last executing test programs: 6m43.963016175s ago: executing program 32 (id=1843): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000090085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000f8dbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 5m59.081777746s ago: executing program 33 (id=2069): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 55.818409919s ago: executing program 34 (id=5122): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c25000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) write$cgroup_subtree(r0, 0x0, 0x66) 46.442896625s ago: executing program 35 (id=5236): socket(0x11, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000180)=@generic={0x1, 0x1}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'gre0\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000340), &(0x7f0000000300)=r2}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[], 0x0, 0x52}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x18) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x1e, 0x4, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0xfdef) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0x1, 0x550, &(0x7f0000001780)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a0101000000000000000001000000090003001e007a3200000000080007006e6174000900010073797a310000000014000480080002407c40280f080001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCGPGRP(r7, 0x5437, 0x0) 43.933831832s ago: executing program 36 (id=5271): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00002, &(0x7f0000000d80)={[{@usrjquota}, {@jqfmt_vfsold}, {@nombcache}, {@noload}, {@usrjquota}, {@dioread_nolock}, {@oldalloc}, {@nouid32}, {@journal_path={'journal_path', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}, {@data_writeback}]}, 0x1, 0x49c, &(0x7f0000002400)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_io_uring_setup(0x496, &(0x7f0000000540)={0x0, 0x4660, 0x80, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3b, 0x0, @fd, 0x0, 0x0}) io_uring_enter(r2, 0x3498, 0x969, 0x0, 0x0, 0x0) r5 = dup3(r2, r1, 0x80000) sendmsg$kcm(r0, 0x0, 0x400c0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) r7 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r8) sendmsg$NFC_CMD_DEP_LINK_UP(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040045}, 0x40) r10 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r10, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r7}) keyctl$KEYCTL_MOVE(0x1e, r7, 0xffffffffffffffff, r10, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0xc, 0x288}, &(0x7f0000000100), 0x0) open_tree(r5, &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1802) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r11, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r11, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) 42.584885546s ago: executing program 37 (id=5286): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000009000000030000000000009304000000020000000000000801000000005f5f5f"], &(0x7f0000000540)=""/200, 0x39, 0xc8, 0x1}, 0x28) 36.794747307s ago: executing program 38 (id=5323): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440), 0x0, 0xdc, &(0x7f0000000500)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000004c0), &(0x7f0000000bc0), 0x8, 0x26, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setreuid(0xee01, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2c7766060000ca", @ANYRESHEX=r4, @ANYBLOB="2c756e616d653dd0aedec1aa20ffd81d1bf89329217cb058a396eda2ab40a26d93dd083c0074dcab6cab21ae16c4cdf97bdc355f3b41d27b654301345cb3c4cec37953322d01beaa7257964fd30fe2d72f171da72e389f382dea3c8d91906aead5d5aeccc097ef1092ea987c2b00000000000000002c00"]) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r1, r3}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x62c42) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f00000000c0)=ANY=[]) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r9, {0xfffd, 0x10}, {0x8, 