d1c8629a0196cbc231fca351b3759402da842418da3d8dff1b779d545e7603b63e95cae61b219aebf06b4e5d3f2a2748f9ba0107afc826ca0b775f7ec3b0a586729c463f5cc9c2417e8478e700067594a661125fc6ad00fd57e7a20711175a27a1ad44b892ca434ca12f72fdaed1e081b4f22d9ffe58c624f151ae022edd6ce50c30dce794e7a60e515a741eea4dd5ae991a6cbcecc6bd3c4517b0c805465f8840c985ee4d96dfc0d892c00ea9108e787faf0715d575cbc2095102222a5b640f792aed84ca3c0fc8f041b3d1b3e138dd366330c0e9d304555751370f68dfcd76faf94f7f84b154019cb6d29b37ddd8e605b3da405403f7147ee486b170537b387890fe9d785db4637ff75f7cbd4cd942cb4b9b366ba11efe864dae7b12e6f2c37d9e3f41e3e3dabbc4c7589b9ffb409de2231862bddf02c07d5537e5ae4a3bb25420dd364c4cfb0bc97f11eaf3091c2a99fd1e9985f28636004257cd40a8990c76aa96155a8db8d675ff94f2dc2487ac74320e59040da2bc8c751c77c1240941cf9604b18d9ad8c9b37d90036f656fa2fa430435dfba179f25cb6d8dd416c3cd2f5ede6e47b275a46177460dfda44a70cc7d85e6590f39d5cb10a95033275904d284b26df8b907f7d896f0f723c27ec6e2b93d301ea7f4c7916e8a6c1f95e084347a21356e93430ea388e6118096f85265642e49a7a372fa5f33969f7841cca8d06f87f854d0af396e31a230f4ea677e56203b81836ecba4fd43adfec3b6b94f47dbd8461d2a9f375bcc92b9eb5f0d62910843badf0cf53afe1addee25214b7e7a075a31afcefc22f9140577390215c692a2744993f4ee4e7d6faecb4280fafdf2fc87103051c4b822b3a41b32e4bb7390aac36042d88cd45e1353f368efdac6323f28297aaef99317dac25b91e86d030bc09db479b454e43102fc63c414fbd23f3082510fa20b96139eb27d8459ab7a2e41aea50b48afcd8c038e571547dbec2e012618a09c5beaf54e1e583223b90df70024a0b6ceedf95976992fc490b78af7cfa0c227c4a64612157d74b9f54479ae91370e0c1bcf88166440fb57d02f491beb427be077644b9d1f424fa006ba3c47e7856d7e1092a88a7053dc8c58f9d0a943b4f5cd8337cbe6a12561effc83ffa288acc229117fe69882cbfb89a8d6085be087c86c231e91f1c0a615bbfe0741224457ae35a6d37b178fc575cab44a8e67814feca748686e45dcec6c082bc3c6398e22e2c14f404af5c13ec6f225a83911cfeca7542d9451aba6aee3eeb98dcce95a91d5f88d6f66f84fb06095dd9ac133d8f6e9f174b01e6352fdef6cd03f85df4dda185385e81be87b5bf3262d662224b456f932c42f25cd10f66a8bace4402e3c6a3a164348d86011b5df7c3b6578a40bc1b23b9f889176f98a08853433a1ddfc05708c4f53cc118f93518b8db263c87d0f7eb071c0310f6c623e9fa250fbb691d19b7b2a5d3f6c367f8567091b9cc10a457e2676187b3f8b6787af0b2fdc99e683c39db25ad93a611d44f7c080c869c3be1b656c20236f7ea45c92820b3b6c8a2a2f7bdf2d7dd588602e6778a6e7b0ba4cac7ed4d041bcb9b0ca60222290be9312c35b72fd55b1e3dba012b16b1ba211d4301d5086ac17988b1a160f984931557acbb44968926c8984c4152a27f7c4338c41a4f4b0588afdc6e972ab943d73a8229aeeefb33d7e121e306067de3282666e0a6a184e0acf8c868ed7e1a0f6ccf814a9d1bf987d3911046f4a5663167f4655e4d91fe660b3226d57b7e93e613941c04b668083c994635d4e1d711662e2605d052297d5776ac3fd27ab2707e0a577220ac7604f4c349db387866b9e7efcdcba7227c705527d7a8ea1a9200702ace5ab0c3d047f61f1d8ab3c18568627ac3aa8ab9844086ceeb7d5d73a3c3a3f5990d1ba3734f43687b06a0c2cc1cb1726aef61aa6d01aba8d27c8103521b4eecf4617cacd118d6ab210963d235a02dbe46388e056933ed406d745bbaca6a11d944ed3fd419d471f2ee39404c2fc07e439c92de6eec2eb5a6312af40c22c7b5a4c2be1b1e8787fc7d85073819dbd3a0bceb394c9e3475df91a5a7e265c343e07c0a5592f59ba6333dc0e4388b4801ab2c6b9af68d766114413e804f328d8235c71012c5e623876eea06392f33552ba624a302bc1b026aee71c8252ca2e5d06e5b0bc78a09b0aa3bde2b6b7234501492c950c7054dee6960c6d3af84f246abbbcab6716d0c570af6564335a0add1e98bb1e6e97e6abc595f65b7be120604c086413a1bb34fafc1019fc82096154fca002ac691f922bf76603a2e9ff09ae8dbd71b8f83a6134f41f86f10cad3f1940be75e914b43e40d58cbce6299835385336acb2683726a2a16c7945141c4d7c2d6f1ae1525a396961b0a69dd3302686ce27646e63e899b60c30b0e2c34106c969143c1498c86096b8ca3c81992ad3b3c05de89ed186e03cd09d1fecf5fa80d7c75fd019a4e5668fd0567adc572869884cd95c18417563b230088dcda8ac2a1d50cff79ffd42c153229101ec675d15aed9802e1a6ccb1aa173541cf93ac2c321fc9f894c1ec6e2c8d915734a79459f04f6081624b9a642146763cf2d71aa42a597812af2f14befe0bbd15297c19b11f41b8fd1fcdea9fe772f8f2a59b8ca0ea176aefac460b6edccc0737aede9a9b4886cdd5579de73e6f27b439a91567175753cfcba5e737a62384a468cf17fae465f20536b5b9420f142b0477e958155a08bce7ad2e76b03df6aab1e5b212afb5689b65cc8bbb30c916e5da83856f7df6ce851e55e13647e8f79d0c6cdd8aae386287e57e3723c53857214138c4d17c65e3dc6ac325c27c1dd837ba493f732a1a72788d4e42efd9236f3c6ff856e606beb5590310315462864269d9a6b906ce97e5698ab1c1371bf2b49d2ea79625ff8fad2d8d54ee1af36ae520f7c7e6767512f076004603ea53e109d2c1ce1718df1fa1f1fa8cecfd4128db825bb77a73264c31ac8e3f23c1f5fbe28679a81c63ac4d064be8dda1228905a151606abbcbc72e85bb86c6fb73d1151f8708e6621950cfec5d1997261ea2342cd8877a0d589a595e020f9981175443fe2d7afaac05b8a8b64f7db71c9f38adcb6d8a6a2fa76b1c5fc94228e84a2a00ecb7ac50add3a8c504329b90921db553888d4614b2255f17deaa5d3ae565dc5a3839957b7ca85e9fcc6e6f430f8267a946b0ed109a5e54d0ea164735eaa834e647eefe4e9b813702dc496a3b6368936fba8b47d8d589e96f2b97d04af670defde70675e7d2ee173a2e76ac4cfa4dbe245e4040f7c028d33bccb20c17420689f638eff1f596461f838e657301e05140bbdf0f3a6f94899e78a46e86bc1004537d4cdb0a37920535c8213eac073ff7ee0a2d0b96976f9134073b9e4ec9836ed3341cd79330fd68f8fa4e4fb31b87e7e2fda3b0df3d8df673401f4cdf7be2c183c37ba2157a5127fdc4b2d614bec995d5524ebc43a477c6b7d8ea6e4d9d84063f1f1fc45f3005bb475534c9b9ef6ff4b807cdf3ee5a2e486ef14bd208f32d795b257a3cc6ef2a193cb76bad7502211c0cffdedca26593778dc491d2a425fd52927bd54a28d668b0b85d8cd2c475ac9be52a91f8d3b0604b369f9e4215f5f79431aa55950ecd48527fb8f44aedb1803d59d69bf3735372802679c213f4e46fbf861545a07804c93d8eb617367631d9be23612df2393168c16092fc1cb4b5f1b975b0f84e0790559a4853d1a77eb810738a95e72582c43e609c1a32acef6d3f5aeaa2a85cb32cbd6e21e234c9f33ce376d8b955139f7aa6737ae8704e95b705dbc8ecd0647ff6556d16143219d9cb7823e95f45d65a90ed78742e7041163880bf90b8d9c8645f082413bd23d24beebf0e0ce171802e1bfccceacd11bb90b463410ad78ed5d951747f185b4e64692e12d0ad88fe02b6d448c4739ab97a47f619765f0a2d59d74e6b4b1f43140f89c1c435ff5de85fb4587ed4cd1727cffbadc0d69bd2e23d49808309103bd23ad3a712ade7b9379baac1f2a86a5e625184d2165d98910f316ef0fcd120f3e831570467d668ccc633b013621e0d79cc5e6b60da0da56b4f2c41d4b29fc33ddb6658181d84292f3b3f27dd193e0a73eba2f17528ee70719c5c0d55b2559bca90def8e9bbfd7e49e3e853745590a9ed9441e035436d6d11a8460935c0c6f6084ee35075084697a8fb0ad41380f4e5bb83b8d6eacfcba1353b500dec952241966c1c48562f6ecabec46f5fd3f13d2b4f5c719bcf5c934229b804b12c83f4c7391dc4d6179b453fad886d126748e7c037a82ee04bef9694282b147c08fb45892671ce38118cefc9aec670fe4f15222409b261ac0ec704551f224890b913c62a01e1e0be6ba178dd68c6d09778c9f2fa5b0ddb2d01216ed261f5fe8bd5db2e5fd50bd754a6ef225d776eb19601678995b2c68d575456f9513d16ee0919c31b7c9a4b90d418fbc038366422dda220e83f6180f15c4fac4e2e7fc44a0c6f3099f7febdd95372b381c40c650fb07fd5d9cf5ede84c368a84212c4e95bed1db1e446c1230b72b9f467ce9b03e17771f62158f2250399422f7ef68ff7039b29aec848b7620271e65d5a61885abd144c4d323d73425b8a87b01a10721a779c1d42121f60184fae7f46354d973d577e589ffddd3788b27cdcf264310f12076468d45efcf25181f9596fd9f6daff86a46a817074fa678806b8d01ca7a2772ad0067328df47dcfe506c1cd4e5c7a050638c86fe933bbd719421acab506b3da0220bf7e14e49c0770940d2cef6d164acd2d49a4ec9184f53ce6e1d4e2d8ad14500014d87cda9c14f4e1c8a5657399dcb4788ed9033a369463e94ee96921a74ada361ab3024119c54986ffd9408651b6f0cfe179af7595042ab6acf4b13d43dd3ffac50f6ccb78f35882a3e110ed9f89a6f4f3bbf5d121f8f6b4cc699d31dc745b62a11ba5f34597d1bb6c659ad32ce1ee1b568b83c3459547799d5cecbfee56712c6a1e9fdcd513b4445842f63f35a6eebf2adecffb4a1f884f2ecb346f6de468d3f1e95062b1bd92885228a0c2d1ae61be55dba1a7fab276bc925100e312a0d733a8dc206e017b0de36279bda6b12d7fec1439e773cb978cdad005ffd9ecb517ce7804e37b00093893067eb59d9d950086af3b718f677a0c3f9d666f722e5e0b5ce1a23743be688655a5ee6fdf3fbd094152471917f0a6e5e1520df7579822d855a4e1792158428b1df0ccbfe59eb0b256d53a68c32ecc955baddcff6fd63a644e72d77700331a4e99a8d2cc38185d4d56736e5a89244e789df238f4f25c801b4326bb75aa8a3f3a7660cffd03740a5e8d612501ce025b5ccc805f4d8727cdb8e114e5fb6fa0dadc72a1b9ada300d95e7e8a07047db5214a3ed8897f44d4f478b9dd6f3ad23bf13b1785aba4f4ad756b8", @ANYRES32=r3, @ANYRESHEX=r2, @ANYBLOB="f714e24df73af64aa91ce55d85bf637c6f7c9598fb6be03db9dcc9efaa697771f932d2cc40f6a8894b363e8e1ddcc3ec4136770688741ecbd6083e04b96d7d5bdb7aea05a615cae5ba0c58e1524f87194a5d8b5d363cf90d171d4ea1ef4ca9f60a2788d4a05aaa35", @ANYBLOB="9eba25b0fb1c2cb9214b9e866932e3db349858d98397329cb30dd77ba3d2e6310cae7ae5b4ab8157f3306562cb9d7df4c2e91bde5f60603f8ccdd1e623a56ea40bf7d8afba595a937029d957c7e7042dc2a86980118940aea40a56e7a76ec56cffb4666d2652cd62f3f8e78412bf0f18174d8d08360ccee48e750347fadcadd00d34c0bffcaf6770f00a29ddc59bd9a5ed02e3a2529d59da486ff87ce6820d773fd9e2d76d99733c980efdac"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r7}, 0x18) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000580)=0x4) bind$packet(r3, &(0x7f00000005c0)={0x11, 0x4, r8, 0x1, 0x6}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000019b2d24a00"/24], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x24}, 0x94) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r9, &(0x7f00000007c0)=[{{&(0x7f0000000380)=@in={0x2, 0x4e24, @local}, 0x80, &(0x7f0000000140)=[{&(0x7f00000004c0)}], 0x1}}], 0x1, 0x2c000011) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r10, 0x10e, 0x4, &(0x7f00000002c0)=0xffffffa4, 0x4) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r13, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) timerfd_gettime(0xffffffffffffffff, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r14}, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) clock_getres(0x2, &(0x7f0000000080)) 13m54.680924743s ago: executing program 4 (id=1916): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) io_uring_setup(0x6c3f, &(0x7f00000002c0)={0x0, 0x162e, 0x0, 0x2, 0x3d1, 0x0, r2}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r3, 0x84, 0x39, &(0x7f0000000080)=ANY=[], 0x18) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x10400, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) ioctl$TCSETSW2(r4, 0x5425, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(r5, &(0x7f0000000040)='task\x00') fchdir(r6) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) syz_open_procfs(r5, &(0x7f0000000000)='map_files\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f0000000480), 0x400034f, 0x2, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) vmsplice(r10, 0x0, 0x0, 0x0) fcntl$setpipe(r10, 0x407, 0x2000000) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001000000", @ANYRES32=0x0], 0x50) 13m39.616690181s ago: executing program 33 (id=1916): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) io_uring_setup(0x6c3f, &(0x7f00000002c0)={0x0, 0x162e, 0x0, 0x2, 0x3d1, 0x0, r2}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r3, 0x84, 0x39, &(0x7f0000000080)=ANY=[], 0x18) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x10400, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) ioctl$TCSETSW2(r4, 0x5425, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(r5, &(0x7f0000000040)='task\x00') fchdir(r6) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) syz_open_procfs(r5, &(0x7f0000000000)='map_files\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f0000000480), 0x400034f, 0x2, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) vmsplice(r10, 0x0, 0x0, 0x0) fcntl$setpipe(r10, 0x407, 0x2000000) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001000000", @ANYRES32=0x0], 0x50) 19.762153395s ago: executing program 1 (id=14495): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/vmallocinfo\x00', 0x0, 0x0) read$hiddev(r3, &(0x7f00000000c0)=""/4092, 0xffc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r6 = gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) timer_create(0x2, &(0x7f0000000500)={0x0, 0x2, 0x4, @tid=r6}, &(0x7f00000000c0)) timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f0000000000)={{}, {0x0, 0x9}}, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x4, 0x0) 19.635517838s ago: executing program 1 (id=14496): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000200)={[], [{@measure}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@obj_user={'obj_user', 0x3d, 'c\xa0\xad.\xd8\xad\xeb|\xb6'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@audit}]}, 0x1, 0x4a3, &(0x7f0000000580)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000032000000c"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000000), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='tlb_flush\x00', r3}, 0x18) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000f05000500090000000100000025000000005f00006161"], 0x0, 0x37, 0x0, 0x9}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(0xffffffffffffffff, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) 19.532824469s ago: executing program 1 (id=14497): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000200)={[], [{@measure}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@obj_user={'obj_user', 0x3d, 'c\xa0\xad.\xd8\xad\xeb|\xb6'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@audit}]}, 0x1, 0x4a3, &(0x7f0000000580)="$eJzs3c1rXOUaAPBnZpo0SXNvP+7l0vbCbaEXej9oJh9IE3XjSl0UxIIbhRqTaayZZEJmUpvQRaq7LlyIoiAu3PsXuLEriyCudS8upKI1ggrCyDkzk+Zr4qBpBnJ+Pzid95z3dJ73zfC8nHnPOXMCyKyzyT+5iMGI+DwijjZWN+9wtvGydv/mVLLkol6//F0u3S9Zb+3a+n9HImI1Ivoi4tknI17KbY9bXV6ZnSyXS4vN9WJtbqFYXV65cG1ucqY0U5ofGb84MTE+PDY6sWd9vf3GK7cvffR074c/vX7v7puffJw0a7BZt7Efe6nR9Z44vmHboYh4/GEE64JCsz/93W4If0jy+f0tIs6l+X80CumnCWRBvV6v/1o/3K56tQ4cWPn0GDiXH4qIRjmfHxpqHMP/PQby5Uq19v+rlaX56cax8rHoyV+9Vi4NN78rHIueXLI+kpYfrI9uWR+LSI+B3yr0p+tDU5Xy9P4OdcAWR7bk/4+FRv4DGeErP2SX/Ifskv+QXfIfskv+Q3bJf8gu+Q/ZJf8hu+Q/ZJf8h+yS/5BJz1y6lCz11v3v09eXl2Yr1y9Ml6qzQ3NLU0NTlcWFoZlKZSa9Z2fu996vXKksjDwSSzeKtVK1Vqwur1yZqyzN166k9/VfKfXsS6+AThw/c+fLXESsPtqfLoneZp1chYOtXs9Ft+9BBrqj0O0BCOgaU3+QXb7jAzv8RO8mfe0qFva+LcD+yHe7AUDXnD/l/B9klfl/yC7z/5BdjvEB8/+QPeb/IbsG2zz/6y8bnt01HBF/jYgvCj2HW8/6Ag6C/De55vH/+aP/Htxa25v7OT1F0BsRr753+Z0bk7Xa4kiy/fv17bV3m9tHu9F+oFOtPG3lMQCQXWv3b061lv2M++0TjYsQtsc/1Jyb7EvPUQ6s5TZdq5Dbo2sXVm9FxMmd4ueazztvnPkYWCtsi3+i+ZprvEXa3kPpc9P3J/6pDfH/tSH+6T/9V4FsuJOMP8M75V8+zelYz7/N48/gHl070X78y6+Pf4U249+ZDmO8/P5rX7eNfyvi9I7xW/H60lhb4ydtO99h/HsvPPePdnX1Dxrvs1P8lqRUrM0tFKvLKxfS35GbKc2PjF+cmBgfHhudKKZz1MXWTPV2j5387O5u/R9oE3+3/ifb/tth/3/556fPn90l/n/O7fz5n9glfn9E/K/D+D+MfvViu7ok/nSb/ud3iZ9sG+swfvXtpw53uCsAsA+qyyuzk+VyaVFBQUFhvdDtkQl42B4kfbdbAgAAAAAAAAAAAHRqPy4n7nYfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOgt8CAAD//1kn1ls=") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000190081044e81f782db4cb90402200800fd007c05e8fe55a108001e000140cde8dfe90e4190000900ac00060211000000160012000a0002000d48035c3b61c1d67f01282e8d614230a68000a007a290457f01a705000000000000009100005ee4e11b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e603a6a8a9826835d3a71d95667e006dcdf63951f2155e3bb9ad809d5e1cace81ed", 0xa2}], 0x1}, 0x40000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000032000000c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000000), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='tlb_flush\x00', r4}, 0x18) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000004c90020052feffff0300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003"]) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000f05000500090000000100000025000000005f00006161"], 0x0, 0x37, 0x0, 0x9}, 0x28) accept(r0, &(0x7f0000000080)=@can, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r6, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) 18.673385833s ago: executing program 1 (id=14508): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='neigh_create\x00', r0}, 0x18) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = socket(0x8000000010, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x1000000, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003b00)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r3 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)={0x3c}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000100)={0x12000000a}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, 0x0, 0x4000000) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0), 0x121401, 0x0) r4 = creat(0x0, 0xcd) r5 = inotify_init1(0x0) unshare(0x42000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000100)={'security\x00', 0x0, [0x5, 0xffffbff7, 0x20000004, 0x40, 0x4]}, &(0x7f0000000040)=0x54) inotify_add_watch(r5, &(0x7f0000000080)='./file0\x00', 0x40000022) write$binfmt_elf32(r4, &(0x7f0000000000)=ANY=[], 0x69) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) 18.607958704s ago: executing program 1 (id=14509): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000200)={[], [{@measure}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@obj_user={'obj_user', 0x3d, 'c\xa0\xad.\xd8\xad\xeb|\xb6'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@audit}]}, 0x1, 0x4a3, &(0x7f0000000580)="$eJzs3c1rXOUaAPBnZpo0SXNvP+7l0vbCbaEXej9oJh9IE3XjSl0UxIIbhRqTaayZZEJmUpvQRaq7LlyIoiAu3PsXuLEriyCudS8upKI1ggrCyDkzk+Zr4qBpBnJ+Pzid95z3dJ73zfC8nHnPOXMCyKyzyT+5iMGI+DwijjZWN+9wtvGydv/mVLLkol6//F0u3S9Zb+3a+n9HImI1Ivoi4tknI17KbY9bXV6ZnSyXS4vN9WJtbqFYXV65cG1ucqY0U5ofGb84MTE+PDY6sWd9vf3GK7cvffR074c/vX7v7puffJw0a7BZt7Efe6nR9Z44vmHboYh4/GEE64JCsz/93W4If0jy+f0tIs6l+X80CumnCWRBvV6v/1o/3K56tQ4cWPn0GDiXH4qIRjmfHxpqHMP/PQby5Uq19v+rlaX56cax8rHoyV+9Vi4NN78rHIueXLI+kpYfrI9uWR+LSI+B3yr0p+tDU5Xy9P4OdcAWR7bk/4+FRv4DGeErP2SX/Ifskv+QXfIfskv+Q3bJf8gu+Q/ZJf8hu+Q/ZJf8h+yS/5BJz1y6lCz11v3v09eXl2Yr1y9Ml6qzQ3NLU0NTlcWFoZlKZSa9Z2fu996vXKksjDwSSzeKtVK1Vqwur1yZqyzN166k9/VfKfXsS6+AThw/c+fLXESsPtqfLoneZp1chYOtXs9Ft+9BBrqj0O0BCOgaU3+QXb7jAzv8RO8mfe0qFva+LcD+yHe7AUDXnD/l/B9klfl/yC7z/5BdjvEB8/+QPeb/IbsG2zz/6y8bnt01HBF/jYgvCj2HW8/6Ag6C/De55vH/+aP/Htxa25v7OT1F0BsRr753+Z0bk7Xa4kiy/fv17bV3m9tHu9F+oFOtPG3lMQCQXWv3b061lv2M++0TjYsQtsc/1Jyb7EvPUQ6s5TZdq5Dbo2sXVm9FxMmd4ueazztvnPkYWCtsi3+i+ZprvEXa3kPpc9P3J/6pDfH/tSH+6T/9V4FsuJOMP8M75V8+zelYz7/N48/gHl070X78y6+Pf4U249+ZDmO8/P5rX7eNfyvi9I7xW/H60lhb4ydtO99h/HsvPPePdnX1Dxrvs1P8lqRUrM0tFKvLKxfS35GbKc2PjF+cmBgfHhudKKZz1MXWTPV2j5387O5u/R9oE3+3/ifb/tth/3/556fPn90l/n/O7fz5n9glfn9E/K/D+D+MfvViu7ok/nSb/ud3iZ9sG+swfvXtpw53uCsAsA+qyyuzk+VyaVFBQUFhvdDtkQl42B4kfbdbAgAAAAAAAAAAAHRqPy4n7nYfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOgt8CAAD//1kn1ls=") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000190081044e81f782db4cb90402200800fd007c05e8fe55a108001e000140cde8dfe90e4190000900ac00060211000000160012000a0002000d48035c3b61c1d67f01282e8d614230a68000a007a290457f01a705000000000000009100005ee4e11b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e603a6a8a9826835d3a71d95667e006dcdf63951f2155e3bb9ad809d5e1cace81ed", 0xa2}], 0x1}, 0x40000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000032000000c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000000), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='tlb_flush\x00', r4}, 0x18) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000004c90020052feffff0300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003"]) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000f05000500090000000100000025000000005f00006161"], 0x0, 0x37, 0x0, 0x9}, 0x28) accept(r0, &(0x7f0000000080)=@can, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x3, 0xff) r6 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r6, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) 18.376350978s ago: executing program 1 (id=14516): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073f97a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f5"], 0x34}}, 0x0) 18.376142828s ago: executing program 34 (id=14516): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073f97a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f5"], 0x34}}, 0x0) 4.786770191s ago: executing program 5 (id=14676): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000200)={0x1d, r1}, 0x10) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x15, 0x3}}, 0x20) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/freeze_filesystems', 0x4ae82, 0x12c) write$UHID_CREATE2(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC=r4], 0x118) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f00000002c0)=@usbdevfs_connect={0x5}) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="02070005020000002dbd7000fedbdf256152a9aa0a67ae01551e74dd9d7f1faa9d07db7028c5f7fdd31bfaf14659ceabcfab3152682e0e53b091f81890cc71aeeb175fa697e0af697378a13b80c6565f068c11dd2cf8ab41250feb22e2d0bd424c91a4ae505c8c2bb52a99e9e0f26aae340e0499998be495298ac5d50b099d619d6653de56859bcf391e7efeb60f386bed9416ebee070db3e7907ed1f74a6110ba679cdc2375566efff81aedf57f241bd682957500556454afcb18d5d99ce89c97"], 0x10}}, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) connect$netlink(0xffffffffffffffff, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000c00)=@newtaction={0x1998, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}, {0x168, 0x1, [@m_mpls={0x8c, 0xe, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x57, 0x6, "9358721ee9d7a8c8ea9ad52b25765b72d3794642738cadcc6ae826bf3eafb1d9cd0f1e69ab3f1dbff47adedcb2febc46396dd54c8d8df06e9860c1e247a270b3176822f11458740003c6f1feb17871401489ac"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbmod={0xd8, 0x2, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8001}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xfffb}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0x6, 0x1, 0x1ea, 0x4}, 0x7}}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xfc00}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7634}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}]}, {0x33, 0x6, "9f2620130627e71337cc794d9d6e9fdcb02feea68fa8c4be9642920083f8be48db24856aa8d4567845337d76d6d5de"}, {0xc, 0x7, {0x0, 0x23170acd34c7eb2a}}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x658, 0x1, [@m_simple={0x134, 0x14, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x40, 0x9, 0x20000000, 0x6, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x100, 0x800, 0x3, 0x1ff, 0x9}}, @TCA_DEF_DATA={0xa, 0x3, 'kfree\x00'}, @TCA_DEF_DATA={0xa, 0x3, 'kfree\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x27c1, 0xfffffff8, 0x6, 0x0, 0x7}}]}, {0xa8, 0x6, "c0fbc5440557ecc3f1cebd69367b62130a36d7084060b477dbdb9638595a16837497b211e776483a42a16d4c4daab5aa6e5d3f1249d1def1b33979361f1198736a4dbbe3f05340a8a2005a2235afda47382f38ece535f5cb2c551e56b71535439e322363f09fa509b126d7e0d7e470255432e3a5b975047b902d874ee8530266222813aa9bb8fff01031b3e0bfd24f7afd0ca141548c98f73e4bc7c13ec61d6b48c85a04"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0xfc, 0x1b, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x2}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xd}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3}]}, {0xb6, 0x6, "a3555c12c50792d5366c4fc3ad4d17cc7be20ac6ff7e45e6265fa8b0539565632460ad86101f7bb25621a9a7e76bf9c04e939552e637c63e479f62ff5a1152a29ca8fa11a23a52bd6b5f96434d355e399cac22d6337206e9d698cfef765cf70540b213421d85d67a2d3fb3b465c84896fe99a293b5119b12446d99ad816e94ab379f5f691c52c83acaafbf26d7236880590d6fbd19d9bcd12ffa1b41bcfde109543f4a162a90a47f8a160d4ad82c4bdc0939"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x144, 0x1d, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7f, 0x101, 0x7, 0xffffffff, 0xd3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8001, 0x80000001, 0x6, 0x31, 0xa17}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}]}, {0xd6, 