last executing test programs: 20m44.936658572s ago: executing program 32 (id=29): socket$packet(0x11, 0xa, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x16, 0x37d, &(0x7f0000001280)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101002, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) nanosleep(0x0, 0x0) 20m44.445974023s ago: executing program 33 (id=31): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb010018000000000000003000020030000000020000000000000000000010040000000000000000000009010000000000000001000004100000000000000002000000000000000000305dad97787ef723093b8eaa78c2fd18290238ef3328ec85061dc5e574a6d06e87ec2ab466af42374f962dd46beba85c7086c51f875addb7b4d043e4dbcfd73ccb2e818a5a23f19215da11ef5b5662210900277e13a134eb33966627b962499aa31439dc14d1c6e118cdefa8392e4568e098b450ebd0b404b7e4174b85d036f2188af5f4a07d"], 0x0, 0x4a}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="06ecffffffffffffde0c0800000024056585c70f0000665551542b4d0a57e9c085ecffa71308337b2b96e4d5cf1c84c5d39ea7b2bef15fa468c8ae622f3ab93218dfca76a33a8c3ab947332640b127d6b64e74003d4f1750aef0b81abf34c631a5202e176ec9b200"/114], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}, {@noquota}]}, 0x3, 0x440, &(0x7f0000000280)="$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") r2 = socket(0x10, 0x803, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000980)={r1, 0x80000000000000, 0x8b01, 0x80000001}) ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000009c0)={'veth1_to_bridge\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x2, '\x00', 0x0, r0, 0x3, 0x0, 0x3}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) rt_sigsuspend(0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000080), 0x4) mkdir(&(0x7f0000000140)='./control\x00', 0x5) 20m44.422162023s ago: executing program 34 (id=33): prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1b, 0x8, &(0x7f00000002c0)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000001580)={0xfc, {"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", 0x1000}}, 0x1006) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) lsm_list_modules(&(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=0x10, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000080000000000000003000000180600000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) unshare(0x20060400) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000014c0)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000025c0)=ANY=[@ANYBLOB="5c0100001000130701000000fcdbdf2500000000000000000000000000000000ff020000000000000000000000000001000600034e2100020a00000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414bb000000000000000000000000000004d632000000fe8000000000000000000000000000190000000000000000ffffffffffffffff0000000000000000090000000000000001000000ffffffff0000000000000000010000800000000043050000000000000500000000000000ffffffffffffff7f000000000000000001000000000000000000000000000000000000002cbd70000035000002000300500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000210466d38547aa140db9a200000000c538c7cb7a0c001c00", @ANYRES32=0x0, @ANYBLOB="02000000b37d731aba5aa067723f4d07980df4bb237bea0dc4a0b11f3296c8939a21db558ce59510b8"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f00000000c0)={0x2}, 0x8) shutdown(r7, 0x0) r8 = syz_clone(0x7000800, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000300), &(0x7f00000004c0)="70c53f1e93da3e8bc06c09ad13242d41dfdada6599e4135ce08a37179b15ee1c5e508e6d86f6c728f0ec8f8603e6ccfb6bdf52f646b8c30d854d6e6ce9cd0ba4781d08cf357ea193fcce7b7755e1505b3cbc9f70b3dbbec0b1600f36de0d7bfefed5c1152aee55fc6b1d237feae7e8694beae55045dfaf780f66c2a8b8ed93e6c9e7c7") fcntl$lock(r6, 0x26, &(0x7f00000001c0)={0x0, 0x4, 0x2, 0xc896, r8}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x10c000) r9 = socket(0x1e, 0x4, 0x0) close(r9) fgetxattr(r9, &(0x7f0000000300)=ANY=[@ANYBLOB="6f73322e8e64"], 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) 20m21.956678762s ago: executing program 35 (id=277): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x25, &(0x7f0000000340)=[@mss={0x2, 0x3cc366a}, @mss={0x2, 0x1}], 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r1, @ANYBLOB="e300000000000000000000010000000000000000", @ANYRES32, @ANYRES32=r3, @ANYBLOB="01000000040000000300"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r4, 0x0, 0x5}, 0x18) r5 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) write$sndseq(r5, &(0x7f0000001a80)=[{0x9, 0xc8, 0xd, 0xd2, @time={0x7, 0x1}, {0x9, 0xe}, {0x10, 0x8}, @note={0x7f, 0x2, 0x1, 0x6, 0x335cdaf3}}], 0x1c) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r6, 0x8, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000094}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) statfs(&(0x7f0000000200)='.\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400000000000000", @ANYRES32=0x0, @ANYBLOB="400d00000000000030001280"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r7) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) 20m14.214868543s ago: executing program 36 (id=333): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rseq(&(0x7f0000000680), 0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c30000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r2, 0x0, 0xffff}, 0x18) getuid() socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x51, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0x5, 0x3, 0x2, 0x0, 0xe61b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6}, 0x94) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f80)={&(0x7f0000000a00)={0x1c8, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x814}, 0x4004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00'}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) fcntl$notify(r4, 0x402, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) 20m14.051228499s ago: executing program 37 (id=336): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) listen(r0, 0x0) setresuid(0xee01, 0xee01, 0xee00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = getpgid(0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r4}) sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000040000e41300050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) sendmmsg$inet(r5, &(0x7f0000000a40)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}, {{&(0x7f00000003c0)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x4000804) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000000)={r5, 0x7, 0x8, 0x2b7}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x5e, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r8}, 0x10) sync_file_range(0xffffffffffffffff, 0xffffffffffff5580, 0x7, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'gre0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x7807, 0x700, 0xd9, 0x9250b88d, {{0x14, 0x4, 0x1, 0x0, 0x50, 0x66, 0x0, 0xa, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@generic={0x86, 0x2}, @timestamp_prespec={0x44, 0x34, 0x83, 0x3, 0x1, [{@multicast2, 0x6}, {@broadcast, 0x322}, {@broadcast, 0x3fff80}, {@local}, {@rand_addr=0x64010102, 0xff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xbf48}]}, @noop, @generic={0x94, 0x5, "b1a39d"}]}}}}}) 19m57.960260186s ago: executing program 38 (id=516): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) sendfile(r1, r0, 0x0, 0x7ffff088) 19m54.941597145s ago: executing program 39 (id=535): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) iopl(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x59, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=0x0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x18) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000070000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000550901000000000095000000000037dda47b0000bf91000000000000020000000000008500000085000000b700000000000000950000000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000280)='sched_switch\x00', r6, 0x0, 0x4}, 0x18) socket$igmp6(0xa, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) 19m49.929593029s ago: executing program 40 (id=567): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) unshare(0x22020600) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r6, 0x0, &(0x7f0000000040)='./file0\x00', 0xe4, 0x183000, 0x12345}) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r9, &(0x7f0000000040), 0x8) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1070}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r10}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x28000}, &(0x7f0000000240)=0x8) bpf$MAP_CREATE(0x0, 0x0, 0x39) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) timer_settime(r1, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) 19m44.612616506s ago: executing program 41 (id=605): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000080)={0x2, 0xffff, @empty}, 0x10, &(0x7f00000000c0)=[{0x0}], 0x1, &(0x7f0000000100)=ANY=[], 0x40}, 0x20000000) 19m41.596152375s ago: executing program 42 (id=623): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x4, 0xaea}, 0x10005, 0x1, 0xfffffbff, 0x3, 0x1, 0x80000000, 0x5, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) kexec_load(0x4, 0xa, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000811}, 0xe000000) r4 = syz_open_procfs(0x0, &(0x7f0000001380)) getdents(r4, &(0x7f0000002000)=""/4096, 0x1000) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8a}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x69, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r6}, 0x18) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r7, 0x209}, 0x14}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10, 0x0, 0x3}, 0x18) 19m38.250690007s ago: executing program 43 (id=635): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = dup3(r0, r0, 0x0) r2 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000001c0)={r2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], 0x3, 0x176, &(0x7f0000000240)="$eJzs27GL01AcB/BfbNRTl5vFIeDiVNTJUZET1ICidNBJ4XS5yoG3RKfgX+LqHyfITTcIT2q0tSVFrU0j189n6Q++7eP3hteXF5IXV94c7B8evT58fBw7WRb57SjiJIvdOBODaNQBAJwmJynFl5RSOl/HhY+RUuq7IwCga/Z/ANg+v93/b/XUGADQGed/ANg+T589f3inLPeeFMVOxOe6GlWj5rPJ790v964X3+3OfnVcVaPBNL/R5MV8fjYu/shvtubn4trVJp9kdx+VC/ml2J9v1WOIAAAAsKJhMdV6vh8Ol+VN9cv9gYXzex6X841NAwD4C0fv3h+8HI9fvV1Dkcd6xlG0FVH/wZcnF239t7qZIvtZfE0prTDOh0/NEhg/+C+ms94ii4h/G6fvfyaga7NF33cnAAAAAAAAAAAAAADAMt2+jTToe3oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ6lsAAAD//1UCS4E=") r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 19m27.160426731s ago: executing program 44 (id=724): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000040)={[{@numtail}, {}, {@fat=@umask={'umask', 0x3d, 0x7}}, {@uni_xlate}, {@uni_xlateno}, {@shortname_mixed}, {@utf8no}, {@numtail}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@fat=@time_offset={'time_offset', 0x3d, 0x1fb}}, {@utf8}, {@uni_xlateno}, {@shortname_win95}]}, 0x6, 0x2a6, &(0x7f0000000440)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x4) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r0, 0x7fff) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x22, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0x2000}]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xb}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 19m17.771307911s ago: executing program 45 (id=786): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000300)={0x1d, @rand_addr=0x64010100, 0x4e22, 0x1, 'lblc\x00', 0xe, 0x8ea, 0x3d}, 0x2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r8}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x403, 0x70b528, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) 19m7.773353068s ago: executing program 46 (id=859): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="180001000000db0511000090540ad12668ed4f3bde8b9830066bb8f6c4cb6f28310b93bea265af2b48baa07a8e0fc5fadde0826726fc8686e015f407aa3686e1f32a31dd82c7afb6cbffa239ac68d603fe1219c85cd864ed680ec7baecefe787b7dfbd9fcab971a931b405d599b05f200a43753bff9d658430294d369693f1855bee55cd2b059d56eef150ae2c997ad3fc01ae3ffe73fda8cf", @ANYRES64=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000080)='%+9llu \x00'}, 0x20) r5 = socket$packet(0x11, 0x2, 0x300) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) execve(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000003c0)={[&(0x7f0000000200)='\\+&\'\x00', &(0x7f00000002c0)='+\x15\x00', &(0x7f0000000300)='..U\\\x00', &(0x7f0000000380)='\x00']}, &(0x7f0000000500)={[&(0x7f0000000400)='*p\x00', &(0x7f00000004c0)='GPL\x00']}) 19m6.747773342s ago: executing program 47 (id=867): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020816c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) (async) r1 = add_key$user(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)="4504493f", 0x4, 0xfffffffffffffffb) r2 = request_key(&(0x7f0000000480)='logon\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000500)='\'\x00', 0xfffffffffffffff9) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000440)='dns_resolver\x00', &(0x7f0000000680)=@chain={'key_or_keyring:', r2}) (async) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0x0, 0x141) rmdir(&(0x7f0000000340)='./cgroup\x00') utime(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000002c0)={0xffffffffffffff00, 0x6}) fchown(r3, 0x0, 0xee01) (async) r4 = socket$inet6(0xa, 0x3, 0x3c) (async, rerun: 64) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) (async) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r5, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port0\x00', 0x0, 0x60004, 0x0, 0xffffffff, 0x6, 0xfffffffc}) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r5, 0xc0a85320, &(0x7f0000001e00)={{0x80, 0x80}, 'port0\x00', 0x8719470d9569919, 0x0, 0x7ffc, 0x1, 0x4, 0x1, 0x5, 0x0, 0x1, 0x9}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x7f}, 'port1\x00', 0x80, 0x14, 0x4, 0xfffffeff, 0x0, 0xc, 0x200000, 0x0, 0x4875c99660ff2b2d}) (async) unshare(0x2040400) (async) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) statx(r6, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, &(0x7f0000000540)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x1000, 0x1000}], 0x1, 0x0) (async) unshare(0x2c040000) (async, rerun: 32) socket$vsock_stream(0x28, 0x1, 0x0) (async, rerun: 32) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f00000006c0)={0x0, 0xc, 0x2, 0x1, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @remote, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, @loopback, @private1]}, 0x68) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r7}, 0x10) (async) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) (async) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x5dc}], 0x1) 19m4.352930204s ago: executing program 48 (id=871): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="180001000000db0511000090540ad12668ed4f3bde8b9830066bb8f6c4cb6f28310b93bea265af2b48baa07a8e0fc5fadde0826726fc8686e015f407aa3686e1f32a31dd82c7afb6cbffa239ac68d603fe1219c85cd864ed680ec7baecefe787b7dfbd9fcab971a931b405d599b05f200a43753bff9d658430294d369693f1855bee55cd2b059d56eef150ae2c997ad3fc01ae3ffe73fda8cf", @ANYRES64=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000080)='%+9llu \x00'}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 18m57.814700143s ago: executing program 49 (id=897): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ad7e195a000000000000"], 0x48) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000300)={0x1d, @rand_addr=0x64010100, 0x4e22, 0x1, 'lblc\x00', 0xe, 0x8ea, 0x3d}, 0x2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x403, 0x70b528, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) 18m55.918560714s ago: executing program 50 (id=907): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000230000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) rt_sigprocmask(0x1, &(0x7f0000000000)={[0x5]}, 0xfffffffffffffffe, 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtfilter={0x884, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x9, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0xb, 0x7, 0x4, 0x8, 0x5, 0x1, 0x0, 0xc0, 0x6, 0x101, 0x920, 0x7, 0x3, 0x2, 0x2c9d, 0x6, 0x26, 0x2, 0x10, 0xffffffa0, 0x7d0, 0xffff, 0x10000, 0x3, 0x3, 0xfffffff9, 0xe5, 0x3, 0x8, 0x3, 0x3, 0x9, 0x1, 0xfffffff9, 0x22, 0x2, 0x1, 0x1, 0x0, 0x0, 0xea3, 0x1, 0x0, 0x4, 0x91, 0x4, 0x3, 0x5, 0x7, 0x4, 0x7f, 0x6, 0xd9a, 0xc, 0xb, 0x100, 0xed7, 0x8, 0xad4, 0x15, 0x9, 0xfffffff5, 0x31, 0x7, 0x1, 0x3, 0x8, 0x17028692, 0x3, 0x4, 0x7f, 0x1000004, 0xfe, 0x4, 0xfffe, 0x3f, 0x6, 0x5, 0xdf, 0x40000, 0x9, 0x7, 0xb, 0x7ff, 0x3fb3c724, 0x20000007, 0x7, 0x8, 0x6, 0x7fff, 0x8, 0x6, 0x2, 0x3, 0x5, 0x5, 0x1, 0x10, 0x3, 0x97, 0x3, 0x0, 0x1, 0x5b5b, 0x9, 0x8, 0x9, 0x2000, 0x4ce, 0x8, 0xfff, 0x6, 0x8db3, 0x9, 0x6, 0x279, 0x6, 0x6, 0xffff, 0x0, 0x3, 0x4, 0x4, 0xfff, 0x5, 0x2, 0x800, 0xffff, 0x4, 0x0, 0x7, 0x10000, 0x8000, 0x6, 0xad9b, 0x7, 0x0, 0x3ff, 0x7, 0x8, 0x1, 0x1, 0x7, 0xd6e4, 0x4, 0x533, 0x9, 0x276, 0x7, 0xff, 0x4, 0x2, 0x1166, 0xfffffffa, 0x3, 0xb20e, 0xe8, 0x4, 0x7f4, 0x7, 0x1, 0xfff, 0x3, 0x8001, 0x4, 0x3, 0x4, 0x7, 0x8, 0xca2, 0x6, 0x1000, 0x3, 0x2, 0x4, 0x18, 0xc6, 0x7, 0x7, 0x4, 0x80000000, 0x0, 0x7, 0xb6a, 0x7ab, 0x52, 0x3, 0x80, 0x9, 0x2da, 0x5, 0x9, 0x7fff, 0x2, 0xd5916ed, 0x0, 0xb8, 0x6, 0x5, 0x9, 0x2cc, 0x0, 0x2, 0xb7, 0x3, 0xb6b6, 0x0, 0x4, 0x9, 0x5, 0x5, 0x0, 0x4, 0xfce2, 0x8, 0xc, 0x3f5c, 0x100, 0xdb03, 0xfffffff9, 0x4, 0xf84, 0x4, 0xd7d2, 0xffffffff, 0xf300, 0x7fff, 0x8, 0x516, 0x3, 0x3, 0x8, 0x2, 0x1000, 0xffffffff, 0x3, 0x6, 0x200, 0xfffffffc, 0x6, 0x7fff, 0x8, 0x6, 0x8001, 0x8, 0x4, 0x5, 0x8, 0x1, 0xcdb9, 0x70, 0xf1, 0x10, 0x6, 0x93d5eea, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x5, 0xb, 0x7, 0x5, 0x101, 0x8000, 0x80000000, 0x5, 0x10, 0xffffffff, 0x7, 0x7fffffff, 0xffffffff, 0x4, 0x3ff, 0x8, 0x693d24ac, 0x9, 0x5, 0x7f, 0x9, 0x2, 0xe9, 0x14b, 0x3, 0x40, 0x8d, 0x1, 0x6, 0x101, 0xfff, 0x9, 0x7, 0x6, 0x10000, 0x9, 0x8001, 0x10c4, 0x3, 0x205, 0x9, 0x8, 0x60b, 0xd, 0xffff, 0x4, 0x1, 0xe, 0x1, 0x9, 0xffff, 0x8, 0x5, 0x0, 0x9, 0x5, 0x8, 0xfffffff9, 0x401, 0xd, 0x800, 0x4, 0x6, 0x3, 0x9, 0x3ff, 0x10, 0x8, 0x80000000, 0x6, 0x2afa, 0xffffffff, 0x6, 0x2, 0x3ff, 0x0, 0xd, 0x5, 0x6, 0x8, 0x2, 0x2000000, 0x7, 0x6, 0xfff, 0x3, 0x7, 0x8, 0x8, 0x6, 0x5, 0x7fff, 0x3, 0x1200, 0x9, 0xbc, 0x1, 0x8001, 0x9, 0xf, 0x5, 0x2, 0x3192212c, 0x3, 0x1, 0x3, 0x1000, 0x0, 0x9, 0x8000, 0xfffffff8, 0x3dae, 0x80, 0x5, 0x9, 0x9, 0x7, 0x698, 0x1, 0x7, 0x7f, 0x6, 0x401, 0x5, 0x7, 0x7fffffff, 0x7, 0x10001, 0xffffffe3, 0x7ff, 0x4, 0x10, 0x7, 0x1, 0x7, 0x9, 0x1ff, 0x7, 0xc5dd, 0x2, 0x7, 0x80, 0x3, 0xa, 0xff, 0x9, 0x6, 0x1, 0xd, 0x45, 0x10000, 0x553, 0x800, 0x0, 0x3, 0x4, 0x1b, 0xb, 0x1, 0x8, 0x59, 0x200, 0x1, 0x6, 0x5, 0xd, 0x8001, 0x5c34a762, 0x4, 0x9, 0x3, 0xf, 0x0, 0x9, 0x3, 0x40, 0xf9, 0xfffffff8, 0x2d1f, 0x100000, 0x6, 0x3, 0x80000001, 0x4, 0x40, 0x0, 0xffffffff, 0x80000000, 0x9, 0x8, 0x7, 0xfffffff1, 0x5, 0x0, 0x9, 0x81, 0x9, 0xeb5e, 0x4, 0x6, 0x2, 0x3, 0xf9d, 0xf, 0xce, 0xea5, 0x6, 0x4, 0x6, 0x400, 0x2, 0x300, 0x15, 0x8, 0x2, 0x6, 0x3, 0x9, 0x800, 0xa, 0x200, 0x6, 0x442b89e0, 0x3, 0x0, 0x35b4, 0x10001, 0x3, 0x10001, 0x5, 0x9, 0x4, 0xf, 0x6, 0x7, 0x0, 0x7, 0x0, 0x8ba2, 0x8, 0x2, 0x10001, 0x8, 0x9, 0x6, 0x7fffffff, 0x1, 0x3, 0x6, 0xbd3, 0x9, 0x7fffffff, 0x7, 0xffffd4a4, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x6, 0xbc, 0x7fffffff, 0x12b0abb7, {0xe, 0x0, 0x3, 0x9, 0x40, 0xfffffffb}, {0x1, 0x2, 0xfff7, 0x101, 0x8000, 0x3}, 0x8, 0x9}}]}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f3, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x1700, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) socket(0x10, 0x803, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000002000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 18m47.940350625s ago: executing program 51 (id=972): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}]}, 0xfd, 0x477, &(0x7f0000001500)="$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") r0 = creat(&(0x7f0000000200)='./file0\x00', 0x100) close(r0) socket$pptp(0x18, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) add_key(&(0x7f0000000440)='dns_resolver\x00', 0x0, &(0x7f00000004c0)="a079394a04954e2d1523cd274d954f18a7b1235d2023e670955c12e7265fa97c2cfb7ba5f67d4a0f06d00c089c2dbb7034ddf203c4f50b4d19d6ab0b49d345571461f3c9bc2be016252397574e61cd9b5fc6337f92b077112e9d69d5f0d761e584bd5f7a22aa334740193d174c89a6670c", 0x71, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) pselect6(0x40, &(0x7f0000000240)={0xffffffffffff4557, 0x4, 0xfffffffffffffff7, 0x1, 0x62a, 0x1, 0x7, 0x2}, &(0x7f0000000280)={0x3, 0x3e, 0x4, 0x7, 0x3, 0x1ccc200000000, 0x1, 0x3ec4d2c1}, &(0x7f0000000300)={0x9, 0xfffffffffffffffe, 0x8, 0xb, 0xb, 0x3, 0x8000, 0x7f}, &(0x7f0000000340), &(0x7f00000003c0)={&(0x7f0000000380)={[0x5]}, 0x8}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = pidfd_getfd(r5, r5, 0x0) setns(r6, 0x66020000) r7 = syz_pidfd_open(0x0, 0x0) setns(r7, 0x24020000) 18m40.396165187s ago: executing program 52 (id=1023): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="05"], 0x10) perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) unshare(0x6a040000) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r8, 0x0, 0xfffffffffffffffd}, 0xd) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xc0d00) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r9, 0x4058534c, &(0x7f0000000180)={0x80, 0x2f, 0x5, 0x5f, 0x7fffffff, 0x105}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0xffffffffffffffc9, &(0x7f0000000000)={&(0x7f00000004c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {}, {0x8, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x3c, 0x2, [@TCA_FLOW_EMATCHES={0x38, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3, 0x1, 0x6}, {0xfffffffe, 0x7, 0x10, 0x6, 0xe, 0x1}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x24}, {0x6d, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 18m39.420387158s ago: executing program 53 (id=1032): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) sendfile(r1, r0, 0x0, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000004c0)="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"}, 0x20) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000007dbe00000008000a00", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r4, 0xf505, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52e, &(0x7f0000000480)="$eJzs3U9vI2cZAPBnHHvZ7GabFDhAJUqhRdkVrJ00tI04lCIhOFUCyr2ExImiOHEUO+0mqtis+ABICAESJ7hwQeIDIKFKXDgipEpwBgECIdjCgQN00NjjNJv4X7tOnE1+P2ky78y8M8/zOprxvJ7RTACX1lMR8VJEvJOm6a2ImM7nF/IhDtpDVu/t+28sZ0MSafrKP5JI8nmdbSX5+Hq+2tWI+NqXI76ZnIzb2NvfWKrVqjv5dKW5uV1p7O3fXt9cWquuVbcWFuafX3xh8bnFuZG080ZEvPjFv3z/Oz/90ou//Mzrf3z1bze/laU1lS8/2o73qNhvYbvppdZncXSFnfcZ7DwqtlqYm+xWY+LEnHunnBMAAN1l5/gfjIhPRsStmI6J/qezAAAAwCMo/fxU/DeJSLu70mM+AAAA8AgptO6BTQrl/F6AqSgUyuX2PbwfjmuFWr3R/PRqfXdrpX2v7EyUCqvrtepcfq/wTJSSbHq+VX53+tlj0wsR8XhEfG96sjVdXq7XVsb94wcAAABcEteP9f//Pd3u/3fcHWdyAAAAwOjMjDsBAAAA4NQN2/+/dsp5AAAAAKfH9X8AAAC40L7y8svZkHbef73y2t7uRv212yvVxkZ5c3e5vFzf2S6v1etrrWf2bQ7aXq1e3/5sbO3eqTSrjWalsXc1Nuu7W81X1x94BTYAAABwhh7/+Ju/TyLi4HOTrSFzZbhVh6wGnFfFw1KSj7vs1n94rD3+8xklBZyJiXEnAIxNcdwJAGNTGncCwNglA5b3vHnnN/n4E6PNBwAAGL3Zj/a+/l/ou+ZB/8XAuWcnhsvL9X+4vFrX/4e9k7fgbeBwkZQGnQH07SA4HsBF8NDX/wdK0/eUEAAAMHJTrSEplIud6UKhXI640XotQClZXa9V5yLisYj43XTpA9n0fKtmMrDPAAAAAAAAAAAAAAAAAAAAAAAAAAC0pWkSKQAAAHChRRT+mvyq/Sz/2elnpo7/PnAl+c905K8Iff1Hr/zgzlKzuTOfzf/n4fzmD/P5z47jFwwAAAC4FAa8wP9BnX56px8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKP09v03ljvDWcb9+xciYqZb/GJcbY2vRikirv0rieKR9ZKImBhB/Mnsz0e6xU+ytA5Ddos/OYL4B/f6xo+D/FPoFv/6COLDZfZmdvx5qdv+V4inWuPu+18x4oHp96v38S8Oj38TPfb/G0PGeOKtn1d6xr8X8UTxRPy7WYRO/KRH/KeHjP+Nr+/v91qW/jhituv3T9Kpkh0ho9Lc3K409vZvr28urVXXqlsLC/PPL76w+NziXGV1vVbN/3aN8d2P/eKdfu2/1iP+zID2P3Nia1e6xvjfW3fuf6hdLHWLf/PpLvF//ZO8xsn4hfy771N5OVs+2ykftMtHPfmz3z7Zr/0rPdo/6P9/s9dGj7n11W//aciqAMAZaOztbyzVatWdC1vIeulDVs7Ozs5FzgpDFCYefjt3R5pYmqZptk89xHaSGPenelgY95EJAAAYtXdP+sedCQAAAAAAAAAAAAAAAAAAAFxeZ/E4seMxDw5LySgeoQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBL/DwAA//9t9tlI") r6 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='usrjquota=') pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000001580)='kmem_cache_free\x00', r8, 0x0, 0x3}, 0x18) getpid() 18m29.594470997s ago: executing program 54 (id=1125): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) syz_emit_ethernet(0x7a, &(0x7f00000024c0)={@link_local, @local, @void, {@ipv6={0x86dd, @gre_packet={0xe, 0x6, '\x00', 0x44, 0x2f, 0x1, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0xb, 0x1, 0x8, 0x3, 0x1, 0x1, 0x2, 0xa}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x2, {{0x0, 0x2, 0x9, 0x1, 0x0, 0x1, 0x4, 0x4}, 0x2, {0x7ff, 0xb, 0x0, 0x1d, 0x1, 0x0, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_buf(r2, 0x29, 0x2c, &(0x7f0000000280)=""/252, &(0x7f0000000000)=0xfc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) socket$packet(0x11, 0x3, 0x300) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) fstat(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$vcsn(&(0x7f0000000280), 0x7ff, 0x100) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 18m13.952123175s ago: executing program 55 (id=1375): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@exit]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0xb0, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x9c, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xffffffffffffffa5, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbedit={0x68, 