0xffec}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000680)="$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") r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r10, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 36.303999186s ago: executing program 39 (id=5325): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = gettid() signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) rt_sigqueueinfo(r0, 0x21, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x6}, 0x18) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)="359cb6", 0x3}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/38, @ANYRES32=0x0], 0x30}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3", 0x5}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000080)=[{0x1, 0x4, {0x1, 0x1, 0x3}, {0x2}, 0x1, 0xfd}, {0x3, 0xfffffffffffffffe, {0x1, 0xc0c9ddbf6257ccce, 0x2}, {0x2, 0x1, 0x1}, 0x2, 0xfd}], 0x40) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x404c083}, 0x20000050) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)={[{@jqfmt_vfsold}, {@noblock_validity}, {@bh}, {@errors_remount}, {@grpquota}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000300)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=") 35.208386364s ago: executing program 40 (id=5340): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000008c0)={0x1, &(0x7f00000002c0)=[{0x2, 0x0, 0x0, 0x7ffc9feb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000000)=ANY=[], 0x3, 0x7e4, &(0x7f0000001f80)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001300)={r1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000013c0)={{r4, 0xffffffffffffffff}, &(0x7f0000001340), &(0x7f0000001380)='%ps \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="180000000800000000000000030000008520000005000900000000000000060000001853000009000000000000000000000018460000f9ffffff0000000000000000022afdff0300000085000000550000008d430001000000009500000000000000"], &(0x7f0000001080)='GPL\x00', 0x5, 0x98, &(0x7f00000010c0)=""/152, 0x41000, 0x44, '\x00', 0x0, 0x1b, r4, 0x8, &(0x7f0000001200)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001240)={0x0, 0x6, 0x8537, 0xfffffffa}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001400)=[r5, r5, r5, 0xffffffffffffffff, r6, r1, r5, r7], 0x0, 0x10, 0x9cf5}, 0x94) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x3]}, 0x8) r9 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/self/attr/current\x00', 0x64, 0x0) pread64(r9, &(0x7f0000000000)=""/4096, 0x1000, 0x4) 29.652870482s ago: executing program 7 (id=5348): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) setrlimit(0xb, &(0x7f0000000000)={0x0, 0x41f}) io_setup(0x2004, &(0x7f0000000680)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r2, 0x5608) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xa, &(0x7f0000000640)=ANY=[@ANYBLOB="180000001811000056c444c6323fb105291ffd1ea4eb289bf7bcbd702bc7cfba3f185c7d27e81759bd026b41cdaa281b7321de3b594b5b3234453b906f84520b3a3d8323b20392726eaa71bd8a11ae85b2851dad19695f3c3fb514938a51bb92c05187cbf29de38c5bca1560717c35709d7a48b4f91731ffb7e713dee70af1541b99db89443506bbb50ac5a516ec73d36a8ce860a1c9e4a77ba1777edfc5cc0fc26777", @ANYBLOB="ea741bab3422ad08f701a16651923aa1cb321cf6d3c7470ee3106fbf69a50bf10724481ff0e6245e48e81dede4c2eaa40cf62a781da89a9902b05e2b42d013c89dd8002faf2c39a70b5e092dcfbeecbfd8699b787a7336631afecefaf5c15523c546eeea5f69b3e45f19b5fb5bb4df77e19e0ce0bf06ef24bc89822f45062782b7e98201787dcc064133a83ad4242afa1d13837e09bd0548f179c955c60cc676ceee602a24115e98c0c9d0655bd71c0c9236bf130509e2097e6b1f9928b6308d282197ed", @ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xb8b}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x21, 0xfffffff2, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) alarm(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES64=r4, @ANYRES16=r3], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000000000000000000000000000009dd58a206e18a2b88c8c1b33000094e1048daac476fa0c4dcc08a475ecf55d99a15b56a38d022fd1f4400d64ecbe25031d3de4fad02c6bfccad61e3cc869349126f1d26a59b349f06e6777613a9419bd82157575464dcc96ae1a856973f8", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRES8=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0xfffffffffffffdda, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x7}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x2a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 