0x6, "64f318dc5d5f4b274dbb0d677e5714582287110b9e95b4ffbf2c0d0b7b47498b0fabcb0d95505f573588dacf96bef1767af555d3149540b34411f0f523e5e3235f4ce7fba5b3bcd013cab7d835b98d0b57612732469d2f3454a8ed52c6a20624c64896da53991e8a82e8494ef3941e2f20be70af0d23c0795f02cc51fb17669157f6bbfb6b0f8723502a368c53d306d4e7c55b45bbecff17b3b2182a496cbcac6987277498e0e66a542df4d3f0ae6cccd270dfb0fd019bf7f586f33848284a197f157e0099be165654e2e77a7b9d8a048554"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_mpls={0xd4, 0x1c, 0x0, 0x0, {{0x9}, {0x5c, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x96d1e}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x5, 0x9, 0xffffffffffffffff, 0x9, 0x7}, 0x2}}, @TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_PROTO={0x6, 0x4, 0x6}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x7, 0x7, 0x6, 0xfffffff8, 0x2}, 0x5}}, @TCA_MPLS_TTL={0x5, 0x7, 0x24}]}, {0x4f, 0x6, "32cc9f6e20c920d3d1e48587b8460bbc630c141467634085ff3fd9654fa6a3afe68c6d7cfec61e82c6fbbfe9c4c514f96ed5cd8bd5fb7967d7ed2684097dec1f30807ebe98527ac47a16aa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0x16c, 0xd, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x1, 0x4, 0x2, 0x80}, 0x1}}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x9}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x6}]}]}, {0x102, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_vlan={0xa0, 0x8, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc27}]}, {0x69, 0x6, "abc210bbf48f4ccac862fbf1f2be56b4af2788edff775dc42bbeb33ea3d28c869daa5f724d5f195579b44edb53d0777780bfa85d12ac4553d632b85beeb1d8b26ac512e16deece434187ea97d200428e6ac03fa1b60bb08cae60c41718ee90a6360cb29441"}, {0xc}, {0xc, 0x8, {0x1}}}}]}, {0x3e0, 0x1, [@m_mpls={0x15c, 0x2, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x6}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x5, 0xf519, 0x6, 0x8, 0x3}, 0x3}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x7c938}, @TCA_MPLS_PROTO={0x6, 0x4, 0x17}, @TCA_MPLS_PROTO={0x6, 0x4, 0x9300}]}, {0xf4, 0x6, "0afa52e25636d61b4395fbd6fdc7a469f1b8d6936cbc52e66bf8124734c2c09d2d8aadb36825ef20df138a6d1f15e4bc26e0bcc6c13466f85bb6088b459737b0854d0b23d730f6c37df4b5c36b6ac8f3e017fa5992b5fff021596f89eab08cc852694e09c8c35c8e28750b2588b898115e7cd2dccc0b17b5f6b42951aead775273264fbd432d1db017476ba1ce961bf3659bb5b9a38a0103c2a789ed755c34f64174bf87043d84f3a1a001eda9269beca219dd915bd1261d0ecdb9cd703169ce1c8e9e874a77b9a00e1ddd7b1dc3ef5a7f218ef78b26eec93f8af59f3ca088d9ee452e134073d76115256cf5518f79f9"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0x174, 0x1e, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x53, 0x8, 0x3, 0xffff300e, 0x4}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x7, 0x7, 0x998, 0x2}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0xfa, 0x6, "3be4eb0270872c7d6415100aa205fd88cb22ea9dcf7deb8a305c5d9b42d387f20aa53e4e207fb56c6ef190ebcb745ff407f683022a4744df3afe522caf4e6d3eb4da32bf139d0e656783af3820920a506642b2aeda75999ab7be982954459926ede1193f1720ec4c1eb013358421067152b53cc311ece4c8f7c9b773dfb8d4a12b7ac9953ae2d91444d5215efc2656aee724dff42ede00973585cce59beb3cf917387842c2fffed037e43a1b2f10f5cde72c4fe5f533d12ac8f1a46e97bbf08f201d684faa4e57803d653e85c5ba669dcf8d516d8e4b6d99e2479467de7e9dc4fd682976b84c7b7afcdc513399469041e1b9acebe962"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0x10c, 0x1e, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x101}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x9}, @TCA_CTINFO_ACT={0x18, 0x3, {0xe9c4, 0xd, 0x8, 0xd, 0x9}}]}, {0xb6, 0x6, "ff2a39f8eb608d8c8896d3e2a221ef0ec53a00aae156fcb2c675c3c84f70d76a98caa51c0654c04444575bf10b08f623118fefce2e9024cb75c2663fa697a1a5536248025edb967838c76fcee8eec80fc1d9da57d098cfbc2d5b6325680a3340ed5e99bf2634ea6fbd74c3c16ba26d1dc689da00273868fa04a261f13198bf275288136919a4abea0bad7c73ed237ada0ce927654b50c6b80003228857c2031e2addaf2742cf62e76d1464b5d3476f145857"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x4f4, 0x1, [@m_police={0x180, 0x17, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x49, 0xffffffffffffffff, 0x7, 0xfffff945, 0xd62, {0xf8, 0x0, 0x7, 0x0, 0x2, 0x2}, {0x8, 0x2, 0x0, 0x7, 0x9, 0x3}, 0x4, 0xb, 0x5}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2b19}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x8}]]}, {0xfc, 0x6, "603d5294c860653953aea59a7fe6433e25860056d6208cdaf9d140f2c9ce45f33723ffa513bce4624e6f7c72bd5a5e152819385b1937f207e5f9565a828af4c298746a17d2ef7f4fbcbfb30d5484d552dd1d9e4a7a49d02bb86db4781de058ff2b5362f9e72b14ae1733902e4eb49755985ad79d1f7e55fe1588a9220c2260b7af4293b240ed8ae44c1665de8f306f6981448f23ea7c3d043af8c284dd7635f7087689429363eeadbda060608c9ae8b930a11aa8f9af8cd262b78cd13e9c5742b8868175331ccf38c3948dafe0365ce03379e2da0ae1394886908aaec3cc8c25d2317d8c354383f9ed16a56f23f34e8a7774a2ed2812510f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_tunnel_key={0x100, 0x13, 0x0, 0x0, {{0xf}, {0x40, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x3}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}]}, {0x91, 0x6, "c278525c589b9f0241adf4127d2a557a714b5e2ddd45d7b2754e728caa9f4d374532e012956d07a5d237c12b8b20b4a829c1817dfea62863d77e59209edf6b252b4d3d66d6856215275b9e4802eaac4ea388c74e65210966c4c71d6d447bc196483aaadb649ab7ee180569f17074191b91ffaa4b3d7fb7444bd92b18163ad244649642dbbe429ff5e30c5f7a80"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_gact={0x140, 0x1f, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x80, 0x1, 0x3, 0x6, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x101, 0xe768, 0x6, 0x401, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x2377, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1f, 0x10000007, 0x10000, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x80, 0x7, 0x800, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xffffffff, 0x0, 0x27, 0xe8f7}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x23dc, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0xfff, 0x6, 0x3, 0x7}}]}, {0x69, 0x6, "29a2279efe94412aff1ba9375062af4fba3b80d31c833489122ced30e42d3fdf5288322c99ce99093a0ee0338085ee0e2776a520c8978bd8246c126ae9390b3ab33b08f7ab304774003b03780bdc0dd0918c35ab767d241302b6fd19f4c383c90c1482ce49"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x130, 0x1, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x7, 0x0, 0x7fff, 0x2}, 0x10}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x7, 0x1, 0xc874, 0x47}, 0x54}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7ff, 0x1, 0x4, 0x5, 0x3}, 0x6}}]}, {0xad, 0x6, "e81e105b608daee5e7e671aaaebb19198557dfe9e1ea3870d9a970a5c4b609c23dba5320c3d45711d2c6ce7109c971390a0f46561a25cd96c3dba9584cd904c33fdf006fc054265ee410b91a43666880d456a02883db04a5305fa5208ad59db86aba36e8c4c9c0ffae5f75a807820e58f61c893abd9d560db0cd1fac62edee844de74151d262e8af855c91eb5f5c0333f54d4d9c8a8884b3c178148e32cf4793de477aae9273cc2384"}, {0xc, 0x7, {0x1}}, {0xc}}}]}, {0x308, 0x1, [@m_xt={0xf0, 0xf, 0x0, 0x0, {{0x7}, {0x54, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0x76, 0x6, "183fd46c37eb088e89a0f49aa59c454f2b79d01aef6bab94551846e186f52377602995530a62251c20007c0b6a9ebed2db4dcb5e5b4a0e500905e201a67b8c27b83fa7ad04469a0c895a57d6bf87a20af86bcbf24ca7fe0c82f9c3088f611b72b2096019c9ce67848b9855e1cf01b3458129"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0x114, 0xd, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x81, 0x10001, 0x8, 0x52e}, 0x1, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x4, 0x8, 0x8, 0x800}, 0x4, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x39d, 0x9dc, 0x6, 0x4, 0xf7d6}, 0x4, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x80000000, 0x0, 0x8001, 0x86c}, 0x0, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8000, 0xff, 0x7, 0xd43f, 0x9}, 0x6, r1}}]}, {0x47, 0x6, "0c290cdcdd38b18f8a2977ea68efb20da6d4dbd5fbc7cda11651f80a03cf9ea179e8ad6bd60a939f715b5799470223991c41fa3a682dfa95f224fc2d4fa21962cac0d2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_sample={0x100, 0x1e, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0xfff, 0x7ff, 0x1, 0xd, 0xe8}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x80000000, 0x4, 0x5, 0x200}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8000}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x40}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x40000, 0x8, 0x0, 0x8, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}]}, {0x62, 0x6, "6df7124163e51400d6f4b756e07123182e65acf7560acd1797f82072d84ab08a9d26eebdf655d59d56ab9d35c6e6de76cb169ab9b50c5f8f850972be1a750acba87b6ef33c0e1aeacb9865945cf048280397ba19ac2acfa8b7dcc33afcbb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x5e4, 0x1, [@m_nat={0x1ec, 0x16, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x8, 0x4, 0x1, 0xff}, @remote, @empty, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0xfffffff8, 0x20000000, 0x1c0, 0x5}, @dev={0xac, 0x14, 0x14, 0xc}, @multicast2, 0x793cef019c666dc4}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffffe7, 0x1, 0x20000000, 0xffffff7f, 0x9}, @multicast2, @dev={0xac, 0x14, 0x14, 0x2b}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xb237, 0xcf5, 0x20000000, 0x40, 0xd}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x42}, 0xffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x77e0, 0x8, 0xa61, 0x1}, @remote, @empty, 0xff000000}}]}, {0xfc, 0x6, "4edb75496eb571000a4be4efb661817b3762c22b818464807cd95ce52b2d5bef92528f601381265551ae7e170fd98742b1e744ef68416544bc53ffe5134ec8a45a6744d623cec66a4a2bcc996b4c6a646f820243f6ec649b28013c09d44aad87485ff3569d963dc913819d3a8a80b9cc24a73be27357fa80fd23e500bf0438c5f8c4bde9dfa6173dc1cd30bef77f2b763f5c5abd0bed8a9a1c3212a70485fdb32aa2b939e42d57069e46a380f139adfe560f6804a9d84be557b49ad1689ca5ffb0d5b9276e0f806ab8f704ab9b6321f518aae51e57029863c9b461bf23a22069a730bb8e16d4e1d37ab4ed94658da5051a983d110b53b9aa"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xe8, 0x0, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0x7, 0x6, 0x2, 0x5}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @private=0xa010102}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @private=0xa010102}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x73, 0x6, "9ace61d2cf3e156b6edb028978f298ca175496aaf3860560fe005f7d9bbf89ee20e2780a1df3fcfd1b1f7c3281a7e42ba36a3384ee26572ea3b6c50f1be22b71bea45c7d9ce4b01a675ef49f45b9aa1666b757d9387dcdcc6c056699699183a7f0d2db0f4363facf328b0d03434a05"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mpls={0xb8, 0x1f, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x6}, @TCA_MPLS_LABEL={0x8, 0x5, 0x8e3fb}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x5, 0x80, 0x10000006, 0x2, 0xa}, 0x2}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0x210a2639, 0xffffffffffffffee, 0x2, 0x9}, 0x2}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x11}, @TCA_MPLS_TTL={0x5, 0x7, 0x2}]}, {0x2c, 0x6, "e3c69efa65b482120b57eda7ef8b08df9f155065bb9a3f6a156f11e68a6bdfa11368215441f2f66b"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0xac, 0x5, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x7f, 0xf8f294b8a4a2a6dd, 0xfffffd12, 0x5}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x4000000, 0x0, 0x0, 0xffff0000}, 0x37}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xffffffff, 0x1, 0x2d48, 0x5}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8000, 0x20000, 0xffffffffeffffff0, 0x2, 0x6}, 0x2}}]}, {0xb, 0x6, "b99fb8ed105b76"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_mirred={0x1a8, 0xa, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x0, 0x4, 0x1, 0x3}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1d140000, 0x8, 0x3, 0xf931, 0x4d}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfba, 0x400, 0x3, 0x4b99, 0x5}, 0x1, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x9, 0x8, 0x1, 0x8}, 0x2, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x9ba, 0x5, 0x6, 0x3}, 0x2, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0xfff, 0x3, 0x2, 0x3}, 0x1, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0xa, 0x7, 0xffff, 0x18}, 0x1, r1}}]}, {0x99, 0x6, "57430e6aedf6edcac965186d1038727956b21c14970a374ee2d223fb1a481fb11076f231256a1fa35f9dab2971beccc528141ec8849ee5e94f32a008ec480238841e0e9b1ffd84abf2f4ca226c60bbd9ebb6e9ae95ebe41d9d160a902b0b252dd6cf9b5630f2be2fa2230cf6c64ddbdf1c82412f5f4a976f77c5f7b0e2b981d886339f281944f81492733b2fd7431ce6271508c006"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x1998}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) 2.41511836s ago: executing program 7 (id=14687): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000400)=@ccm_128={{0x304}, "0300", "d81100", "fdffb26f", "a2deb79f8c96bff4"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2, 0x0, 0x2}, 0x18) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 2.098015825s ago: executing program 6 (id=14695): r0 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x5) fcntl$notify(r1, 0x402, 0x848234f1c7d17d24) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000300)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) io_uring_setup(0x792b, &(0x7f0000000600)={0x0, 0x2002, 0x400, 0x0, 0x1cd}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='ufshcd_upiu\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) getdents64(r2, &(0x7f0000000040)=""/131, 0x83) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x1e, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00'}, 0xfffffffffffffe1d) kexec_load(0x3e00, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000004c0)='kfree\x00', r4, 0x0, 0x9}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001006c696d69740000002400028008000440000000010c00024000000000000000000c0001400000000000000003"], 0x118}}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="5800000002060134e4000000007eb961fd4db317f400000000050001000600020005000400000000000900020073797a3100000000050005000200000011000300686173683a69882c706f7274000000000c000780050014004f000000c4e380dcc4f5a21b4eb7db985241ceb4f5f13858d5df81510f5fa653b5c7e376da8752e604d7097c25bc1819e2324dd7b5146569cadd62c2d0527088c2ef09a1bba90d52f6994b80260848165a51deef0ee1d214b681459a5e702116476ba50de8b0"], 0x58}}, 0x2) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES64=0x0, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES64=r3], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001a0000001800018014000293063738ee591a774d6eac7c129bde707b405a6e838fe60a65735d83523300d30000000000000000000000b275d7e2b7d7b3c20e5624ab289401189cb8fd9e3679acd7146d8689dfbf702e9d291074e75f0696837125dc5c55a04b2f119411b7d791243927474b4a584e77f614bce8e4a990626b3ed0943d691afe427793b2855a45ae3a7edb7a587c89f9db0a76bce943d1f4b3f47a65ac0fca41d8d433114e93a8a5eecc60b581e765e7c17119348d3470958da0e4c8799d6ba1db0fb6cdab3ca5108df0acb26a26a019df8c1fcbd8"], 0x2c}}, 0x0) 2.045722136s ago: executing program 6 (id=14696): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) (fail_nth: 4) 1.740267811s ago: executing program 6 (id=14697): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000200)={[], [{@measure}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@obj_user={'obj_user', 0x3d, 'c\xa0\xad.\xd8\xad\xeb|\xb6'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@audit}]}, 0x1, 0x4a3, &(0x7f0000000580)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000190081044e81f782db4cb90402200800fd007c05e8fe55a108001e000140cde8dfe90e4190000900ac00060211000000160012000a0002000d48035c3b61c1d67f01282e8d614230a68000a007a290457f01a705000000000000009100005ee4e11b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e603a6a8a9826835d3a71d95667e006dcdf63951f2155e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e971ad9d3ac052f6dfe4f36bcf903ece981e8df37", 0xd2}], 0x1}, 0x40000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000032000000c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000000), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='tlb_flush\x00', r4}, 0x18) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000004c90020052feffff0300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003"]) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000f05000500090000000100000025000000005f00006161"], 0x0, 0x37, 0x0, 0x9}, 0x28) accept(r0, &(0x7f0000000080)=@can, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r6, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) 1.688215262s ago: executing program 5 (id=14700): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003740000001e0a01020000000000000000010000000900020073797a3200000000340003803000008009"], 0xe4}}, 0x0) 1.680019402s ago: executing program 3 (id=14701): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000200)={[], [{@measure}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@obj_user={'obj_user', 0x3d, 'c\xa0\xad.\xd8\xad\xeb|\xb6'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@audit}]}, 0x1, 0x4a3, &(0x7f0000000580)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000190081044e81f782db4cb90402200800fd007c05e8fe55a108001e000140cde8dfe90e4190000900ac00060211000000160012000a0002000d48035c3b61c1d67f01282e8d614230a68000a007a290457f01a705000000000000009100005ee4e11b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e603a6a8a9826835d3a71d95667e006dcdf63951f2155e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e971ad9d3ac052f6dfe4f36bc", 0xca}], 0x1}, 0x40000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000032000000c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000000), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='tlb_flush\x00', r4}, 0x18) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000004c90020052feffff0300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003"]) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000f05000500090000000100000025000000005f00006161"], 0x0, 0x37, 0x0, 0x9}, 0x28) accept(r0, &(0x7f0000000080)=@can, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x3, 0xff) r6 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r6, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) 1.636598703s ago: executing program 5 (id=14702): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, &(0x7f0000000180)=[{0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1, 0x31}, {}, @addr={0x2a, 0x5}}], 0x1c) readv(r2, &(0x7f0000000200)=[{&(0x7f0000000040)=""/59, 0x3b}], 0x1) 1.567366344s ago: executing program 7 (id=14703): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result={0x1, 0x2}}], 0x1c) readv(r2, &(0x7f0000000200)=[{&(0x7f0000000040)=""/59, 0x3b}], 0x1) 1.498853745s ago: executing program 0 (id=14705): mkdir(&(0x7f0000000540)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x55}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) bind$rds(r4, &(0x7f0000000200)={0x2, 0x4e22, @multicast2}, 0x10) r8 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r8, &(0x7f0000002900)=[{{&(0x7f0000000440)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffc}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x22}}], 0x1, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r3}, 0x10) r9 = dup(r1) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x18) r12 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000d80)="0000000000000004ff6943b80000000800000028f20000000086070000", 0x4000, r12) keyctl$restrict_keyring(0x1d, r12, &(0x7f00000002c0)='logon\x00', &(0x7f0000000380)='rfdno') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r11}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[], [], 0x6b}}) 1.435945326s ago: executing program 0 (id=14706): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r1, 0x1}, 0x1c}}, 0x0) 1.420853906s ago: executing program 0 (id=14707): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000400)=@ccm_128={{0x304}, "0300", "d81100", "fdffb26f", "a2deb79f8c96bff4"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2, 0x0, 0x2}, 0x18) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 945.152494ms ago: executing program 6 (id=14708): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000003, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="1803fffffffffffff10000000000000018010000696c6c2500000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095112b620fd5c82d2e03f36a003434d3"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000002480)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x10000000000000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000300)={0x9, 0x8, 0x4efac0f, {0x4, 0x33e}, 0xd07, 0x4}) setresuid(0xee00, 0xee01, 0xee01) 922.262305ms ago: executing program 6 (id=14709): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 890.396905ms ago: executing program 6 (id=14710): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000200)={0x1d, r1}, 0x10) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x15, 0x3}}, 0x20) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/freeze_filesystems', 0x4ae82, 0x12c) write$UHID_CREATE2(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC=r4], 0x118) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f00000002c0)=@usbdevfs_connect={0x5}) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="02070005020000002dbd7000fedbdf256152a9aa0a67ae01551e74dd9d7f1faa9d07db7028c5f7fdd31bfaf14659ceabcfab3152682e0e53b091f81890cc71aeeb175fa697e0af697378a13b80c6565f068c11dd2cf8ab41250feb22e2d0bd424c91a4ae505c8c2bb52a99e9e0f26aae340e0499998be495298ac5d50b099d619d6653de56859bcf391e7efeb60f386bed9416ebee070db3e7907ed1f74a6110ba679cdc2375566efff81aedf57f241bd682957500556454afcb18d5d99ce89c97"], 0x10}}, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) connect$netlink(0xffffffffffffffff, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000c00)=@newtaction={0x1998, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}, {0x168, 0x1, [@m_mpls={0x8c, 0xe, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x57, 0x6, "9358721ee9d7a8c8ea9ad52b25765b72d3794642738cadcc6ae826bf3eafb1d9cd0f1e69ab3f1dbff47adedcb2febc46396dd54c8d8df06e9860c1e247a270b3176822f11458740003c6f1feb17871401489ac"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbmod={0xd8, 0x2, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8001}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xfffb}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0x6, 0x1, 0x1ea, 0x4}, 0x7}}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xfc00}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7634}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}]}, {0x33, 0x6, "9f2620130627e71337cc794d9d6e9fdcb02feea68fa8c4be9642920083f8be48db24856aa8d4567845337d76d6d5de"}, {0xc, 0x7, {0x0, 0x23170acd34c7eb2a}}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x658, 0x1, [@m_simple={0x134, 0x14, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x40, 0x9, 0x20000000, 0x6, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x100, 0x800, 0x3, 0x1ff, 0x9}}, @TCA_DEF_DATA={0xa, 0x3, 'kfree\x00'}, @TCA_DEF_DATA={0xa, 0x3, 'kfree\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x27c1, 0xfffffff8, 0x6, 0x0, 0x7}}]}, {0xa8, 