0x1, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x3f, 0x8be6, 0x4}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PTYPE={0x0, 0x7, 0x2}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c810) 17m55.776288921s ago: executing program 56 (id=1600): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) open$dir(&(0x7f0000000100)='./file0\x00', 0x4000, 0xc) 17m54.140829031s ago: executing program 57 (id=1625): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffefa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='mem_return_failed\x00', 0xffffffffffffffff, 0x0, 0x7ffe}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000240)=0x2, 0x4) sendmsg$key(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x14) close_range(r3, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @private2}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) openat(0xffffffffffffffff, &(0x7f0000000040)='./bus\x00', 0x620142, 0x10d) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r2], 0x48) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) socket$nl_route(0x10, 0x3, 0x0) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00'}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="2400000022000106"], 0x24}], 0x1}, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x4, 0x101, 0x3, 0x4}, 0x10) 17m47.290554323s ago: executing program 58 (id=1716): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x2c, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) 17m32.464638856s ago: executing program 59 (id=1928): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000340)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000c1010000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000059729ec6850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = timerfd_create(0x7, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00000002c0), &(0x7f0000000300)=0x4) timerfd_settime(r5, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) socket$kcm(0x29, 0xa, 0x0) timerfd_settime(r5, 0x1, &(0x7f0000000200)={{0x77359400}, {r6, r7+10000000}}, &(0x7f0000000280)) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x28, 0x6, 0x0, @private1, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@generic={0x0, 0x2}, @mptcp=@synack={0x1e, 0x10, 0x4, 0x2, 0x0, 0x6, 0x8}]}}}}}}}}, 0x0) 17m24.85667718s ago: executing program 60 (id=2040): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x1, 0x7fe2, 0x1}, 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 17m2.203596367s ago: executing program 4 (id=2373): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_open_dev$usbfs(0x0, 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r5, 0x0, 0x0) socket$kcm(0x1e, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nouid32}]}, 0x1, 0x441, &(0x7f00000011c0)="$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") bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x1, {}, 0xff}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x4, 0x0, 0x0, 0x24004045}, 0x8001) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x50) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0xfe37, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r6, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) fadvise64(r6, 0x807f, 0x1000000, 0x4) 16m59.174130856s ago: executing program 4 (id=2403): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x0, 0xc, 0xffffffff, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000b900000000000000ff18910000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa2000000efff0007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xbb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0x6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x5) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) preadv(r8, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES8=r3], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r10, 0x0, 0x4}, 0x18) r11 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) faccessat(r7, &(0x7f0000000000)='./file0\x00', 0x5) 16m58.37379014s ago: executing program 4 (id=2413): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_open_dev$usbfs(0x0, 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r5, 0x0, 0x0) socket$kcm(0x1e, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nouid32}]}, 0x1, 0x441, &(0x7f00000011c0)="$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") bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x1, {}, 0xff}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x4, 0x0, 0x0, 0x24004045}, 0x8001) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x50) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0xfe37, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r6, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) fadvise64(r6, 0x807f, 0x1000000, 0x4) 16m56.593277806s ago: executing program 61 (id=2429): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138) write$UHID_DESTROY(r0, &(0x7f0000000340), 0x4) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) pread64(r1, &(0x7f0000000180)=""/39, 0x27, 0x2b) sendmsg$nl_netfilter(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="04007a8008004200ac1414aa000088015b800400e08008006d00", @ANYRES32=r1, @ANYBLOB="6fe765ef5b643aa9a8737c964a0830359f5fb7ffed8c97574772e75ce0f0a06768bc29af33ea65914993069f16ecb39162ae9f397ea6f9ffd39f3ab3abaf335aa2c3fd5f816d69d21dd0dfa0daef6f0cf09d0dd10b15876d9787334210061d1971498958eac6334c1102b241b893253c6e8de76d08000b00", @ANYRES32=0x0, @ANYBLOB="0c0015003e0000000000000008001500", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="040011800000006600028052fbd76b6cb472d735c5d1c64ac8616f5899a69d1e20533ac1481b0ef1b1357bc45dcb60d312f1aaeb0e69718246fff372336fc453b7b8b0a36d7a1104c1f010430acdf3e3f8675c4de67781ffb66605b27648facf93e77f9a90bc4af0903bca9afc0000"], 0x6e8}, 0x1, 0x0, 0x0, 0x2c091}, 0x48041) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x6, r2, 0x1, 0x1, 0x6, @broadcast}, 0x14) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0xfff3, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x2008c004) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x1, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000012000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r9}, 0x18) lremovexattr(0x0, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000100)) write(r7, &(0x7f0000000380)="c021", 0x2) 16m55.32640101s ago: executing program 4 (id=2442): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$qrtrtun(r0, &(0x7f00000004c0)=""/150, 0x96) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000042066b009000000000000000000000000000095000000000000009500"/56], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x600}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='qrtr_ns_server_add\x00', r1, 0x0, 0x40008003}, 0x18) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) 16m55.128791399s ago: executing program 4 (id=2445): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000080)}) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x8000000000, 0x20, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe10) io_setup(0x8, &(0x7f0000002740)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x0, 0x0, 0x0, {0xa, 0x4e20, 0x1, @private2, 0x1f7}}}, 0x32) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000540)="43210098") syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) (fail_nth: 2) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280), 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="88000000000201040000000000000000020000052400028014000180080001000000000008000200ac1e00010c00028005000100000000002400038014000180080001000000000008110200ac1414000c00028005000100000000002c000180"], 0x88}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = dup(0xffffffffffffffff) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r3}, 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000002c0)=0x20) renameat2(0xffffffffffffffff, &(0x7f0000000280)='./file0/file0\x00', r5, &(0x7f00000003c0)='./file0\x00', 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) 16m54.208846478s ago: executing program 4 (id=2452): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x7, 0x0, 0x0, 0x7ffc0002}]}) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00'/13, @ANYRES8=r1], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x800000000006}, 0x18) r4 = creat(0x0, 0x0) r5 = open(0x0, 0x14507e, 0x0) futex(&(0x7f0000000440)=0x2, 0x8b, 0x2, &(0x7f0000000480), 0x0, 0x1) fallocate(r4, 0x0, 0x0, 0x1000f4) io_setup(0x7d, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r6, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x100b, &(0x7f0000002500)=""/4107}, 0x94) dup2(0xffffffffffffffff, 0xffffffffffffffff) timerfd_settime(r5, 0x0, &(0x7f00000003c0), 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000000)=r5, 0x1) eventfd2(0x200, 0x80800) r7 = socket$packet(0x11, 0x2, 0x300) sendmmsg(r7, &(0x7f0000000e00)=[{{&(0x7f0000000080)=@qipcrtr={0x2a, 0x3, 0x4001}, 0x80, 0x0}}], 0x1, 0x45) 16m44.056337102s ago: executing program 8 (id=2561): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = timerfd_create(0x0, 0x0) readv(r2, &(0x7f00000009c0)=[{&(0x7f0000000200)=""/33, 0x21}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0xd, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028350400", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000ca2cd67e68054d8eb41c2b54cee873d8c92d1dfdafe71777839728ad5d6fb110d4065b38981c8d7cc2c200bce1f5e257c5cfbb2f02abf5350ed16a631324d6d8b981f0d1574890daaf690cb3605946c8cdf92ae3c65902b22f739029f1aebab53f5470f5c05c89cc24e9"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="92e26a9e0fb67d82180000000000000022000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18) r6 = socket(0x10, 0xdc68cfeadf5a1277, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000210400"/20, @ANYRES32=r8, @ANYBLOB="00000000000001002000128008000100677265001400028006000f00ab00000006000e00005e"], 0x40}}, 0x90) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000880)={{{@in6=@private0, @in=@empty}}, {{@in=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000040)=0xe8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f00000001c0)={0x8, 0x0, 0x8203, 0xfffffffc, 0x0, 0xa, 0x8, 0x7f}, &(0x7f0000000240)=0x20) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r10, 0x41009432, 0x0) 16m43.101160452s ago: executing program 8 (id=2574): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xb) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xff) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x401, 0xfffffffd, 0xc4cf, 0x7, "0441920887e87fcb367800000000080100", 0x4, 0x200}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x8) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x1) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x18}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) setgroups(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r4, 0x5607, 0x2c) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCL_SETVESABLANK(r6, 0x560e, &(0x7f0000000140)) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_ACTIVATE(r7, 0x5606, 0x4) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f0000000040)) write$UHID_CREATE(r0, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/12, 0xc, 0x0, 0x6, 0xa, 0x10001, 0xfffffffd}}, 0x120) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) 16m42.226396449s ago: executing program 8 (id=2580): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa000000000000791008000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf03000000000000850000000c000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x20, 0x7800, 0x5, 0x40, {{0x9, 0x4, 0x1, 0x3e, 0x24, 0x66, 0x0, 0x9, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, {[@lsrr={0x83, 0xf, 0x7b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x33}]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', r1, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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") setresuid(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16m41.732741331s ago: executing program 8 (id=2587): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}]}, 0xfd, 0x477, &(0x7f0000001500)="$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") r0 = creat(&(0x7f0000000200)='./file0\x00', 0x100) close(r0) socket$pptp(0x18, 0x1, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) add_key(&(0x7f0000000440)='dns_resolver\x00', 0x0, &(0x7f00000004c0)="a079394a04954e2d1523cd274d954f18a7b1235d2023e670955c12e7265fa97c2cfb7ba5f67d4a0f06d00c089c2dbb7034ddf203c4f50b4d19d6ab0b49d345571461f3c9bc2be016252397574e61cd9b5fc6337f92b077112e9d69d5f0d761e584bd5f7a22aa334740193d174c89a6670c", 0x71, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) pselect6(0x40, &(0x7f0000000240)={0xffffffffffff4557, 0x4, 0xfffffffffffffff7, 0x1, 0x62a, 0x1, 0x7, 0x2}, &(0x7f0000000280)={0x3, 0x3e, 0x4, 0x7, 0x3, 0x1ccc200000000, 0x1, 0x3ec4d2c1}, &(0x7f0000000300)={0x9, 0xfffffffffffffffe, 0x8, 0xb, 0xb, 0x3, 0x8000, 0x7f}, &(0x7f0000000340), &(0x7f00000003c0)={&(0x7f0000000380)={[0x5]}, 0x8}) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) r7 = pidfd_getfd(r6, r6, 0x0) setns(r7, 0x66020000) r8 = syz_pidfd_open(0x0, 0x0) setns(r8, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 16m40.416836567s ago: executing program 62 (id=2594): syz_io_uring_setup(0x3f7b, 0x0, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x600, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xf8, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xe4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x52, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0xfffffffffffffd10}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf8}}, 0x0) 16m39.729289156s ago: executing program 8 (id=2600): r0 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r1 = socket(0x10, 0x3, 0x9) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x8, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x24040880) sendfile(r1, r2, 0x0, 0x7fffffffffffffff) getrandom(0x0, 0x0, 0x0) bind$unix(r0, 0x0, 0x0) 16m39.136881822s ago: executing program 63 (id=2452): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x7, 0x0, 0x0, 0x7ffc0002}]}) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00'/13, @ANYRES8=r1], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x800000000006}, 0x18) r4 = creat(0x0, 0x0) r5 = open(0x0, 0x14507e, 0x0) futex(&(0x7f0000000440)=0x2, 0x8b, 0x2, &(0x7f0000000480), 0x0, 0x1) fallocate(r4, 0x0, 0x0, 0x1000f4) io_setup(0x7d, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r6, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x100b, &(0x7f0000002500)=""/4107}, 0x94) dup2(0xffffffffffffffff, 0xffffffffffffffff) timerfd_settime(r5, 0x0, &(0x7f00000003c0), 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000000)=r5, 0x1) eventfd2(0x200, 0x80800) r7 = socket$packet(0x11, 0x2, 0x300) sendmmsg(r7, &(0x7f0000000e00)=[{{&(0x7f0000000080)=@qipcrtr={0x2a, 0x3, 0x4001}, 0x80, 0x0}}], 0x1, 0x45) 16m38.316382956s ago: executing program 8 (id=2609): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 16m38.308281956s ago: executing program 64 (id=2609): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 16m28.773884924s ago: executing program 9 (id=2725): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}]}, 0xfd, 0x477, &(0x7f0000001500)="$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") r0 = creat(&(0x7f0000000200)='./file0\x00', 0x100) close(r0) socket$pptp(0x18, 0x1, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000840)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) add_key(&(0x7f0000000440)='dns_resolver\x00', 0x0, &(0x7f00000004c0)="a079394a04954e2d1523cd274d954f18a7b1235d2023e670955c12e7265fa97c2cfb7ba5f67d4a0f06d00c089c2dbb7034ddf203c4f50b4d19d6ab0b49d345571461f3c9bc2be016252397574e61cd9b5fc6337f92b077112e9d69d5f0d761e584bd5f7a22aa334740193d174c89a6670c", 0x71, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) pselect6(0x40, &(0x7f0000000240)={0xffffffffffff4557, 0x4, 0xfffffffffffffff7, 0x1, 0x62a, 0x1, 0x7, 0x2}, &(0x7f0000000280)={0x3, 0x3e, 0x4, 0x7, 0x3, 0x1ccc200000000, 0x1, 0x3ec4d2c1}, &(0x7f0000000300)={0x9, 0xfffffffffffffffe, 0x8, 0xb, 0xb, 0x3, 0x8000, 0x7f}, &(0x7f0000000340), &(0x7f00000003c0)={&(0x7f0000000380)={[0x5]}, 0x8}) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) r7 = pidfd_getfd(r6, r6, 0x0) setns(r7, 0x66020000) r8 = syz_pidfd_open(0x0, 0x0) setns(r8, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 16m26.264769501s ago: executing program 9 (id=2747): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES16=r1, @ANYRESDEC=0x0, @ANYRES16=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000400000003008e77cbdac20000000000000900000000000000000020000d02"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000a40)='kfree\x00', r5, 0x0, 0x2}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001006c696d69740000002400028008000440000000010c00024000000000000000000c000140"], 0x118}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket(0x2a, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x101, 0x2, 0xffff}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000026c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r9, {0x6, 0x6}, {}, {0x8, 0xffdf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x10, 0x4}}]}}]}, 0x3c}}, 0x4000) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000100000000000000000000000085000000070000001801000020756c2500000000002020207b1af8fefffffff5bfa100000000000007010000f8ffffffb702000008000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRESDEC=r11, @ANYRES32=r3], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r13 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) r14 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@fallback=r1, 0x0, 0x1, 0x7fffffff, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000300), 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=r14, @ANYRESHEX=r15, @ANYBLOB="30000000eb4b1e9991d601000000", @ANYRESDEC, @ANYRES8=r13, @ANYRES32, @ANYBLOB, @ANYRES64=r15], 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000003c0)={0x2}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b00)=ANY=[@ANYRESOCT, @ANYRES32=r12, @ANYRES64=r14, @ANYRES32, @ANYRESDEC, @ANYRES32=r7, @ANYRESOCT=r15, @ANYRES64=r15], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="d2df0266b9c65d8b82fd14baac41136d53c2c36f09ea82666ed1f5e54e62a9f4ae9a5510055a815832ae381055fd", @ANYRES64=0x0], 0x20) 16m26.217054143s ago: executing program 9 (id=2748): r0 = syz_io_uring_setup(0x497, &(0x7f0000000300)={0x0, 0x4661, 0x800, 0x5, 0x20e}, &(0x7f0000000240)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x400, 0x1}) io_uring_enter(r0, 0x40f9, 0x217, 0xa5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r3, 0x0, 0x81}, 0x18) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x810) pipe(&(0x7f00000002c0)) 16m26.086757848s ago: executing program 9 (id=2749): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}]}, 0xfd, 0x477, &(0x7f0000001500)="$eJzs3M9vVEUcAPDv2/7gt62IP0CUKhobjS0tqBw8gNHEgyYmesBjbQsiCzW0GiFEVw94NCTejUcT/wJPejHqycSr3g0JMVxAvTzzdt9rd5fddSlbF9zPJ1k68+YtM9+dN7szb7oNYGBNZP8kEdsj4teIGKtlG0+YqP24fvXC/J9XL8wnkaav/5FUz7t29cJ8cWrxvG1FptJ4vN7yufOn5srlxbN5fnrl9LvTy+fOP33y9NyJxROLZ2YPHz50cOa5Z2ef6UmcWZuu7flwae/ul9+89Or8sUtv/fh1UsTfEMf73f+nmzuWTrQ4NlQkHu++ljvCjrp0MtzHhnBT3o6IrLtGquN/LIZirfPG4qVP+to4YEOlaZpual9cSYH/sST63QKgP/LP+SSiMp+tgevX84PgytHaAiiL+3r+qJUMRyk/Z6RpfdtL2WrrWOWvL7JHNN1PAQDYCN8erf0s5n5r849Sw138I/ne0HhE3B0ROyPinojYFRH3RsR9EXF/RDxQ95xW+z7NmjdJbpz/lC6vK7AuZfO/5/O9rcb5XzH7i/GhPLejGv9IcvxkefFARNwVEZMxsinLz3So47sXf/msXdlE3fwve2T1F3PBvB2Xh5tu0C3MrczdSsz1rnwcsWe4VfzJ6k5A1o+7I2LPvvXVcfLJr/a2K/v3+DvowT5T+mXEE7X+r0RT/IWk8/7k9OYoLx6YLq6KG/3088XX2tV/S/H3QNb/W1te/6vxjyf1+7XLN1/Hxd8+bbum6fL6H61/Tnb9jyZvVNNFwQdzKytnZyJGk1fy40fy4431Vc+bXTs/i39yf+vxvzPWXokHIyK7iB+KiIcjYl/e9kci4tGI2N8h/h9eeOyd9ce/sbL4F26q/9smir3tG4qGTn3/TbWk6KzxDvEn0aL/D1VTk/mRbt7/Orb07K1czQAAAHDnKUXE9khKU6vpUmlqqvb78rtia6m8tLzy1PGl984s1L4jMB4jpeJO19jq/dCozOTL+uL+6GxT/mB+3/jzoS3V/NT8Unmh38HDgNvWZvxnfh/qd+uADef7WjC41jv+0zT9qMdNAf5jPv9hcBn/MLhajP8tTfkOfyMAuJO1+vy3sIfBYP4Pg8v4h8Fl/MPgMv5hIOXfhB/u5gv+G5bI3n/6V3s3iWhoYZr2qRmjt8erUU1EqW+1xzqfPtmnV+zv/I9t3h4d12Wi3+9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvfFPAAAA//89VeJz") r0 = creat(&(0x7f0000000200)='./file0\x00', 0x100) close(r0) socket$pptp(0x18, 0x1, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000840)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) add_key(&(0x7f0000000440)='dns_resolver\x00', 0x0, &(0x7f00000004c0)="a079394a04954e2d1523cd274d954f18a7b1235d2023e670955c12e7265fa97c2cfb7ba5f67d4a0f06d00c089c2dbb7034ddf203c4f50b4d19d6ab0b49d345571461f3c9bc2be016252397574e61cd9b5fc6337f92b077112e9d69d5f0d761e584bd5f7a22aa334740193d174c89a6670c", 0x71, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) pselect6(0x40, &(0x7f0000000240)={0xffffffffffff4557, 0x4, 0xfffffffffffffff7, 0x1, 0x62a, 0x1, 0x7, 0x2}, &(0x7f0000000280)={0x3, 0x3e, 0x4, 0x7, 0x3, 0x1ccc200000000, 0x1, 0x3ec4d2c1}, &(0x7f0000000300)={0x9, 0xfffffffffffffffe, 0x8, 0xb, 0xb, 0x3, 0x8000, 0x7f}, &(0x7f0000000340), &(0x7f00000003c0)={&(0x7f0000000380)={[0x5]}, 0x8}) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) r7 = pidfd_getfd(r6, r6, 0x0) setns(r7, 0x66020000) r8 = syz_pidfd_open(0x0, 0x0) setns(r8, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 16m23.862787063s ago: executing program 9 (id=2770): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x80}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x0, 0x0) 16m22.920969444s ago: executing program 9 (id=2793): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) timerfd_create(0x7, 0x0) clock_gettime(0x0, &(0x7f0000000180)) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x28, 0x6, 0x0, @private1, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@generic={0x0, 0x2}, @mptcp=@synack={0x1e, 0x10, 0x4, 0x2, 0x0, 0x6, 0x8}]}}}}}}}}, 0x0) 16m22.920756553s ago: executing program 65 (id=2793): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) timerfd_create(0x7, 0x0) clock_gettime(0x0, &(0x7f0000000180)) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x28, 0x6, 0x0, @private1, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@generic={0x0, 0x2}, @mptcp=@synack={0x1e, 0x10, 0x4, 0x2, 0x0, 0x6, 0x8}]}}}}}}}}, 0x0) 14m57.643725533s ago: executing program 6 (id=4268): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc449d9577eace7f938f4ecce410e2f57f1a855efe02fb35d634bda0247673a42c36d6cd0198e627d4886712e124202f8d7cc382c979272b30e", 0x6f}], 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000002085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x103, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r9, 0x0, 0x7fffffffffffffff}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, &(0x7f00000000c0)={0x4, 0x1}, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r7, 0x0, 0xfffffffffffffffd}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000811}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000380)=ANY=[@ANYRESDEC=r4], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x10) 14m57.483956579s ago: executing program 6 (id=4270): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b165"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e) 14m57.355702865s ago: executing program 6 (id=4273): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) utimes(0x0, 0x0) 14m57.303864157s ago: executing program 6 (id=4275): getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20002, 0x100) read(r0, &(0x7f0000000080)=""/1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) socket$inet(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900840000000001000000940001000000fc13c40000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r1}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xa, 0xe}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002540)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 14m57.104383556s ago: executing program 6 (id=4280): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) creat(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) memfd_secret(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x4, 0x0, 0x0) 14m57.068511817s ago: executing program 6 (id=4281): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1c, 0x1fffffffffffffb2, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xa0000004}) r4 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) dup3(r2, r1, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x300, 0x8, 0x300}}) 14m42.021800939s ago: executing program 66 (id=4281): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1c, 0x1fffffffffffffb2, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xa0000004}) r4 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) dup3(r2, r1, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x300, 0x8, 0x300}}) 5m47.94301734s ago: executing program 2 (id=11841): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x16, &(0x7f0000000bc0)={[{@nodiscard}, {@noblock_validity}, {@auto_da_alloc_val}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@noblock_validity}, {@minixdf}, {@nolazytime}, {@grpid}, {@noauto_da_alloc}]}, 0x0, 0x4f0, &(0x7f0000000640)="$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") bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000841}, 