29.47821594s ago: executing program 7 (id=5382): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000008c0)={0x1, &(0x7f00000002c0)=[{0x2, 0x0, 0x0, 0x7ffc9feb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000000)=ANY=[], 0x3, 0x7e4, &(0x7f0000001f80)="$eJzs3U2IG/fZAPBn1rv+2IAJeV/8BuM4YycvOOBstNpk8y4+JIp2dj2JVlok7YtNKWmI12HJOglJQxtfElNI2tJSempvaa659dZSaKGFpqdCc+ilt0BOJYV+kVAKW2YkrbXr/XD8mY/fT1j/0eiZ+T8zkufRaKW/AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIpD5bqUwm0cibS2fS7dVn262FHe4frO9XG5oNHt/Qb0RS/Iv9++Pjv/fm/ffluw8VV8fjSO/WkdhfNPvj4h2H7jz1X6Mjg+V3SOhaHbvKuCTix/1kV5df3nzvvhuf2E303V986kU+WSuu57Nm3ol8oTafpXmnlc5MT1ceOj3XSefyRtY52+lmC2m9ndW6rXZ6ov5AOjkzM5VmE2dbS8352VojG8x89MFqpTKdPjmxmNXanVbzoSejUz+dNxp5c76MqVa+EUXMo8UT8am8m3az2kKanl9ZXZ7aLdUiaHLjrD1x+To9cv+dH776wd9Wlosn5HYrSfqPdXVyslqdnH5k5pFHK5XRaqW6YcaeiKgMi/WIGIkoFrkpT1o+R27g0Ruuz0i//kcj8mjGUpyJdIvLWNRjNtrRioXi9h/HrojoG9T//33oL7/fqd/h+j+o8ndfvvtwlPX/aO/W0e3q/5a53srLK/FaXIzn45lYjdVYjpdve0a7XEaudw3JhlvzkUUz8uhEK/JYiFo5J+3PSWMmpmM6KvF0nI656EQac5FHI7LoxNnoRDey8hlVj3ZkUYtutKIdaZyIejwQaUzGTMzEVKSRxUScjVYsRTPmYzZq5VrOx0q536c2ZXnoQPz8uT98+HYxvR40udNmvVG8kIvl+OsOQZvL/RX1f3S49q+tFa8XNkeo/192N+EoDtdmbVD/AQAAgC+spHz3vTj/H4t7yqm5vJF9ZcdFPlkr3bokAQAAgOtS/uX/SNGMFVP3RFKc/1e2iHz/lucGAAAA3BhJ+R27JCLG497e1PlYiTdiObZ6EwAAAAD4HCr//n+0aMYjXi9nDIZLcf4PAAAAXxDf3m6M/Q8GY+x2FvclvxyLiLHk0uKZ+5MLtSKudmFPb7l+8//ra+zOHU4O9ldSNtOjF+9IImK0nh1JBqNf/ntfr/2ovD48ur74dmP9J+32jgnEzgmUt+J7cawXc+xc2dzRX2Q06fUyPpc3sol6q3GqHBKx+Nd99YWVb0YUvX+nuXAwifMrq8sTz764eq7M5VKx+KUL/QEUrxhHcYdc1vp7IO7ZeovHyi9i9Psd7/VbGd7+kd7iIzv3mQz3+WYc78UcH++144N7en3uL/qcnDg1GbXawZFudqb76trQ1vezmFzf8rFr2vI3475ezH0n7us1W2RR3ZDFC1dmUR3e/1e3LwbPsl2zePvY62f++dtWkk3tlsXUVlmMbp3F2p6IzfsC4HY5X476c7kKHSir0L/W+kP8JEn06m5RrGq9gL5djrXFUe4fl3tZf5VxYKw3NVTrRmNzdb98BL266r4WvSN634ne64nRw1vUlcoWR/SXVl56r39Ef/jdH/3kq0d/99Oy32uqbu/GA72YfhN3/XpTFqfeW9pbZFFs8/c3VdV3iiXe2bbfTqOaxKWIPV+/8FIceuW1iw+uXHjmueXnll+oVqemKw9XKo9U9256gLbNFIAvr91/Y2fbiEGdSR7edFYd5zbW3bvWP1IwEc/Gi7Ea5+Jk+W2DiLh3637Hhz6GcHKXs9bxoV94ObnLueXl2OqVsUlsEzs1tMf+54dl8/FNeTgA4JY4vkUd/k3/h213qf/r78yfjBO9iG3OuzfW8k1nx7F9Ld/K/928XQEAXxpZ+6NkvPtW0m7ni09PzsxM1rqns7Tdqj+VtvPZ+Szd2+xm7frpWnM+SxeLU/764I3j2ayTdpYWF1vtbjrXaqcx0snPlL/8nnb292MWas1uXu8sNrJaJ0vrrWa3Vu+ms3mnni4uPdHIO6ezdrlwZzGr53N5vdbNW82001pq17OJNO1k2VBgPps1u/lcXkw208V2vlBrX4qIxtJCls5mnXo7X+y2eisc9JU351rthXK1E1du/p9v5b4GgM+KV167+Pwzq6vLL1/bxJ+uJvh2byMAsJEqDQAAAAAAAAAAAAAAn33rn/+/czBRzL2ObwR+uol9cXXBY3Edfa31h9G9+ZvzmZq4YpP7Iy/H7U7sVk587bHHnh+ac2A45onX7z59deuJq/2mbLx1MGLvz37Qm/P49sHfuqGPxfsR1/IfZC3ZIWbDYWLvLTwkAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC2/hMAAP//oXlTQQ==") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001300)={r1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000013c0)={{r4, 0xffffffffffffffff}, &(0x7f0000001340), &(0x7f0000001380)='%ps \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="180000000800000000000000030000008520000005000900000000000000060000001853000009000000000000000000000018460000f9ffffff0000000000000000022afdff0300000085000000550000008d430001000000009500000000000000"], &(0x7f0000001080)='GPL\x00', 0x5, 0x98, &(0x7f00000010c0)=""/152, 0x41000, 0x44, '\x00', 0x0, 0x1b, r4, 0x8, &(0x7f0000001200)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001240)={0x0, 0x6, 0x8537, 0xfffffffa}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001400)=[r5, r5, r5, 0xffffffffffffffff, r6, r1, r5, r7], 0x0, 0x10, 0x9cf5}, 0x94) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) faccessat2(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x2, 0x1100) r9 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/self/attr/current\x00', 0x64, 0x0) pread64(r9, &(0x7f0000000000)=""/4096, 0x1000, 0x4) 29.349033963s ago: executing program 7 (id=5383): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000000080)=0x1a43) shutdown(r6, 