0x6, "c0fbc5440557ecc3f1cebd69367b62130a36d7084060b477dbdb9638595a16837497b211e776483a42a16d4c4daab5aa6e5d3f1249d1def1b33979361f1198736a4dbbe3f05340a8a2005a2235afda47382f38ece535f5cb2c551e56b71535439e322363f09fa509b126d7e0d7e470255432e3a5b975047b902d874ee8530266222813aa9bb8fff01031b3e0bfd24f7afd0ca141548c98f73e4bc7c13ec61d6b48c85a04"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0xfc, 0x1b, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x2}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xd}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3}]}, {0xb6, 0x6, "a3555c12c50792d5366c4fc3ad4d17cc7be20ac6ff7e45e6265fa8b0539565632460ad86101f7bb25621a9a7e76bf9c04e939552e637c63e479f62ff5a1152a29ca8fa11a23a52bd6b5f96434d355e399cac22d6337206e9d698cfef765cf70540b213421d85d67a2d3fb3b465c84896fe99a293b5119b12446d99ad816e94ab379f5f691c52c83acaafbf26d7236880590d6fbd19d9bcd12ffa1b41bcfde109543f4a162a90a47f8a160d4ad82c4bdc0939"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x144, 0x1d, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7f, 0x101, 0x7, 0xffffffff, 0xd3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8001, 0x80000001, 0x6, 0x31, 0xa17}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}]}, {0xd6, 0x6, "64f318dc5d5f4b274dbb0d677e5714582287110b9e95b4ffbf2c0d0b7b47498b0fabcb0d95505f573588dacf96bef1767af555d3149540b34411f0f523e5e3235f4ce7fba5b3bcd013cab7d835b98d0b57612732469d2f3454a8ed52c6a20624c64896da53991e8a82e8494ef3941e2f20be70af0d23c0795f02cc51fb17669157f6bbfb6b0f8723502a368c53d306d4e7c55b45bbecff17b3b2182a496cbcac6987277498e0e66a542df4d3f0ae6cccd270dfb0fd019bf7f586f33848284a197f157e0099be165654e2e77a7b9d8a048554"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_mpls={0xd4, 0x1c, 0x0, 0x0, {{0x9}, {0x5c, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x96d1e}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x5, 0x9, 0xffffffffffffffff, 0x9, 0x7}, 0x2}}, @TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_PROTO={0x6, 0x4, 0x6}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x7, 0x7, 0x6, 0xfffffff8, 0x2}, 0x5}}, @TCA_MPLS_TTL={0x5, 0x7, 0x24}]}, {0x4f, 0x6, "32cc9f6e20c920d3d1e48587b8460bbc630c141467634085ff3fd9654fa6a3afe68c6d7cfec61e82c6fbbfe9c4c514f96ed5cd8bd5fb7967d7ed2684097dec1f30807ebe98527ac47a16aa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0x16c, 0xd, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x1, 0x4, 0x2, 0x80}, 0x1}}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x9}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x6}]}]}, {0x102, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_vlan={0xa0, 0x8, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc27}]}, {0x69, 0x6, "abc210bbf48f4ccac862fbf1f2be56b4af2788edff775dc42bbeb33ea3d28c869daa5f724d5f195579b44edb53d0777780bfa85d12ac4553d632b85beeb1d8b26ac512e16deece434187ea97d200428e6ac03fa1b60bb08cae60c41718ee90a6360cb29441"}, {0xc}, {0xc, 0x8, {0x1}}}}]}, {0x3e0, 0x1, [@m_mpls={0x15c, 0x2, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x6}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x5, 0xf519, 0x6, 0x8, 0x3}, 0x3}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x7c938}, @TCA_MPLS_PROTO={0x6, 0x4, 0x17}, @TCA_MPLS_PROTO={0x6, 0x4, 0x9300}]}, {0xf4, 0x6, "0afa52e25636d61b4395fbd6fdc7a469f1b8d6936cbc52e66bf8124734c2c09d2d8aadb36825ef20df138a6d1f15e4bc26e0bcc6c13466f85bb6088b459737b0854d0b23d730f6c37df4b5c36b6ac8f3e017fa5992b5fff021596f89eab08cc852694e09c8c35c8e28750b2588b898115e7cd2dccc0b17b5f6b42951aead775273264fbd432d1db017476ba1ce961bf3659bb5b9a38a0103c2a789ed755c34f64174bf87043d84f3a1a001eda9269beca219dd915bd1261d0ecdb9cd703169ce1c8e9e874a77b9a00e1ddd7b1dc3ef5a7f218ef78b26eec93f8af59f3ca088d9ee452e134073d76115256cf5518f79f9"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0x174, 0x1e, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x53, 0x8, 0x3, 0xffff300e, 0x4}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x7, 0x7, 0x998, 0x2}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0xfa, 0x6, "3be4eb0270872c7d6415100aa205fd88cb22ea9dcf7deb8a305c5d9b42d387f20aa53e4e207fb56c6ef190ebcb745ff407f683022a4744df3afe522caf4e6d3eb4da32bf139d0e656783af3820920a506642b2aeda75999ab7be982954459926ede1193f1720ec4c1eb013358421067152b53cc311ece4c8f7c9b773dfb8d4a12b7ac9953ae2d91444d5215efc2656aee724dff42ede00973585cce59beb3cf917387842c2fffed037e43a1b2f10f5cde72c4fe5f533d12ac8f1a46e97bbf08f201d684faa4e57803d653e85c5ba669dcf8d516d8e4b6d99e2479467de7e9dc4fd682976b84c7b7afcdc513399469041e1b9acebe962"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0x10c, 0x1e, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x101}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x9}, @TCA_CTINFO_ACT={0x18, 0x3, {0xe9c4, 0xd, 0x8, 0xd, 0x9}}]}, {0xb6, 0x6, "ff2a39f8eb608d8c8896d3e2a221ef0ec53a00aae156fcb2c675c3c84f70d76a98caa51c0654c04444575bf10b08f623118fefce2e9024cb75c2663fa697a1a5536248025edb967838c76fcee8eec80fc1d9da57d098cfbc2d5b6325680a3340ed5e99bf2634ea6fbd74c3c16ba26d1dc689da00273868fa04a261f13198bf275288136919a4abea0bad7c73ed237ada0ce927654b50c6b80003228857c2031e2addaf2742cf62e76d1464b5d3476f145857"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x4f4, 0x1, [@m_police={0x180, 0x17, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x49, 0xffffffffffffffff, 0x7, 0xfffff945, 0xd62, {0xf8, 0x0, 0x7, 0x0, 0x2, 0x2}, {0x8, 0x2, 0x0, 0x7, 0x9, 0x3}, 0x4, 0xb, 0x5}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2b19}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x8}]]}, {0xfc, 0x6, "603d5294c860653953aea59a7fe6433e25860056d6208cdaf9d140f2c9ce45f33723ffa513bce4624e6f7c72bd5a5e152819385b1937f207e5f9565a828af4c298746a17d2ef7f4fbcbfb30d5484d552dd1d9e4a7a49d02bb86db4781de058ff2b5362f9e72b14ae1733902e4eb49755985ad79d1f7e55fe1588a9220c2260b7af4293b240ed8ae44c1665de8f306f6981448f23ea7c3d043af8c284dd7635f7087689429363eeadbda060608c9ae8b930a11aa8f9af8cd262b78cd13e9c5742b8868175331ccf38c3948dafe0365ce03379e2da0ae1394886908aaec3cc8c25d2317d8c354383f9ed16a56f23f34e8a7774a2ed2812510f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_tunnel_key={0x100, 0x13, 0x0, 0x0, {{0xf}, {0x40, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x3}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}]}, {0x91, 0x6, "c278525c589b9f0241adf4127d2a557a714b5e2ddd45d7b2754e728caa9f4d374532e012956d07a5d237c12b8b20b4a829c1817dfea62863d77e59209edf6b252b4d3d66d6856215275b9e4802eaac4ea388c74e65210966c4c71d6d447bc196483aaadb649ab7ee180569f17074191b91ffaa4b3d7fb7444bd92b18163ad244649642dbbe429ff5e30c5f7a80"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_gact={0x140, 0x1f, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x80, 0x1, 0x3, 0x6, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x101, 0xe768, 0x6, 0x401, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x2377, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1f, 0x10000007, 0x10000, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x80, 0x7, 0x800, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xffffffff, 0x0, 0x27, 0xe8f7}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x23dc, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0xfff, 0x6, 0x3, 0x7}}]}, {0x69, 0x6, "29a2279efe94412aff1ba9375062af4fba3b80d31c833489122ced30e42d3fdf5288322c99ce99093a0ee0338085ee0e2776a520c8978bd8246c126ae9390b3ab33b08f7ab304774003b03780bdc0dd0918c35ab767d241302b6fd19f4c383c90c1482ce49"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x130, 0x1, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x7, 0x0, 0x7fff, 0x2}, 0x10}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x7, 0x1, 0xc874, 0x47}, 0x54}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7ff, 0x1, 0x4, 0x5, 0x3}, 0x6}}]}, {0xad, 0x6, "e81e105b608daee5e7e671aaaebb19198557dfe9e1ea3870d9a970a5c4b609c23dba5320c3d45711d2c6ce7109c971390a0f46561a25cd96c3dba9584cd904c33fdf006fc054265ee410b91a43666880d456a02883db04a5305fa5208ad59db86aba36e8c4c9c0ffae5f75a807820e58f61c893abd9d560db0cd1fac62edee844de74151d262e8af855c91eb5f5c0333f54d4d9c8a8884b3c178148e32cf4793de477aae9273cc2384"}, {0xc, 0x7, {0x1}}, {0xc}}}]}, {0x308, 0x1, [@m_xt={0xf0, 0xf, 0x0, 0x0, {{0x7}, {0x54, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0x76, 0x6, "183fd46c37eb088e89a0f49aa59c454f2b79d01aef6bab94551846e186f52377602995530a62251c20007c0b6a9ebed2db4dcb5e5b4a0e500905e201a67b8c27b83fa7ad04469a0c895a57d6bf87a20af86bcbf24ca7fe0c82f9c3088f611b72b2096019c9ce67848b9855e1cf01b3458129"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0x114, 0xd, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x81, 0x10001, 0x8, 0x52e}, 0x1, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x4, 0x8, 0x8, 0x800}, 0x4, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x39d, 0x9dc, 0x6, 0x4, 0xf7d6}, 0x4, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x80000000, 0x0, 0x8001, 0x86c}, 0x0, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8000, 0xff, 0x7, 0xd43f, 0x9}, 0x6, r1}}]}, {0x47, 0x6, "0c290cdcdd38b18f8a2977ea68efb20da6d4dbd5fbc7cda11651f80a03cf9ea179e8ad6bd60a939f715b5799470223991c41fa3a682dfa95f224fc2d4fa21962cac0d2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_sample={0x100, 0x1e, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0xfff, 0x7ff, 0x1, 0xd, 0xe8}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x80000000, 0x4, 0x5, 0x200}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8000}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x40}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x40000, 0x8, 0x0, 0x8, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}]}, {0x62, 0x6, "6df7124163e51400d6f4b756e07123182e65acf7560acd1797f82072d84ab08a9d26eebdf655d59d56ab9d35c6e6de76cb169ab9b50c5f8f850972be1a750acba87b6ef33c0e1aeacb9865945cf048280397ba19ac2acfa8b7dcc33afcbb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x5e4, 0x1, [@m_nat={0x1ec, 0x16, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x8, 0x4, 0x1, 0xff}, @remote, @empty, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0xfffffff8, 0x20000000, 0x1c0, 0x5}, @dev={0xac, 0x14, 0x14, 0xc}, @multicast2, 0x793cef019c666dc4}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffffe7, 0x1, 0x20000000, 0xffffff7f, 0x9}, @multicast2, @dev={0xac, 0x14, 0x14, 0x2b}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xb237, 0xcf5, 0x20000000, 0x40, 0xd}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x42}, 0xffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x77e0, 0x8, 0xa61, 0x1}, @remote, @empty, 0xff000000}}]}, {0xfc, 0x6, "4edb75496eb571000a4be4efb661817b3762c22b818464807cd95ce52b2d5bef92528f601381265551ae7e170fd98742b1e744ef68416544bc53ffe5134ec8a45a6744d623cec66a4a2bcc996b4c6a646f820243f6ec649b28013c09d44aad87485ff3569d963dc913819d3a8a80b9cc24a73be27357fa80fd23e500bf0438c5f8c4bde9dfa6173dc1cd30bef77f2b763f5c5abd0bed8a9a1c3212a70485fdb32aa2b939e42d57069e46a380f139adfe560f6804a9d84be557b49ad1689ca5ffb0d5b9276e0f806ab8f704ab9b6321f518aae51e57029863c9b461bf23a22069a730bb8e16d4e1d37ab4ed94658da5051a983d110b53b9aa"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xe8, 0x0, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0x7, 0x6, 0x2, 0x5}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @private=0xa010102}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @private=0xa010102}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x73, 0x6, "9ace61d2cf3e156b6edb028978f298ca175496aaf3860560fe005f7d9bbf89ee20e2780a1df3fcfd1b1f7c3281a7e42ba36a3384ee26572ea3b6c50f1be22b71bea45c7d9ce4b01a675ef49f45b9aa1666b757d9387dcdcc6c056699699183a7f0d2db0f4363facf328b0d03434a05"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mpls={0xb8, 0x1f, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x6}, @TCA_MPLS_LABEL={0x8, 0x5, 0x8e3fb}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x5, 0x80, 0x10000006, 0x2, 0xa}, 0x2}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0x210a2639, 0xffffffffffffffee, 0x2, 0x9}, 0x2}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x11}, @TCA_MPLS_TTL={0x5, 0x7, 0x2}]}, {0x2c, 0x6, "e3c69efa65b482120b57eda7ef8b08df9f155065bb9a3f6a156f11e68a6bdfa11368215441f2f66b"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0xac, 0x5, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x7f, 0xf8f294b8a4a2a6dd, 0xfffffd12, 0x5}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x4000000, 0x0, 0x0, 0xffff0000}, 0x37}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xffffffff, 0x1, 0x2d48, 0x5}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8000, 0x20000, 0xffffffffeffffff0, 0x2, 0x6}, 0x2}}]}, {0xb, 0x6, "b99fb8ed105b76"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_mirred={0x1a8, 0xa, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x0, 0x4, 0x1, 0x3}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1d140000, 0x8, 0x3, 0xf931, 0x4d}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfba, 0x400, 0x3, 0x4b99, 0x5}, 0x1, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x9, 0x8, 0x1, 0x8}, 0x2, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x9ba, 0x5, 0x6, 0x3}, 0x2, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0xfff, 0x3, 0x2, 0x3}, 0x1, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0xa, 0x7, 0xffff, 0x18}, 0x1, r1}}]}, {0x99, 0x6, "57430e6aedf6edcac965186d1038727956b21c14970a374ee2d223fb1a481fb11076f231256a1fa35f9dab2971beccc528141ec8849ee5e94f32a008ec480238841e0e9b1ffd84abf2f4ca226c60bbd9ebb6e9ae95ebe41d9d160a902b0b252dd6cf9b5630f2be2fa2230cf6c64ddbdf1c82412f5f4a976f77c5f7b0e2b981d886339f281944f81492733b2fd7431ce6271508c006"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x1998}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) 754.449777ms ago: executing program 5 (id=14711): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000003, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="1803fffffffffffff10000000000000018010000696c6c2500000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095112b620fd5c82d2e03f36a003434d3"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x10000000000000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000300)={0x9, 0x8, 0x4efac0f, {0x4, 0x33e}, 0xd07, 0x4}) setresuid(0xee00, 0xee01, 0xee01) 753.621527ms ago: executing program 3 (id=14712): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) setxattr$security_selinux(&(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0, 0x0, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa20000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = memfd_create(0x0, 0x0) unshare(0x80) write$binfmt_misc(r4, &(0x7f0000000180)="e5", 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, 0x0, 0x7e, 0x2) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x600, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) execveat(r4, 0x0, 0x0, 0x0, 0x1000) 744.109277ms ago: executing program 5 (id=14713): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000018120000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/zoneinfo\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000680)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x2c}, 0x4e24, 0x1, 0x4e22, 0x2, 0x2, 0x80, 0x90, 0x6, r2, r3}, {0x1d0b, 0x1, 0x378, 0x4, 0x7, 0x10, 0x0, 0x6}, {0xb9fd, 0x2, 0x8, 0x1}, 0x8001, 0x6e6bba, 0x0, 0x0, 0x3}, {{@in=@private=0xa010102, 0x4d4, 0x33}, 0x2, @in=@empty, 0x3504, 0x3, 0x0, 0x9, 0x6, 0xb01, 0x3}}, 0xe8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r5}, 0x18) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0x11, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x88}, 0x1, 0x7}, 0x0) 712.283828ms ago: executing program 7 (id=14714): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x2000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000300)={[{@dioread_lock}, {@jqfmt_vfsv1}, {@nouid32}, {@grpquota}]}, 0xfc, 0x580, &(0x7f0000000f80)="$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") statfs(&(0x7f0000000000)='./file1\x00', 0x0) 665.400639ms ago: executing program 3 (id=14715): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, 0xffffffffffffffff}, './file0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x80000058) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r2, 0x0, 0x456d}, 0x18) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 631.620469ms ago: executing program 3 (id=14716): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)={0x18, 0x3e, 0x107, 0xfffffffc, 0x25dfdbf6, {0x1, 0x7c}, [@nested={0x4, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 596.9117ms ago: executing program 3 (id=14717): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000018120000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/zoneinfo\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000680)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x2c}, 0x4e24, 0x1, 0x4e22, 0x2, 0x2, 0x80, 0x90, 0x6, r2, r3}, {0x1d0b, 0x1, 0x378, 0x4, 0x7, 0x10, 0x0, 0x6}, {0xb9fd, 0x2, 0x8, 0x1}, 0x8001, 0x6e6bba, 0x0, 0x0, 0x3}, {{@in=@private=0xa010102, 0x4d4, 0x33}, 0x2, @in=@empty, 0x3504, 0x3, 0x0, 0x9, 0x6, 0xb01, 0x3}}, 0xe8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r5}, 0x18) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0x11, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x88}, 0x1, 0x7}, 0x0) 593.61497ms ago: executing program 7 (id=14718): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b040431f4091308970000000000200012800b00010051727370616e000010000280040012000500130001000000"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40000) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file1\x00', 0x100c085, &(0x7f0000000d00)=ANY=[@ANYRES8=0x0, @ANYBLOB="c0da5b74006e9c47add458a1bd748b7ffa5628dc52f84873cbe6a43cfd29e4198255a0610d383b0e46b2b6457282a9f3caef22979e54c145e6a0ce2850a890af7c4e1fa3628453c70aae32270b0042f1532cf08030eccdca96e2c97aae42cf5d9ec5f0afa4fcc53c8f9289677038d09ae2b1bd2271e0a76e6324df3a2b01a9ed0277d7e8d6f7d463ae62692faa55bdb43dc2bea18eea4a635951fd0a220a835fa24d0700c8f8c245d1d7638b2cae5ed3bec0d2f0415ddff7884bb34ab0cb1598e9c7b92a29005e4090ede480b3412f5c33da5e7c8672bda19fd3d989f8336d69d9e70de142973e7e1f53987b2d"], 0x10, 0x7f4, &(0x7f0000000e40)="$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") 556.033011ms ago: executing program 0 (id=14719): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000003240)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 549.327791ms ago: executing program 7 (id=14720): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 503.259552ms ago: executing program 0 (id=14721): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, 0x0, &(0x7f00000001c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r1 = memfd_create(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) execveat(r1, 0x0, 0x0, 0x0, 0x1000) 500.727001ms ago: executing program 7 (id=14722): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000200)={[], [{@measure}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@obj_user={'obj_user', 0x3d, 'c\xa0\xad.\xd8\xad\xeb|\xb6'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@audit}]}, 0x1, 0x4a3, &(0x7f0000000580)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000190081044e81f782db4cb90402200800fd007c05e8fe55a108001e000140cde8dfe90e4190000900ac00060211000000160012000a0002000d48035c3b61c1d67f01282e8d614230a68000a007a290457f01a705000000000000009100005ee4e11b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e603a6a8a9826835d3a71d95667e006dcdf63951f2155e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e971ad9d3ac052f6dfe4f36bc", 0xca}], 0x1}, 0x40000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000032000000c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000000), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='tlb_flush\x00', r4}, 0x18) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000004c90020052feffff0300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003"]) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000f05000500090000000100000025000000005f00006161"], 0x0, 0x37, 0x0, 0x9}, 0x28) accept(r0, &(0x7f0000000080)=@can, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x3, 0xff) r6 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r6, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) 430.629242ms ago: executing program 0 (id=14723): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, &(0x7f0000000180)=[{0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1, 0x31}, {}, @addr={0x2a, 0x5}}], 0x1c) readv(r2, &(0x7f0000000200)=[{&(0x7f0000000040)=""/59, 0x3b}], 0x1) 1.20982ms ago: executing program 3 (id=14724): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b040431f4091308970000000000200012800b00010051727370616e000010000280040012000500130001000000"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r3 = syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file1\x00', 0x100c085, &(0x7f0000000d00)=ANY=[@ANYRES8=0x0, @ANYBLOB="c0da5b74006e9c47add458a1bd748b7ffa5628dc52f84873cbe6a43cfd29e4198255a0610d383b0e46b2b6457282a9f3caef22979e54c145e6a0ce2850a890af7c4e1fa3628453c70aae32270b0042f1532cf08030eccdca96e2c97aae42cf5d9ec5f0afa4fcc53c8f9289677038d09ae2b1bd2271e0a76e6324df3a2b01a9ed0277d7e8d6f7d463ae62692faa55bdb43dc2bea18eea4a635951fd0a220a835fa24d0700c8f8c245d1d7638b2cae5ed3bec0d2f0415ddff7884bb34ab0cb1598e9c7b92a29005e4090ede480b3412f5c33da5e7c8672bda19fd3d989f8336d69d9e70de142973e7e1f53987b2d"], 0x10, 0x7f4, &(0x7f0000000e40)="$eJzs3U9oHOfZAPBnFMl2FD5/Id9HPmMcZ2znA5s6ymqVKBU5pJvVSJ5ktSt2V8WmlMTEcjCWk5AQ0pjS1JekLS2lpx7TXEMuubUUWuih7anQHHrpoRDIpSUtLZSWUnDZ2V1r9Wcl/5HlNP39RPadfeeZd953drLPznpnJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACASKqzpdJkErW8vnQ6Ha4622wsbDG/395P1xRbrDci6fwX+/bFgW7Vgf9dnX1/5+FoHOo+OxT7OsW+uHzP/fc+8T+jI/3lt+jQzToyfNbY4JMk4uudTl08u7Ky/Mpt6Mgu+taPexP7rnuRv1/tPM5n9bzVyBcq81matxrpzPR06ZFTc610Lq9lrTOtdraQVptZpd1opserJ9LJmZmpNJs401iqz89Walm/8vGHy6XSdPr0xGJWabYa9UeenmhVT+W1Wl6fL2LKpdejE/N4Z0d8Jm+n7ayykKbnL6wsT23X1U7Q5JqavWt2nEMP3fvxax/95cJyZ4cc1kjS2zHLk5Pl8uT0YzOPPV4qjZZL5bUVpXXiWkSMRHQibstOy511zyZ1o709ZsOMiKv/vTNv3nCLRnr5P2qRRz2W4nSkkcZI8bj6NxbVmI1mNGKh8/w3Y+vmb8j////IH3+11XoH838/yx9YnX0wivx/uPvs8LD8v6EXO/A3OqzV+vvd3gzWvRpvxOW4GGdjJVZiOV65mTXuWd/qbfwb2dn25iOLeuTRikbksRCVoibt1aQxE9MxHaV4Nk7FXLQijbnIoxZZtOJMtKIdWbFHVaMZWVSiHY1oRhrHoxonIo3JmImZmIo0spiIM9GIpajHfMxGpWjlfFwotvvUun7d/7XnfvTCrz9+pzN9LWhyi4EknQ9znaA/bxG0Id3fQP7vRIz09u5dyUnskn03+Kru0Ds33LqrRf4fvdPdAAAAAG6jpPj2PYmIsXigmJrLa9mX7nS3AAAAgB1U/K75UKcY60w9EEnn+L+0SeSHu943AAAAYGckxTl2SUSMx4Pdqf7pUpt9CQAAAAD8Gyr+/f9wpxiPeLOocPwPAAAAnzHfGHaN/Y/29K6x21rcm/zkT9FsjiVXFk8/lFyqdOIql+7qLtcrvnitxfbcwWR/r5GimB69fE8SEaPV7FDSv/rlP/d2y0+Kx4OrFyAcdq3/ZJsOxNYdKJ7Ft+NIN+bIuW55rj+nu5bxubyWTVQbtScmk96XI+3XXrzwlSiG/836wv4kzl9YWZ54/qWVc0VfrnRauXKpd3n4pL9URPeEii36crW3BeKBzUc8VpyI0VvveHe9pcHx964mO7L1+JPBdb4VR7sxR8e75fja8e/rrHNy4onJqFT2j7Sz0+3Xrg6MvteLydWR7+2PNrmBV+GtONaNOXb8WLfYpBflNb14cWMvyoPb//q2xXX34p0jb57+688bSTa1XS+mbrEXAHfK+eKqP6tZ6O4iC/3jalcnoa3Lu3f3l7yRd7nzq58y+ssP5LrR2JDd05vJ7m/F8W7M8e7nidGDm+SV0ibv6C9fePkXvXf0R9/7/g++fPiXH6zL6zfQi/fiRDemV8R9PxuSYztj/s66rPpuZ4l3h663VSsnr++dGku6Nx+Kyw9fuHT2heUXll8sl6emS4+WSo+VY6z4qNArhvRU5gH4z7bdPXY++Oq10GF34Uke3eao+r5rPymYiOfjpViJc3GyONsgIh7cvNXxgZ8hnNzmqHV84A4vJ7c5tlyNLa+P3XssiSGxUwNb7P++VxR/u00vCADsgqPb5OEk7u3Of/2/ekusi7grSU5uc9y9Npef6N44t390HMNz+aDf98rP3/YtAgCffVnzk2S8/XbSbOaLz07OzExW2qeytNmoPpM289n5LM3r7axZPVWpz2fpYrPRblT7Xx3PZq20tbS42Gi207lGM11stPLTxZ3f096t31vZQqXezqutxVpWaWVptVFvV6rtdDZvVdPFpadqeetU1iwWbi1m1Xwur1baeaOethpLzWo2kaatLBsIzGezejufy7OxNK+ni818odK8EhG1pYUsnc1a1Wa+2G50G+yvK6/PNZoLRbMTG4f/h93e3gDwafDqG5cvnl1ZWX7l5iZ+ez3Bd3qMAMBasjQAAAAAAAAAAAAAAHz6bTxdr1N7QycCjsVNnz746t64lbMPP3sTn3u/+7LsRIO30s7da17TPb2d5c5vnxueeO7JJy+u1iSjg5v3qTcPnPpdFv3RbdHO5v+nbHaq69v7I/b88Lvdmi8MCU5Gd3ikH0bETSx+NdkiZvffiwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgO/8KAAD//wifUTs=") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f0000000000)={0x1, 