0x0) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r0}, 0x18) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000280)={0x5, 0xfe, 0x8006}) 5m47.095512567s ago: executing program 2 (id=11846): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x5e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x100, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, 0x0, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000300)=ANY=[], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000200)) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) sendmmsg$inet(r8, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r8, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)='0', 0x1}], 0x1) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40004, 0x0, 0x0}, 0x50) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) 5m43.946306072s ago: executing program 2 (id=11865): openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) mkdir(&(0x7f0000000000)='./file0\x00', 0xe6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd06, 0x2000044}, 0x101929, 0x5, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r5, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f00000052c0)=""/235, 0xeb}, {&(0x7f0000003080)=""/4096, 0x1000}], 0x3}, 0x3}], 0x1b00, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r5, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffff7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x40}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x14) 5m39.724092995s ago: executing program 2 (id=11903): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x202d00, 0x91) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000400"/24], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x12, 0x2000035e, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, 0xf}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000e9000000000000000000000000000079dbb4c292789436234f134aa847c391", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x10, 0x0, 0x91c, 0x8040a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x20000000001}, 0x143c9, 0x3, 0x9, 0x0, 0x5, 0x0, 0x3, 0x0, 0x9, 0x0, 0xfff}, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x1, 0x1c3, &(0x7f00000006c0)="$eJzs2z9rE3EYB/AnNYlpHZLBSRxudApNX0GDVBADgpJBQVBsA9KTQgsBHWw3B9+EL8bBVV+JYwfhpLn8aUKEWJqcNJ/Pkoe7fPP7Qy7JE7jX998f7h+d9F71vketVIqN3UjivBSN2IiRswAAbpLzLItfWZZlt89i82tkWVb0jACAZfP9DwDr5/mLl0/anc7esySpRaSf+91+N3/Mz7d78S7SOIjtqMfvuPiBMJTXjx539raTgUZ8SU+H+dN+99Z0vhX1aMzPt/J8MsxX8nwlti7nd6Ied+fnd6bzw/Gr8aA6zlcioh4/38ZRpLEfF9lJ/lMrSR4+7czk7wyeBwAAADdBMxkb9O/VmO7fm83p85P+OM+3Swv/PzDTX5fjXrnYtQPAujr58PHwTZoeHF+hqA1f44rxxYofW/kgSxzimorRlo6P7K5if/61qF6e4UyxOWeqo9tArmP08lIXWJmzrlJEFLXh3yJicuQ4/pM3wAIX9aBY8QcRsHKTq7/omQAAAAAAAAAAAAAAAH+zivuKil4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOvnTwAAAP//Fxt9XQ==") r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x104000, 0x20) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x40047211, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080788cfc4f5fb51134335cbc9a8fa7530f0031bab3da35ef7b31ddb75302851efe81d5a2adacea30083fd88ec891628cf4cdca37b81216251855e4e47bcd2f82cb575dd4e26fe2e4cfd0756368f1b0b33615da9f5941243d3828750488d037bc"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x18, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0xfcd8, 0xd3, 0x50, 0xfe, 0x6, @multicast}, 0x10) connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xf, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8=r6], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x640ca0b72053fe29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r7}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$kcm(0x2, 0x1, 0x106) sendmsg$inet(r8, 0x0, 0x30004001) ptrace(0x10, r6) ptrace$getregs(0xe, r6, 0xffffffffffffdcad, &(0x7f0000000000)=""/39) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000840)='virtio_transport_alloc_pkt\x00', r4}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 5m39.592292701s ago: executing program 2 (id=11906): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0xce8}, 0x23) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xff48, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000002100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x358, 0x130, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x288, 0xffffffff, 0xffffffff, 0x288, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x8000, 0x56e5, {0xd}}}, @common=@ipv6header={{0x28}, {0x0, 0x80}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x4}, 0x0, 0x128, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x18, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x40}}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xfffffffe, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3b8) stat(&(0x7f0000000580)='./mnt\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000bc0)={{{@in=@empty, @in6=@local, 0x4e24, 0x2, 0x4e21, 0x3864, 0xa, 0x20, 0x0, 0xff, 0x0, r4}, {0x5, 0x5d, 0x6, 0x3, 0x6, 0x2cd2, 0x200, 0x2}, {0x6, 0x6, 0x2, 0x8000}, 0x6e58, 0x6e6bb9, 0x1, 0x1, 0x1, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x16}, 0x4d2, 0xff}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x34ff, 0x2, 0x0, 0x4, 0x2, 0xe8, 0x5}}, 0xe8) accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000540)=0x14) socket$caif_stream(0x25, 0x1, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r5, &(0x7f0000000240), 0xfffffecc) ioctl$GIO_SCRNMAP(r5, 0x4b40, &(0x7f0000000000)=""/152) 5m39.373762491s ago: executing program 2 (id=11909): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}]) fcntl$setpipe(r2, 0x407, 0x401) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x1, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0xd) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095", @ANYRES64], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r5}, 0x18) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r7}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0xfe8e, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) 5m39.326207212s ago: executing program 67 (id=11909): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}]) fcntl$setpipe(r2, 0x407, 0x401) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x1, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0xd) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095", @ANYRES64], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r5}, 0x18) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r7}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0xfe8e, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) 4.339628393s ago: executing program 0 (id=15107): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r3, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$igmp(0x2, 0x3, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r6}, 0x10) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7736, 0x80, 0x2, 0x34f}, &(0x7f00000000c0), &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00'}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)={0x28, 0x7, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, 0x0, 0x0) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r10, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000020", @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250b00000004000580"], 0x18}, 0x1, 0x0, 0x0, 0x20040040}, 0x20000000) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) 4.191097689s ago: executing program 7 (id=15109): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x41) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x0, 0x41}, 0x28) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x75, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)=')\x00', 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 4.16584833s ago: executing program 0 (id=15110): prlimit64(0x0, 0x2, &(0x7f0000000040)={0x633, 0xffffffffffffffff}, 0x0) mprotect(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xa) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) close(r1) socket$kcm(0x11, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2e, &(0x7f0000000640)=r0, 0x4) recvmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0x0, 0x20000, 0x0, 0x0, 0x5d8c, 0x42, 0x0, 0xfffffffffffffffd, 0x3f}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r4}, 0x18) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="516aaacfd0c763298512b60b38da8a203165ea79f44052a027cd63098a040e402234411b33a0e05a4a9935319969e8367eca35ba3913c537d6cd140a6d563479d8130a744fb64caa6e2a99a7d95c6f71a6052729419cbfd21a92fc9b2806aeb9e8513d7c8751e7173f73280207b6e357b4b051334458215370bf7e20510766f38b09b8ef104a2f87ed", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000100000000000100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000040b702000014000000b7030000000000007f00000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095000000000000005347257f"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x15, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18182709a5000000000000000000000900000000", @ANYRES32=r3, @ANYBLOB="0000000008000000025101330010000018440000faffffff00000000000000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x80000001, 0xd8, &(0x7f0000000380)=""/216, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x2, 0x2, 0x2}, 0x10, 0x0, r4, 0x2, &(0x7f0000000a80)=[r2, r3, r5, r2, r2], &(0x7f0000000ac0)=[{0x0, 0x4, 0x5, 0x5}, {0x4, 0x3, 0x5, 0x7}], 0x10, 0x7}, 0x94) chmod(&(0x7f0000000100)='./file0\x00', 0x42) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r6) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) r10 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000140)="10", 0x1, r10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="188517032844000000", @ANYRES16=r7, @ANYBLOB="010029bd7200fcdbdf250700000014000200fc000000000000000000000000000001080004006401010214000300fe8000000000000000000000000000aa"], 0x44}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 3.780410907s ago: executing program 0 (id=15112): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80800) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x2, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x425d9b36da1673a8}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000efffffff850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) cachestat(r4, &(0x7f0000000240)={0x3, 0x2}, &(0x7f000009de80), 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f00000000c0)={r5}, 0x1) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) dup(r8) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r7, {0xc, 0xffff}, {0x0, 0x4}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r9 = socket(0x2a, 0x2, 0x0) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffe0}, {}, {0xffff, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_ACT={0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x10, 0x7ff, 0x6, 0x1, 0xff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x84}}, 0x20004084) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x3f) 3.222272611s ago: executing program 7 (id=15113): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x41}, 0x28) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x75, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00'}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)=')\x00', 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") 3.211105671s ago: executing program 1 (id=15114): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) io_uring_setup(0x57e, &(0x7f0000000680)={0x0, 0x6677, 0x400, 0x0, 0x192}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sched_switch\x00', r0, 0x0, 0x9}, 0x18) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 2.980646281s ago: executing program 1 (id=15115): epoll_create1(0x80000) socket$unix(0x1, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x800) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[], 0x2c}}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x24004091}, 0x2000000) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="a8020000", @ANYRES16=r3, @ANYBLOB="010028bd7000fbdbdf2505"], 0x2a8}, 0x1, 0x0, 0x0, 0x48c05}, 0x2404c140) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a0200000000001801000020207825"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x48}, 0x94) kexec_load(0x4, 0xa, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000031401002dbd700200000025090002007379fb0000000000080041007278650014003300626f6e645f736c6176655f3000"], 0x38}, 0x1, 0x0, 0x0, 0x24000811}, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) gettid() r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r7, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r6, &(0x7f0000000040)="0200ffff0000", 0x6}]) r8 = eventfd(0x8001) io_cancel(r7, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x4, r5, &(0x7f00000003c0)="877da7e7", 0x4, 0x8000, 0x0, 0x2, r8}, &(0x7f00000005c0)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0xfffffffffffffc66, &(0x7f0000000600)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a0703000000000000000002000b09080003400000000a0900010073797a30000000000c000640000008000000000214000000"], 0x70}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{}, &(0x7f0000001b80), &(0x7f00000006c0)='%pS \x00'}, 0x20) 2.583097119s ago: executing program 1 (id=15117): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000000)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r0, &(0x7f0000000ac0)="a9701e65794ca64ad7c9a746d04bada2644be4fc3aefe913548632142ea140074cc4a4235da4945a44", 0x29) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) memfd_create(&(0x7f0000000700)='msdos\x00', 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000380)='memory.stat\x00', 0x275a, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r4, @ANYRESOCT=r1, @ANYBLOB="dea88683c57ded114b8cc3fba55de1a3631ead9b49c7ee000e8bdf9f94e609846cf10d45ecda1167caa318300bad2ee51f31d0e271734eeb57934c3fbe04ebc5fa9066d68d320f5d", @ANYRES32=r2], 0x48) gettid() 2.55460229s ago: executing program 5 (id=15118): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="070000000400000008020000d900000000000000", @ANYRESHEX, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0x8, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYRES8=r0], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xf7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000c00)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = syz_mount_image$ext4(&(0x7f0000000640)='ext3\x00', &(0x7f0000000200)='./file2\x00', 0x210000, &(0x7f0000000000)={[], [{@obj_type={'obj_type', 0x3d, '!(%+\\'}}]}, 0xfc, 0x580, &(0x7f0000000680)="$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") pivot_root(&(0x7f00000002c0)='.\x00', &(0x7f0000001600)='./file1\x00') r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="1700000000000000", @ANYRES32=r2, @ANYRESOCT, @ANYRES64=r5, @ANYRES32, @ANYRES16=r5, @ANYRESOCT=r4, @ANYRESHEX=r2], 0x50) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r6, {0x0}}, './file0\x00'}) mount$tmpfs(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB='usrquota,defcontext=user_u,fow', @ANYRESDEC=r9, @ANYBLOB=',smaat=%\\/%![-,\x00'/28]) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0xa2) r11 = dup2(r10, r10) ioctl$BLKTRACESETUP(r11, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa9a, 0x76c4, 0x7, 0x7}) ioctl$BLKTRACESTART(r11, 0x1274, 0x0) read$nci(r8, &(0x7f0000000400)=""/58, 0x3a) ioctl$BLKTRACESTOP(r11, 0x1275, 0xfffffdfd) syz_clone3(0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\r\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01aa07215900"/15], 0x50) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01032cbd70000000000001"], 0x30}}, 0x480c4) 2.452510064s ago: executing program 0 (id=15119): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad10102030109"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x5, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x11}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x43}, 0x94) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000004000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000300), 0x4) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x40) 2.428346175s ago: executing program 5 (id=15120): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x1002}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0xc04002, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x0) 2.406980936s ago: executing program 5 (id=15121): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x1000410, &(0x7f0000000000), 0x6, 0x507, &(0x7f0000000680)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r0 = io_uring_setup(0x23d7, &(0x7f0000000bc0)={0x0, 0x567f, 0x1, 0x1, 0x3c1}) syz_io_uring_setup(0x1332, &(0x7f0000000540)={0x0, 0x6242, 0x210, 0x0, 0x34a, 0x0, r0}, &(0x7f0000000300)=0x0, &(0x7f0000000400)) r2 = syz_io_uring_complete(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) r6 = socket(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4ea0, 0x2, @empty, 0x6}, 0x1c) sendmmsg(r6, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="1575ca80000000b007f49e5e04026ed407d102001cabc86c929210675d3633e6ac44afd89e5221b3", 0x28}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="100000000000c0db0002000000067e2ea8c7ce6e00e90650b955eedf52ffd8e620e48bad4e9355fdd4999d0cddb5246a5a9200b1048a3e17ce867cdef1788988ae76b7ea33"], 0x10}}], 0x2, 0x20040000) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @loopback, 0xfffffffc}, r9, 0x400}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(r8, &(0x7f0000000d40)={0x16, 0x98, 0xfa00, {0x0, 0x2, r9, 0x30, 0x1, @ib={0x1b, 0x8000, 0x3, {"3f8c0d6cf777eaa6ace6d3ec00ed4771"}, 0x500e, 0x0, 0xf}}}, 0xa0) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000080), r9, 0x0, 0x1, 0x4}}, 0x20) setxattr$system_posix_acl(0x0, &(0x7f0000000180)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) recvfrom$inet6(r2, &(0x7f0000000280)=""/103, 0x67, 0x40000010, &(0x7f0000000340)={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x2}, 0x9}, 0x1c) 2.32461114s ago: executing program 7 (id=15123): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0x8, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYRES8=r0], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xf7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000c00)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = syz_mount_image$ext4(&(0x7f0000000640)='ext3\x00', &(0x7f0000000200)='./file2\x00', 0x210000, &(0x7f0000000000)={[], [{@obj_type={'obj_type', 0x3d, '!(%+\\'}}]}, 0xfc, 0x580, &(0x7f0000000680)="$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") pivot_root(&(0x7f00000002c0)='.\x00', &(0x7f0000001600)='./file1\x00') r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="1700000000000000", @ANYRES32=r2, @ANYRESOCT, @ANYRES64=r5, @ANYRES32, @ANYRES16=r5, @ANYRESOCT=r4, @ANYRESHEX=r2], 0x50) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r6, {0x0}}, './file0\x00'}) mount$tmpfs(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB='usrquota,defcontext=user_u,fow', @ANYRESDEC=r9, @ANYBLOB=',smaat=%\\/%![-,\x00'/29]) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0xa2) r11 = dup2(r10, r10) ioctl$BLKTRACESETUP(r11, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa9a, 0x76c4, 0x7, 0x7}) read$nci(r8, &(0x7f0000000400)=""/58, 0x3a) ioctl$BLKTRACESTOP(r11, 0x1275, 0xfffffdfd) syz_clone3(0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\r\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01aa07215900"/15], 0x50) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01032cbd70000000000001"], 0x30}}, 0x480c4) 2.287507302s ago: executing program 3 (id=15124): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x41) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x0, 0x41}, 0x28) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x75, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00'}, 0x10) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)=')\x00', 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 2.208853965s ago: executing program 7 (id=15125): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) lseek(r1, 0x91b, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x1f, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_clone(0x47210000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) readahead(0xffffffffffffffff, 0x5, 0x4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r5, &(0x7f0000000340)=ANY=[], 0xff2e) r6 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r5, 0x540a, 0x3) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="fc0000001200040025bd7000ffdbdf252206037f4e234e210900000004000000400000000100000007000000040000000600000003000000", @ANYRES32=r3, @ANYBLOB="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"], 0xfc}, 0x1, 0x0, 0x0, 0x2}, 0x8080) 1.868957839s ago: executing program 0 (id=15126): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="070000000400000008020000d900000000000000", @ANYRESHEX, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0x8, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYRES8=r0], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xf7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000c00)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = syz_mount_image$ext4(&(0x7f0000000640)='ext3\x00', &(0x7f0000000200)='./file2\x00', 0x210000, &(0x7f0000000000)={[], [{@obj_type={'obj_type', 0x3d, '!(%+\\'}}]}, 0xfc, 0x580, &(0x7f0000000680)="$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") pivot_root(&(0x7f00000002c0)='.\x00', &(0x7f0000001600)='./file1\x00') r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="1700000000000000", @ANYRES32=r2, @ANYRESOCT, @ANYRES64=r5, @ANYRES32, @ANYRES16=r5, @ANYRESOCT=r4, @ANYRESHEX=r2], 0x50) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r6, {0x0}}, './file0\x00'}) mount$tmpfs(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB='usrquota,defcontext=user_u,fow', @ANYRESDEC=r9, @ANYBLOB=',smaat=%\\/%![-,\x00'/28]) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0xa2) r11 = dup2(r10, r10) ioctl$BLKTRACESETUP(r11, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa9a, 0x76c4, 0x7, 0x7}) ioctl$BLKTRACESTART(r11, 0x1274, 0x0) read$nci(r8, &(0x7f0000000400)=""/58, 0x3a) ioctl$BLKTRACESTOP(r11, 0x1275, 0xfffffdfd) syz_clone3(0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\r\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01aa07215900"/15], 0x50) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01032cbd70000000000001"], 0x30}}, 0x480c4) 1.729752476s ago: executing program 1 (id=15127): epoll_create1(0x80000) socket$unix(0x1, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x800) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[], 0x2c}}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x24004091}, 0x2000000) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="a8020000", @ANYRES16=r3, @ANYBLOB="010028bd7000fbdbdf2505"], 0x2a8}, 0x1, 0x0, 0x0, 0x48c05}, 0x2404c140) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a0200000000001801000020207825"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x48}, 0x94) kexec_load(0x4, 0xa, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000031401002dbd700200000025090002007379fb0000000000080041007278650014003300626f6e645f736c6176655f3000"], 0x38}, 0x1, 0x0, 0x0, 0x24000811}, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) gettid() r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r7, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r6, &(0x7f0000000040)="0200ffff0000", 0x6}]) r8 = eventfd(0x8001) io_cancel(r7, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x4, r5, &(0x7f00000003c0)="877da7e7", 0x4, 0x8000, 0x0, 0x2, r8}, &(0x7f00000005c0)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0xfffffffffffffc66, &(0x7f0000000600)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a0703000000000000000002000b09080003400000000a0900010073797a30000000000c00064000000800000000021400000002"], 0x70}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{}, &(0x7f0000001b80), &(0x7f00000006c0)='%pS \x00'}, 0x20) 1.664989428s ago: executing program 0 (id=15128): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0, 0x0, 0x6}, 0x41) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00'}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)=')\x00', 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") 1.491691756s ago: executing program 1 (id=15129): openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) mkdir(0x0, 0xe6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000700000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd06, 0x2000044}, 0x101929, 0x5, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r4, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f00000052c0)=""/235, 0xeb}, {&(0x7f0000003080)=""/4096, 0x1000}], 0x3}, 0x3}], 0x1b00, 0x0, 0x0) 1.444500258s ago: executing program 5 (id=15130): syz_mount_image$iso9660(&(0x7f00000003c0), &(0x7f00000004c0)='./file0\x00', 0x2810040, &(0x7f0000000000)=ANY=[], 0xfb, 0x571, &(0x7f0000002500)="$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") (async) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000b8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) getitimer(0x0, &(0x7f0000000200)) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0xdf, 0xffffdffb, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x1cb041, 