0x2) r7 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r8 = socket(0x18, 0x5, 0x0) connect$pppoe(r8, &(0x7f0000000100)={0x18, 0x0, {0x2, @multicast, 'vcan0\x00'}}, 0x1e) sendfile(r8, r7, 0x0, 0x8) (fail_nth: 1) 28.418703634s ago: executing program 7 (id=5387): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x2, 0x2}, {0x2, 0x9}]}]}, {0x0, [0x2e, 0x2e]}}, &(0x7f0000000f40)=""/4089, 0x38, 0xff9, 0x8, 0xfffffffa}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x2, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000200)=""/179, 0xb3) r3 = accept4$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000580)=0xffffffffffffff30, 0x80000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000240)={r5, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x10) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x4}, 0x18) ioctl$sock_netdev_private(r3, 0x89f3, &(0x7f0000000340)="64d25d17b9476307e8a098d123af772de72e72ecfd33640d1ca6661e323695d13841cdeea30d6a43b5d92f461e8092beb15280dfa9f3bde6453f8f8201f68bd70d6a2202129dc7aae41f3eafe7ac8fd60113e30d465b88115d39") syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x20, r8, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x24040014) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010026bd70000000000021040000180001801400020064756d6d7930"], 0x2c}}, 0x880) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x98, r10, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x54, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioprio_set$pid(0x3, 0x0, 0x4007) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x6, 0x5fe, &(0x7f0000000600)="$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") 28.381414398s ago: executing program 41 (id=5387): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x2, 0x2}, {0x2, 0x9}]}]}, {0x0, [0x2e, 0x2e]}}, &(0x7f0000000f40)=""/4089, 0x38, 0xff9, 0x8, 0xfffffffa}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x2, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000200)=""/179, 0xb3) r3 = accept4$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000580)=0xffffffffffffff30, 0x80000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000240)={r5, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x10) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x4}, 0x18) ioctl$sock_netdev_private(r3, 0x89f3, &(0x7f0000000340)="64d25d17b9476307e8a098d123af772de72e72ecfd33640d1ca6661e323695d13841cdeea30d6a43b5d92f461e8092beb15280dfa9f3bde6453f8f8201f68bd70d6a2202129dc7aae41f3eafe7ac8fd60113e30d465b88115d39") syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x20, r8, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x24040014) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010026bd70000000000021040000180001801400020064756d6d7930"], 0x2c}}, 0x880) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x98, r10, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x54, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioprio_set$pid(0x3, 0x0, 0x4007) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x6, 0x5fe, &(0x7f0000000600)="$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") 25.433618779s ago: executing program 8 (id=5411): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)=0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x3, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x108200, 0x0, 0x0, 0x8, 0x800, 0xfffffffc, 0x0, 0x0, 0x6, 0x0, 0x7}, r1, 0x800a, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x8}, 0x18) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x3, 0xd, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x7ffffffe}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x68}, 0x1, 0x7}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000f8dbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x300) 24.704181761s ago: executing program 8 (id=5416): syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00U\a', 0x44, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0xc001, r0, 0x41424344, 0x0, 0x0, 0x11, 0x2, 0x0, 0x0, 0x0, {[@nop, @sack={0x5, 