0x8, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x8, &(0x7f0000000300)=ANY=[@ANYRES8], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e21, @empty}, {0x2, 0x4e21, @broadcast}, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0xfffffffffffffffe, 0xfff5}) 0s ago: executing program 5 (id=14725): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x8001000, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) r5 = dup(r4) ioctl$F2FS_IOC_RESIZE_FS(r5, 0x4008f510, &(0x7f0000000400)=0x10000) r6 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) sendfile(r5, r6, 0x0, 0x8000fffffffe) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) dup2(r2, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x10000}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x4000c00) sendmsg$nl_route(r0, 0x0, 0x8000) kernel console output (not intermixed with test programs): syz.1.14037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630c6fe9a9 code=0x7ffc0000 [ 903.806924][ T29] audit: type=1326 audit(1753659562.318:58541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24345 comm="syz.5.14044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f744bb7e9a9 code=0x7ffc0000 [ 903.811910][T24346] xt_hashlimit: max too large, truncated to 1048576 [ 903.840787][T24348] netlink: 'syz.0.14045': attribute type 1 has an invalid length. [ 903.855053][T24348] 8021q: adding VLAN 0 to HW filter on device bond6 [ 903.900575][T24353] xt_hashlimit: max too large, truncated to 1048576 [ 903.906619][T24357] netlink: 32 bytes leftover after parsing attributes in process `syz.6.14049'. [ 904.025358][T13731] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 904.125823][T24368] loop3: detected capacity change from 0 to 512 [ 904.137378][T24368] ext4: Unknown parameter 'measure' [ 904.161316][T24370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14054'. [ 904.295283][T24377] syzkaller1: entered promiscuous mode [ 904.300821][T24377] syzkaller1: entered allmulticast mode [ 904.329195][T24381] netlink: 'syz.5.14057': attribute type 1 has an invalid length. [ 904.353997][T24381] 8021q: adding VLAN 0 to HW filter on device bond1 [ 904.389843][T24386] xt_hashlimit: max too large, truncated to 1048576 [ 904.466975][T24393] loop1: detected capacity change from 0 to 512 [ 905.332422][T24400] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 905.339079][T24400] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 905.346732][T24400] vhci_hcd vhci_hcd.0: Device attached [ 905.353820][T24403] vhci_hcd: connection closed [ 905.354012][T22876] vhci_hcd: stop threads [ 905.363176][T22876] vhci_hcd: release socket [ 905.367635][T22876] vhci_hcd: disconnect device [ 905.388924][T24402] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 905.395559][T24402] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 905.403251][T24402] vhci_hcd vhci_hcd.0: Device attached [ 905.417262][T24393] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 905.563420][T24404] vhci_hcd: connection closed [ 905.564572][T22876] vhci_hcd: stop threads [ 905.573827][T22876] vhci_hcd: release socket [ 905.578323][T22876] vhci_hcd: disconnect device [ 905.591942][T24393] EXT4-fs (loop1): orphan cleanup on readonly fs [ 905.599114][T24393] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.14061: bad orphan inode 15 [ 905.609866][T24393] ext4_test_bit(bit=14, block=18) = 1 [ 905.615415][T24393] is_bad_inode(inode)=0 [ 905.619620][T24393] NEXT_ORPHAN(inode)=1023 [ 905.623990][T24393] max_ino=32 [ 905.627314][T24393] i_nlink=0 [ 905.632392][T24393] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2962: inode #15: comm syz.1.14061: corrupted xattr block 19: e_value size too large [ 905.648498][T24393] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 905.658266][T24393] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 905.663921][ T36] vhci_hcd: vhci_device speed not set [ 905.728543][T24412] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 905.735230][T24412] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 905.742860][T24412] vhci_hcd vhci_hcd.0: Device attached [ 905.808668][T24417] batadv0: left allmulticast mode [ 905.813926][T24417] batadv0: left promiscuous mode [ 905.819018][T24417] bridge0: port 1(batadv0) entered disabled state [ 905.907780][T24413] vhci_hcd: connection closed [ 905.908141][T22876] vhci_hcd: stop threads [ 905.917283][T22876] vhci_hcd: release socket [ 905.921794][T22876] vhci_hcd: disconnect device [ 905.935618][T24420] netlink: 14 bytes leftover after parsing attributes in process `syz.0.14066'. [ 905.972346][ T3406] vhci_hcd: vhci_device speed not set [ 906.390212][T24438] xt_hashlimit: max too large, truncated to 1048576 [ 906.418506][T24442] syzkaller1: entered promiscuous mode [ 906.424307][T24442] syzkaller1: entered allmulticast mode [ 906.506910][T13986] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 906.538875][T24454] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.594554][T24454] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.616671][T24468] loop1: detected capacity change from 0 to 1024 [ 906.645870][T24468] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 906.662147][T24454] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.679194][T13986] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 906.714505][T24454] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.770363][T24454] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.783896][T24454] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.796667][T24454] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.809889][T24454] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.861937][T24512] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 906.861937][T24512] program syz.0.14082 not setting count and/or reply_len properly [ 906.883135][T24512] __nla_validate_parse: 8 callbacks suppressed [ 906.883154][T24512] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14082'. [ 906.931342][T24521] xt_hashlimit: max too large, truncated to 1048576 [ 908.042080][T24556] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 908.048746][T24556] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 908.056681][T24556] vhci_hcd vhci_hcd.0: Device attached [ 908.081973][T24564] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 908.081973][T24564] program syz.6.14087 not setting count and/or reply_len properly [ 908.119138][T24564] netlink: 32 bytes leftover after parsing attributes in process `syz.6.14087'. [ 908.128461][T24558] vhci_hcd: connection closed [ 908.129896][ T2643] vhci_hcd: stop threads [ 908.138967][ T2643] vhci_hcd: release socket [ 908.143483][ T2643] vhci_hcd: disconnect device [ 908.176815][T24570] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14088'. [ 908.185967][T24570] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14088'. [ 908.195074][T24570] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14088'. [ 908.603017][T24617] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.678318][T24623] SELinux: ebitmap: truncated map [ 908.686272][T24623] SELinux: failed to load policy [ 908.693965][T24617] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.755208][T24617] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.794517][T24617] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.954401][T24782] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14105'. [ 909.987474][T24786] serio: Serial port ttyS3 [ 910.048844][T24617] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.060681][T24617] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.074547][T24617] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.087043][T24617] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.288096][T24830] loop1: detected capacity change from 0 to 512 [ 910.295030][T24830] EXT4-fs: Ignoring removed mblk_io_submit option [ 910.301770][T24830] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 910.314688][T24830] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 910.323770][T24830] System zones: 1-12 [ 910.328257][T24830] EXT4-fs (loop1): 1 truncate cleaned up [ 910.335243][T24830] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 910.374095][T13986] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 910.834653][T24928] netlink: 180 bytes leftover after parsing attributes in process `syz.5.14118'. [ 910.939102][T24943] bridge0: port 1(batadv0) entered blocking state [ 910.945807][T24943] bridge0: port 1(batadv0) entered disabled state [ 910.952744][T24943] batadv0: entered allmulticast mode [ 910.958709][T24943] batadv0: entered promiscuous mode [ 910.961408][T24945] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 910.961408][T24945] program syz.3.14120 not setting count and/or reply_len properly [ 910.969848][T24943] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14119'. [ 910.983069][T24945] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14120'. [ 911.000056][T24943] batadv0 (unregistering): left allmulticast mode [ 911.006598][T24943] batadv0 (unregistering): left promiscuous mode [ 911.013090][T24943] bridge0: port 1(batadv0) entered disabled state [ 911.025941][T24945] loop3: detected capacity change from 0 to 764 [ 911.033457][T24945] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 911.043713][ T29] kauditd_printk_skb: 212 callbacks suppressed [ 911.043756][ T29] audit: type=1326 audit(1753659569.558:58754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24944 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4afe17e9a9 code=0x7ffc0000 [ 911.073148][ T29] audit: type=1326 audit(1753659569.558:58755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24944 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4afe17e9a9 code=0x7ffc0000 [ 911.096259][ T29] audit: type=1326 audit(1753659569.558:58756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24944 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f4afe17e9a9 code=0x7ffc0000 [ 911.121871][ T29] audit: type=1326 audit(1753659569.588:58757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24944 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4afe17e9a9 code=0x7ffc0000 [ 911.144976][ T29] audit: type=1326 audit(1753659569.588:58758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24944 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4afe17e9a9 code=0x7ffc0000 [ 911.168062][ T29] audit: type=1326 audit(1753659569.588:58759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24944 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4afe17e9a9 code=0x7ffc0000 [ 911.206384][ T29] audit: type=1326 audit(1753659569.718:58760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24944 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4afe17e9a9 code=0x7ffc0000 [ 911.230809][ T29] audit: type=1326 audit(1753659569.718:58761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24944 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4afe17e9a9 code=0x7ffc0000 [ 911.253919][ T29] audit: type=1326 audit(1753659569.728:58762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24944 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4afe17e9a9 code=0x7ffc0000 [ 911.276878][ T29] audit: type=1326 audit(1753659569.728:58763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24944 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4afe17e9a9 code=0x7ffc0000 [ 911.330088][T24953] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.353252][T24957] loop3: detected capacity change from 0 to 1024 [ 911.364020][T24957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 911.378262][T24953] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.397951][T13731] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 911.435772][T24961] SELinux: ebitmap: truncated map [ 911.442522][T24961] SELinux: failed to load policy [ 911.448957][T24953] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.465222][T24961] loop3: detected capacity change from 0 to 1024 [ 911.469165][T24963] xt_hashlimit: max too large, truncated to 1048576 [ 911.483719][T24961] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 911.510426][T13731] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 911.537225][T24969] xt_hashlimit: max too large, truncated to 1048576 [ 911.545970][T24953] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.581080][T24972] syzkaller1: entered promiscuous mode [ 911.586832][T24972] syzkaller1: entered allmulticast mode [ 911.609969][T24953] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.622960][T24953] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.635520][T24953] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.648379][T24953] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.686638][T24984] netlink: 180 bytes leftover after parsing attributes in process `syz.1.14131'. [ 912.530834][T25121] xt_hashlimit: max too large, truncated to 1048576 [ 912.569000][T25125] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 912.569000][T25125] program syz.5.14140 not setting count and/or reply_len properly [ 912.653204][T25129] __nla_validate_parse: 3 callbacks suppressed [ 912.653222][T25129] netlink: 14 bytes leftover after parsing attributes in process `syz.1.14142'. [ 912.688805][T25131] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.703682][T25129] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14142'. [ 912.721738][T25129] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14142'. [ 912.732461][T25131] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.760530][T25133] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 912.760530][T25133] program syz.1.14144 not setting count and/or reply_len properly [ 912.779938][T25133] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14144'. [ 912.795452][T25131] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.805435][T25133] loop1: detected capacity change from 0 to 764 [ 912.814002][T25133] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 912.854856][T25131] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.979472][T25143] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.024869][T25143] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.041715][T25145] xt_hashlimit: max too large, truncated to 1048576 [ 913.075154][T25143] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.227175][T25143] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.345243][T25169] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 913.351979][T25169] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 913.359583][T25169] vhci_hcd vhci_hcd.0: Device attached [ 913.451545][T25143] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.505676][T25143] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.563964][T25143] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.604028][ T2958] usb 11-1: new high-speed USB device number 50 using vhci_hcd [ 913.620321][T25143] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.735463][T25188] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14155'. [ 913.744614][T25188] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14155'. [ 913.923615][T25170] vhci_hcd: connection reset by peer [ 913.929842][T22876] vhci_hcd: stop threads [ 913.934168][T22876] vhci_hcd: release socket [ 913.938687][T22876] vhci_hcd: disconnect device [ 914.109303][T25131] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.120728][T25131] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.134167][T25131] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.147498][T25131] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.304041][T25297] xt_hashlimit: max too large, truncated to 1048576 [ 914.491767][T25305] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 914.498444][T25305] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 914.506051][T25305] vhci_hcd vhci_hcd.0: Device attached [ 914.762371][ T3406] usb 13-1: new high-speed USB device number 50 using vhci_hcd [ 914.780347][T25321] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14164'. [ 914.837253][T25329] serio: Serial port ttyS3 [ 914.908921][T25343] netlink: 36 bytes leftover after parsing attributes in process `syz.5.14167'. [ 914.918049][T25343] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14167'. [ 914.927115][T25343] netlink: 36 bytes leftover after parsing attributes in process `syz.5.14167'. [ 915.013163][T25306] vhci_hcd: connection reset by peer [ 915.019144][ T2642] vhci_hcd: stop threads [ 915.023444][ T2642] vhci_hcd: release socket [ 915.027907][ T2642] vhci_hcd: disconnect device [ 915.071322][T25370] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 915.071322][T25370] program syz.0.14170 not setting count and/or reply_len properly [ 915.291729][T25384] syzkaller1: entered promiscuous mode [ 915.297332][T25384] syzkaller1: entered allmulticast mode [ 915.689420][T25397] serio: Serial port ttyS3 [ 915.801607][T25413] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 915.811850][T25413] SELinux: failed to load policy [ 915.862941][T25425] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 915.862941][T25425] program syz.5.14182 not setting count and/or reply_len properly [ 915.887316][T25430] loop3: detected capacity change from 0 to 1024 [ 915.942731][T25430] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 915.978084][T13731] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 916.660931][T25568] syzkaller1: entered promiscuous mode [ 916.666550][T25568] syzkaller1: entered allmulticast mode [ 917.170791][ T29] kauditd_printk_skb: 266 callbacks suppressed [ 917.170871][ T29] audit: type=1326 audit(1753659575.678:59030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25571 comm="syz.6.14196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a977e9a9 code=0x7ffc0000 [ 917.234678][ T29] audit: type=1326 audit(1753659575.678:59031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25571 comm="syz.6.14196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a977e9a9 code=0x7ffc0000 [ 917.258394][ T29] audit: type=1326 audit(1753659575.678:59032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25571 comm="syz.6.14196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2a977e9a9 code=0x7ffc0000 [ 917.282156][ T29] audit: type=1326 audit(1753659575.678:59033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25571 comm="syz.6.14196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a977e9a9 code=0x7ffc0000 [ 917.306171][ T29] audit: type=1326 audit(1753659575.678:59034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25571 comm="syz.6.14196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2a977e9a9 code=0x7ffc0000 [ 917.330405][ T29] audit: type=1326 audit(1753659575.678:59035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25571 comm="syz.6.14196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a977e9a9 code=0x7ffc0000 [ 917.354122][ T29] audit: type=1326 audit(1753659575.678:59036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25571 comm="syz.6.14196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff2a977d310 code=0x7ffc0000 [ 917.354158][ T29] audit: type=1326 audit(1753659575.678:59037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25571 comm="syz.6.14196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a977e9a9 code=0x7ffc0000 [ 917.354253][ T29] audit: type=1326 audit(1753659575.678:59038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25571 comm="syz.6.14196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2a977e9a9 code=0x7ffc0000 [ 917.354277][ T29] audit: type=1326 audit(1753659575.678:59039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25571 comm="syz.6.14196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a977e9a9 code=0x7ffc0000 [ 917.440469][T25585] serio: Serial port ttyS3 [ 917.765242][T25635] __nla_validate_parse: 17 callbacks suppressed [ 917.765261][T25635] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14209'. [ 917.994187][T25668] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14213'. [ 918.003445][T25668] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14213'. [ 918.637014][T25753] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14219'. [ 918.646644][T25753] netlink: 32 bytes leftover after parsing attributes in process `syz.5.14219'. [ 918.692550][ T2958] vhci_hcd: vhci_device speed not set [ 918.953017][T25767] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14225'. [ 918.962112][T25767] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14225'. [ 919.016101][T25779] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14230'. [ 919.026833][T25779] netlink: 32 bytes leftover after parsing attributes in process `syz.6.14230'. [ 919.059741][T25783] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14231'. [ 919.086960][T25785] serio: Serial port ttyS3 [ 919.163443][T25791] loop1: detected capacity change from 0 to 512 [ 919.170405][T25791] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 919.179512][T25791] EXT4-fs (loop1): orphan cleanup on readonly fs [ 919.186045][T25791] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.14234: bad orphan inode 15 [ 919.196676][T25791] ext4_test_bit(bit=14, block=18) = 1 [ 919.202096][T25791] is_bad_inode(inode)=0 [ 919.206341][T25791] NEXT_ORPHAN(inode)=1023 [ 919.210698][T25791] max_ino=32 [ 919.213997][T25791] i_nlink=0 [ 919.217376][T25791] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2962: inode #15: comm syz.1.14234: corrupted xattr block 19: e_value size too large [ 919.231905][T25791] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 919.241373][T25791] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 919.389980][T25794] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 919.396616][T25794] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 919.404306][T25794] vhci_hcd vhci_hcd.0: Device attached [ 919.485618][T25798] loop3: detected capacity change from 0 to 512 [ 919.492889][T25798] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 919.501908][T25798] EXT4-fs (loop3): orphan cleanup on readonly fs [ 919.508645][T25798] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.14235: bad orphan inode 15 [ 919.519267][T25798] ext4_test_bit(bit=14, block=18) = 1 [ 919.524737][T25798] is_bad_inode(inode)=0 [ 919.528957][T25798] NEXT_ORPHAN(inode)=1023 [ 919.533362][T25798] max_ino=32 [ 919.536573][T25798] i_nlink=0 [ 919.540126][T25798] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.14235: corrupted xattr block 19: e_value size too large [ 919.556152][T25798] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 919.566013][T25798] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 919.722389][ T3392] usb 3-1: new high-speed USB device number 43 using vhci_hcd [ 919.832697][T25824] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 919.839337][T25824] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 919.847005][T25824] vhci_hcd vhci_hcd.0: Device attached [ 919.893081][ T3406] vhci_hcd: vhci_device speed not set [ 920.059659][T25832] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.073991][T25795] vhci_hcd: connection reset by peer [ 920.079444][ T2638] vhci_hcd: stop threads [ 920.083829][ T2638] vhci_hcd: release socket [ 920.088310][ T2638] vhci_hcd: disconnect device [ 920.095211][ T2958] usb 7-1: new high-speed USB device number 44 using vhci_hcd [ 920.105270][T25832] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.174289][T25832] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.238641][T25832] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.310321][T25832] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.323732][T25825] vhci_hcd: connection reset by peer [ 920.330267][ T2638] vhci_hcd: stop threads [ 920.334697][ T2638] vhci_hcd: release socket [ 920.339134][ T2638] vhci_hcd: disconnect device [ 920.348257][T25832] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.360585][T25832] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.373385][T25832] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.537690][T13986] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 920.572202][T25896] serio: Serial port ttyS3 [ 920.656105][T25912] bridge0: port 1(batadv0) entered blocking state [ 920.662667][T25912] bridge0: port 1(batadv0) entered disabled state [ 920.669589][T25912] batadv0: entered allmulticast mode [ 920.675848][T25912] batadv0: entered promiscuous mode [ 920.685492][T25912] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 920.872837][T13731] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 921.064230][T25983] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 921.064230][T25983] program syz.6.14250 not setting count and/or reply_len properly [ 921.162410][ T2644] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 921.171698][ T2644] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 921.421000][T26023] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.474554][T26023] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.637966][T26023] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.749955][T26023] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.823429][T26056] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 921.823429][T26056] program syz.3.14257 not setting count and/or reply_len properly [ 922.110046][T26090] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12) [ 922.116771][T26090] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 922.124361][T26090] vhci_hcd vhci_hcd.0: Device attached [ 922.372303][ T10] usb 13-1: new high-speed USB device number 51 using vhci_hcd [ 922.636854][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 922.636895][ T29] audit: type=1326 audit(1753659581.148:59187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26117 comm="syz.5.14261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f744bb7e9a9 code=0x7ffc0000 [ 922.682022][ T29] audit: type=1326 audit(1753659581.178:59188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26117 comm="syz.5.14261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f744bb7e9a9 code=0x7ffc0000 [ 922.705831][ T29] audit: type=1326 audit(1753659581.178:59189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26117 comm="syz.5.14261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f744bb7e9a9 code=0x7ffc0000 [ 922.729541][ T29] audit: type=1326 audit(1753659581.178:59190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26117 comm="syz.5.14261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f744bb7e9a9 code=0x7ffc0000 [ 922.729895][T26091] vhci_hcd: connection reset by peer [ 922.753313][ T29] audit: type=1326 audit(1753659581.178:59191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26117 comm="syz.5.14261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f744bb7e9a9 code=0x7ffc0000 [ 922.782384][ T29] audit: type=1326 audit(1753659581.178:59192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26117 comm="syz.5.14261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f744bb7e9a9 code=0x7ffc0000 [ 922.802457][ T2646] vhci_hcd: stop threads [ 922.806082][ T29] audit: type=1326 audit(1753659581.178:59193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26117 comm="syz.5.14261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f744bb7d310 code=0x7ffc0000 [ 922.810294][ T2646] vhci_hcd: release socket [ 922.810311][ T2646] vhci_hcd: disconnect device [ 922.833916][ T29] audit: type=1326 audit(1753659581.178:59194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26117 comm="syz.5.14261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f744bb7e9a9 code=0x7ffc0000 [ 922.866821][ T29] audit: type=1326 audit(1753659581.178:59195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26117 comm="syz.5.14261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f744bb7e9a9 code=0x7ffc0000 [ 922.890537][ T29] audit: type=1326 audit(1753659581.178:59196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26117 comm="syz.5.14261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f744bb7e9a9 code=0x7ffc0000 [ 922.936657][T26135] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 922.936657][T26135] program syz.3.14263 not setting count and/or reply_len properly [ 922.958162][T26135] loop3: detected capacity change from 0 to 764 [ 922.970344][T26135] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 923.138769][T26144] __nla_validate_parse: 6 callbacks suppressed [ 923.138784][T26144] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14265'. [ 923.166607][T26146] loop3: detected capacity change from 0 to 512 [ 923.175420][T26146] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 923.184529][T26146] EXT4-fs (loop3): orphan cleanup on readonly fs [ 923.191025][T26146] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.14266: bad orphan inode 15 [ 923.201535][T26146] ext4_test_bit(bit=14, block=18) = 1 [ 923.207056][T26146] is_bad_inode(inode)=0 [ 923.211210][T26146] NEXT_ORPHAN(inode)=1023 [ 923.215592][T26146] max_ino=32 [ 923.218795][T26146] i_nlink=0 [ 923.222037][T26146] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.14266: corrupted xattr block 19: e_value size too large [ 923.236522][T26146] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 923.246038][T26146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 923.493946][T26154] xt_hashlimit: max too large, truncated to 1048576 [ 923.771375][T26162] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12) [ 923.778021][T26162] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 923.785715][T26162] vhci_hcd vhci_hcd.0: Device attached [ 923.844261][T26168] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 923.844261][T26168] program syz.1.14272 not setting count and/or reply_len properly [ 923.901436][T26170] netlink: 14 bytes leftover after parsing attributes in process `syz.1.14273'. [ 923.973720][T26171] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14273'. [ 924.248348][T26171] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14273'. [ 924.299266][T13731] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 924.348441][T26163] vhci_hcd: connection closed [ 924.348699][ T2638] vhci_hcd: stop threads [ 924.357775][ T2638] vhci_hcd: release socket [ 924.359484][T26180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14276'. [ 924.362207][ T2638] vhci_hcd: disconnect device [ 924.367100][T26178] loop1: detected capacity change from 0 to 512 [ 924.373631][T26180] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14276'. [ 924.391337][T26178] EXT4-fs: Ignoring removed mblk_io_submit option [ 924.400671][T26178] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 924.421883][T26178] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 924.427169][T26182] loop3: detected capacity change from 0 to 512 [ 924.431555][T26178] System zones: 1-12 [ 924.440858][T26182] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 924.450056][T26182] EXT4-fs (loop3): orphan cleanup on readonly fs [ 924.450125][T26178] EXT4-fs (loop1): 1 truncate cleaned up [ 924.457106][T26182] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.14277: bad orphan inode 15 [ 924.473175][T26182] ext4_test_bit(bit=14, block=18) = 1 [ 924.476683][T26178] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 924.478579][T26182] is_bad_inode(inode)=0 [ 924.478635][T26182] NEXT_ORPHAN(inode)=1023 [ 924.478643][T26182] max_ino=32 [ 924.478650][T26182] i_nlink=0 [ 924.478903][T26182] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.14277: corrupted xattr block 19: e_value size too large [ 924.522637][T26182] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 924.534359][T26182] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 924.591767][T13986] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 924.948994][T26197] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14279'. [ 924.960469][ T3392] vhci_hcd: vhci_device speed not set [ 924.967726][T26197] netlink: 32 bytes leftover after parsing attributes in process `syz.5.14279'. [ 924.992640][T26195] netlink: 180 bytes leftover after parsing attributes in process `syz.6.14280'. [ 925.035698][T26192] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 925.042361][T26192] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 925.050061][T26192] vhci_hcd vhci_hcd.0: Device attached [ 925.129518][T26203] netlink: 14 bytes leftover after parsing attributes in process `syz.5.14282'. [ 925.396484][T26198] vhci_hcd: connection reset by peer [ 925.403618][ T2638] vhci_hcd: stop threads [ 925.407872][ T2638] vhci_hcd: release socket [ 925.412470][ T2638] vhci_hcd: disconnect device [ 925.456260][T26211] xt_hashlimit: max too large, truncated to 1048576 [ 925.482781][ T2958] vhci_hcd: vhci_device speed not set [ 925.931862][T26023] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.953370][T26023] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.953656][T13731] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 925.966656][T26023] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.982577][T26023] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.067349][T26298] loop3: detected capacity change from 0 to 512 [ 926.088267][T26298] EXT4-fs: Ignoring removed mblk_io_submit option [ 926.100185][T26298] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 926.118704][T26298] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 926.128806][T26298] System zones: 1-12 [ 926.137644][T26298] EXT4-fs (loop3): 1 truncate cleaned up [ 926.151268][T26298] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 926.214737][T13731] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 926.260339][T26339] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 926.260339][T26339] program syz.3.14293 not setting count and/or reply_len properly [ 926.288249][T26339] loop3: detected capacity change from 0 to 764 [ 926.297583][T26339] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 926.669510][T26366] loop3: detected capacity change from 0 to 512 [ 926.685325][T26366] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 926.697112][T26369] xt_hashlimit: max too large, truncated to 1048576 [ 926.710198][T26366] EXT4-fs (loop3): orphan cleanup on readonly fs [ 926.721513][T26376] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.732138][T26366] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.14295: bad orphan inode 15 [ 926.743187][T26366] ext4_test_bit(bit=14, block=18) = 1 [ 926.748590][T26366] is_bad_inode(inode)=0 [ 926.752966][T26366] NEXT_ORPHAN(inode)=1023 [ 926.757423][T26366] max_ino=32 [ 926.760683][T26366] i_nlink=0 [ 926.764530][T26366] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.14295: corrupted xattr block 19: e_value size too large [ 926.780301][T26366] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 926.789926][T26366] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 926.915264][T26376] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.052522][T26385] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 927.059182][T26385] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 927.066822][T26385] vhci_hcd vhci_hcd.0: Device attached [ 927.076788][T26376] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.134797][T26376] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.228126][T26376] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.245825][T26392] loop1: detected capacity change from 0 to 512 [ 927.260564][T26376] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.269455][T26392] ext4: Unknown parameter 'measure' [ 927.286873][T26376] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.311504][T26376] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.319875][ T1105] usb 7-1: new high-speed USB device number 45 using vhci_hcd [ 927.492043][T26386] vhci_hcd: connection reset by peer [ 927.497762][ T2638] vhci_hcd: stop threads [ 927.502292][ T2638] vhci_hcd: release socket [ 927.506736][ T2638] vhci_hcd: disconnect device [ 927.550718][ T10] vhci_hcd: vhci_device speed not set [ 927.773082][ T29] kauditd_printk_skb: 348 callbacks suppressed [ 927.773149][ T29] audit: type=1326 audit(1753659586.288:59545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26408 comm="syz.0.14309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e605e9a9 code=0x7ffc0000 [ 927.822960][ T29] audit: type=1326 audit(1753659586.318:59546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26408 comm="syz.0.14309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ff7e605e9a9 code=0x7ffc0000 [ 927.846671][ T29] audit: type=1326 audit(1753659586.318:59547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26408 comm="syz.0.14309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e605e9a9 code=0x7ffc0000 [ 927.870484][ T29] audit: type=1326 audit(1753659586.318:59548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26408 comm="syz.0.14309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff7e605e9a9 code=0x7ffc0000 [ 927.894300][ T29] audit: type=1326 audit(1753659586.318:59549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26408 comm="syz.0.14309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e605e9a9 code=0x7ffc0000 [ 927.917990][ T29] audit: type=1326 audit(1753659586.318:59550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26408 comm="syz.0.14309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7ff7e605e9a9 code=0x7ffc0000 [ 927.947951][ T29] audit: type=1326 audit(1753659586.458:59551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26408 comm="syz.0.14309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e605e9a9 code=0x7ffc0000 [ 927.971729][ T29] audit: type=1326 audit(1753659586.458:59552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26408 comm="syz.0.14309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e605e9a9 code=0x7ffc0000 [ 928.093269][T13731] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 928.129098][T26453] loop3: detected capacity change from 0 to 512 [ 928.136474][T26453] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 928.164978][T26453] EXT4-fs (loop3): orphan cleanup on readonly fs [ 928.171577][T26453] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.14313: bad orphan inode 15 [ 928.182203][T26453] ext4_test_bit(bit=14, block=18) = 1 [ 928.187660][T26453] is_bad_inode(inode)=0 [ 928.191857][T26453] NEXT_ORPHAN(inode)=1023 [ 928.196224][T26453] max_ino=32 [ 928.199440][T26453] i_nlink=0 [ 928.234620][T26453] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.14313: corrupted xattr block 19: e_value size too large [ 928.251626][T26464] __nla_validate_parse: 14 callbacks suppressed [ 928.251638][T26464] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14314'. [ 928.267078][T26464] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14314'. [ 928.272403][T26453] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 928.276213][T26464] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14314'. [ 928.301575][T26453] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 928.314191][T26464] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14314'. [ 928.347894][T26471] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 928.354516][T26471] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 928.362206][T26471] vhci_hcd vhci_hcd.0: Device attached [ 928.702625][ T9] usb 1-1: new high-speed USB device number 47 using vhci_hcd [ 928.885555][T26472] vhci_hcd: connection reset by peer [ 928.891942][ T2642] vhci_hcd: stop threads [ 928.896316][ T2642] vhci_hcd: release socket [ 928.900749][ T2642] vhci_hcd: disconnect device [ 928.908296][T13731] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 928.934104][T26482] loop1: detected capacity change from 0 to 512 [ 928.947826][T26482] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 928.956407][ T29] audit: type=1326 audit(1753659587.458:59553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26506 comm="syz.6.14319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a977e9a9 code=0x7ffc0000 [ 928.980392][ T29] audit: type=1326 audit(1753659587.458:59554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26506 comm="syz.6.14319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a977e9a9 code=0x7ffc0000 [ 929.011872][T26482] EXT4-fs (loop1): orphan cleanup on readonly fs [ 929.018717][T26482] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.14315: bad orphan inode 15 [ 929.030583][T26482] ext4_test_bit(bit=14, block=18) = 1 [ 929.036063][T26482] is_bad_inode(inode)=0 [ 929.040257][T26482] NEXT_ORPHAN(inode)=1023 [ 929.044678][T26482] max_ino=32 [ 929.047875][T26482] i_nlink=0 [ 929.052901][T26482] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2962: inode #15: comm syz.1.14315: corrupted xattr block 19: e_value size too large [ 929.068536][T26482] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 929.079512][T26482] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 929.228822][T26519] netlink: 14 bytes leftover after parsing attributes in process `syz.5.14322'. [ 929.281231][T26519] netlink: 20 bytes leftover after parsing attributes in process `syz.5.14322'. [ 929.291019][T26519] netlink: 20 bytes leftover after parsing attributes in process `syz.5.14322'. [ 929.440692][T26520] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 929.447360][T26520] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 929.455206][T26520] vhci_hcd vhci_hcd.0: Device attached [ 929.780656][T26525] vhci_hcd: connection closed [ 929.789035][T26528] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 929.800362][T26528] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 929.808021][T26528] vhci_hcd vhci_hcd.0: Device attached [ 929.821822][ T2648] vhci_hcd: stop threads [ 929.826193][ T2648] vhci_hcd: release socket [ 929.830648][ T2648] vhci_hcd: disconnect device [ 929.842387][ T3406] vhci_hcd: vhci_device speed not set [ 930.025901][T26537] netlink: 180 bytes leftover after parsing attributes in process `syz.6.14326'. [ 930.122312][ T2958] usb 11-1: new high-speed USB device number 51 using vhci_hcd [ 930.197115][T26529] vhci_hcd: connection reset by peer [ 930.212509][ T2656] vhci_hcd: stop threads [ 930.216892][ T2656] vhci_hcd: release socket [ 930.221368][ T2656] vhci_hcd: disconnect device [ 930.300901][T26546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14328'. [ 930.363883][T13986] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 930.484279][T26554] loop1: detected capacity change from 0 to 512 [ 930.494702][T26554] EXT4-fs: Ignoring removed mblk_io_submit option [ 930.503963][T26554] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 930.516970][T26554] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 930.525668][T26554] System zones: 1-12 [ 930.531636][T26554] EXT4-fs (loop1): 1 truncate cleaned up [ 930.539247][T26554] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 930.602540][T13986] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 930.624836][T26558] loop1: detected capacity change from 0 to 512 [ 930.631707][T26558] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 930.640890][T26558] EXT4-fs (loop1): orphan cleanup on readonly fs [ 930.647481][T26558] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.14333: bad orphan inode 15 [ 930.657732][T26558] ext4_test_bit(bit=14, block=18) = 1 [ 930.663313][T26558] is_bad_inode(inode)=0 [ 930.667468][T26558] NEXT_ORPHAN(inode)=1023 [ 930.671897][T26558] max_ino=32 [ 930.675154][T26558] i_nlink=0 [ 930.678380][T26558] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2962: inode #15: comm syz.1.14333: corrupted xattr block 19: e_value size too large [ 930.693899][T26558] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 930.703809][T26558] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 931.100821][T26573] netlink: 180 bytes leftover after parsing attributes in process `syz.0.14337'. [ 931.145253][T26577] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 931.155442][T26577] SELinux: failed to load policy [ 931.521471][T13986] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 932.042777][T26665] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 932.049437][T26665] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 932.057169][T26665] vhci_hcd vhci_hcd.0: Device attached [ 932.114755][T26670] xt_hashlimit: max too large, truncated to 1048576 [ 932.462356][ T1105] vhci_hcd: vhci_device speed not set [ 932.597252][T26667] vhci_hcd: connection closed [ 932.602443][ T2656] vhci_hcd: stop threads [ 932.611477][ T2656] vhci_hcd: release socket [ 932.615959][ T2656] vhci_hcd: disconnect device [ 932.662939][T26698] serio: Serial port ttyS3 [ 932.845725][T26739] batadv0: left allmulticast mode [ 932.850891][T26739] batadv0: left promiscuous mode [ 932.856140][T26739] bridge0: port 1(batadv0) entered disabled state [ 932.993748][T26769] loop3: detected capacity change from 0 to 512 [ 933.016007][T26769] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 933.037446][T26769] EXT4-fs (loop3): orphan cleanup on readonly fs [ 