0x8) r5 = dup(r4) sendfile(r5, r3, 0x0, 0x8000fffffffc) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0900000004000000010000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="9a4b84ae66ffccc32fd31efa350000000000007cc426fb0000000000"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r7}, 0x18) (async) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x723, 0x10000, 0x0, 0x6, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x38860bc, 0x0, 0x3, 0x0, &(0x7f0000000000)) (async) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) dup(r10) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @func={0x4, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x46}, 0x20) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, &(0x7f0000000000), &(0x7f0000000880)=r1}, 0x20) (async) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.371504501s ago: executing program 3 (id=15131): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x1002}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0xc04002, 0x0, 0x1, 0x0, &(0x7f0000000000)) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x0) 1.302958714s ago: executing program 7 (id=15132): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) (fail_nth: 3) 1.265598436s ago: executing program 3 (id=15133): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r3, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r5}, 0x10) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7736, 0x80, 0x2, 0x34f}, &(0x7f00000000c0), &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r4}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r6}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)={0x28, 0x7, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, 0x0, 0x0) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r10, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000020", @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250b00000004000580"], 0x18}, 0x1, 0x0, 0x0, 0x20040040}, 0x20000000) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) 983.382768ms ago: executing program 3 (id=15134): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) 672.693431ms ago: executing program 7 (id=15135): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000080)='rpc_clnt_new_err\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x60, 0x14, 0x8, 0x2, 0xfff8}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x0, 0x0}) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x104) syz_clone3(&(0x7f00000008c0)={0x222025080, 0x0, 0x0, 0x0, {0x32}, &(0x7f0000000300)=""/212, 0xd4, 0x0, 0x0, 0x0, {r3}}, 0x58) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000280)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRES16=r3], 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x810) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file2\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x791, &(0x7f0000000800)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000000)={0xfffffffffffffe22, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r7 = open$dir(&(0x7f0000000000)='./file1\x00', 0x0, 0x40) unlinkat(0xffffffffffffff9c, 0x0, 0x200) r8 = socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$tty20(0xc, 0x4, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYRESOCT=r2, @ANYBLOB="b4b31de0c2d3e808e44a589b228be389eac197289bd892a15f6d08bdacf10d571f3a975965291b2d8a92e401b44ed7b2dcd07bab122c3071fc40671170a0eb536824846cd76059e9e5f5ba881be286c08a845660c03bd8afc108c4ac796fa595c2ab8d9f67cf264876cd9db1d8e70a9899402860fa928602f5f667c0eba4a50e4e66deccb324e3f3a3c9d0ae2a00750d495fdf89db78783b90d91e3c5d4935313cb11b8b936f9df742c98439d91fa6b23a403d7f5b0ec3daf420d5f0298820438d040f918c12d2496bf537920a12", @ANYRESOCT=r6, @ANYBLOB="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", @ANYRESOCT=r0, @ANYRES8=r4, @ANYRESDEC=r6, @ANYRESDEC=r7], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x19, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70300801d00000085ddff0034000000b700000000000040c5035c1433ac2e362f0a3817ff76140095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r11 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) fadvise64(r11, 0x7f, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, {0x2}}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 636.544433ms ago: executing program 5 (id=15136): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80800) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x2, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x425d9b36da1673a8}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000efffffff850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) cachestat(r4, &(0x7f0000000240)={0x3, 0x2}, &(0x7f000009de80), 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f00000000c0)={r5}, 0x1) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) dup(r8) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r7, {0xc, 0xffff}, {0x0, 0x4}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r9 = socket(0x2a, 0x2, 0x0) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffe0}, {}, {0xffff, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_ACT={0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x10, 0x7ff, 0x6, 0x1, 0xff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x84}}, 0x20004084) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 353.873045ms ago: executing program 1 (id=15137): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000240)={0x20000000000000e1, &(0x7f0000000000)=[{0x1, 0x40, 0xcb, 0x8}, {0x2, 0xd, 0x80, 0xec0}, {0x2968, 0x81, 0xff, 0xfffffffe}, {0x3, 0x6, 0x9, 0x6}, {0x8, 0xf, 0xff, 0xc29}, {0xb2, 0x7, 0x36, 0x10001}, {0xfffd, 0x6, 0x29, 0xffff}, {0x9, 0xe, 0x3, 0xf72}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x18) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000080), 0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x18, 0x10, &(0x7f0000000840)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3, 0xffffffffffffffff}) r6 = socket(0x10, 0x3, 0x0) setuid(0x0) r7 = getgid() getpeername$qrtr(r6, &(0x7f0000000100), &(0x7f0000000140)=0xc) lchown(0x0, 0x0, r7) newfstatat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) eventfd(0x0) setreuid(r8, r8) r9 = syz_clone(0x80000200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000180)={{0x0, 0x0, r7, r8, 0xee00, 0x140, 0x3ff}, 0x0, 0x0, 0xffffffff, 0xc, 0x5, 0xc0e, 0x7, 0x4, 0x1, 0x1, r9}) socket$nl_route(0x10, 0x3, 0x0) 87.354247ms ago: executing program 3 (id=15138): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000080)={0x2, 0xffff, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="08007715e050e9ce", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 68.602108ms ago: executing program 3 (id=15139): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80800) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x2, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x425d9b36da1673a8}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000efffffff850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) cachestat(r4, &(0x7f0000000240)={0x3, 0x2}, &(0x7f000009de80), 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f00000000c0)={r5}, 0x1) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) dup(r8) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r7, {0xc, 0xffff}, {0x0, 0x4}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r9 = socket(0x2a, 0x2, 0x0) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffe0}, {}, {0xffff, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_ACT={0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x10, 0x7ff, 0x6, 0x1, 0xff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x84}}, 0x20004084) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) 0s ago: executing program 5 (id=15140): prlimit64(0x0, 0x2, &(0x7f0000000040)={0x633, 0xffffffffffffffff}, 0x0) mprotect(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xa) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) close(r1) socket$kcm(0x11, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2e, &(0x7f0000000640)=r0, 0x4) recvmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0x0, 0x20000, 0x0, 0x0, 0x5d8c, 0x42, 0x0, 0xfffffffffffffffd, 0x3f}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="516aaacfd0c763298512b60b38da8a203165ea79f44052a027cd63098a040e402234411b33a0e05a4a9935319969e8367eca35ba3913c537d6cd140a6d563479d8130a744fb64caa6e2a99a7d95c6f71a6052729419cbfd21a92fc9b2806aeb9e8513d7c8751e7173f73280207b6e357b4b051334458215370bf7e20510766f38b09b8ef104a2f87ed", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000100000000000100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000040b702000014000000b7030000000000007f00000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095000000000000005347257f"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x15, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18182709a5000000000000000000000900000000", @ANYRES32=r3, @ANYBLOB="0000000008000000025101330010000018440000faffffff00000000000000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x80000001, 0xd8, &(0x7f0000000380)=""/216, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x2, 0x2, 0x2}, 0x10, 0x0, r4, 0x2, &(0x7f0000000a80)=[r2, r3, r5, r2, r2], &(0x7f0000000ac0)=[{0x0, 0x4, 0x5, 0x5}, {0x4, 0x3, 0x5, 0x7}], 0x10, 0x7}, 0x94) chmod(&(0x7f0000000100)='./file0\x00', 0x42) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r6) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) r10 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000140)="10", 0x1, r10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="188517032844000000", @ANYRES16=r7, @ANYBLOB="010029bd7200fcdbdf250700000014000200fc000000000000000000000000000001080004006401010214000300fe8000000000000000000000000000aa"], 0x44}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): 7545][T28810] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.14624: corrupted inode contents [ 1218.097739][T28810] EXT4-fs error (device loop7): ext4_truncate:4637: inode #16: comm syz.7.14624: mark_inode_dirty error [ 1218.097891][T28810] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 1218.098212][T28810] EXT4-fs (loop7): 1 truncate cleaned up [ 1218.098639][T28810] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1218.098706][T28810] ext4 filesystem being mounted at /362/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1218.239118][T25358] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1218.285148][T28815] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1218.372512][T23309] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1218.608054][T28827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1218.619300][T28827] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1218.673310][T28829] netlink: 'syz.5.14632': attribute type 1 has an invalid length. [ 1218.710923][ T3494] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1218.717309][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 1218.739394][T28832] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14632'. [ 1218.924298][T28829] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1218.949595][T28832] bond2 (unregistering): Released all slaves [ 1219.008690][T28836] netlink: 'syz.5.14633': attribute type 10 has an invalid length. [ 1219.017280][T28836] bond0: (slave dummy0): Releasing backup interface [ 1219.024900][T28836] netlink: 'syz.5.14633': attribute type 10 has an invalid length. [ 1219.034330][T28836] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1219.094262][T28842] random: crng reseeded on system resumption [ 1219.257019][T28847] loop0: detected capacity change from 0 to 1024 [ 1219.263765][T28847] ext3: Unknown parameter 'obj_type' [ 1219.301077][T28849] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1219.355993][T28855] netlink: 'syz.1.14641': attribute type 1 has an invalid length. [ 1219.376821][T28855] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1219.398225][T28855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14641'. [ 1219.412589][T28855] bond4 (unregistering): Released all slaves [ 1219.419868][T28861] netlink: 'syz.7.14643': attribute type 1 has an invalid length. [ 1219.431223][T28847] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14638'. [ 1219.448768][T28861] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1219.480396][T28861] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14643'. [ 1219.529529][T28861] bond5 (unregistering): Released all slaves [ 1219.544681][T28875] netlink: 176 bytes leftover after parsing attributes in process `syz.1.14648'. [ 1220.668563][T28882] netlink: 'syz.3.14644': attribute type 13 has an invalid length. [ 1220.765509][T28886] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1221.303814][T28884] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1221.306340][ T29] kauditd_printk_skb: 248 callbacks suppressed [ 1221.306355][ T29] audit: type=1326 audit(1763947746.891:87598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28885 comm="syz.1.14651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcb21ef749 code=0x7ffc0000 [ 1221.409431][ T29] audit: type=1326 audit(1763947746.911:87599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28885 comm="syz.1.14651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcb21ef749 code=0x7ffc0000 [ 1221.433917][ T29] audit: type=1326 audit(1763947746.941:87601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28887 comm="syz.1.14651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fbcb21ef749 code=0x7ffc0000 [ 1221.457939][ T29] audit: type=1326 audit(1763947746.941:87600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28885 comm="syz.1.14651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fbcb21ef749 code=0x7ffc0000 [ 1221.481781][ T29] audit: type=1326 audit(1763947746.941:87602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28885 comm="syz.1.14651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcb21ef749 code=0x7ffc0000 [ 1221.493696][T28899] blktrace: Concurrent blktraces are not allowed on loop10 [ 1221.505797][ T29] audit: type=1326 audit(1763947746.941:87603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28885 comm="syz.1.14651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fbcb21ef749 code=0x7ffc0000 [ 1221.536982][ T29] audit: type=1326 audit(1763947746.941:87604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28885 comm="syz.1.14651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcb21ef749 code=0x7ffc0000 [ 1221.586364][T28907] netlink: 'syz.1.14659': attribute type 1 has an invalid length. [ 1221.600855][T28907] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1221.615157][T28904] loop7: detected capacity change from 0 to 1024 [ 1221.622732][T28904] EXT4-fs: Ignoring removed nobh option [ 1221.628356][T28904] EXT4-fs: Ignoring removed bh option [ 1221.633862][ T29] audit: type=1326 audit(1763947747.191:87605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28903 comm="syz.7.14661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366c40f749 code=0x7ffc0000 [ 1221.657698][ T29] audit: type=1326 audit(1763947747.201:87606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28903 comm="syz.7.14661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f366c40f749 code=0x7ffc0000 [ 1221.681601][ T29] audit: type=1326 audit(1763947747.201:87607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28903 comm="syz.7.14661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366c40f749 code=0x7ffc0000 [ 1221.715082][T28907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14659'. [ 1221.719305][T28913] netlink: 'syz.0.14663': attribute type 1 has an invalid length. [ 1221.738085][T28904] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1221.752247][T28913] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1221.763328][T28913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14663'. [ 1221.809417][T28907] bond4 (unregistering): Released all slaves [ 1221.828052][T28913] bond2 (unregistering): Released all slaves [ 1221.950389][T28927] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1221.950863][T23309] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1221.978448][T28933] loop0: detected capacity change from 0 to 128 [ 1221.990055][T28933] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1222.012724][T28933] ext4 filesystem being mounted at /207/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1222.012854][T28938] loop7: detected capacity change from 0 to 1024 [ 1222.052469][T28938] ext3: Unknown parameter 'obj_type' [ 1222.062712][T28938] blktrace: Concurrent blktraces are not allowed on loop14 [ 1222.173936][T28940] netlink: 660 bytes leftover after parsing attributes in process `syz.7.14671'. [ 1222.185874][T28940] syû: rxe_newlink: already configured on bond_slave_0 [ 1222.216601][T25358] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1222.282365][T28950] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1222.292048][T28950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14675'. [ 1222.310578][T28950] bond4 (unregistering): Released all slaves [ 1222.359284][T28953] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1222.404575][T28953] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14676'. [ 1222.421140][T28953] bond5 (unregistering): Released all slaves [ 1222.527987][T28963] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1222.594333][T28967] loop7: detected capacity change from 0 to 512 [ 1222.613374][T28967] EXT4-fs: Ignoring removed oldalloc option [ 1222.627926][T28967] EXT4-fs error (device loop7): ext4_init_orphan_info:581: comm syz.7.14680: inode #0: comm syz.7.14680: iget: illegal inode # [ 1222.648392][T28967] EXT4-fs (loop7): get orphan inode failed [ 1222.654906][T28967] EXT4-fs (loop7): mount failed [ 1223.711888][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1223.735046][T28979] validate_nla: 3 callbacks suppressed [ 1223.735064][T28979] netlink: 'syz.0.14682': attribute type 13 has an invalid length. [ 1223.913642][T28990] netlink: 'syz.5.14688': attribute type 1 has an invalid length. [ 1223.937137][T28990] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1223.946928][T28990] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14688'. [ 1223.975609][T28990] bond2 (unregistering): Released all slaves [ 1224.000551][T28994] netlink: 'syz.0.14689': attribute type 1 has an invalid length. [ 1224.813322][T28995] netlink: 'syz.1.14687': attribute type 13 has an invalid length. [ 1224.826594][T28998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14689'. [ 1224.869083][T28994] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1224.892636][T28996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1224.902567][T28996] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1224.924335][T28998] bond2 (unregistering): Released all slaves [ 1224.936448][T29004] tipc: Enabling of bearer rejected, already enabled [ 1225.364450][T29028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1225.364526][T29028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1225.807842][T29030] netlink: 'syz.5.14702': attribute type 1 has an invalid length. [ 1225.814263][T29030] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1225.826514][T29030] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14702'. [ 1225.827828][T29030] bond2 (unregistering): Released all slaves [ 1225.887740][T29033] tipc: Enabling of bearer rejected, already enabled [ 1225.919042][T29035] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1225.962622][T29041] blktrace: Concurrent blktraces are not allowed on loop2 [ 1225.970820][T29041] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14706'. [ 1225.980501][T29038] loop7: detected capacity change from 0 to 1024 [ 1225.987971][T29038] ext3: Unknown parameter 'obj_type' [ 1226.000988][T29038] blktrace: Concurrent blktraces are not allowed on loop14 [ 1226.081945][T29058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1226.154924][T29067] netlink: 'syz.0.14718': attribute type 1 has an invalid length. [ 1226.170003][T29067] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1226.171070][T29058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1226.173601][T29067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14718'. [ 1226.199461][T29067] bond2 (unregistering): Released all slaves [ 1226.277391][T29073] tipc: Started in network mode [ 1226.277403][T29073] tipc: Node identity , cluster identity 4711 [ 1226.277415][T29073] tipc: Failed to obtain node identity [ 1226.277422][T29073] tipc: Enabling of bearer rejected, failed to enable media [ 1226.289735][T29064] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1226.358334][T29079] blktrace: Concurrent blktraces are not allowed on loop10 [ 1226.359060][T29079] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14722'. [ 1226.398395][ T29] kauditd_printk_skb: 443 callbacks suppressed [ 1226.398409][ T29] audit: type=1326 audit(1763947751.981:88051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29071 comm="syz.5.14717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f6b0ff5f749 code=0x7ffc0000 [ 1226.452106][T29086] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14725'. [ 1226.475902][T29088] blktrace: Concurrent blktraces are not allowed on loop10 [ 1226.704088][T29098] netlink: 'syz.7.14730': attribute type 1 has an invalid length. [ 1226.719033][T29098] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1226.729136][T29098] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14730'. [ 1226.803598][T29098] bond5 (unregistering): Released all slaves [ 1226.827770][T29100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1226.830649][T29100] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1226.977435][T29103] tipc: Enabling of bearer rejected, already enabled [ 1227.157480][ T29] audit: type=1326 audit(1763947752.651:88052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29106 comm="syz.7.14733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366c40f749 code=0x7ffc0000 [ 1227.157531][ T29] audit: type=1326 audit(1763947752.651:88053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29106 comm="syz.7.14733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366c40f749 code=0x7ffc0000 [ 1227.157561][ T29] audit: type=1326 audit(1763947752.651:88054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29106 comm="syz.7.14733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f366c40f749 code=0x7ffc0000 [ 1227.157655][ T29] audit: type=1326 audit(1763947752.651:88055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29106 comm="syz.7.14733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366c40f749 code=0x7ffc0000 [ 1227.157730][ T29] audit: type=1326 audit(1763947752.651:88056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29106 comm="syz.7.14733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366c40f749 code=0x7ffc0000 [ 1227.157758][ T29] audit: type=1326 audit(1763947752.651:88057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29106 comm="syz.7.14733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f366c40f749 code=0x7ffc0000 [ 1227.157787][ T29] audit: type=1326 audit(1763947752.651:88058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29106 comm="syz.7.14733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366c40f749 code=0x7ffc0000 [ 1227.157815][ T29] audit: type=1326 audit(1763947752.651:88059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29106 comm="syz.7.14733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366c40f749 code=0x7ffc0000 [ 1227.157919][ T29] audit: type=1326 audit(1763947752.651:88060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29106 comm="syz.7.14733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f366c40f749 code=0x7ffc0000 [ 1227.188031][T29107] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1227.261113][T29115] blktrace: Concurrent blktraces are not allowed on loop6 [ 1227.409352][T29125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1227.428416][T29125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1227.500730][T29131] netlink: 'syz.5.14743': attribute type 1 has an invalid length. [ 1227.514162][T29131] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1227.523669][T29131] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14743'. [ 1227.553634][T29131] bond2 (unregistering): Released all slaves [ 1227.708403][T29148] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1227.841624][T29156] block device autoloading is deprecated and will be removed. [ 1228.275637][T29167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1228.280060][T29167] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1228.533814][T29175] netlink: 'syz.1.14758': attribute type 1 has an invalid length. [ 1228.570632][T29175] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1228.573309][T29175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14758'. [ 1228.575645][T29175] bond4 (unregistering): Released all slaves [ 1228.620527][T29182] syz!: rxe_newlink: already configured on team_slave_0 [ 1229.751200][T29194] netlink: 'syz.5.14764': attribute type 10 has an invalid length. [ 1229.760743][T29192] blktrace: Concurrent blktraces are not allowed on loop2 [ 1229.794078][T29196] netlink: 