0xe, [0x80, 0x2, 0xff]}, @nop, @nop, @generic={0x0, 0x12, "f5640e63652aa12a873a29dc1dfc9000"}, @timestamp={0x8, 0xa, 0x7, 0x2}, @nop]}}}}}}}}, 0x0) 24.703920081s ago: executing program 42 (id=5416): syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00U\a', 0x44, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0xc001, r0, 0x41424344, 0x0, 0x0, 0x11, 0x2, 0x0, 0x0, 0x0, {[@nop, @sack={0x5, 0xe, [0x80, 0x2, 0xff]}, @nop, @nop, @generic={0x0, 0x12, "f5640e63652aa12a873a29dc1dfc9000"}, @timestamp={0x8, 0xa, 0x7, 0x2}, @nop]}}}}}}}}, 0x0) 21.27547416s ago: executing program 4 (id=5445): timer_create(0x2, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x24, &(0x7f00000002c0)={&(0x7f0000000c80)=ANY=[@ANYRES8], 0x94}}, 0x0) r6 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x400017e) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x30, r7, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x1, 0x5, 0xfffffff8, 0x3}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4801}, 0xc000) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRESOCT, @ANYRES64, @ANYRES8=r6], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10, 0x0, 0x7fff}, 0x18) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001640)=@generic={&(0x7f0000001ac0)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r8}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r11, 0x0, 0xffffffffffffffff}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) 21.0666506s ago: executing program 4 (id=5448): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff004) 20.742120252s ago: executing program 4 (id=5451): r0 = socket(0x1e, 0x4, 0x0) r1 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r1, &(0x7f0000000c40)={0x22, 0x5e, 0xc, 0x91, 0x6}, 0x6) r2 = socket(0x1e, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x2c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb8}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000540)={0x4, &(0x7f0000000200)=[{0x7, 0x92, 0x5, 0x10000}, {0x1, 0x0, 0x72, 0x2}, {0x8, 0x8, 0x5, 0x8}, {0x7ff, 0x8, 0xff, 0xbf4}]}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r4, 0x0, 0x100000000}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa85, 0xf) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x8}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) io_setup(0x3, &(0x7f0000000100)=0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000970000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r6}, 0x10) io_destroy(r5) r7 = dup3(r2, r0, 0x0) syz_clone3(0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xa2, 0x0, &(0x7f0000000340)="9991db0801a848f724a08d3bcd82b96502fc9e5d2a6c32d580ee8d535ce910f4c6f840e41c724840ab0355919af671fdf04d97a3e18774e07a389b466fcf5a35684158dbe620035025577c9bc44ec57d19c2a45fa98997cdacf236207925aabe2d705c75c2c74992d0acd4643e0e93350385abc02c36a150885ce6823887f6b659ff5465d1604665edd01fbf9c237538bdd2c58ecfd1acb80792d502e4aa60265e84"}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000400f9ff00fff5000000000000000000000000000100000000120002000a00060000000000000000000000000000000000000000bb000000000d0001007564703a73"], 0x6c}}, 0x0) recvmmsg(r7, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}, 0x96d}], 0x1, 0x40, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x22c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0xdd, 0xa, 0x2}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xd, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r11}, 0x10) 19.85356744s ago: executing program 4 (id=5454): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000008c0)={0x1, &(0x7f00000002c0)=[{0x2, 0x0, 0x0, 0x7ffc9feb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000000)=ANY=[], 0x3, 0x7e4, &(0x7f0000001f80)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001300)={r1}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000013c0)={{r4}, &(0x7f0000001340), &(0x7f0000001380)='%ps \x00'}, 0x20) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r7 = signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x3]}, 0x8) faccessat2(r7, &(0x7f0000000000)='\x00', 