933.044953][T26769] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.14368: bad orphan inode 15 [ 933.070446][T26769] ext4_test_bit(bit=14, block=18) = 1 [ 933.075926][T26769] is_bad_inode(inode)=0 [ 933.080181][T26769] NEXT_ORPHAN(inode)=1023 [ 933.084552][T26769] max_ino=32 [ 933.087768][T26769] i_nlink=0 [ 933.160385][T26769] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.14368: corrupted xattr block 19: e_value size too large [ 933.172435][T26802] loop1: detected capacity change from 0 to 512 [ 933.181156][T26802] ext4: Unknown parameter 'measure' [ 933.181767][T26769] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 933.197105][T26769] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 933.364278][T26829] serio: Serial port ttyS3 [ 933.892284][ T9] vhci_hcd: vhci_device speed not set [ 934.127130][T26921] __nla_validate_parse: 8 callbacks suppressed [ 934.127142][T26921] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14377'. [ 934.146922][T26921] loop1: detected capacity change from 0 to 764 [ 934.154298][T26921] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 934.164954][ T29] kauditd_printk_skb: 263 callbacks suppressed [ 934.164966][ T29] audit: type=1326 audit(1753659592.678:59818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26920 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630c6fe9a9 code=0x7ffc0000 [ 934.207073][ T29] audit: type=1326 audit(1753659592.678:59819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26920 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630c6fe9a9 code=0x7ffc0000 [ 934.230193][ T29] audit: type=1326 audit(1753659592.678:59820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26920 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f630c6fe9a9 code=0x7ffc0000 [ 934.253254][ T29] audit: type=1326 audit(1753659592.708:59821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26920 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630c6fe9a9 code=0x7ffc0000 [ 934.276280][ T29] audit: type=1326 audit(1753659592.708:59822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26920 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630c6fe9a9 code=0x7ffc0000 [ 934.305095][T13731] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 934.311645][ T29] audit: type=1326 audit(1753659592.788:59823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26920 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f630c6fe9a9 code=0x7ffc0000 [ 934.337150][ T29] audit: type=1326 audit(1753659592.788:59824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26920 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630c6fe9a9 code=0x7ffc0000 [ 934.360357][ T29] audit: type=1326 audit(1753659592.788:59825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26920 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630c6fe9a9 code=0x7ffc0000 [ 934.383386][ T29] audit: type=1326 audit(1753659592.788:59826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26920 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f630c6fe9a9 code=0x7ffc0000 [ 934.419960][T26927] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 934.419960][T26927] program syz.3.14379 not setting count and/or reply_len properly [ 934.445338][ T29] audit: type=1326 audit(1753659592.958:59827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26920 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630c6fe9a9 code=0x7ffc0000 [ 934.497777][T26927] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14379'. [ 934.511581][T26932] netlink: 32 bytes leftover after parsing attributes in process `syz.6.14382'. [ 934.525312][T26927] loop3: detected capacity change from 0 to 764 [ 934.532638][T26927] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 934.888095][T26948] loop3: detected capacity change from 0 to 512 [ 934.896118][T26948] ext4: Unknown parameter 'measure' [ 934.918683][T26950] xt_hashlimit: max too large, truncated to 1048576 [ 934.945240][T26952] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 934.945240][T26952] program syz.6.14388 not setting count and/or reply_len properly [ 934.965968][T26952] netlink: 32 bytes leftover after parsing attributes in process `syz.6.14388'. [ 935.170265][T26958] serio: Serial port ttyS3 [ 935.252747][ T2958] vhci_hcd: vhci_device speed not set [ 935.300941][T26964] loop1: detected capacity change from 0 to 512 [ 935.331269][T26964] EXT4-fs: Ignoring removed mblk_io_submit option [ 935.350776][T26964] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 935.388615][T26964] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 935.399306][T26964] System zones: 1-12 [ 935.419688][T26964] EXT4-fs (loop1): 1 truncate cleaned up [ 935.430663][T26964] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 935.495226][T27000] xt_hashlimit: max too large, truncated to 1048576 [ 935.526183][T13986] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 935.641746][T27014] loop1: detected capacity change from 0 to 512 [ 935.653965][T27014] EXT4-fs: Ignoring removed mblk_io_submit option [ 935.663427][T27014] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 935.681755][T27014] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 935.688075][T27024] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 935.696940][T27014] System zones: 1-12 [ 935.704635][T27014] EXT4-fs (loop1): 1 truncate cleaned up [ 935.718418][T27014] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 935.818229][T27047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14402'. [ 935.833126][T27047] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14402'. [ 935.856399][T13986] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 935.977007][T27064] loop3: detected capacity change from 0 to 512 [ 935.987172][T27064] EXT4-fs: Ignoring removed mblk_io_submit option [ 935.996303][T27064] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 936.018188][T27064] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 936.026959][T27064] System zones: 1-12 [ 936.035158][T27064] EXT4-fs (loop3): 1 truncate cleaned up [ 936.047520][T27064] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 936.110435][T13731] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 936.184428][T27109] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 936.184428][T27109] program syz.5.14407 not setting count and/or reply_len properly [ 936.201850][T27113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14405'. [ 936.517472][T27142] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 936.517472][T27142] program syz.5.14412 not setting count and/or reply_len properly [ 936.771054][T27149] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14415'. [ 936.785401][T27149] loop1: detected capacity change from 0 to 764 [ 936.793107][T27149] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 937.046411][T27162] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 937.046411][T27162] program syz.1.14419 not setting count and/or reply_len properly [ 937.068832][T27162] loop1: detected capacity change from 0 to 764 [ 937.076398][T27162] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 937.322227][T27166] loop1: detected capacity change from 0 to 512 [ 937.330784][T27166] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 937.340452][T27166] EXT4-fs (loop1): orphan cleanup on readonly fs [ 937.348908][T27166] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.14420: bad orphan inode 15 [ 937.360161][T27166] ext4_test_bit(bit=14, block=18) = 1 [ 937.365677][T27166] is_bad_inode(inode)=0 [ 937.369857][T27166] NEXT_ORPHAN(inode)=1023 [ 937.374241][T27166] max_ino=32 [ 937.377446][T27166] i_nlink=0 [ 937.382852][T27166] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2962: inode #15: comm syz.1.14420: corrupted xattr block 19: e_value size too large [ 937.397669][T27166] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 937.407407][T27166] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 937.622342][T27178] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13) [ 937.629038][T27178] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 937.636649][T27178] vhci_hcd vhci_hcd.0: Device attached [ 937.884991][ T36] usb 3-1: new high-speed USB device number 45 using vhci_hcd [ 938.098756][T27192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14429'. [ 938.130465][T27190] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14427'. [ 938.150567][T27179] vhci_hcd: connection reset by peer [ 938.158637][ T2648] vhci_hcd: stop threads [ 938.163000][ T2648] vhci_hcd: release socket [ 938.167451][ T2648] vhci_hcd: disconnect device [ 938.180194][T27194] loop3: detected capacity change from 0 to 512 [ 938.188426][T27194] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 938.199056][T27194] EXT4-fs (loop3): orphan cleanup on readonly fs [ 938.205938][T27194] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.14430: bad orphan inode 15 [ 938.216759][T27194] ext4_test_bit(bit=14, block=18) = 1 [ 938.222275][T27194] is_bad_inode(inode)=0 [ 938.222286][T27194] NEXT_ORPHAN(inode)=1023 [ 938.222295][T27194] max_ino=32 [ 938.222303][T27194] i_nlink=0 [ 938.226630][T27194] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.14430: corrupted xattr block 19: e_value size too large [ 938.231010][T27194] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 938.231532][T27194] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 938.416061][T27200] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 938.490665][T27224] FAULT_INJECTION: forcing a failure. [ 938.490665][T27224] name failslab, interval 1, probability 0, space 0, times 0 [ 938.503543][T27224] CPU: 1 UID: 0 PID: 27224 Comm: syz.6.14434 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 938.503573][T27224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 938.503585][T27224] Call Trace: [ 938.503590][T27224] [ 938.503596][T27224] __dump_stack+0x1d/0x30 [ 938.503614][T27224] dump_stack_lvl+0xe8/0x140 [ 938.503711][T27224] dump_stack+0x15/0x1b [ 938.503724][T27224] should_fail_ex+0x265/0x280 [ 938.503828][T27224] should_failslab+0x8c/0xb0 [ 938.503862][T27224] __kmalloc_noprof+0xa5/0x3e0 [ 938.503884][T27224] ? tracepoint_probe_unregister+0x168/0x650 [ 938.503957][T27224] ? __pfx___bpf_trace_kfree+0x10/0x10 [ 938.504010][T27224] tracepoint_probe_unregister+0x168/0x650 [ 938.504043][T27224] ? __pfx_bpf_link_release+0x10/0x10 [ 938.504132][T27224] bpf_probe_unregister+0x37/0x50 [ 938.504161][T27224] bpf_raw_tp_link_release+0x27/0x50 [ 938.504191][T27224] bpf_link_free+0xae/0x340 [ 938.504223][T27224] ? __pfx_bpf_link_release+0x10/0x10 [ 938.504300][T27224] bpf_link_release+0x45/0x60 [ 938.504323][T27224] __fput+0x298/0x650 [ 938.504345][T27224] ____fput+0x1c/0x30 [ 938.504369][T27224] task_work_run+0x12e/0x1a0 [ 938.504391][T27224] exit_to_user_mode_loop+0xe4/0x100 [ 938.504410][T27224] do_syscall_64+0x1d6/0x200 [ 938.504506][T27224] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 938.504533][T27224] ? clear_bhb_loop+0x40/0x90 [ 938.504557][T27224] ? clear_bhb_loop+0x40/0x90 [ 938.504581][T27224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.504647][T27224] RIP: 0033:0x7ff2a977e9a9 [ 938.504663][T27224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 938.504678][T27224] RSP: 002b:00007ff2a7dc6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 938.504764][T27224] RAX: 0000000000000000 RBX: 00007ff2a99a6080 RCX: 00007ff2a977e9a9 [ 938.504774][T27224] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 938.504784][T27224] RBP: 00007ff2a7dc6090 R08: 0000000000000000 R09: 0000000000000000 [ 938.504794][T27224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 938.504834][T27224] R13: 0000000000000000 R14: 00007ff2a99a6080 R15: 00007fff9b3b1318 [ 938.504865][T27224] [ 938.817304][T27222] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 938.824002][T27222] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 938.831654][T27222] vhci_hcd vhci_hcd.0: Device attached [ 938.883237][T13986] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 938.951877][T27244] loop1: detected capacity change from 0 to 512 [ 938.959447][T27244] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 938.971027][T27244] EXT4-fs (loop1): orphan cleanup on readonly fs [ 938.979410][T27244] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.14439: bad orphan inode 15 [ 938.990065][T27244] ext4_test_bit(bit=14, block=18) = 1 [ 938.995646][T27244] is_bad_inode(inode)=0 [ 938.999826][T27244] NEXT_ORPHAN(inode)=1023 [ 939.004202][T27244] max_ino=32 [ 939.007511][T27244] i_nlink=0 [ 939.011037][T27226] vhci_hcd: connection closed [ 939.011435][ T2648] vhci_hcd: stop threads [ 939.013420][T27244] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2962: inode #15: comm syz.1.14439: corrupted xattr block 19: e_value size too large [ 939.016160][ T2648] vhci_hcd: release socket [ 939.020698][T27244] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 939.034651][ T2648] vhci_hcd: disconnect device [ 939.041098][T27244] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 939.129962][T27256] xt_hashlimit: max too large, truncated to 1048576 [ 939.172284][ T2958] vhci_hcd: vhci_device speed not set [ 939.192929][ T29] kauditd_printk_skb: 685 callbacks suppressed [ 939.192947][ T29] audit: type=1326 audit(1753659597.708:60513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27257 comm="syz.0.14442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e605e9a9 code=0x7ffc0000 [ 939.225268][ T29] audit: type=1326 audit(1753659597.708:60514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27257 comm="syz.0.14442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e605e9a9 code=0x7ffc0000 [ 939.249083][ T29] audit: type=1326 audit(1753659597.738:60515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27257 comm="syz.0.14442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7e605e9a9 code=0x7ffc0000 [ 939.273018][ T29] audit: type=1326 audit(1753659597.738:60516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27257 comm="syz.0.14442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e605e9a9 code=0x7ffc0000 [ 939.296788][ T29] audit: type=1326 audit(1753659597.738:60517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27257 comm="syz.0.14442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7e605e9a9 code=0x7ffc0000 [ 939.320637][ T29] audit: type=1326 audit(1753659597.738:60518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27257 comm="syz.0.14442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e605e9a9 code=0x7ffc0000 [ 939.344351][ T29] audit: type=1326 audit(1753659597.738:60519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27257 comm="syz.0.14442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff7e605d310 code=0x7ffc0000 [ 939.368165][ T29] audit: type=1326 audit(1753659597.738:60520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27257 comm="syz.0.14442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e605e9a9 code=0x7ffc0000 [ 939.391936][ T29] audit: type=1326 audit(1753659597.738:60521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27257 comm="syz.0.14442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7e605e9a9 code=0x7ffc0000 [ 939.392038][ T29] audit: type=1326 audit(1753659597.738:60522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27257 comm="syz.0.14442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e605e9a9 code=0x7ffc0000 [ 939.453681][T27260] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 939.460385][T27260] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 939.467979][T27260] vhci_hcd vhci_hcd.0: Device attached [ 939.473839][T27262] netlink: 'syz.5.14443': attribute type 83 has an invalid length. [ 939.521310][T27268] syzkaller1: entered promiscuous mode [ 939.526858][T27268] syzkaller1: entered allmulticast mode [ 939.594540][T27270] FAULT_INJECTION: forcing a failure. [ 939.594540][T27270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 939.607699][T27270] CPU: 1 UID: 0 PID: 27270 Comm: syz.5.14445 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 939.607801][T27270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 939.607816][T27270] Call Trace: [ 939.607823][T27270] [ 939.607832][T27270] __dump_stack+0x1d/0x30 [ 939.607922][T27270] dump_stack_lvl+0xe8/0x140 [ 939.607942][T27270] dump_stack+0x15/0x1b [ 939.607956][T27270] should_fail_ex+0x265/0x280 [ 939.608066][T27270] should_fail+0xb/0x20 [ 939.608118][T27270] should_fail_usercopy+0x1a/0x20 [ 939.608274][T27270] _copy_to_user+0x20/0xa0 [ 939.608294][T27270] simple_read_from_buffer+0xb5/0x130 [ 939.608425][T27270] proc_fail_nth_read+0x100/0x140 [ 939.608528][T27270] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 939.608583][T27270] vfs_read+0x1a0/0x6f0 [ 939.608612][T27270] ? __sys_setsockopt+0x18e/0x200 [ 939.608652][T27270] ? __rcu_read_unlock+0x4f/0x70 [ 939.608713][T27270] ? __fget_files+0x184/0x1c0 [ 939.608737][T27270] ksys_read+0xda/0x1a0 [ 939.608767][T27270] __x64_sys_read+0x40/0x50 [ 939.608803][T27270] x64_sys_call+0x2d77/0x2fb0 [ 939.608860][T27270] do_syscall_64+0xd2/0x200 [ 939.608877][T27270] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 939.608907][T27270] ? clear_bhb_loop+0x40/0x90 [ 939.608932][T27270] ? clear_bhb_loop+0x40/0x90 [ 939.609035][T27270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.609062][T27270] RIP: 0033:0x7f744bb7d3bc [ 939.609079][T27270] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 939.609107][T27270] RSP: 002b:00007f744a1e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 939.609128][T27270] RAX: ffffffffffffffda RBX: 00007f744bda5fa0 RCX: 00007f744bb7d3bc [ 939.609170][T27270] RDX: 000000000000000f RSI: 00007f744a1e70a0 RDI: 0000000000000004 [ 939.609184][T27270] RBP: 00007f744a1e7090 R08: 0000000000000000 R09: 0000000000000000 [ 939.609240][T27270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 939.609254][T27270] R13: 0000000000000000 R14: 00007f744bda5fa0 R15: 00007fffcf332948 [ 939.609347][T27270] [ 939.822057][T27264] vhci_hcd: connection closed [ 939.832464][ T2648] vhci_hcd: stop threads [ 939.841408][ T2648] vhci_hcd: release socket [ 939.845878][ T2648] vhci_hcd: disconnect device [ 939.878715][T13731] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 939.880023][T27274] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 939.928219][T27286] __nla_validate_parse: 4 callbacks suppressed [ 939.928231][T27286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14451'. [ 939.966768][T27288] FAULT_INJECTION: forcing a failure. [ 939.966768][T27288] name failslab, interval 1, probability 0, space 0, times 0 [ 939.979513][T27288] CPU: 1 UID: 0 PID: 27288 Comm: syz.3.14449 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 939.979539][T27288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 939.979551][T27288] Call Trace: [ 939.979556][T27288] [ 939.979629][T27288] __dump_stack+0x1d/0x30 [ 939.979649][T27288] dump_stack_lvl+0xe8/0x140 [ 939.979667][T27288] dump_stack+0x15/0x1b [ 939.979714][T27288] should_fail_ex+0x265/0x280 [ 939.979804][T27288] ? resv_map_alloc+0x32/0x190 [ 939.979888][T27288] should_failslab+0x8c/0xb0 [ 939.979915][T27288] __kmalloc_cache_noprof+0x4c/0x320 [ 939.979944][T27288] ? vfs_write+0x75e/0x8e0 [ 939.979973][T27288] resv_map_alloc+0x32/0x190 [ 939.980043][T27288] hugetlbfs_get_inode+0x67/0x370 [ 939.980152][T27288] hugetlb_file_setup+0x192/0x3d0 [ 939.980184][T27288] ksys_mmap_pgoff+0x157/0x310 [ 939.980230][T27288] x64_sys_call+0x1602/0x2fb0 [ 939.980252][T27288] do_syscall_64+0xd2/0x200 [ 939.980293][T27288] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 939.980323][T27288] ? clear_bhb_loop+0x40/0x90 [ 939.980346][T27288] ? clear_bhb_loop+0x40/0x90 [ 939.980386][T27288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.980476][T27288] RIP: 0033:0x7f4afe17e9a9 [ 939.980495][T27288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 939.980512][T27288] RSP: 002b:00007f4afc7df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 939.980657][T27288] RAX: ffffffffffffffda RBX: 00007f4afe3a5fa0 RCX: 00007f4afe17e9a9 [ 939.980672][T27288] RDX: 0000000003000002 RSI: 0000000000c00000 RDI: 0000200000400000 [ 939.980687][T27288] RBP: 00007f4afc7df090 R08: ffffffffffffffff R09: 0000000000000000 [ 939.980700][T27288] R10: 000000000005d031 R11: 0000000000000246 R12: 0000000000000001 [ 939.980711][T27288] R13: 0000000000000000 R14: 00007f4afe3a5fa0 R15: 00007ffc2b83b8d8 [ 939.980756][T27288] [ 940.037575][T27294] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14451'. [ 940.250946][T27303] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14452'. [ 940.260082][T27303] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14452'. [ 940.349219][T27316] loop3: detected capacity change from 0 to 512 [ 940.357230][T27316] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 940.368811][T27316] EXT4-fs (loop3): orphan cleanup on readonly fs [ 940.378774][T27316] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.14454: bad orphan inode 15 [ 940.389701][T27316] ext4_test_bit(bit=14, block=18) = 1 [ 940.395123][T27316] is_bad_inode(inode)=0 [ 940.399302][T27316] NEXT_ORPHAN(inode)=1023 [ 940.403665][T27316] max_ino=32 [ 940.406872][T27316] i_nlink=0 [ 940.439229][T27316] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.14454: corrupted xattr block 19: e_value size too large [ 940.460179][T13986] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 940.475256][T27316] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 940.509529][T27325] FAULT_INJECTION: forcing a failure. [ 940.509529][T27325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 940.522648][T27325] CPU: 0 UID: 0 PID: 27325 Comm: syz.6.14457 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 940.522685][T27325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 940.522702][T27325] Call Trace: [ 940.522710][T27325] [ 940.522774][T27325] __dump_stack+0x1d/0x30 [ 940.522795][T27325] dump_stack_lvl+0xe8/0x140 [ 940.522813][T27325] dump_stack+0x15/0x1b [ 940.522829][T27325] should_fail_ex+0x265/0x280 [ 940.522868][T27325] should_fail+0xb/0x20 [ 940.522978][T27325] should_fail_usercopy+0x1a/0x20 [ 940.523075][T27325] _copy_from_user+0x1c/0xb0 [ 940.523102][T27325] ucma_write+0xd9/0x250 [ 940.523127][T27325] ? __pfx_ucma_write+0x10/0x10 [ 940.523230][T27325] vfs_write+0x266/0x8e0 [ 940.523322][T27325] ? __rcu_read_unlock+0x4f/0x70 [ 940.523360][T27325] ? __fget_files+0x184/0x1c0 [ 940.523449][T27325] ksys_write+0xda/0x1a0 [ 940.523531][T27325] __x64_sys_write+0x40/0x50 [ 940.523563][T27325] x64_sys_call+0x2cdd/0x2fb0 [ 940.523612][T27325] do_syscall_64+0xd2/0x200 [ 940.523627][T27325] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 940.523648][T27325] ? clear_bhb_loop+0x40/0x90 [ 940.523671][T27325] ? clear_bhb_loop+0x40/0x90 [ 940.523750][T27325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.523769][T27325] RIP: 0033:0x7ff2a977e9a9 [ 