'syz.1.14765': attribute type 1 has an invalid length. [ 1230.315204][T29190] netlink: 'syz.3.14762': attribute type 13 has an invalid length. [ 1230.328675][T29197] netlink: 'syz.5.14764': attribute type 10 has an invalid length. [ 1230.339417][T29194] bond0: (slave dummy0): Releasing backup interface [ 1230.347073][T29198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14765'. [ 1230.373759][T29189] loop7: detected capacity change from 0 to 512 [ 1230.380495][T29189] EXT4-fs: Ignoring removed nobh option [ 1230.390356][T29189] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #3: comm syz.7.14760: corrupted inode contents [ 1230.394207][T29196] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1230.402858][T29189] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #3: comm syz.7.14760: mark_inode_dirty error [ 1230.469643][T29197] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1230.478784][T29189] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #3: comm syz.7.14760: corrupted inode contents [ 1230.497708][T29189] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #3: comm syz.7.14760: mark_inode_dirty error [ 1230.509430][T29189] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.14760: Failed to acquire dquot type 0 [ 1230.521313][T29189] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.14760: corrupted inode contents [ 1230.533458][T29189] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #16: comm syz.7.14760: mark_inode_dirty error [ 1230.545134][T29189] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.14760: corrupted inode contents [ 1230.557572][T29189] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.14760: mark_inode_dirty error [ 1230.576678][T29189] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.14760: corrupted inode contents [ 1230.592505][T29189] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 1230.602139][T29189] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.14760: corrupted inode contents [ 1230.614392][T29189] EXT4-fs error (device loop7): ext4_truncate:4637: inode #16: comm syz.7.14760: mark_inode_dirty error [ 1230.625880][T29189] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 1230.636966][T29189] EXT4-fs (loop7): 1 truncate cleaned up [ 1230.643540][T29189] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1230.656094][T29189] ext4 filesystem being mounted at /385/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1230.907239][T23309] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1231.021662][T29227] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1231.130305][T29236] netlink: 'syz.1.14779': attribute type 1 has an invalid length. [ 1231.165868][T29236] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1231.984259][T29241] netlink: 'syz.3.14777': attribute type 13 has an invalid length. [ 1232.007381][T29238] netlink: 'syz.7.14778': attribute type 13 has an invalid length. [ 1232.028858][T29236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14779'. [ 1232.049727][T29236] bond5 (unregistering): Released all slaves [ 1232.269962][ T29] kauditd_printk_skb: 357 callbacks suppressed [ 1232.270104][ T29] audit: type=1326 audit(1763947757.861:88416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29245 comm="syz.5.14781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0ff5f749 code=0x7ffc0000 [ 1232.309792][T29261] netlink: 'syz.3.14786': attribute type 1 has an invalid length. [ 1232.339043][T29261] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1232.388124][T29261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14786'. [ 1232.405576][T29266] netlink: 'syz.0.14782': attribute type 13 has an invalid length. [ 1232.497994][ T29] audit: type=1326 audit(1763947757.891:88417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29245 comm="syz.5.14781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6b0ff5f749 code=0x7ffc0000 [ 1232.521943][ T29] audit: type=1326 audit(1763947757.891:88418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29245 comm="syz.5.14781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0ff5f749 code=0x7ffc0000 [ 1232.546037][ T29] audit: type=1326 audit(1763947757.891:88419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29245 comm="syz.5.14781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f6b0ff5f749 code=0x7ffc0000 [ 1232.570169][ T29] audit: type=1326 audit(1763947757.891:88420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29245 comm="syz.5.14781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0ff5f749 code=0x7ffc0000 [ 1232.594188][ T29] audit: type=1326 audit(1763947757.891:88421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29245 comm="syz.5.14781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0ff5f749 code=0x7ffc0000 [ 1232.618006][ T29] audit: type=1326 audit(1763947757.891:88422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29245 comm="syz.5.14781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6b0ff5f749 code=0x7ffc0000 [ 1232.641717][ T29] audit: type=1326 audit(1763947757.891:88423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29245 comm="syz.5.14781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0ff5f749 code=0x7ffc0000 [ 1232.666139][ T29] audit: type=1326 audit(1763947757.891:88424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29245 comm="syz.5.14781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0ff5f749 code=0x7ffc0000 [ 1232.689936][ T29] audit: type=1326 audit(1763947757.921:88425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29263 comm="syz.7.14787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366c40f749 code=0x7ffc0000 [ 1232.755642][T29267] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1232.787205][T29261] bond4 (unregistering): Released all slaves [ 1232.907505][T29282] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14792'. [ 1232.916567][T29282] tipc: Enabling of bearer rejected, already enabled [ 1232.937997][T29282] netlink: 'syz.5.14792': attribute type 10 has an invalid length. [ 1232.949561][T29282] bond0: (slave dummy0): Releasing backup interface [ 1232.997228][T29287] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14790'. [ 1233.013128][T29282] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1233.154745][T29295] blktrace: Concurrent blktraces are not allowed on loop10 [ 1233.206141][T29297] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14797'. [ 1233.488723][T29301] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1233.883877][T29306] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1234.150209][T29317] syzkaller0: entered promiscuous mode [ 1234.155920][T29317] syzkaller0: entered allmulticast mode [ 1234.533575][T29326] blktrace: Concurrent blktraces are not allowed on loop10 [ 1234.806172][T29332] block device autoloading is deprecated and will be removed. [ 1234.974085][T29336] netlink: 660 bytes leftover after parsing attributes in process `syz.7.14811'. [ 1234.984301][T29336] syû: rxe_newlink: already configured on bond_slave_0 [ 1234.989776][T29332] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14809'. [ 1234.994406][T29344] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14810'. [ 1235.051722][T29352] validate_nla: 2 callbacks suppressed [ 1235.051739][T29352] netlink: 'syz.0.14815': attribute type 10 has an invalid length. [ 1235.067047][T29352] bond0: (slave dummy0): Releasing backup interface [ 1235.076818][T29352] netlink: 'syz.0.14815': attribute type 10 has an invalid length. [ 1235.086592][T29352] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1235.645814][T29363] netlink: 'syz.0.14816': attribute type 13 has an invalid length. [ 1235.973074][T29365] loop0: detected capacity change from 0 to 512 [ 1235.979927][T29365] EXT4-fs: Ignoring removed nobh option [ 1236.521422][T29365] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.14816: corrupted inode contents [ 1236.533945][T29365] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #3: comm syz.0.14816: mark_inode_dirty error [ 1236.546438][T29365] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.14816: corrupted inode contents [ 1236.558679][T29365] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.14816: mark_inode_dirty error [ 1236.570836][T29365] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.14816: Failed to acquire dquot type 0 [ 1236.583261][T29365] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.14816: corrupted inode contents [ 1236.595647][T29365] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #16: comm syz.0.14816: mark_inode_dirty error [ 1236.607437][T29365] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.14816: corrupted inode contents [ 1236.620843][T29365] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.14816: mark_inode_dirty error [ 1236.632622][T29365] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.14816: corrupted inode contents [ 1236.644891][T29365] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 1236.645787][T29370] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1236.662407][T29365] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.14816: corrupted inode contents [ 1236.678758][T29365] EXT4-fs error (device loop0): ext4_truncate:4637: inode #16: comm syz.0.14816: mark_inode_dirty error [ 1236.690345][T29365] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 1236.700212][T29365] EXT4-fs (loop0): 1 truncate cleaned up [ 1236.706328][T29365] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1236.719137][T29365] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1236.746389][T29367] syzkaller0: entered promiscuous mode [ 1236.752146][T29367] syzkaller0: entered allmulticast mode [ 1236.904681][T25358] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1236.950549][T29392] loop0: detected capacity change from 0 to 1024 [ 1236.957211][T29392] ext3: Unknown parameter 'obj_type' [ 1236.965568][T29392] blktrace: Concurrent blktraces are not allowed on loop0 [ 1236.966719][T29391] loop7: detected capacity change from 0 to 1024 [ 1236.980640][T29392] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14824'. [ 1236.990384][T29391] EXT4-fs: Ignoring removed nobh option [ 1236.996290][T29391] EXT4-fs: Ignoring removed bh option [ 1237.018142][T29396] netlink: 660 bytes leftover after parsing attributes in process `syz.3.14827'. [ 1237.030824][T29396] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 1237.039274][T29391] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1237.205379][T23309] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1237.251693][T29409] loop7: detected capacity change from 0 to 2048 [ 1237.270026][T29409] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1237.282158][T29409] ext4 filesystem being mounted at /398/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1237.334760][T29415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14829'. [ 1237.350355][ T29] kauditd_printk_skb: 240 callbacks suppressed [ 1237.350375][ T29] audit: type=1326 audit(1763947762.941:88664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29408 comm="syz.7.14830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366c40f749 code=0x7ffc0000 [ 1237.359951][T29416] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.14830: bg 0: block 345: padding at end of block bitmap is not set [ 1237.388768][ T29] audit: type=1326 audit(1763947762.941:88665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29408 comm="syz.7.14830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f366c40f749 code=0x7ffc0000 [ 1237.395225][T29416] EXT4-fs (loop7): Remounting filesystem read-only [ 1237.418797][ T29] audit: type=1326 audit(1763947762.941:88666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29408 comm="syz.7.14830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366c40f749 code=0x7ffc0000 [ 1237.449014][ T29] audit: type=1326 audit(1763947762.941:88667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29408 comm="syz.7.14830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366c40f749 code=0x7ffc0000 [ 1237.472938][ T29] audit: type=1326 audit(1763947762.941:88668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29408 comm="syz.7.14830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f366c40f749 code=0x7ffc0000 [ 1237.497066][ T29] audit: type=1326 audit(1763947763.081:88669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29408 comm="syz.7.14830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366c40f749 code=0x7ffc0000 [ 1237.521020][ T29] audit: type=1326 audit(1763947763.081:88670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29408 comm="syz.7.14830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366c40f749 code=0x7ffc0000 [ 1237.555031][T23309] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1237.601636][T29419] loop7: detected capacity change from 0 to 2048 [ 1237.628998][T29419] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1237.644402][T29423] netlink: 'syz.5.14832': attribute type 1 has an invalid length. [ 1237.658713][T29423] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1237.668877][T29419] ext4 filesystem being mounted at /399/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1237.668923][T29423] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14832'. [ 1237.690344][T29423] bond2 (unregistering): Released all slaves [ 1237.776470][ T29] audit: type=1326 audit(1763947763.351:88671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29418 comm="syz.7.14831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366c40f749 code=0x7ffc0000 [ 1237.800301][ T29] audit: type=1326 audit(1763947763.351:88672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29418 comm="syz.7.14831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366c40f749 code=0x7ffc0000 [ 1237.824307][ T29] audit: type=1326 audit(1763947763.351:88673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29418 comm="syz.7.14831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f366c40f749 code=0x7ffc0000 [ 1237.847456][T29432] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.14831: bg 0: block 345: padding at end of block bitmap is not set [ 1237.863268][T29432] EXT4-fs (loop7): Remounting filesystem read-only [ 1237.957041][T29445] loop0: detected capacity change from 0 to 512 [ 1237.964488][T29445] EXT4-fs: Ignoring removed oldalloc option [ 1237.980823][T29445] EXT4-fs error (device loop0): ext4_init_orphan_info:581: comm syz.0.14836: inode #0: comm syz.0.14836: iget: illegal inode # [ 1237.995985][T23309] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1238.005521][T29445] EXT4-fs (loop0): get orphan inode failed [ 1238.048783][T29445] EXT4-fs (loop0): mount failed [ 1238.298983][T29447] netlink: 'syz.5.14835': attribute type 13 has an invalid length. [ 1238.493645][T29455] loop0: detected capacity change from 0 to 1024 [ 1238.639348][T29455] ext3: Unknown parameter 'obj_type' [ 1238.654108][T29455] blktrace: Concurrent blktraces are not allowed on loop0 [ 1238.704190][T29458] netlink: 'syz.3.14838': attribute type 13 has an invalid length. [ 1238.973954][T29455] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14839'. [ 1239.003355][T29428] chnl_net:caif_netlink_parms(): no params data found [ 1239.200424][T29428] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.207594][T29428] bridge0: port 1(bridge_slave_0) entered disabled state [ 1239.229351][T29428] bridge_slave_0: entered allmulticast mode [ 1239.237184][T29477] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1239.245146][T29428] bridge_slave_0: entered promiscuous mode [ 1239.259780][T29428] bridge0: port 2(bridge_slave_1) entered blocking state [ 1239.266984][T29428] bridge0: port 2(bridge_slave_1) entered disabled state [ 1239.287897][T29428] bridge_slave_1: entered allmulticast mode [ 1239.294894][T29428] bridge_slave_1: entered promiscuous mode [ 1239.320389][T29486] blktrace: Concurrent blktraces are not allowed on loop10 [ 1239.342896][T29486] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14846'. [ 1239.353310][T29428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1239.366306][T29428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1239.381903][ T5244] bridge_slave_1: left allmulticast mode [ 1239.387658][ T5244] bridge_slave_1: left promiscuous mode [ 1239.393486][ T5244] bridge0: port 2(bridge_slave_1) entered disabled state [ 1239.407455][ T5244] bridge_slave_0: left allmulticast mode [ 1239.413248][ T5244] bridge_slave_0: left promiscuous mode [ 1239.418998][ T5244] bridge0: port 1(bridge_slave_0) entered disabled state [ 1239.435662][T29496] netlink: 176 bytes leftover after parsing attributes in process `syz.7.14850'. [ 1239.447400][T29496] loop7: detected capacity change from 0 to 128 [ 1239.479958][T29496] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1239.492735][T29496] ext4 filesystem being mounted at /402/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1239.530724][T29501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14847'. [ 1239.562660][T23309] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1239.679290][T29506] netlink: 'syz.5.14849': attribute type 13 has an invalid length. [ 1240.359928][T29515] netlink: 'syz.0.14853': attribute type 13 has an invalid length. [ 1240.419364][T29516] loop0: detected capacity change from 0 to 512 [ 1240.426250][T29516] EXT4-fs: Ignoring removed nobh option [ 1240.441058][T29516] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.14853: corrupted inode contents [ 1240.453710][T29516] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #3: comm syz.0.14853: mark_inode_dirty error [ 1240.466250][T29516] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.14853: corrupted inode contents [ 1240.479056][T29516] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.14853: mark_inode_dirty error [ 1240.491140][T29516] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.14853: Failed to acquire dquot type 0 [ 1240.503581][T29516] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.14853: corrupted inode contents [ 1240.516518][T29516] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #16: comm syz.0.14853: mark_inode_dirty error [ 1240.531322][T29516] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.14853: corrupted inode contents [ 1240.543989][T29516] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.14853: mark_inode_dirty error [ 1240.555925][T29516] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.14853: corrupted inode contents [ 1240.568455][T29516] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 1240.577942][T29516] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.14853: corrupted inode contents [ 1240.590940][T29516] EXT4-fs error (device loop0): ext4_truncate:4637: inode #16: comm syz.0.14853: mark_inode_dirty error [ 1240.602472][T29516] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 1240.611831][T29516] EXT4-fs (loop0): 1 truncate cleaned up [ 1240.617939][T29516] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1240.630483][T29516] ext4 filesystem being mounted at /241/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1240.650610][ T5244] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1240.660343][ T5244] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1240.670829][ T5244] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1240.680556][ T5244] bond0 (unregistering): Released all slaves [ 1240.691273][ T5244] bond1 (unregistering): Released all slaves [ 1240.700875][ T5244] bond2 (unregistering): Released all slaves [ 1240.709716][ T5244] bond3 (unregistering): Released all slaves [ 1240.718171][ T5244] bond4 (unregistering): Released all slaves [ 1240.811358][T29520] netlink: 'syz.3.14854': attribute type 1 has an invalid length. [ 1240.822325][T29428] team0: Port device team_slave_0 added [ 1240.849123][T29520] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1240.860431][T29520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14854'. [ 1240.879416][T29428] team0: Port device team_slave_1 added [ 1240.895118][T29520] bond4 (unregistering): Released all slaves [ 1240.930308][T29428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1240.937377][T29428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1240.963851][T29428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1240.977917][T29428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1240.984911][T29428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1241.011137][T29428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1241.056126][T29522] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1241.091292][T29428] hsr_slave_0: entered promiscuous mode [ 1241.097613][T29428] hsr_slave_1: entered promiscuous mode [ 1241.110245][T29531] netlink: 176 bytes leftover after parsing attributes in process `syz.5.14857'. [ 1241.117669][T29428] debugfs: 'hsr0' already exists in 'hsr' [ 1241.125243][T29428] Cannot create hsr debugfs directory [ 1241.142313][ T5244] hsr_slave_0: left promiscuous mode [ 1241.157977][ T5244] hsr_slave_1: left promiscuous mode [ 1241.166722][ T5244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1241.177575][ T5244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1241.199372][T29535] blktrace: Concurrent blktraces are not allowed on loop6 [ 1241.374124][T29543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1241.374231][T29543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1241.481631][T25358] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1241.497131][T29545] netlink: 'syz.0.14863': attribute type 1 has an invalid length. [ 1241.503286][T29545] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1241.527801][T29545] bond2 (unregistering): Released all slaves [ 1241.731885][T29549] netlink: 'syz.0.14865': attribute type 1 has an invalid length. [ 1241.779811][T29549] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1241.788407][T29549] bond2 (unregistering): Released all slaves [ 1241.811411][T29428] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1241.813838][T29428] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1241.933137][T29556] netlink: 'syz.7.14864': attribute type 13 has an invalid length. [ 1241.991983][T29560] loop7: detected capacity change from 0 to 512 [ 1241.992418][T29560] EXT4-fs: Ignoring removed nobh option [ 1242.161391][T29560] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #3: comm syz.7.14864: corrupted inode contents [ 1242.161614][T29560] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #3: comm syz.7.14864: mark_inode_dirty error [ 1242.162161][T29560] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #3: comm syz.7.14864: corrupted inode contents [ 1242.162387][T29560] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #3: comm syz.7.14864: mark_inode_dirty error [ 1242.163076][T29560] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.14864: Failed to acquire dquot type 0 [ 1242.163837][T29560] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.14864: corrupted inode contents [ 1242.164053][T29560] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #16: comm syz.7.14864: mark_inode_dirty error [ 1242.164302][T29560] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.14864: corrupted inode contents [ 1242.164484][T29560] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.14864: mark_inode_dirty error [ 1242.164845][T29560] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.14864: corrupted inode contents [ 1242.165018][T29560] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 1242.165191][T29560] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.14864: corrupted inode contents [ 1242.165403][T29560] EXT4-fs error (device loop7): ext4_truncate:4637: inode #16: comm syz.7.14864: mark_inode_dirty error [ 1242.165636][T29560] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 1242.166104][T29560] EXT4-fs (loop7): 1 truncate cleaned up [ 1242.166876][T29560] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1242.166940][T29560] ext4 filesystem being mounted at /404/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1242.379692][T29565] netlink: 'syz.3.14866': attribute type 13 has an invalid length. [ 1242.496338][T29428] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1242.499689][T29428] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1242.604142][T23309] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1242.759301][T29428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1242.789220][T29428] 8021q: adding VLAN 0 to HW filter on device team0 [ 1242.792702][ T8540] bridge0: port 1(bridge_slave_0) entered blocking state [ 1242.792810][ T8540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1242.806540][ T5233] bridge0: port 2(bridge_slave_1) entered blocking state [ 1242.958917][ T29] kauditd_printk_skb: 200 callbacks suppressed [ 1242.958969][ T29] audit: type=1326 audit(1763947768.541:88870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29577 comm="syz.7.14867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366c40f749 code=0x7ffc0000 [ 1242.962138][ T5233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1242.969951][ T29] audit: type=1326 audit(1763947768.561:88871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29577 comm="syz.7.14867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f366c40f749 code=0x7ffc0000 [ 1242.988808][T29576] netlink: 'syz.0.14869': attribute type 1 has an invalid length. [ 1242.991150][ T29] audit: type=1326 audit(1763947768.561:88872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29577 comm="syz.7.14867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366c40f749 code=0x7ffc0000 [ 1243.050075][T29580] __nla_validate_parse: 3 callbacks suppressed [ 1243.050091][T29580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14869'. [ 1243.056455][ T29] audit: type=1326 audit(1763947768.561:88873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29577 comm="syz.7.14867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366c40f749 code=0x7ffc0000 [ 1243.163494][T29428] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1243.163522][T29428] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1243.177742][ T29] audit: type=1326 audit(1763947768.591:88874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29577 comm="syz.7.14867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f366c40f749 code=0x7ffc0000 [ 1243.177776][ T29] audit: type=1326 audit(1763947768.591:88875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29577 comm="syz.7.14867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366c40f749 code=0x7ffc0000 [ 1243.177838][ T29] audit: type=1326 audit(1763947768.591:88876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29577 comm="syz.7.14867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366c40f749 code=0x7ffc0000 [ 1243.177867][ T29] audit: type=1326 audit(1763947768.591:88877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29577 comm="syz.7.14867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f366c40f749 code=0x7ffc0000 [ 1243.177932][ T29] audit: type=1326 audit(1763947768.591:88878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29577 comm="syz.7.14867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366c40f749 code=0x7ffc0000 [ 1243.177989][ T29] audit: type=1326 audit(1763947768.591:88879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29577 comm="syz.7.14867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f366c40f749 code=0x7ffc0000 [ 1243.240632][T29588] blktrace: Concurrent blktraces are not allowed on loop6 [ 1243.253023][T29576] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1243.361261][T29592] netlink: 'syz.7.14872': attribute type 1 has an invalid length. [ 1243.385980][T29580] bond2 (unregistering): Released all slaves [ 1243.404254][T29588] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14871'. [ 1243.423854][T29599] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14872'. [ 1243.429273][T29592] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1243.461624][T29599] bond5 (unregistering): Released all slaves [ 1243.462113][T29602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1243.476465][T29602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1243.504598][T29428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1243.548880][T29605] netlink: 176 bytes leftover after parsing attributes in process `syz.0.14876'. [ 1243.677752][T29428] veth0_vlan: entered promiscuous mode [ 1243.695734][T29428] veth1_vlan: entered promiscuous mode [ 1244.034173][T29622] netlink: 'syz.7.14877': attribute type 13 has an invalid length. [ 1244.402747][T29623] loop7: detected capacity change from 0 to 512 [ 1244.409697][T29623] EXT4-fs: Ignoring removed nobh option [ 1245.335868][T29625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1245.347371][T29625] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1245.364300][T29623] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #3: comm syz.7.14877: corrupted inode contents [ 1245.376744][T29623] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #3: comm syz.7.14877: mark_inode_dirty error [ 1245.388998][T29623] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #3: comm syz.7.14877: corrupted inode contents [ 1245.401775][T29623] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #3: comm syz.7.14877: mark_inode_dirty error [ 1245.430106][T29623] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.14877: Failed to acquire dquot type 0 [ 1245.442595][T29623] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.14877: corrupted inode contents [ 1245.455284][T29623] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #16: comm syz.7.14877: mark_inode_dirty error [ 1245.467623][T29623] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.14877: corrupted inode contents [ 1245.481572][T29623] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.14877: mark_inode_dirty error [ 1245.493648][T29623] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.14877: corrupted inode contents [ 1245.506334][T29623] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 1245.527998][T29428] veth0_macvtap: entered promiscuous mode [ 1245.535758][T29428] veth1_macvtap: entered promiscuous mode [ 1245.544540][T29623] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.14877: corrupted inode contents [ 1245.558524][T29632] netlink: 'syz.0.14880': attribute type 13 has an invalid length. [ 1245.669029][T29623] EXT4-fs error (device loop7): ext4_truncate:4637: inode #16: comm syz.7.14877: mark_inode_dirty error [ 1246.466351][T29623] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 1246.475883][T29623] EXT4-fs (loop7): 1 truncate cleaned up [ 1246.482158][T29623] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1246.494773][T29623] ext4 filesystem being mounted at /408/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1246.497797][T29428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1246.526033][T29638] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14882'. [ 1246.526752][T29428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1246.550837][T29638] bridge_slave_1 (unregistering): left allmulticast mode [ 1246.558059][T29638] bridge_slave_1 (unregistering): left promiscuous mode [ 1246.558132][T29638] bridge0: port 2(bridge_slave_1) entered disabled state [ 1246.580593][ T8567] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.580664][ T8567] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.580776][ T8567] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.580895][ T8567] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.637718][T29638] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14882'. [ 1246.637741][T29638] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14882'. [ 1246.688664][T23309] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1247.074227][T29660] netlink: 'syz.7.14885': attribute type 13 has an invalid length. [ 1247.081336][T29660] loop7: detected capacity change from 0 to 512 [ 1247.081766][T29660] EXT4-fs: Ignoring removed nobh option [ 1247.259224][T29663] netlink: 176 bytes leftover after parsing attributes in process `syz.5.14889'. [ 1247.268024][T29660] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #3: comm syz.7.14885: corrupted inode contents [ 1247.268254][T29660] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #3: comm syz.7.14885: mark_inode_dirty error [ 1247.268960][T29660] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #3: comm syz.7.14885: corrupted inode contents [ 1247.269278][T29660] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #3: comm syz.7.14885: mark_inode_dirty error [ 1247.269923][T29660] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.14885: Failed to acquire dquot type 0 [ 1247.270705][T29660] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.14885: corrupted inode contents [ 1247.271022][T29660] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #16: comm syz.7.14885: mark_inode_dirty error [ 1247.271354][T29660] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.14885: corrupted inode contents [ 1247.271699][T29660] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.14885: mark_inode_dirty error [ 1247.271946][T29660] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.14885: corrupted inode contents [ 1247.272187][T29660] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 1247.272484][T29660] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.14885: corrupted inode contents [ 1247.272783][T29660] EXT4-fs error (device loop7): ext4_truncate:4637: inode #16: comm syz.7.14885: mark_inode_dirty error [ 1247.273145][T29660] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 1247.273798][T29660] EXT4-fs (loop7): 1 truncate cleaned up [ 1247.274835][T29660] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1247.274924][T29660] ext4 filesystem being mounted at /409/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1247.904641][T29671] netlink: 'syz.3.14888': attribute type 13 has an invalid length. [ 1247.979689][T23309] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1248.000273][T29669] team0 (unregistering): Port device team_slave_0 removed [ 1248.016753][T29669] team0 (unregistering): Port device team_slave_1 removed [ 1248.022151][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 1248.022169][ T29] audit: type=1326 audit(1763947773.601:88994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29675 comm="syz.7.14890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366c40f749 code=0x7ffc0000 [ 1248.022198][ T29] audit: type=1326 audit(1763947773.601:88995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29675 comm="syz.7.14890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366c40f749 code=0x7ffc0000 [ 1248.022222][ T29] audit: type=1326 audit(1763947773.611:88996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29675 comm="syz.7.14890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f366c40f749 code=0x7ffc0000 [ 1248.022308][ T29] audit: type=1326 audit(1763947773.611:88997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29675 comm="syz.7.14890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366c40f749 code=0x7ffc0000 [ 1248.022333][ T29] audit: type=1326 audit(1763947773.611:88998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29675 comm="syz.7.14890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f366c40f749 code=0x7ffc0000 [ 1248.022361][ T29] audit: type=1326 audit(1763947773.611:88999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29675 comm="syz.7.14890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366c40f749 code=0x7ffc0000 [ 1248.022456][ T29] audit: type=1326 audit(1763947773.611:89000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29675 comm="syz.7.14890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f366c40f749 code=0x7ffc0000 [ 1248.022510][ T29] audit: type=1326 audit(1763947773.611:89001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29675 comm="syz.7.14890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366c40f749 code=0x7ffc0000 [ 1248.022600][ T29] audit: type=1326 audit(1763947773.611:89002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29675 comm="syz.7.14890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f366c40f749 code=0x7ffc0000 [ 1248.022631][ T29] audit: type=1326 audit(1763947773.611:89003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29675 comm="syz.7.14890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366c40f749 code=0x7ffc0000 [ 1248.025115][T29676] loop7: detected capacity change from 0 to 128 [ 1248.074675][T29676] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1248.482120][T29676] ext4 filesystem being mounted at /410/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1248.595913][T29683] SELinux: failed to load policy [ 1248.669933][T29689] netlink: 660 bytes leftover after parsing attributes in process `syz.5.14895'. [ 1248.689003][T29689] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 1248.695176][T29692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14893'. [ 1248.858217][T29700] syzkaller0: entered promiscuous mode [ 1248.863859][T29700] syzkaller0: entered allmulticast mode [ 1248.905599][T23309] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1248.949402][T29703] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1249.385076][T29710] netlink: 'syz.3.14903': attribute type 1 has an invalid length. [ 1249.399904][T29710] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1249.416261][T29710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14903'. [ 1249.427495][T29710] bond4 (unregistering): Released all slaves [ 1249.527931][T29721] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1249.607684][T29729] netlink: 660 bytes leftover after parsing attributes in process `syz.0.14910'. [ 1249.618451][T29729] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 1249.843852][T29739] netlink: 176 bytes leftover after parsing attributes in process `syz.5.14913'. [ 1249.988060][T29743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1249.998844][T29743] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1250.158752][T29747] blktrace: Concurrent blktraces are not allowed on loop10 [ 1250.189676][T29747] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14915'. [ 1250.219716][T29751] netlink: 176 bytes leftover after parsing attributes in process `syz.1.14917'. [ 1250.340533][T29756] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1250.747790][T29775] netlink: 'syz.3.14924': attribute type 13 has an invalid length. [ 1251.398133][T29791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1251.409400][T29791] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1251.643850][T29796] syz!: rxe_newlink: already configured on team_slave_0 [ 1251.778336][T29809] netlink: 'syz.3.14936': attribute type 1 has an invalid length. [ 1251.793876][T29809] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1251.809318][T29809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14936'. [ 1251.883943][T29809] bond4 (unregistering): Released all slaves [ 1252.055901][ T5244] Bluetooth: hci0: Frame reassembly failed (-84) [ 1252.072624][T29825] netlink: 'syz.5.14937': attribute type 13 has an invalid length. [ 1252.371056][ T8559] bridge_slave_0: left allmulticast mode [ 1252.376729][ T8559] bridge_slave_0: left promiscuous mode [ 1252.382478][ T8559] bridge0: port 1(bridge_slave_0) entered disabled state [ 1252.463686][T29839] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1252.629546][T29843] netlink: 'syz.1.14944': attribute type 13 has an invalid length. [ 1252.910743][ T8559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1252.920704][ T8559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1252.930520][ T8559] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1252.939468][ T8559] bond0 (unregistering): Released all slaves [ 1252.948339][ T8559] bond1 (unregistering): Released all slaves [ 1252.957740][ T8559] bond2 (unregistering): Released all slaves [ 1252.966577][ T8559] bond3 (unregistering): Released all slaves [ 1253.004941][T29843] bridge0: port 2(bridge_slave_1) entered disabled state [ 1253.012336][T29843] bridge0: port 1(bridge_slave_0) entered disabled state [ 1253.051945][T29843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1253.062254][T29843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1253.119983][ T8559] tipc: Disabling bearer [ 1253.125455][ T8559] tipc: Left network mode [ 1253.125505][ T8567] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.142561][ T8567] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.153653][ T8567] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.162728][ T8567] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.251548][ T8559] hsr_slave_0: left promiscuous mode [ 1253.257330][ T8559] hsr_slave_1: left promiscuous mode [ 1253.263012][ T8559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1253.270921][ T8559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1253.302967][ T5233] smc: removing ib device syz! [ 1253.324393][T29826] chnl_net:caif_netlink_parms(): no params data found [ 1253.406800][T29826] bridge0: port 1(bridge_slave_0) entered blocking state [ 1253.414051][T29826] bridge0: port 1(bridge_slave_0) entered disabled state [ 1253.421825][T29826] bridge_slave_0: entered allmulticast mode [ 1253.428302][T29826] bridge_slave_0: entered promiscuous mode [ 1253.435227][T29826] bridge0: port 2(bridge_slave_1) entered blocking state [ 1253.442438][T29826] bridge0: port 2(bridge_slave_1) entered disabled state [ 1253.449943][T29826] bridge_slave_1: entered allmulticast mode [ 1253.466403][T29826] bridge_slave_1: entered promiscuous mode [ 1253.521774][T29826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1253.537097][T29826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1253.564480][T29826] team0: Port device team_slave_0 added [ 1253.591260][T29863] syzkaller0: entered promiscuous mode [ 1253.596742][T29863] syzkaller0: entered allmulticast mode [ 1253.603707][T29826] team0: Port device team_slave_1 added [ 1253.628629][T29826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1253.635774][T29826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1253.661875][T29826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1253.679586][T29826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1253.686649][T29826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1253.713220][T29826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1253.749847][T29826] hsr_slave_0: entered promiscuous mode [ 1253.755783][T29826] hsr_slave_1: entered promiscuous mode [ 1253.830447][T29868] wg1: entered promiscuous mode [ 1253.835375][T29868] wg1: entered allmulticast mode [ 1253.852619][ T29] kauditd_printk_skb: 540 callbacks suppressed [ 1253.852639][ T29] audit: type=1326 audit(1763947779.441:89544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29871 comm="syz.1.14953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dfc53f749 code=0x7ffc0000 [ 1253.886055][ T29] audit: type=1326 audit(1763947779.441:89545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29871 comm="syz.1.14953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dfc53f749 code=0x7ffc0000 [ 1253.913302][T29874] netlink: 'syz.0.14954': attribute type 1 has an invalid length. [ 1253.921513][ T29] audit: type=1326 audit(1763947779.471:89546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29871 comm="syz.1.14953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8dfc53f749 code=0x7ffc0000 [ 1253.945960][ T29] audit: type=1326 audit(1763947779.481:89547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29871 comm="syz.1.14953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dfc53f749 code=0x7ffc0000 [ 1253.969712][ T29] audit: type=1326 audit(1763947779.481:89548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29871 comm="syz.1.14953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dfc53f749 code=0x7ffc0000 [ 1253.969749][ T29] audit: type=1326 audit(1763947779.491:89549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29871 comm="syz.1.14953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f8dfc53f749 code=0x7ffc0000 [ 1253.969849][ T29] audit: type=1326 audit(1763947779.491:89550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29871 comm="syz.1.14953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dfc53f749 code=0x7ffc0000 [ 1253.969877][ T29] audit: type=1326 audit(1763947779.491:89551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29871 comm="syz.1.14953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8dfc53f749 code=0x7ffc0000 [ 1253.969908][ T29] audit: type=1326 audit(1763947779.491:89552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29871 comm="syz.1.14953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dfc53f749 code=0x7ffc0000 [ 1253.969938][ T29] audit: type=1326 audit(1763947779.491:89553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29871 comm="syz.1.14953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8dfc53f749 code=0x7ffc0000 [ 1253.972088][T29875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14954'. [ 1254.025964][T29874] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1254.068526][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 1254.135956][ T3494] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1254.143165][T29875] bond2 (unregistering): Released all slaves [ 1254.373144][T29826] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1254.377026][T29826] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1254.392457][T29826] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1254.402026][T29826] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1254.454950][T29826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1254.463793][T29826] 8021q: adding VLAN 0 to HW filter on device team0 [ 1254.466563][ T5244] bridge0: port 1(bridge_slave_0) entered blocking state [ 1254.477903][ T5244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1254.497470][T29826] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1254.507964][T29826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1254.510959][ T5244] bridge0: port 2(bridge_slave_1) entered blocking state [ 1254.526268][ T5244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1254.590879][T29826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1254.725082][T29905] blktrace: Concurrent blktraces are not allowed on loop10 [ 1254.824280][T29826] veth0_vlan: entered promiscuous mode [ 1254.916708][T29913] blktrace: Concurrent blktraces are not allowed on loop2 [ 1254.953929][T29915] netlink: 'syz.7.14958': attribute type 13 has an invalid length. [ 1255.012810][T29916] loop7: detected capacity change from 0 to 512 [ 1255.019693][T29916] EXT4-fs: Ignoring removed nobh option [ 1255.081235][T29916] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #3: comm syz.7.14958: corrupted inode contents [ 1255.093949][T29916] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #3: comm syz.7.14958: mark_inode_dirty error [ 1255.107163][T29916] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #3: comm syz.7.14958: corrupted inode contents [ 1255.119511][T29916] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #3: comm syz.7.14958: mark_inode_dirty error [ 1255.131767][T29916] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.14958: Failed to acquire dquot type 0 [ 1255.144972][T29916] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.14958: corrupted inode contents [ 1255.157833][T29916] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #16: comm syz.7.14958: mark_inode_dirty error [ 1255.170414][T29916] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.14958: corrupted inode contents [ 1255.183107][T29916] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.14958: mark_inode_dirty error [ 1255.194944][T29916] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.14958: corrupted inode contents [ 1255.207177][T29916] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 1255.216111][T29916] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.14958: corrupted inode contents [ 1255.228383][T29916] EXT4-fs error (device loop7): ext4_truncate:4637: inode #16: comm syz.7.14958: mark_inode_dirty error [ 1255.240414][T29916] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 1255.250894][T29916] EXT4-fs (loop7): 1 truncate cleaned up [ 1255.257356][T29916] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1255.269955][T29916] ext4 filesystem being mounted at /418/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1255.291262][T29826] veth1_vlan: entered promiscuous mode [ 1255.318579][T29913] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14961'. [ 1255.369008][T29826] veth0_macvtap: entered promiscuous mode [ 1255.395256][T29826] veth1_macvtap: entered promiscuous mode [ 1255.460150][T29826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1255.471162][T29826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1255.484293][ T8567] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.528992][ T8567] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.587442][T23309] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1255.605712][ T8567] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.611604][T29926] netlink: 660 bytes leftover after parsing attributes in process `syz.0.14962'. [ 1255.626078][ T8567] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.654109][T29930] blktrace: Concurrent blktraces are not allowed on loop2 [ 1255.673887][T29926] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 1255.703536][T29926] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14962'. [ 1255.747749][T29940] loop7: detected capacity change from 0 to 1024 [ 1255.753711][T29936] infiniband syz!: set active [ 1255.755444][T29940] ext3: Unknown parameter 'obj_type' [ 1255.758938][T29936] infiniband syz!: added team_slave_0 [ 1255.771450][T29940] blktrace: Concurrent blktraces are not allowed on loop14 [ 1255.779699][T29936] RDS/IB: syz!: added [ 1255.789167][T29936] smc: adding ib device syz! with port count 1 [ 1255.795856][T29936] smc: ib device syz! port 1 has no pnetid [ 1255.805596][T29946] loop7: detected capacity change from 0 to 128 [ 1255.818446][T29948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1255.833710][T29946] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1255.859578][T29946] ext4 filesystem being mounted at /421/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1255.881887][T29948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1256.256514][T29958] netlink: 