940.523846][T27325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 940.523865][T27325] RSP: 002b:00007ff2a7de7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 940.523902][T27325] RAX: ffffffffffffffda RBX: 00007ff2a99a5fa0 RCX: 00007ff2a977e9a9 [ 940.523957][T27325] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000007 [ 940.523971][T27325] RBP: 00007ff2a7de7090 R08: 0000000000000000 R09: 0000000000000000 [ 940.523986][T27325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 940.524000][T27325] R13: 0000000000000000 R14: 00007ff2a99a5fa0 R15: 00007fff9b3b1318 [ 940.524023][T27325] [ 940.739998][T27316] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 940.796438][T27327] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 940.803152][T27327] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 940.810839][T27327] vhci_hcd vhci_hcd.0: Device attached [ 940.953623][T27340] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14456'. [ 941.001802][T27316] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 941.008414][T27316] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 941.016261][T27316] vhci_hcd vhci_hcd.0: Device attached [ 941.019369][T27352] syzkaller1: entered promiscuous mode [ 941.027291][T27352] syzkaller1: entered allmulticast mode [ 941.033304][T27348] vhci_hcd: connection closed [ 941.033797][ T2651] vhci_hcd: stop threads [ 941.042901][ T2651] vhci_hcd: release socket [ 941.047394][ T2651] vhci_hcd: disconnect device [ 941.063017][ T9] usb 1-1: new high-speed USB device number 48 using vhci_hcd [ 941.133114][T27368] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 941.153629][T27332] vhci_hcd: connection reset by peer [ 941.159953][ T2648] vhci_hcd: stop threads [ 941.164306][ T2648] vhci_hcd: release socket [ 941.168735][ T2648] vhci_hcd: disconnect device [ 941.193926][T27374] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 941.205081][T27374] SELinux: failed to load policy [ 941.266320][T27374] loop1: detected capacity change from 0 to 1024 [ 941.285750][T27374] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 941.312069][T13986] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 941.597693][T13731] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 941.676279][T27457] loop3: detected capacity change from 0 to 512 [ 941.684902][T27457] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 941.701592][T27457] EXT4-fs (loop3): orphan cleanup on readonly fs [ 941.710091][T27457] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.14465: bad orphan inode 15 [ 941.721625][T27457] ext4_test_bit(bit=14, block=18) = 1 [ 941.727166][T27457] is_bad_inode(inode)=0 [ 941.731374][T27457] NEXT_ORPHAN(inode)=1023 [ 941.735900][T27457] max_ino=32 [ 941.739096][T27457] i_nlink=0 [ 941.749749][T27457] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.14465: corrupted xattr block 19: e_value size too large [ 941.825851][T27457] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 941.844832][T27457] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 942.261625][T27476] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14470'. [ 942.995556][T27494] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 943.002272][T27494] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 943.009967][T27494] vhci_hcd vhci_hcd.0: Device attached [ 943.022488][T27474] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 943.530716][T27496] vhci_hcd: connection closed [ 943.532791][ T2656] vhci_hcd: stop threads [ 943.541859][ T2656] vhci_hcd: release socket [ 943.542456][T27499] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 943.546411][ T2656] vhci_hcd: disconnect device [ 943.552855][T27499] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 943.552933][T27499] vhci_hcd vhci_hcd.0: Device attached [ 943.592318][ T36] vhci_hcd: vhci_device speed not set [ 943.711548][T27500] vhci_hcd: connection closed [ 943.712831][ T2642] vhci_hcd: stop threads [ 943.721855][ T2642] vhci_hcd: release socket [ 943.726308][ T2642] vhci_hcd: disconnect device [ 943.772321][ T2958] vhci_hcd: vhci_device speed not set [ 943.795094][T27505] loop1: detected capacity change from 0 to 512 [ 943.815661][T27505] ext4: Unknown parameter 'measure' [ 944.006672][T13731] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 944.078381][T27511] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14480'. [ 944.239242][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 944.239257][ T29] audit: type=1326 audit(1753659602.748:60647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27510 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e605e9a9 code=0x7ffc0000 [ 944.275881][ T29] audit: type=1326 audit(1753659602.778:60648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27510 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e605e9a9 code=0x7ffc0000 [ 944.301263][ T29] audit: type=1326 audit(1753659602.808:60649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27510 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff7e605e9a9 code=0x7ffc0000 [ 944.324241][ T29] audit: type=1326 audit(1753659602.808:60650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27510 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e605e9a9 code=0x7ffc0000 [ 944.347379][ T29] audit: type=1326 audit(1753659602.808:60651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27510 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e605e9a9 code=0x7ffc0000 [ 944.381509][ T29] audit: type=1326 audit(1753659602.808:60652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27510 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff7e605e9a9 code=0x7ffc0000 [ 944.404603][ T29] audit: type=1326 audit(1753659602.808:60653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27510 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e605e9a9 code=0x7ffc0000 [ 944.427608][ T29] audit: type=1326 audit(1753659602.808:60654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27510 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e605e9a9 code=0x7ffc0000 [ 944.450959][ T29] audit: type=1326 audit(1753659602.808:60655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27510 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7ff7e605e9a9 code=0x7ffc0000 [ 944.470690][T27524] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 944.473952][ T29] audit: type=1326 audit(1753659602.808:60656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27510 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e605e9a9 code=0x7ffc0000 [ 944.515471][T27524] SELinux: failed to load policy [ 944.775437][T27569] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14491'. [ 944.784606][T27569] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14491'. [ 944.846910][T27583] loop1: detected capacity change from 0 to 512 [ 944.853966][T27583] ext4: Unknown parameter 'measure' [ 944.869967][T27583] netlink: 180 bytes leftover after parsing attributes in process `syz.1.14492'. [ 944.954036][T27602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14493'. [ 944.972604][T27604] pim6reg1: entered promiscuous mode [ 944.977976][T27604] pim6reg1: entered allmulticast mode [ 945.271323][T27660] loop1: detected capacity change from 0 to 512 [ 945.279171][T27660] ext4: Unknown parameter 'measure' [ 945.365411][T27679] loop1: detected capacity change from 0 to 512 [ 945.372084][T27679] ext4: Unknown parameter 'measure' [ 945.539918][T27717] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 945.755480][T27758] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14504'. [ 945.770929][T27758] loop3: detected capacity change from 0 to 764 [ 945.780557][T27758] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 946.165107][T27769] loop3: detected capacity change from 0 to 512 [ 946.171758][T27769] ext4: Unknown parameter 'measure' [ 946.222380][ T9] vhci_hcd: vhci_device speed not set [ 946.320361][T27776] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14511'. [ 946.335946][T27776] loop3: detected capacity change from 0 to 764 [ 946.349321][T27776] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 946.520831][ T2644] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.701989][T27804] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12) [ 946.708646][T27804] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 946.716319][T27804] vhci_hcd vhci_hcd.0: Device attached [ 946.773667][ T2644] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.855646][ T2644] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.963008][ T2958] usb 11-1: new high-speed USB device number 53 using vhci_hcd [ 946.974392][ T2644] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.269378][T27806] vhci_hcd: connection reset by peer [ 947.277205][ T2651] vhci_hcd: stop threads [ 947.281479][ T2651] vhci_hcd: release socket [ 947.285980][ T2651] vhci_hcd: disconnect device [ 947.329456][T27832] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 947.329456][T27832] program syz.0.14521 not setting count and/or reply_len properly [ 947.354629][ T2644]  (unregistering): Released all slaves [ 947.363582][ T2644] bond0 (unregistering): Released all slaves [ 947.372982][ T2644] bond1 (unregistering): Released all slaves [ 947.383348][ T2644] bond2 (unregistering): Released all slaves [ 947.392628][ T2644] bond3 (unregistering): Released all slaves [ 947.403206][ T2644] bond4 (unregistering): Released all slaves [ 947.413173][ T2644] bond5 (unregistering): Released all slaves [ 947.422337][ T2644] bond6 (unregistering): Released all slaves [ 947.471790][ T2644] hsr_slave_0: left promiscuous mode [ 947.484348][ T2644] hsr_slave_1: left promiscuous mode [ 947.500741][ T2644] veth1_macvtap: left promiscuous mode [ 947.514768][ T2644] veth0_macvtap: left promiscuous mode [ 947.525956][ T2644] veth1_vlan: left promiscuous mode [ 947.536995][ T2644] veth0_vlan: left promiscuous mode [ 947.726315][T10934] infiniband syz1: ib_query_port failed (-19) [ 947.843718][T27803] chnl_net:caif_netlink_parms(): no params data found [ 947.855917][T27887] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 947.855917][T27887] program syz.5.14523 not setting count and/or reply_len properly [ 947.940364][T27897] xt_hashlimit: max too large, truncated to 1048576 [ 947.969551][T27901] netlink: 32 bytes leftover after parsing attributes in process `syz.6.14528'. [ 948.010222][T27803] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.017400][T27803] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.024738][T27803] bridge_slave_0: entered allmulticast mode [ 948.031138][T27803] bridge_slave_0: entered promiscuous mode [ 948.044888][T27803] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.051958][T27803] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.059446][T27803] bridge_slave_1: entered allmulticast mode [ 948.066058][T27803] bridge_slave_1: entered promiscuous mode [ 948.116568][T27803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 948.131361][T27803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 948.175395][T27803] team0: Port device team_slave_0 added [ 948.203418][T27803] team0: Port device team_slave_1 added [ 948.267213][T27803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 948.274221][T27803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 948.300267][T27803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 948.446241][T27803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 948.453343][T27803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 948.479561][T27803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 948.503888][T27913] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 948.510589][T27913] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 948.518336][T27913] vhci_hcd vhci_hcd.0: Device attached [ 948.586907][T27803] hsr_slave_0: entered promiscuous mode [ 948.619856][T27803] hsr_slave_1: entered promiscuous mode [ 948.628967][T27803] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 948.636598][T27803] Cannot create hsr debugfs directory [ 948.684809][T27936] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14531'. [ 948.747844][T27914] vhci_hcd: connection closed [ 948.749480][ T2673] vhci_hcd: stop threads [ 948.758526][ T2673] vhci_hcd: release socket [ 948.762978][ T2673] vhci_hcd: disconnect device [ 948.782302][ T3768] usb 1-1: new high-speed USB device number 49 using vhci_hcd [ 948.789974][ T3768] usb 1-1: enqueue for inactive port 0 [ 948.803682][ T3768] usb 1-1: enqueue for inactive port 0 [ 948.810289][ T3768] usb 1-1: enqueue for inactive port 0 [ 948.836829][T27803] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 948.847567][T27803] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 948.857280][T27950] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 948.857280][T27950] program syz.6.14533 not setting count and/or reply_len properly [ 948.859201][T27803] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 948.895661][ T3768] vhci_hcd: vhci_device speed not set [ 948.920570][T27803] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 948.960223][T27957] syzkaller1: entered promiscuous mode [ 948.965887][T27957] syzkaller1: entered allmulticast mode [ 949.027713][T27803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 949.054923][T27803] 8021q: adding VLAN 0 to HW filter on device team0 [ 949.067406][T27978] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14535'. [ 949.079432][ T2656] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.086525][ T2656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 949.114746][ T2656] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.121962][ T2656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 949.135977][T27982] netlink: 180 bytes leftover after parsing attributes in process `syz.5.14536'. [ 949.277059][ T29] kauditd_printk_skb: 197 callbacks suppressed [ 949.277073][ T29] audit: type=1326 audit(1753659607.758:60854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27947 comm="syz.6.14533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff2a977e9a9 code=0x7ffc0000 [ 949.307089][ T29] audit: type=1326 audit(1753659607.758:60855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27947 comm="syz.6.14533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a977e9a9 code=0x7ffc0000 [ 949.330841][ T29] audit: type=1326 audit(1753659607.758:60856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27947 comm="syz.6.14533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a977e9a9 code=0x7ffc0000 [ 949.355438][ T29] audit: type=1326 audit(1753659607.758:60857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27947 comm="syz.6.14533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff2a977e9a9 code=0x7ffc0000 [ 949.379060][ T29] audit: type=1326 audit(1753659607.758:60858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27947 comm="syz.6.14533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a977e9a9 code=0x7ffc0000 [ 949.404522][ T29] audit: type=1326 audit(1753659607.768:60859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27947 comm="syz.6.14533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a977e9a9 code=0x7ffc0000 [ 949.436930][T27803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 949.508781][T28019] netlink: 32 bytes leftover after parsing attributes in process `syz.6.14540'. [ 949.520102][T28022] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 949.520102][T28022] program syz.0.14541 not setting count and/or reply_len properly [ 949.555801][ T29] audit: type=1326 audit(1753659608.058:60860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28018 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a977e9a9 code=0x7ffc0000 [ 949.578793][ T29] audit: type=1326 audit(1753659608.058:60861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28018 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7ff2a977e9a9 code=0x7ffc0000 [ 949.631514][ T29] audit: type=1326 audit(1753659608.128:60862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28018 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a977e9a9 code=0x7ffc0000 [ 949.654581][ T29] audit: type=1326 audit(1753659608.128:60863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28018 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a977e9a9 code=0x7ffc0000 [ 949.755326][T27803] veth0_vlan: entered promiscuous mode [ 949.763799][T27803] veth1_vlan: entered promiscuous mode [ 949.781263][T27803] veth0_macvtap: entered promiscuous mode [ 949.789234][T27803] veth1_macvtap: entered promiscuous mode [ 949.802019][T27803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 949.826143][T27803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 949.836367][T27803] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.845150][T27803] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.853888][T27803] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.862642][T27803] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.898508][T28050] syzkaller1: entered promiscuous mode [ 949.904265][T28050] syzkaller1: entered allmulticast mode [ 951.259153][T28070] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 951.259153][T28070] program syz.7.14549 not setting count and/or reply_len properly [ 951.305562][T28063] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(11) [ 951.312188][T28063] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 951.319940][T28063] vhci_hcd vhci_hcd.0: Device attached [ 951.326129][T28064] vhci_hcd: connection closed [ 951.416117][ T2646] vhci_hcd: stop threads [ 951.425576][ T2646] vhci_hcd: release socket [ 951.430144][ T2646] vhci_hcd: disconnect device [ 951.435461][T28067] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12) [ 951.442080][T28067] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 951.449763][T28067] vhci_hcd vhci_hcd.0: Device attached [ 951.487649][T28073] vhci_hcd: connection closed [ 951.489543][ T2646] vhci_hcd: stop threads [ 951.493817][T28079] netlink: 16 bytes leftover after parsing attributes in process `syz.7.14551'. [ 951.494351][ T2646] vhci_hcd: release socket [ 951.512105][ T2646] vhci_hcd: disconnect device [ 951.538911][T28079] wg2: entered promiscuous mode [ 951.543907][T28079] wg2: entered allmulticast mode [ 951.556758][T28086] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14553'. [ 951.570625][T28086] loop3: detected capacity change from 0 to 764 [ 951.572194][T28088] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14554'. [ 951.586707][T28086] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 951.601373][T28090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14555'. [ 951.845258][T28104] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 951.845258][T28104] program syz.6.14561 not setting count and/or reply_len properly [ 951.947525][T28110] syzkaller1: entered promiscuous mode [ 951.953156][T28110] syzkaller1: entered allmulticast mode [ 952.068022][T28114] serio: Serial port ttyS3 [ 952.091067][T28118] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14567'. [ 952.136245][ T2958] vhci_hcd: vhci_device speed not set [ 952.266653][T28126] serio: Serial port ttyS3 [ 952.301736][T28130] loop3: detected capacity change from 0 to 1024 [ 952.314354][T28130] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 952.352995][T13731] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 952.390333][T28140] serio: Serial port ttyS3 [ 952.413423][T28146] loop3: detected capacity change from 0 to 512 [ 952.420038][T28146] ext4: Unknown parameter 'measure' [ 952.428034][T28146] netlink: 180 bytes leftover after parsing attributes in process `syz.3.14576'. [ 952.467376][T28152] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14579'. [ 952.477088][T28153] netlink: 32 bytes leftover after parsing attributes in process `syz.5.14578'. [ 952.518458][T28159] serio: Serial port ttyS3 [ 952.580129][T28162] loop7: detected capacity change from 0 to 4096 [ 952.924271][T28190] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14591'. [ 953.039030][T28193] netlink: 32 bytes leftover after parsing attributes in process `syz.6.14593'. [ 953.168757][T28202] bridge_slave_0: left allmulticast mode [ 953.174511][T28202] bridge_slave_0: left promiscuous mode [ 953.180206][T28202] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.189513][T28202] bridge_slave_1: left allmulticast mode [ 953.195435][T28202] bridge_slave_1: left promiscuous mode [ 953.201112][T28202] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.212671][T28202] bond0: (slave bond_slave_0): Releasing backup interface [ 953.221907][T28202] bond0: (slave bond_slave_1): Releasing backup interface [ 953.234396][T28202] team0: Port device team_slave_0 removed [ 953.243437][T28202] team0: Port device team_slave_1 removed [ 953.250472][T28202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 953.257963][T28202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 953.266572][T28202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 953.273994][T28202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 953.460939][T28207] sctp: [Deprecated]: syz.7.14596 (pid 28207) Use of struct sctp_assoc_value in delayed_ack socket option. [ 953.460939][T28207] Use struct sctp_sack_info instead [ 954.210120][T28338] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 954.210120][T28338] program syz.7.14608 not setting count and/or reply_len properly [ 954.305530][T28352] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 954.305530][T28352] program syz.7.14610 not setting count and/or reply_len properly [ 954.347976][T28352] loop7: detected capacity change from 0 to 764 [ 954.367344][T28352] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 954.387673][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 954.387690][ T29] audit: type=1326 audit(1753659612.898:61045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28351 comm="syz.7.14610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5f9be9a9 code=0x7ffc0000 [ 954.420922][ T29] audit: type=1326 audit(1753659612.928:61046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28351 comm="syz.7.14610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f6e5f9be9a9 code=0x7ffc0000 [ 954.473517][ T29] audit: type=1326 audit(1753659612.978:61047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28351 comm="syz.7.14610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5f9be9a9 code=0x7ffc0000 [ 954.497224][ T29] audit: type=1326 audit(1753659612.978:61048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28351 comm="syz.7.14610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5f9be9a9 code=0x7ffc0000 [ 954.546459][ T29] audit: type=1326 audit(1753659613.038:61049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28351 comm="syz.7.14610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f6e5f9be9a9 code=0x7ffc0000 [ 954.570308][ T29] audit: type=1326 audit(1753659613.038:61050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28351 comm="syz.7.14610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5f9be9a9 code=0x7ffc0000 [ 954.593993][ T29] audit: type=1326 audit(1753659613.038:61051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28351 comm="syz.7.14610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6e5f9be9a9 code=0x7ffc0000 [ 954.617561][ T29] audit: type=1326 audit(1753659613.038:61052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28351 comm="syz.7.14610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5f9be9a9 code=0x7ffc0000 [ 954.641491][ T29] audit: type=1326 audit(1753659613.038:61053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28351 comm="syz.7.14610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6e5f9be9a9 code=0x7ffc0000 [ 954.665188][ T29] audit: type=1326 audit(1753659613.038:61054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28351 comm="syz.7.14610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5f9be9a9 code=0x7ffc0000 [ 954.929156][T28381] syz_tun: entered allmulticast mode [ 954.949643][T28381] dvmrp1: entered allmulticast mode [ 954.974291][T28380] syz_tun: left allmulticast mode [ 955.023818][T28387] serio: Serial port ttyS3 [ 955.537066][T28403] loop3: detected capacity change from 0 to 512 [ 955.560618][T28412] loop7: detected capacity change from 0 to 1024 [ 955.580733][T28403] EXT4-fs: Ignoring removed mblk_io_submit option [ 955.647381][T28403] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 955.735032][T28403] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 955.750005][T28403] System zones: 1-12 [ 955.762059][T28403] EXT4-fs (loop3): 1 truncate cleaned up [ 955.775063][T28403] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 955.794173][T28419] loop7: detected capacity change from 0 to 512 [ 955.800990][T28419] ext4: Unknown parameter 'measure' [ 955.835612][T28423] serio: Serial port ttyS3 [ 955.894525][T13731] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 956.723955][T28471] __nla_validate_parse: 4 callbacks suppressed [ 956.723969][T28471] netlink: 32 bytes leftover after parsing attributes in process `syz.7.14633'. [ 956.743332][T28471] loop7: detected capacity change from 0 to 764 [ 956.751351][T28471] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 956.790512][T28481] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14635'. [ 956.810728][T28481] loop3: detected capacity change from 0 to 764 [ 956.818455][T28481] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 957.215157][T28507] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12) [ 957.221778][T28507] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 957.229496][T28507] vhci_hcd vhci_hcd.0: Device attached [ 957.285341][T28513] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14637'. [ 957.361895][T28515] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 957.361895][T28515] program syz.7.14638 not setting count and/or reply_len properly [ 957.478515][ T3392] usb 11-1: new high-speed USB device number 54 using vhci_hcd [ 957.497585][T28515] loop7: detected capacity change from 0 to 764 [ 957.531587][T28515] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 957.682809][T28540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14641'. [ 957.749775][T28508] vhci_hcd: connection reset by peer [ 957.756413][ T2656] vhci_hcd: stop threads [ 957.760706][ T2656] vhci_hcd: release socket [ 957.765160][ T2656] vhci_hcd: disconnect device [ 957.961935][T28584] FAULT_INJECTION: forcing a failure. [ 957.961935][T28584] name failslab, interval 1, probability 0, space 0, times 0 [ 957.974663][T28584] CPU: 1 UID: 0 PID: 28584 Comm: syz.7.14646 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 957.974694][T28584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 957.974722][T28584] Call Trace: [ 957.974798][T28584] [ 957.974807][T28584] __dump_stack+0x1d/0x30 [ 957.974833][T28584] dump_stack_lvl+0xe8/0x140 [ 957.974856][T28584] dump_stack+0x15/0x1b [ 957.974919][T28584] should_fail_ex+0x265/0x280 [ 957.974957][T28584] should_failslab+0x8c/0xb0 [ 957.974989][T28584] __kmalloc_noprof+0xa5/0x3e0 [ 957.975020][T28584] ? pfkey_sadb2xfrm_user_sec_ctx+0x2e/0x120 [ 957.975126][T28584] pfkey_sadb2xfrm_user_sec_ctx+0x2e/0x120 [ 957.975166][T28584] pfkey_compile_policy+0x392/0x410 [ 957.975203][T28584] ? __pfx_pfkey_compile_policy+0x10/0x10 [ 957.975310][T28584] xfrm_user_policy+0x297/0x540 [ 957.975404][T28584] do_ipv6_setsockopt+0x13c5/0x22e0 [ 957.975431][T28584] ? kstrtoull+0x111/0x140 [ 957.975460][T28584] ? __rcu_read_unlock+0x4f/0x70 [ 957.975535][T28584] ? avc_has_perm_noaudit+0x1b1/0x200 [ 957.975569][T28584] ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0 [ 957.975617][T28584] ipv6_setsockopt+0x59/0x130 [ 957.975647][T28584] rawv6_setsockopt+0x1d2/0x420 [ 957.975748][T28584] sock_common_setsockopt+0x66/0x80 [ 957.975781][T28584] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 957.975814][T28584] __sys_setsockopt+0x181/0x200 [ 957.975887][T28584] __x64_sys_setsockopt+0x64/0x80 [ 957.975930][T28584] x64_sys_call+0x2bd5/0x2fb0 [ 957.975958][T28584] do_syscall_64+0xd2/0x200 [ 957.975988][T28584] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 957.976058][T28584] ? clear_bhb_loop+0x40/0x90 [ 957.976085][T28584] ? clear_bhb_loop+0x40/0x90 [ 957.976109][T28584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.976128][T28584] RIP: 0033:0x7f6e5f9be9a9 [ 957.976143][T28584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 957.976240][T28584] RSP: 002b:00007f6e5e01f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 957.976262][T28584] RAX: ffffffffffffffda RBX: 00007f6e5fbe5fa0 RCX: 00007f6e5f9be9a9 [ 957.976274][T28584] RDX: 0000000000000022 RSI: 0000000000000029 RDI: 0000000000000003 [ 957.976285][T28584] RBP: 00007f6e5e01f090 R08: 000000000000005c R09: 0000000000000000 [ 957.976296][T28584] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 957.976307][T28584] R13: 0000000000000000 R14: 00007f6e5fbe5fa0 R15: 00007ffea9f3b688 [ 957.976326][T28584] [ 958.018311][T28592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14648'. [ 958.079480][T28595] loop7: detected capacity change from 0 to 512 [ 958.246877][T28595] ext4: Unknown parameter 'measure' [ 958.263185][T28614] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 958.263185][T28614] program syz.0.14650 not setting count and/or reply_len properly [ 958.320263][T28616] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14651'. [ 958.828928][T28704] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14660'. [ 958.970066][T28728] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 958.970066][T28728] program syz.6.14662 not setting count and/or reply_len properly [ 959.274082][T28774] serio: Serial port ttyS3 [ 959.492958][T28777] chnl_net:caif_netlink_parms(): no params data found [ 959.528427][T28777] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.535678][T28777] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.542886][T28777] bridge_slave_0: entered allmulticast mode [ 959.549319][T28777] bridge_slave_0: entered promiscuous mode [ 959.555990][T28777] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.563153][T28777] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.570321][T28777] bridge_slave_1: entered allmulticast mode [ 959.576775][T28777] bridge_slave_1: entered promiscuous mode [ 959.593900][T28777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 959.604430][T28777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 959.625426][ T2651] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.636769][T28777] team0: Port device team_slave_0 added [ 959.644074][T28777] team0: Port device team_slave_1 added [ 959.659474][T28777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 959.666526][T28777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 959.692514][T28777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 959.705078][ T2651] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.722567][T28777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 959.729734][T28777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 959.755770][T28777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 959.774953][ T2651] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.794936][T28794] netlink: 14 bytes leftover after parsing attributes in process `syz.5.14669'. [ 959.809997][T28794] netlink: 20 bytes leftover after parsing attributes in process `syz.5.14669'. [ 959.821448][T28796] loop3: detected capacity change from 0 to 512 [ 959.833677][T28794] netlink: 20 bytes leftover after parsing attributes in process `syz.5.14669'. [ 959.843157][T28796] ext4: Unknown parameter 'measure' [ 959.885053][ T2651] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.900015][T28800] loop7: detected capacity change from 0 to 1024 [ 959.918529][T28777] hsr_slave_0: entered promiscuous mode [ 959.926414][T28777] hsr_slave_1: entered promiscuous mode [ 959.932413][T28777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 959.939999][T28777] Cannot create hsr debugfs directory [ 960.042903][T28808] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 960.042903][T28808] program syz.7.14673 not setting count and/or reply_len properly [ 960.105833][T28816] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 960.105833][T28816] program syz.7.14675 not setting count and/or reply_len properly [ 960.183854][T28821] loop7: detected capacity change from 0 to 764 [ 960.202011][T28822] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12) [ 960.208638][T28822] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 960.216382][T28822] vhci_hcd vhci_hcd.0: Device attached [ 960.234702][ T2651]  (unregistering): Released all slaves [ 960.258507][ T2651] bond1 (unregistering): Released all slaves [ 960.268680][T28821] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 960.287158][ T29] kauditd_printk_skb: 279 callbacks suppressed [ 960.287191][ T29] audit: type=1326 audit(1753659618.798:61334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28814 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5f9be9a9 code=0x7ffc0000 [ 960.327613][ T2651] bond2 (unregistering): Released all slaves [ 960.341832][ T2651] bond0 (unregistering): Released all slaves [ 960.354148][ T2651] bond3 (unregistering): Released all slaves [ 960.414862][ T2651] bond4 (unregistering): Released all slaves [ 960.433242][ T29] audit: type=1326 audit(1753659618.828:61335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28814 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5f9be9a9 code=0x7ffc0000 [ 960.456305][ T29] audit: type=1326 audit(1753659618.828:61336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28814 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f6e5f9be9a9 code=0x7ffc0000 [ 960.480109][ T2958] usb 13-1: new high-speed USB device number 52 using vhci_hcd [ 960.504819][ T2651] bond5 (unregistering): Released all slaves [ 960.535621][ T2651] bond6 (unregistering): Released all slaves [ 960.626154][ T2651] hsr_slave_0: left promiscuous mode [ 960.636583][ T2651] hsr_slave_1: left promiscuous mode [ 960.649047][ T2651] veth1_macvtap: left promiscuous mode [ 960.654597][ T2651] veth0_macvtap: left promiscuous mode [ 960.660101][ T2651] veth1_vlan: left promiscuous mode [ 960.665951][ T2651] veth0_vlan: left promiscuous mode [ 960.761033][T28823] vhci_hcd: connection reset by peer [ 960.766688][ T2660] vhci_hcd: stop threads [ 960.771033][ T2660] vhci_hcd: release socket [ 960.775551][ T2660] vhci_hcd: disconnect device [ 960.813613][ T29] audit: type=1326 audit(1753659619.318:61337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28814 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5f9be9a9 code=0x7ffc0000 [ 960.836610][ T29] audit: type=1326 audit(1753659619.318:61338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28814 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5f9be9a9 code=0x7ffc0000 [ 960.925338][T28871] loop7: detected capacity change from 0 to 512 [ 960.958261][T28871] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 960.968598][T28871] EXT4-fs (loop7): write access unavailable, skipping orphan cleanup [ 960.979356][T28871] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 961.014233][T28887] loop3: detected capacity change from 0 to 512 [ 961.021092][T28887] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 961.048304][T28887] EXT4-fs (loop3): orphan cleanup on readonly fs [ 961.064150][T28887] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.14679: bad orphan inode 15 [ 961.081980][T28887] ext4_test_bit(bit=14, block=18) = 1 [ 961.087468][T28887] is_bad_inode(inode)=0 [ 961.091642][T28887] NEXT_ORPHAN(inode)=1023 [ 961.096045][T28887] max_ino=32 [ 961.099241][T28887] i_nlink=0 [ 961.104044][T28887] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.14679: corrupted xattr block 19: e_value size too large [ 961.127691][T28887] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 961.149354][T28887] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 961.164740][T28777] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 961.179756][T28777] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 961.205941][T28777] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 961.214909][T28777] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 961.380878][T28777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 961.743970][T28921] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 961.750613][T28921] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 961.758241][T28921] vhci_hcd vhci_hcd.0: Device attached [ 961.793426][T28777] 8021q: adding VLAN 0 to HW filter on device team0 [ 961.808391][ T2660] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.815534][ T2660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 961.830295][ T2673] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.837392][ T2673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 961.871991][T28923] vhci_hcd: connection closed [ 961.872203][ T2644] vhci_hcd: stop threads [ 961.881207][ T2644] vhci_hcd: release socket [ 961.885659][ T2644] vhci_hcd: disconnect device [ 961.899730][T28777] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 961.910198][T28777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 961.987748][T28777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 962.099658][T28777] veth0_vlan: entered promiscuous mode [ 962.115719][T28777] veth1_vlan: entered promiscuous mode [ 962.131132][T28777] veth0_macvtap: entered promiscuous mode [ 962.141157][T27803] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 962.151637][T28777] veth1_macvtap: entered promiscuous mode [ 962.164091][T28777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 962.177545][T28777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 962.188102][T28777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.188901][T28965] __nla_validate_parse: 6 callbacks suppressed [ 962.188917][T28965] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14682'. [ 962.196881][T28777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.220812][T28777] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.229602][T28777] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.240016][ T29] audit: type=1400 audit(1753659620.728:61339): avc: denied { ioctl } for pid=28962 comm="syz.7.14682" path="socket:[168532]" dev="sockfs" ino=168532 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 962.265417][ T29] audit: type=1400 audit(1753659620.728:61340): avc: denied { read write } for pid=28962 comm="syz.7.14682" dev="sockfs" ino=168532 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 962.345082][T28982] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14683'. [ 962.419236][T13731] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 962.437376][T28998] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 962.437376][T28998] program syz.7.14685 not setting count and/or reply_len properly [ 962.629513][ T29] audit: type=1326 audit(1753659621.138:61341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29007 comm="syz.0.14689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6900fce9a9 code=0x7ffc0000 [ 962.633644][ T3392] vhci_hcd: vhci_device speed not set [ 962.653290][ T29] audit: type=1326 audit(1753659621.138:61342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29007 comm="syz.0.14689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6900fce9a9 code=0x7ffc0000 [ 962.682421][ T29] audit: type=1326 audit(1753659621.138:61343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29007 comm="syz.0.14689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f6900fce9a9 code=0x7ffc0000 [ 962.724418][T29012] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 962.724418][T29012] program syz.6.14690 not setting count and/or reply_len properly [ 962.786011][T29020] loop3: detected capacity change from 0 to 1024 [ 962.794167][T29020] EXT4-fs: Ignoring removed nomblk_io_submit option [ 962.803424][T29020] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 962.820140][T29022] netlink: 68 bytes leftover after parsing attributes in process `syz.6.14695'. [ 962.847097][T29027] FAULT_INJECTION: forcing a failure. [ 962.847097][T29027] name failslab, interval 1, probability 0, space 0, times 0 [ 962.859890][T29027] CPU: 1 UID: 0 PID: 29027 Comm: syz.6.14696 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 962.859922][T29027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 962.859936][T29027] Call Trace: [ 962.859942][T29027] [ 962.859950][T29027] __dump_stack+0x1d/0x30 [ 962.860027][T29027] dump_stack_lvl+0xe8/0x140 [ 962.860046][T29027] dump_stack+0x15/0x1b [ 962.860117][T29027] should_fail_ex+0x265/0x280 [ 962.860150][T29027] should_failslab+0x8c/0xb0 [ 962.860192][T29027] kmem_cache_alloc_noprof+0x50/0x310 [ 962.860214][T29027] ? getname_kernel+0x3c/0x1f0 [ 962.860232][T29027] ? should_fail_ex+0xdb/0x280 [ 962.860264][T29027] getname_kernel+0x3c/0x1f0 [ 962.860313][T29027] kern_path+0x23/0x130 [ 962.860338][T29027] bpf_uprobe_multi_link_attach+0x232/0x8f0 [ 962.860427][T29027] ? kstrtouint+0x76/0xc0 [ 962.860455][T29027] ? __rcu_read_unlock+0x4f/0x70 [ 962.860533][T29027] ? __fget_files+0x184/0x1c0 [ 962.860551][T29027] link_create+0x666/0x6c0 [ 962.860569][T29027] __sys_bpf+0x4c7/0x790 [ 962.860601][T29027] __x64_sys_bpf+0x41/0x50 [ 962.860636][T29027] x64_sys_call+0x2478/0x2fb0 [ 962.860659][T29027] do_syscall_64+0xd2/0x200 [ 962.860679][T29027] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 962.860707][T29027] ? clear_bhb_loop+0x40/0x90 [ 962.860791][T29027] ? clear_bhb_loop+0x40/0x90 [ 962.860809][T29027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.860853][T29027] RIP: 0033:0x7ff2a977e9a9 [ 962.860869][T29027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 962.860888][T29027] RSP: 002b:00007ff2a7de7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 962.860903][T29027] RAX: ffffffffffffffda RBX: 00007ff2a99a5fa0 RCX: 00007ff2a977e9a9 [ 962.860993][T29027] RDX: 0000000000000040 RSI: 00002000000005c0 RDI: 000000000000001c [ 962.861006][T29027] RBP: 00007ff2a7de7090 R08: 0000000000000000 R09: 0000000000000000 [ 962.861017][T29027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 962.861028][T29027] R13: 0000000000000000 R14: 00007ff2a99a5fa0 R15: 00007fff9b3b1318 [ 962.861045][T29027] [ 963.112084][T13731] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 963.129743][T29032] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 963.129743][T29032] program syz.3.14698 not setting count and/or reply_len properly [ 963.209717][T29038] netlink: 32 bytes leftover after parsing attributes in process `syz.5.14700'. [ 963.218882][T29038] netlink: 32 bytes leftover after parsing attributes in process `syz.5.14700'. [ 963.224884][T29040] loop3: detected capacity change from 0 to 512 [ 963.234827][T29040] ext4: Unknown parameter 'measure' [ 963.380629][T29050] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 963.969911][T29058] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 963.969911][T29058] program syz.6.14709 not setting count and/or reply_len properly [ 964.268670][T29090] loop7: detected capacity change from 0 to 1024 [ 964.310486][T29110] loop7: detected capacity change from 0 to 764 [ 964.317809][T29110] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 964.349355][T29117] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 964.349355][T29117] program syz.7.14720 not setting count and/or reply_len properly [ 964.399929][T29126] loop7: detected capacity change from 0 to 512 [ 964.417535][T29126] ext4: Unknown parameter 'measure' [ 964.892714][T29216] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 964.892714][T29216] program syz.3.14724 not setting count and/or reply_len properly [ 964.915706][T29216] loop3: detected capacity change from 0 to 764 [ 964.923120][T29216] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 965.171595][ T2651] ================================================================== [ 965.179783][ T2651] BUG: KCSAN: data-race in copy_process / free_pid [ 965.186295][ T2651] [ 965.188621][ T2651] read-write to 0xffffffff868608e0 of 4 bytes by task 29216 on cpu 0: [ 965.196766][ T2651] free_pid+0x77/0x180 [ 965.200829][ T2651] free_pids+0x9e/0xb0 [ 965.204894][ T2651] release_task+0x9a9/0xb60 [ 965.209402][ T2651] do_exit+0xd81/0x1590 [ 965.213566][ T2651] do_group_exit+0xff/0x140 [ 965.218070][ T2651] get_signal+0xe59/0xf70 [ 965.222414][ T2651] arch_do_signal_or_restart+0x96/0x480 [ 965.227982][ T2651] exit_to_user_mode_loop+0x7a/0x100 [ 965.233274][ T2651] do_syscall_64+0x1d6/0x200 [ 965.237883][ T2651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.243775][ T2651] [ 965.246093][ T2651] read to 0xffffffff868608e0 of 4 bytes by task 2651 on cpu 1: [ 965.253632][ T2651] copy_process+0x1790/0x1f90 [ 965.258309][ T2651] kernel_clone+0x16c/0x5b0 [ 965.262824][ T2651] user_mode_thread+0x7d/0xb0 [ 965.267532][ T2651] call_usermodehelper_exec_work+0x7a/0x160 [ 965.273445][ T2651] process_scheduled_works+0x4cb/0x9d0 [ 965.278917][ T2651] worker_thread+0x582/0x770 [ 965.283511][ T2651] kthread+0x486/0x510 [ 965.287668][ T2651] ret_from_fork+0xda/0x150 [ 965.292183][ T2651] ret_from_fork_asm+0x1a/0x30 [ 965.296956][ T2651] [ 965.299271][ T2651] value changed: 0x800000f0 -> 0x800000ef [ 965.304978][ T2651] [ 965.307295][ T2651] Reported by Kernel Concurrency Sanitizer on: [ 965.313443][ T2651] CPU: 1 UID: 0 PID: 2651 Comm: kworker/u8:32 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 965.326111][ T2651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 965.336173][ T2651] Workqueue: events_unbound call_usermodehelper_exec_work [ 965.343307][ T2651] ================================================================== [ 965.572367][ T2958] vhci_hcd: vhci_device speed not set