'syz.3.14972': attribute type 13 has an invalid length. [ 1256.282755][T29958] bridge0: port 2(bridge_slave_1) entered disabled state [ 1256.282927][T29958] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.323232][T29958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1256.325275][T29958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1256.382280][ T8567] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.382322][ T8567] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.382403][ T8567] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.382446][ T8567] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.649612][T23309] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1256.897383][T29972] netlink: 'syz.5.14975': attribute type 13 has an invalid length. [ 1257.251975][T29979] loop7: detected capacity change from 0 to 1024 [ 1257.259501][T29979] ext3: Unknown parameter 'obj_type' [ 1257.267492][T29979] blktrace: Concurrent blktraces are not allowed on loop14 [ 1257.482595][T29982] netlink: 'syz.3.14978': attribute type 13 has an invalid length. [ 1257.748137][T29985] loop7: detected capacity change from 0 to 512 [ 1257.758887][ T3494] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1257.820455][T29985] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1257.840339][T29985] ext4 filesystem being mounted at /426/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1257.852025][T29992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1257.852208][T29985] FAULT_INJECTION: forcing a failure. [ 1257.852208][T29985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1257.871485][T29993] blktrace: Concurrent blktraces are not allowed on loop10 [ 1257.873777][T29985] CPU: 1 UID: 0 PID: 29985 Comm: syz.7.14981 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1257.873878][T29985] Tainted: [W]=WARN [ 1257.873885][T29985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1257.873897][T29985] Call Trace: [ 1257.873905][T29985] [ 1257.873913][T29985] __dump_stack+0x1d/0x30 [ 1257.873938][T29985] dump_stack_lvl+0xe8/0x140 [ 1257.873958][T29985] dump_stack+0x15/0x1b [ 1257.874048][T29985] should_fail_ex+0x265/0x280 [ 1257.874081][T29985] should_fail+0xb/0x20 [ 1257.874098][T29985] should_fail_usercopy+0x1a/0x20 [ 1257.874120][T29985] strncpy_from_user+0x25/0x230 [ 1257.874209][T29985] ? kmem_cache_alloc_noprof+0x242/0x480 [ 1257.874237][T29985] ? getname_flags+0x80/0x3b0 [ 1257.874267][T29985] getname_flags+0xae/0x3b0 [ 1257.874364][T29985] path_setxattrat+0x223/0x310 [ 1257.874403][T29985] __x64_sys_setxattr+0x6e/0x90 [ 1257.874504][T29985] x64_sys_call+0xad2/0x3000 [ 1257.874527][T29985] do_syscall_64+0xd2/0x200 [ 1257.874550][T29985] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1257.874578][T29985] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1257.874647][T29985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.874712][T29985] RIP: 0033:0x7f366c40f749 [ 1257.874729][T29985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1257.874748][T29985] RSP: 002b:00007f366ae77038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 1257.874786][T29985] RAX: ffffffffffffffda RBX: 00007f366c665fa0 RCX: 00007f366c40f749 [ 1257.874800][T29985] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000200000000140 [ 1257.874820][T29985] RBP: 00007f366ae77090 R08: 0000000000000003 R09: 0000000000000000 [ 1257.874834][T29985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1257.874846][T29985] R13: 00007f366c666038 R14: 00007f366c665fa0 R15: 00007ffe7f223908 [ 1257.874864][T29985] [ 1257.875137][T29992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1258.095432][T23309] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1258.106327][T29993] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14983'. [ 1258.144177][T29995] netlink: 'syz.5.14986': attribute type 1 has an invalid length. [ 1258.158961][T29995] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1258.170102][T29995] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14986'. [ 1258.180921][T29995] bond2 (unregistering): Released all slaves [ 1258.296477][ T8559] Bluetooth: hci0: Frame reassembly failed (-84) [ 1258.454814][T30014] netlink: 'syz.3.14988': attribute type 13 has an invalid length. [ 1259.458863][T30025] netlink: 'syz.1.14992': attribute type 13 has an invalid length. [ 1260.485997][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 1260.492290][ T3494] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1260.645882][T30030] netlink: 'syz.0.14994': attribute type 13 has an invalid length. [ 1260.974100][T30044] netlink: 'syz.7.15000': attribute type 1 has an invalid length. [ 1260.995533][ T29] kauditd_printk_skb: 264 callbacks suppressed [ 1260.995550][ T29] audit: type=1326 audit(1763947786.581:89816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30045 comm="syz.3.15001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb42a3af749 code=0x7ffc0000 [ 1261.025106][T30047] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15000'. [ 1261.025963][ T29] audit: type=1326 audit(1763947786.581:89817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30045 comm="syz.3.15001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb42a3af749 code=0x7ffc0000 [ 1261.058524][ T29] audit: type=1326 audit(1763947786.581:89818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30045 comm="syz.3.15001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb42a3af749 code=0x7ffc0000 [ 1261.058557][ T29] audit: type=1326 audit(1763947786.581:89819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30045 comm="syz.3.15001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb42a3af749 code=0x7ffc0000 [ 1261.058698][ T29] audit: type=1326 audit(1763947786.581:89820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30045 comm="syz.3.15001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb42a3af749 code=0x7ffc0000 [ 1261.058725][ T29] audit: type=1326 audit(1763947786.581:89821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30045 comm="syz.3.15001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb42a3af749 code=0x7ffc0000 [ 1261.058751][ T29] audit: type=1326 audit(1763947786.581:89822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30045 comm="syz.3.15001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb42a3af749 code=0x7ffc0000 [ 1261.058832][ T29] audit: type=1326 audit(1763947786.581:89823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30045 comm="syz.3.15001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb42a3af749 code=0x7ffc0000 [ 1261.058859][ T29] audit: type=1326 audit(1763947786.581:89824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30045 comm="syz.3.15001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb42a3af749 code=0x7ffc0000 [ 1261.058885][ T29] audit: type=1326 audit(1763947786.581:89825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30045 comm="syz.3.15001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb42a3af749 code=0x7ffc0000 [ 1261.096828][T30046] syz!: rxe_newlink: already configured on team_slave_0 [ 1261.144534][T30044] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1261.349322][T30047] bond5 (unregistering): Released all slaves [ 1261.850278][T30072] netlink: 'syz.5.15006': attribute type 13 has an invalid length. [ 1262.072424][T30074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15007'. [ 1262.098255][T30074] veth0_macvtap: left promiscuous mode [ 1262.128435][T30077] netlink: 'syz.3.15008': attribute type 1 has an invalid length. [ 1262.148670][T30077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15008'. [ 1262.171609][T30077] bond0: (slave bond_slave_0): Releasing backup interface [ 1262.411185][T30084] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15010'. [ 1262.591411][T30090] netlink: 'syz.7.15009': attribute type 13 has an invalid length. [ 1262.603112][T30090] loop7: detected capacity change from 0 to 512 [ 1262.609735][T30090] EXT4-fs: Ignoring removed nobh option [ 1262.807731][T30090] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #3: comm syz.7.15009: corrupted inode contents [ 1262.820089][T30090] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #3: comm syz.7.15009: mark_inode_dirty error [ 1263.336037][T30096] netlink: 'syz.1.15012': attribute type 13 has an invalid length. [ 1263.345039][T30090] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #3: comm syz.7.15009: corrupted inode contents [ 1263.357482][T30090] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #3: comm syz.7.15009: mark_inode_dirty error [ 1263.369569][T30090] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.15009: Failed to acquire dquot type 0 [ 1263.382248][T30090] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.15009: corrupted inode contents [ 1263.406169][T30090] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #16: comm syz.7.15009: mark_inode_dirty error [ 1263.418312][T30090] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.15009: corrupted inode contents [ 1263.431257][T30090] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.15009: mark_inode_dirty error [ 1263.443183][T30090] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.15009: corrupted inode contents [ 1263.455342][T30090] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 1263.465146][T30090] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.15009: corrupted inode contents [ 1263.478076][T30090] EXT4-fs error (device loop7): ext4_truncate:4637: inode #16: comm syz.7.15009: mark_inode_dirty error [ 1263.489771][T30090] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 1263.499412][T30090] EXT4-fs (loop7): 1 truncate cleaned up [ 1263.505619][T30090] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1263.518149][T30090] ext4 filesystem being mounted at /432/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1263.646774][T30106] blktrace: Concurrent blktraces are not allowed on loop6 [ 1263.732970][T30105] netlink: 'syz.1.15014': attribute type 13 has an invalid length. [ 1263.745139][T30108] netlink: 176 bytes leftover after parsing attributes in process `syz.5.15015'. [ 1263.754577][T30103] netlink: 'syz.0.15011': attribute type 13 has an invalid length. [ 1263.778532][T30106] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15013'. [ 1263.793967][T23309] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1263.839635][ T8559] Bluetooth: hci0: Frame reassembly failed (-84) [ 1263.881173][T30118] netlink: 'syz.7.15016': attribute type 1 has an invalid length. [ 1263.905015][T30118] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1263.922018][T30118] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15016'. [ 1263.958078][T30118] bond5 (unregistering): Released all slaves [ 1264.095238][T30128] blktrace: Concurrent blktraces are not allowed on loop2 [ 1264.173585][T30133] syzkaller0: entered promiscuous mode [ 1264.179476][T30133] syzkaller0: entered allmulticast mode [ 1264.420640][T30144] netlink: 'syz.0.15028': attribute type 13 has an invalid length. [ 1264.476600][T30147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1264.485613][T30147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1264.733048][T30149] netlink: 'syz.7.15026': attribute type 13 has an invalid length. [ 1264.748268][T30149] loop7: detected capacity change from 0 to 512 [ 1264.754984][T30149] EXT4-fs: Ignoring removed nobh option [ 1264.868943][T30149] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #3: comm syz.7.15026: corrupted inode contents [ 1264.882124][T30149] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #3: comm syz.7.15026: mark_inode_dirty error [ 1264.894828][T30149] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #3: comm syz.7.15026: corrupted inode contents [ 1264.907387][T30149] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #3: comm syz.7.15026: mark_inode_dirty error [ 1264.919441][T30149] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.15026: Failed to acquire dquot type 0 [ 1264.931698][T30149] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.15026: corrupted inode contents [ 1264.944099][T30149] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #16: comm syz.7.15026: mark_inode_dirty error [ 1264.955977][T30149] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.15026: corrupted inode contents [ 1264.968316][T30149] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.15026: mark_inode_dirty error [ 1264.980456][T30149] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.15026: corrupted inode contents [ 1264.992720][T30149] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 1265.001514][T30149] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.15026: corrupted inode contents [ 1265.013835][T30149] EXT4-fs error (device loop7): ext4_truncate:4637: inode #16: comm syz.7.15026: mark_inode_dirty error [ 1265.025486][T30149] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 1265.035018][T30149] EXT4-fs (loop7): 1 truncate cleaned up [ 1265.040752][T30152] syz!: rxe_newlink: already configured on team_slave_0 [ 1265.041204][T30149] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1265.060507][T30149] ext4 filesystem being mounted at /435/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1265.123560][T30165] netlink: 'syz.1.15034': attribute type 1 has an invalid length. [ 1265.140288][T30165] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1265.150166][T30165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15034'. [ 1265.165231][T30165] bond1 (unregistering): Released all slaves [ 1265.277055][T23309] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1266.165073][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 1266.171500][ T3494] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1267.281573][T30184] syzkaller0: entered promiscuous mode [ 1267.287114][T30184] syzkaller0: entered allmulticast mode [ 1267.362420][T30188] netlink: 'syz.5.15040': attribute type 1 has an invalid length. [ 1267.395136][T30188] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1267.432986][T30188] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15040'. [ 1267.459858][T30188] bond2 (unregistering): Released all slaves [ 1267.518614][T30198] netlink: 'syz.7.15038': attribute type 13 has an invalid length. [ 1267.552558][T30198] loop7: detected capacity change from 0 to 512 [ 1267.580853][T30198] EXT4-fs: Ignoring removed nobh option [ 1267.612827][T30207] syzkaller0: entered promiscuous mode [ 1267.618438][T30207] syzkaller0: entered allmulticast mode [ 1267.646564][T30198] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #3: comm syz.7.15038: corrupted inode contents [ 1267.678929][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 1267.678950][ T29] audit: type=1326 audit(1763947793.251:89976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30210 comm="syz.0.15047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41713ef749 code=0x7ffc0000 [ 1267.709097][ T29] audit: type=1326 audit(1763947793.251:89977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30210 comm="syz.0.15047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41713ef749 code=0x7ffc0000 [ 1267.732998][ T29] audit: type=1326 audit(1763947793.251:89978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30210 comm="syz.0.15047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41713ef749 code=0x7ffc0000 [ 1267.756845][ T29] audit: type=1326 audit(1763947793.251:89979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30210 comm="syz.0.15047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41713ef749 code=0x7ffc0000 [ 1267.780762][ T29] audit: type=1326 audit(1763947793.251:89980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30210 comm="syz.0.15047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41713ef749 code=0x7ffc0000 [ 1267.804804][ T29] audit: type=1326 audit(1763947793.251:89981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30210 comm="syz.0.15047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41713ef749 code=0x7ffc0000 [ 1267.828678][ T29] audit: type=1326 audit(1763947793.251:89982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30210 comm="syz.0.15047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41713ef749 code=0x7ffc0000 [ 1267.844024][T30198] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #3: comm syz.7.15038: mark_inode_dirty error [ 1267.852556][ T29] audit: type=1326 audit(1763947793.251:89983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30210 comm="syz.0.15047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41713ef749 code=0x7ffc0000 [ 1267.887862][ T29] audit: type=1326 audit(1763947793.251:89984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30210 comm="syz.0.15047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41713ef749 code=0x7ffc0000 [ 1267.911903][ T29] audit: type=1326 audit(1763947793.251:89985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30210 comm="syz.0.15047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f41713ef749 code=0x7ffc0000 [ 1268.013030][T30198] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #3: comm syz.7.15038: corrupted inode contents [ 1268.038782][T30198] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #3: comm syz.7.15038: mark_inode_dirty error [ 1268.060733][T30198] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.15038: Failed to acquire dquot type 0 [ 1268.062523][T30216] netlink: 20 bytes leftover after parsing attributes in process `syz.5.15048'. [ 1268.202466][T30198] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.15038: corrupted inode contents [ 1268.214940][T30198] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #16: comm syz.7.15038: mark_inode_dirty error [ 1268.228690][T30198] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.15038: corrupted inode contents [ 1268.268706][T30198] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.15038: mark_inode_dirty error [ 1268.295243][T30220] netlink: 'syz.3.15049': attribute type 13 has an invalid length. [ 1268.427237][T30198] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.15038: corrupted inode contents [ 1268.440932][T30198] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 1268.450475][T30198] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.15038: corrupted inode contents [ 1268.470916][T30198] EXT4-fs error (device loop7): ext4_truncate:4637: inode #16: comm syz.7.15038: mark_inode_dirty error [ 1268.482733][T30198] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 1268.492320][T30198] EXT4-fs (loop7): 1 truncate cleaned up [ 1268.499085][T30198] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1268.569063][T30198] ext4 filesystem being mounted at /437/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1268.596179][T30229] syzkaller0: entered promiscuous mode [ 1268.601779][T30229] syzkaller0: entered allmulticast mode [ 1269.119451][T23309] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1269.175084][T30242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1269.189192][T30242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1269.248627][T30246] netlink: 176 bytes leftover after parsing attributes in process `syz.5.15058'. [ 1269.293030][T30248] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15059'. [ 1269.296194][T30227] syz.1.15051 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1269.316562][T30227] CPU: 1 UID: 0 PID: 30227 Comm: syz.1.15051 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1269.316601][T30227] Tainted: [W]=WARN [ 1269.316726][T30227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1269.316741][T30227] Call Trace: [ 1269.316749][T30227] [ 1269.316767][T30227] __dump_stack+0x1d/0x30 [ 1269.316790][T30227] dump_stack_lvl+0xe8/0x140 [ 1269.316815][T30227] dump_stack+0x15/0x1b [ 1269.316905][T30227] dump_header+0x81/0x220 [ 1269.316929][T30227] oom_kill_process+0x342/0x400 [ 1269.316962][T30227] out_of_memory+0x979/0xb80 [ 1269.316991][T30227] try_charge_memcg+0x610/0xa10 [ 1269.317088][T30227] obj_cgroup_charge_pages+0xa6/0x150 [ 1269.317115][T30227] __memcg_kmem_charge_page+0x9f/0x170 [ 1269.317142][T30227] __alloc_frozen_pages_noprof+0x188/0x360 [ 1269.317187][T30227] alloc_pages_mpol+0xb3/0x260 [ 1269.317228][T30227] alloc_pages_noprof+0x90/0x130 [ 1269.317248][T30227] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 1269.317371][T30227] __kvmalloc_node_noprof+0x483/0x670 [ 1269.317401][T30227] ? ip_set_alloc+0x24/0x30 [ 1269.317499][T30227] ? ip_set_alloc+0x24/0x30 [ 1269.317535][T30227] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 1269.317566][T30227] ip_set_alloc+0x24/0x30 [ 1269.317625][T30227] hash_netiface_create+0x282/0x740 [ 1269.317656][T30227] ? __pfx_hash_netiface_create+0x10/0x10 [ 1269.317686][T30227] ip_set_create+0x3cc/0x970 [ 1269.317789][T30227] ? __nla_parse+0x40/0x60 [ 1269.317815][T30227] nfnetlink_rcv_msg+0x4c6/0x590 [ 1269.317915][T30227] netlink_rcv_skb+0x123/0x220 [ 1269.317949][T30227] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1269.317981][T30227] nfnetlink_rcv+0x167/0x16c0 [ 1269.318043][T30227] ? free_pgtables+0x5d3/0x610 [ 1269.318082][T30227] ? __account_obj_stock+0x211/0x350 [ 1269.318112][T30227] ? refill_obj_stock+0x254/0x2e0 [ 1269.318131][T30227] ? __rcu_read_unlock+0x4f/0x70 [ 1269.318178][T30227] ? __memcg_slab_free_hook+0xbc/0x230 [ 1269.318207][T30227] ? vm_area_free+0x71/0xb0 [ 1269.318305][T30227] ? kmem_cache_free+0x286/0x3d0 [ 1269.318342][T30227] ? percpu_counter_add_batch+0xb6/0x130 [ 1269.318372][T30227] ? __mt_destroy+0xce/0xe0 [ 1269.318407][T30227] ? vms_complete_munmap_vmas+0x3e6/0x440 [ 1269.318436][T30227] ? should_fail_ex+0x30/0x280 [ 1269.318588][T30227] ? selinux_nlmsg_lookup+0x99/0x890 [ 1269.318615][T30227] ? __rcu_read_unlock+0x34/0x70 [ 1269.318647][T30227] ? __netlink_lookup+0x266/0x2a0 [ 1269.318714][T30227] netlink_unicast+0x5c0/0x690 [ 1269.318745][T30227] netlink_sendmsg+0x58b/0x6b0 [ 1269.318842][T30227] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1269.318930][T30227] __sock_sendmsg+0x145/0x180 [ 1269.318976][T30227] ____sys_sendmsg+0x31e/0x4e0 [ 1269.319060][T30227] ___sys_sendmsg+0x17b/0x1d0 [ 1269.319090][T30227] __x64_sys_sendmsg+0xd4/0x160 [ 1269.319117][T30227] x64_sys_call+0x191e/0x3000 [ 1269.319146][T30227] do_syscall_64+0xd2/0x200 [ 1269.319247][T30227] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1269.319282][T30227] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1269.319322][T30227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.319390][T30227] RIP: 0033:0x7f8dfc53f749 [ 1269.319450][T30227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1269.319473][T30227] RSP: 002b:00007f8dfafa7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1269.319504][T30227] RAX: ffffffffffffffda RBX: 00007f8dfc795fa0 RCX: 00007f8dfc53f749 [ 1269.319518][T30227] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 1269.319530][T30227] RBP: 00007f8dfc5c3f91 R08: 0000000000000000 R09: 0000000000000000 [ 1269.319565][T30227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1269.319580][T30227] R13: 00007f8dfc796038 R14: 00007f8dfc795fa0 R15: 00007ffcb82878c8 [ 1269.319602][T30227] [ 1269.695850][T30227] memory: usage 307200kB, limit 307200kB, failcnt 2106 [ 1269.702774][T30227] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 1269.711263][T30227] kmem: usage 307156kB, limit 9007199254740988kB, failcnt 0 [ 1269.718663][T30227] Memory cgroup stats for /syz1: [ 1269.718898][T30227] cache 0 [ 1269.727224][T30227] rss 0 [ 1269.730015][T30227] shmem 0 [ 1269.733247][T30227] mapped_file 0 [ 1269.736717][T30227] dirty 0 [ 1269.739700][T30227] writeback 0 [ 1269.743011][T30227] workingset_refault_anon 3643 [ 1269.747860][T30227] workingset_refault_file 5551 [ 1269.752671][T30227] swap 196608 [ 1269.756011][T30227] swapcached 8192 [ 1269.759671][T30227] pgpgin 1214166 [ 1269.763280][T30227] pgpgout 1214155 [ 1269.766946][T30227] pgfault 1344612 [ 1269.770886][T30227] pgmajfault 936 [ 1269.774450][T30227] inactive_anon 0 [ 1269.778146][T30227] active_anon 8192 [ 1269.781952][T30227] inactive_file 0 [ 1269.785600][T30227] active_file 36864 [ 1269.789749][T30227] unevictable 0 [ 1269.793225][T30227] hierarchical_memory_limit 314572800 [ 1269.798728][T30227] hierarchical_memsw_limit 9223372036854771712 [ 1269.805606][T30227] total_cache 0 [ 1269.806840][T30252] loop7: detected capacity change from 0 to 1024 [ 1269.809560][T30227] total_rss 0 [ 1269.809572][T30227] total_shmem 0 [ 1269.809581][T30227] total_mapped_file 0 [ 1269.809591][T30227] total_dirty 0 [ 1269.809600][T30227] total_writeback 0 [ 1269.809610][T30227] total_workingset_refault_anon 3643 [ 1269.821618][T30252] EXT4-fs: Ignoring removed nobh option [ 1269.823637][T30227] total_workingset_refault_file 5551 [ 1269.823650][T30227] total_swap 196608 [ 1269.823659][T30227] total_swapcached 8192 [ 1269.823669][T30227] total_pgpgin 1214169 [ 1269.827730][T30252] EXT4-fs: Ignoring removed bh option [ 1269.831329][T30227] total_pgpgout 1214158 [ 1269.831342][T30227] total_pgfault 1344621 [ 1269.831351][T30227] total_pgmajfault 936 [ 1269.831358][T30227] total_inactive_anon 0 [ 1269.831371][T30227] total_active_anon 8192 [ 1269.891541][T30227] total_inactive_file 0 [ 1269.894478][T30252] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1269.895757][T30227] total_active_file 36864 [ 1269.895770][T30227] total_unevictable 0 [ 1269.895780][T30227] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.15051,pid=30226,uid=0 [ 1269.931361][T30227] Memory cgroup out of memory: Killed process 30226 (syz.1.15051) total-vm:96012kB, anon-rss:1136kB, file-rss:22320kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1270.127006][T30258] netlink: 'syz.5.15062': attribute type 1 has an invalid length. [ 1270.144755][T30258] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1270.159049][T30258] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15062'. [ 1270.170096][T30258] bond2 (unregistering): Released all slaves [ 1270.198320][T23309] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1270.239258][T30270] loop7: detected capacity change from 0 to 512 [ 1270.262039][T30270] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1270.287134][T30270] ext4 filesystem being mounted at /442/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1270.362023][T23309] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1270.458611][ T3494] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1270.870349][T30302] loop7: detected capacity change from 0 to 512 [ 1270.880262][T30302] EXT4-fs: Ignoring removed oldalloc option [ 1270.906094][T30303] netlink: 'syz.3.15073': attribute type 13 has an invalid length. [ 1270.951165][T30302] EXT4-fs error (device loop7): ext4_init_orphan_info:581: comm syz.7.15075: inode #0: comm syz.7.15075: iget: illegal inode # [ 1270.976929][T30302] EXT4-fs (loop7): get orphan inode failed [ 1270.989446][T30302] EXT4-fs (loop7): mount failed [ 1271.024741][T30309] netlink: 'syz.0.15077': attribute type 1 has an invalid length. [ 1271.047946][T30309] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1271.062834][T30313] netlink: 12 bytes leftover after parsing attributes in process `syz.7.15078'. [ 1271.096992][T30309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15077'. [ 1271.279911][T30309] bond2 (unregistering): Released all slaves [ 1271.554940][T30320] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1272.006742][T30340] netlink: 'syz.7.15084': attribute type 13 has an invalid length. [ 1272.022269][T30340] loop7: detected capacity change from 0 to 512 [ 1272.028977][T30340] EXT4-fs: Ignoring removed nobh option [ 1272.117520][T30340] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #3: comm syz.7.15084: corrupted inode contents [ 1272.132597][T30340] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #3: comm syz.7.15084: mark_inode_dirty error [ 1272.145189][T30340] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #3: comm syz.7.15084: corrupted inode contents [ 1272.158067][T30340] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #3: comm syz.7.15084: mark_inode_dirty error [ 1272.170864][T30340] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.15084: Failed to acquire dquot type 0 [ 1272.183667][T30340] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.15084: corrupted inode contents [ 1272.206319][T30340] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #16: comm syz.7.15084: mark_inode_dirty error [ 1272.218140][T30340] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.15084: corrupted inode contents [ 1272.230481][T30340] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.15084: mark_inode_dirty error [ 1272.242098][T30340] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.15084: corrupted inode contents [ 1272.254331][T30340] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 1272.263302][T30340] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.15084: corrupted inode contents [ 1272.275851][T30340] EXT4-fs error (device loop7): ext4_truncate:4637: inode #16: comm syz.7.15084: mark_inode_dirty error [ 1272.287538][T30340] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 1272.298859][T30340] EXT4-fs (loop7): 1 truncate cleaned up [ 1272.304859][T30340] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1272.317710][T30340] ext4 filesystem being mounted at /448/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1272.403947][T30348] netlink: 176 bytes leftover after parsing attributes in process `syz.3.15086'. [ 1272.472864][ T5244] Bluetooth: hci0: Frame reassembly failed (-84) [ 1272.544658][T23309] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1272.551941][T30355] netlink: 72 bytes leftover after parsing attributes in process `syz.3.15089'. [ 1272.555052][T30357] netlink: 660 bytes leftover after parsing attributes in process `syz.1.15087'. [ 1272.627012][T30357] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 1272.719119][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 1272.719138][ T29] audit: type=1326 audit(1763947798.311:90197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30353 comm="syz.3.15089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb42a3af749 code=0x7ffc0000 [ 1272.733541][T30355] netlink: 'syz.3.15089': attribute type 3 has an invalid length. [ 1272.765511][ T29] audit: type=1326 audit(1763947798.311:90198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30353 comm="syz.3.15089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb42a3af783 code=0x7ffc0000 [ 1272.789228][ T29] audit: type=1326 audit(1763947798.311:90199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30353 comm="syz.3.15089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb42a3ae1ff code=0x7ffc0000 [ 1272.812947][ T29] audit: type=1326 audit(1763947798.311:90200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30353 comm="syz.3.15089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fb42a3af7d7 code=0x7ffc0000 [ 1272.836640][ T29] audit: type=1326 audit(1763947798.311:90201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30353 comm="syz.3.15089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb42a3adf90 code=0x7ffc0000 [ 1272.860728][ T29] audit: type=1326 audit(1763947798.311:90202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30353 comm="syz.3.15089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb42a3ae3aa code=0x7ffc0000 [ 1272.884666][ T29] audit: type=1326 audit(1763947798.311:90203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30353 comm="syz.3.15089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb42a3af749 code=0x7ffc0000 [ 1272.908736][ T29] audit: type=1326 audit(1763947798.311:90204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30353 comm="syz.3.15089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb42a3af749 code=0x7ffc0000 [ 1272.932862][ T29] audit: type=1326 audit(1763947798.311:90205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30353 comm="syz.3.15089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb42a3af749 code=0x7ffc0000 [ 1272.940137][T30364] netlink: 'syz.5.15092': attribute type 1 has an invalid length. [ 1272.956662][ T29] audit: type=1326 audit(1763947798.311:90206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30353 comm="syz.3.15089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb42a3af749 code=0x7ffc0000 [ 1272.971336][T30364] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1273.014291][T30364] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15092'. [ 1273.098408][T30368] netlink: 'syz.7.15090': attribute type 13 has an invalid length. [ 1273.157809][T30370] loop7: detected capacity change from 0 to 512 [ 1273.164720][T30370] EXT4-fs: Ignoring removed nobh option [ 1273.180865][T30370] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #3: comm syz.7.15090: corrupted inode contents [ 1273.193763][T30370] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #3: comm syz.7.15090: mark_inode_dirty error [ 1273.206666][T30370] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #3: comm syz.7.15090: corrupted inode contents [ 1273.219273][T30370] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #3: comm syz.7.15090: mark_inode_dirty error [ 1273.231640][T30370] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.15090: Failed to acquire dquot type 0 [ 1273.244112][T30370] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.15090: corrupted inode contents [ 1273.256946][T30370] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #16: comm syz.7.15090: mark_inode_dirty error [ 1273.269339][T30370] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.15090: corrupted inode contents [ 1273.281984][T30370] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.15090: mark_inode_dirty error [ 1273.294244][T30370] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.15090: corrupted inode contents [ 1273.306935][T30370] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 1273.315995][T30370] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.15090: corrupted inode contents [ 1273.328386][T30370] EXT4-fs error (device loop7): ext4_truncate:4637: inode #16: comm syz.7.15090: mark_inode_dirty error [ 1273.340259][T30370] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 1273.349830][T30370] EXT4-fs (loop7): 1 truncate cleaned up [ 1273.356484][T30370] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1273.357437][T30364] bond2 (unregistering): Released all slaves [ 1273.369455][T30370] ext4 filesystem being mounted at /449/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1273.616478][T23309] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1273.643200][T30377] netlink: 'syz.3.15093': attribute type 13 has an invalid length. [ 1273.762237][T30379] netlink: 176 bytes leftover after parsing attributes in process `syz.7.15094'. [ 1273.878391][T30379] loop7: detected capacity change from 0 to 128 [ 1273.941799][T30379] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1274.028820][T30379] ext4 filesystem being mounted at /450/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1274.157574][T23309] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1274.538510][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1274.540159][ T3494] Bluetooth: hci0: command 0x1003 tx timeout [ 1275.080795][T30412] loop7: detected capacity change from 0 to 1024 [ 1275.081081][T30412] ext3: Unknown parameter 'obj_type' [ 1275.094296][T30412] blktrace: Concurrent blktraces are not allowed on loop14 [ 1275.094643][T30412] netlink: 28 bytes leftover after parsing attributes in process `syz.7.15103'. [ 1275.196583][T30416] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1275.206640][T30414] netlink: 176 bytes leftover after parsing attributes in process `syz.0.15104'. [ 1275.261101][T30419] netlink: 'syz.3.15106': attribute type 1 has an invalid length. [ 1275.362981][T30427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15106'. [ 1275.394176][T30419] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1275.402801][T30427] bond1 (unregistering): Released all slaves [ 1275.626808][T30435] netlink: 'syz.7.15109': attribute type 13 has an invalid length. [ 1276.254244][T30439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1276.262549][T30439] 8021q: adding VLAN 0 to HW filter on device team0 [ 1276.377932][T30439] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1276.523814][T30442] netlink: 'syz.0.15112': attribute type 1 has an invalid length. [ 1276.559375][T30442] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1276.728954][T30451] netlink: 'syz.7.15113': attribute type 13 has an invalid length. [ 1276.741412][T30451] loop7: detected capacity change from 0 to 512 [ 1276.748039][T30451] EXT4-fs: Ignoring removed nobh option [ 1276.770199][T30453] netlink: 660 bytes leftover after parsing attributes in process `syz.1.15115'. [ 1276.792221][T30448] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 1276.808916][T30442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15112'. [ 1276.839455][T30451] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #3: comm syz.7.15113: corrupted inode contents [ 1276.851757][T30451] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #3: comm syz.7.15113: mark_inode_dirty error [ 1276.864511][T30451] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #3: comm syz.7.15113: corrupted inode contents [ 1276.876894][T30451] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #3: comm syz.7.15113: mark_inode_dirty error [ 1276.889119][T30451] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.15113: Failed to acquire dquot type 0 [ 1276.903087][T30451] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.15113: corrupted inode contents [ 1276.915370][T30451] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #16: comm syz.7.15113: mark_inode_dirty error [ 1276.927324][T30451] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.15113: corrupted inode contents [ 1276.939777][T30451] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.15113: mark_inode_dirty error [ 1276.940442][T30442] bond2 (unregistering): Released all slaves [ 1276.957882][T30451] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.15113: corrupted inode contents [ 1276.970030][T30458] netlink: 'syz.3.15116': attribute type 1 has an invalid length. [ 1276.970071][T30451] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 1276.986707][T30451] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.15113: corrupted inode contents [ 1277.000133][T30451] EXT4-fs error (device loop7): ext4_truncate:4637: inode #16: comm syz.7.15113: mark_inode_dirty error [ 1277.004983][T30458] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1277.018227][T30451] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 1277.028038][T30451] EXT4-fs (loop7): 1 truncate cleaned up [ 1277.034702][T30451] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1277.047598][T30451] ext4 filesystem being mounted at /456/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1277.069924][T30458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15116'. [ 1277.111938][T30458] bond1 (unregistering): Released all slaves [ 1277.131437][T30464] blktrace: Concurrent blktraces are not allowed on loop10 [ 1277.145059][T30468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1277.154109][T30468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1277.257005][T23309] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1277.284643][T30477] loop7: detected capacity change from 0 to 1024 [ 1277.301072][T30477] ext3: Unknown parameter 'obj_type' [ 1277.354763][T30477] blktrace: Concurrent blktraces are not allowed on loop14 [ 1277.453895][T30486] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1277.506283][T30488] netlink: 'syz.3.15124': attribute type 13 has an invalid length. [ 1277.799458][T30491] block device autoloading is deprecated and will be removed. [ 1277.881905][T30491] __nla_validate_parse: 2 callbacks suppressed [ 1277.881922][T30491] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15126'. [ 1277.918708][T30494] netlink: 660 bytes leftover after parsing attributes in process `syz.1.15127'. [ 1277.933109][T30494] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 1278.176286][T30500] syzkaller0: entered promiscuous mode [ 1278.181880][T30500] syzkaller0: entered allmulticast mode [ 1278.216165][T30506] loop0: detected capacity change from 0 to 512 [ 1278.239685][ T29] kauditd_printk_skb: 217 callbacks suppressed [ 1278.239700][ T29] audit: type=1326 audit(1763947803.831:90420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30502 comm="syz.5.15130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0ff5f749 code=0x7ffc0000 [ 1278.283487][T30506] EXT4-fs: Ignoring removed nobh option [ 1278.301191][T30514] FAULT_INJECTION: forcing a failure. [ 1278.301191][T30514] name failslab, interval 1, probability 0, space 0, times 0 [ 1278.314087][T30514] CPU: 0 UID: 0 PID: 30514 Comm: syz.7.15132 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1278.314119][T30514] Tainted: [W]=WARN [ 1278.314125][T30514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1278.314136][T30514] Call Trace: [ 1278.314143][T30514] [ 1278.314150][T30514] __dump_stack+0x1d/0x30 [ 1278.314173][T30514] dump_stack_lvl+0xe8/0x140 [ 1278.314215][T30514] dump_stack+0x15/0x1b [ 1278.314231][T30514] should_fail_ex+0x265/0x280 [ 1278.314275][T30514] should_failslab+0x8c/0xb0 [ 1278.314301][T30514] kmem_cache_alloc_noprof+0x50/0x480 [ 1278.314326][T30514] ? sctp_get_port_local+0x438/0xae0 [ 1278.314402][T30514] sctp_get_port_local+0x438/0xae0 [ 1278.314428][T30514] sctp_do_bind+0x398/0x4b0 [ 1278.314451][T30514] sctp_connect_new_asoc+0x153/0x3a0 [ 1278.314483][T30514] sctp_sendmsg+0xf10/0x18d0 [ 1278.314563][T30514] ? selinux_socket_sendmsg+0x131/0x1b0 [ 1278.314650][T30514] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1278.314672][T30514] inet_sendmsg+0xc5/0xd0 [ 1278.314762][T30514] __sock_sendmsg+0x102/0x180 [ 1278.314785][T30514] ____sys_sendmsg+0x31e/0x4e0 [ 1278.314805][T30514] ___sys_sendmsg+0x17b/0x1d0 [ 1278.314831][T30514] __x64_sys_sendmsg+0xd4/0x160 [ 1278.314926][T30514] x64_sys_call+0x191e/0x3000 [ 1278.314947][T30514] do_syscall_64+0xd2/0x200 [ 1278.314967][T30514] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1278.314993][T30514] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1278.315089][T30514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1278.315148][T30514] RIP: 0033:0x7f366c40f749 [ 1278.315163][T30514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1278.315180][T30514] RSP: 002b:00007f366ae77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1278.315200][T30514] RAX: ffffffffffffffda RBX: 00007f366c665fa0 RCX: 00007f366c40f749 [ 1278.315212][T30514] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000005 [ 1278.315223][T30514] RBP: 00007f366ae77090 R08: 0000000000000000 R09: 0000000000000000 [ 1278.315234][T30514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1278.315246][T30514] R13: 00007f366c666038 R14: 00007f366c665fa0 R15: 00007ffe7f223908 [ 1278.315346][T30514] [ 1278.565221][ T29] audit: type=1326 audit(1763947803.831:90421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30502 comm="syz.5.15130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0ff5f749 code=0x7ffc0000 [ 1278.589150][ T29] audit: type=1326 audit(1763947803.831:90422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30502 comm="syz.5.15130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f6b0ff5f749 code=0x7ffc0000 [ 1278.613125][ T29] audit: type=1326 audit(1763947803.831:90423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30502 comm="syz.5.15130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0ff5f749 code=0x7ffc0000 [ 1278.637109][ T29] audit: type=1326 audit(1763947803.831:90424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30502 comm="syz.5.15130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0ff5f749 code=0x7ffc0000 [ 1278.661124][ T29] audit: type=1326 audit(1763947803.831:90425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30502 comm="syz.5.15130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b0ff5f749 code=0x7ffc0000 [ 1278.684910][ T29] audit: type=1326 audit(1763947803.831:90426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30502 comm="syz.5.15130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0ff5f749 code=0x7ffc0000 [ 1278.708780][ T29] audit: type=1326 audit(1763947803.831:90427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30502 comm="syz.5.15130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0ff5f749 code=0x7ffc0000 [ 1278.732804][ T29] audit: type=1326 audit(1763947803.831:90428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30502 comm="syz.5.15130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b0ff5f749 code=0x7ffc0000 [ 1278.756486][ T29] audit: type=1326 audit(1763947803.831:90429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30502 comm="syz.5.15130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0ff5f749 code=0x7ffc0000 [ 1278.888156][T30506] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.15128: corrupted inode contents [ 1278.901308][T30506] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #3: comm syz.0.15128: mark_inode_dirty error [ 1278.996755][T30527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1279.004907][T30527] 8021q: adding VLAN 0 to HW filter on device team0 [ 1279.015165][T30527] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1279.093630][T30528] netlink: 'syz.5.15136': attribute type 1 has an invalid length. [ 1279.180088][T30506] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.15128: corrupted inode contents [ 1279.198321][T30531] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15136'. [ 1279.247340][T30530] loop7: detected capacity change from 0 to 2048 [ 1279.254978][T30506] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.15128: mark_inode_dirty error [ 1279.369336][T30506] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.15128: Failed to acquire dquot type 0 [ 1279.382317][T30506] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.15128: corrupted inode contents [ 1279.391720][T30528] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1279.395280][T30506] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #16: comm syz.0.15128: mark_inode_dirty error [ 1279.409948][T30530] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1279.428786][T30531] bond2 (unregistering): Released all slaves [ 1279.435462][T30530] ext4 filesystem being mounted at /460/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1279.525643][T30506] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.15128: corrupted inode contents [ 1279.555507][T30544] netlink: 'syz.3.15139': attribute type 1 has an invalid length. [ 1279.588699][T30530] ================================================================== [ 1279.596842][T30530] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 1279.604159][T30530] [ 1279.606519][T30530] read-write to 0xffff88811a6e96b0 of 8 bytes by task 30525 on cpu 1: [ 1279.609281][T30544] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1279.614698][T30530] __xa_set_mark+0xd2/0x1a0 [ 1279.625914][T30530] __folio_mark_dirty+0x384/0x4a0 [ 1279.631048][T30530] mark_buffer_dirty+0x11e/0x210 [ 1279.636017][T30530] folio_zero_new_buffers+0x28c/0x2e0 [ 1279.641420][T30530] block_write_end+0x200/0x210 [ 1279.646231][T30530] ext4_da_write_end+0x1d3/0x800 [ 1279.651204][T30530] generic_perform_write+0x312/0x490 [ 1279.656502][T30530] ext4_buffered_write_iter+0x1ee/0x3c0 [ 1279.662159][T30530] ext4_file_write_iter+0x387/0xf60 [ 1279.667385][T30530] vfs_write+0x52a/0x960 [ 1279.671659][T30530] ksys_write+0xda/0x1a0 [ 1279.675957][T30530] __x64_sys_write+0x40/0x50 [ 1279.680779][T30530] x64_sys_call+0x2802/0x3000 [ 1279.685573][T30530] do_syscall_64+0xd2/0x200 [ 1279.690098][T30530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.696113][T30530] [ 1279.698458][T30530] read to 0xffff88811a6e96b0 of 8 bytes by task 30530 on cpu 0: [ 1279.706115][T30530] xas_find_marked+0x218/0x620 [ 1279.710906][T30530] find_get_entry+0x5d/0x380 [ 1279.715616][T30530] filemap_get_folios_tag+0x13b/0x210 [ 1279.721385][T30530] mpage_prepare_extent_to_map+0x320/0xc00 [ 1279.727419][T30530] ext4_do_writepages+0xa05/0x2750 [ 1279.732575][T30530] ext4_writepages+0x176/0x300 [ 1279.737899][T30530] do_writepages+0x1c6/0x310 [ 1279.742579][T30530] __filemap_fdatawrite_range+0xfb/0x140 [ 1279.748246][T30530] generic_fadvise+0x312/0x430 [ 1279.753039][T30530] __x64_sys_fadvise64+0xcb/0x110 [ 1279.758090][T30530] x64_sys_call+0x29c5/0x3000 [ 1279.762776][T30530] do_syscall_64+0xd2/0x200 [ 1279.767286][T30530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.773184][T30530] [ 1279.775593][T30530] value changed: 0x000000000fffffff -> 0x000000003fffffff [ 1279.782782][T30530] [ 1279.785152][T30530] Reported by Kernel Concurrency Sanitizer on: [ 1279.791313][T30530] CPU: 0 UID: 0 PID: 30530 Comm: syz.7.15135 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1279.802959][T30530] Tainted: [W]=WARN [ 1279.806768][T30530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1279.817005][T30530] ================================================================== [ 1279.826695][T30506] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.15128: mark_inode_dirty error [ 1279.842288][T30544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15139'. [ 1279.844054][T30530] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.15135: bg 0: block 345: padding at end of block bitmap is not set [ 1279.867354][T30506] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.15128: corrupted inode contents [ 1279.868079][T30544] bond1 (unregistering): Released all slaves [ 1279.886575][T30530] EXT4-fs (loop7): Remounting filesystem read-only [ 1279.894445][T30506] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 1279.924983][T30506] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.15128: corrupted inode contents [ 1279.938371][T30506] EXT4-fs error (device loop0): ext4_truncate:4637: inode #16: comm syz.0.15128: mark_inode_dirty error [ 1279.968888][T30506] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 1279.987876][T30506] EXT4-fs (loop0): 1 truncate cleaned up [ 1279.995364][T30506] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1280.008088][T30506] ext4 filesystem being mounted at /299/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1280.031140][T23309] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1280.174167][T25358] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.