0x2, 0x1100) r8 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/self/attr/current\x00', 0x64, 0x0) pread64(r8, &(0x7f0000000000)=""/4096, 0x1000, 0x4) 19.760807309s ago: executing program 4 (id=5455): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/self/attr/current\x00', 0x64, 0x0) pread64(r0, &(0x7f0000000000)=""/4096, 0x1000, 0x4) 19.178467926s ago: executing program 4 (id=5465): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, 0x0, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0xbe, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x6, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, 0x0, 0x0) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0xb, 0x80001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}, 0x76e0}) sendmmsg(r0, &(0x7f0000007cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="6a322b7b869721093e38001b55159ba425", 0x11}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0xf5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'vxcan1\x00', @remote}) 19.14707399s ago: executing program 43 (id=5465): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, 0x0, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0xbe, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x6, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, 0x0, 0x0) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0xb, 0x80001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}, 0x76e0}) sendmmsg(r0, &(0x7f0000007cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="6a322b7b869721093e38001b55159ba425", 0x11}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0xf5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'vxcan1\x00', @remote}) 15.713016889s ago: executing program 2 (id=5510): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 15.580719252s ago: executing program 2 (id=5512): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x3]}, 0x8) faccessat2(r0, &(0x7f0000000000)='\x00', 0x2, 0x1100) 15.534911266s ago: executing program 2 (id=5514): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x0, @rand_addr=0x64010105}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="180000000000000084000000000000004805dc000000090020000000000000008400000008"], 0x38}, 0x0) 15.458577134s ago: executing program 2 (id=5515): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000008c0)={0x1, &(0x7f00000002c0)=[{0x2, 0x0, 0x0, 0x7ffc9feb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000000)=ANY=[], 0x3, 0x7e4, &(0x7f0000001f80)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001300)={r1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000013c0)={{r4, 0xffffffffffffffff}, &(0x7f0000001340), &(0x7f0000001380)='%ps \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="180000000800000000000000030000008520000005000900000000000000060000001853000009000000000000000000000018460000f9ffffff0000000000000000022afdff0300000085000000550000008d430001000000009500000000000000"], &(0x7f0000001080)='GPL\x00', 0x5, 0x98, &(0x7f00000010c0)=""/152, 0x41000, 0x44, '\x00', 0x0, 0x1b, r4, 0x8, &(0x7f0000001200)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001240)={0x0, 0x6, 0x8537, 0xfffffffa}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001400)=[r5, r5, r5, 0xffffffffffffffff, r6, r1, r5, r7], 0x0, 0x10, 0x9cf5}, 0x94) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x3]}, 0x8) r8 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/self/attr/current\x00', 0x64, 0x0) pread64(r8, &(0x7f0000000000)=""/4096, 0x1000, 0x4) 15.256346824s ago: executing program 2 (id=5518): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000580)={0x18, 0x1, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24001800}, 0x804) 15.212756758s ago: executing program 5 (id=5520): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtaction={0x74, 0x30, 0xb, 0xfffffffd, 0x25dfdbfc, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xe3, 0x6, 0xffffffffeffffffd, 0x8, 0x5}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x62c}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0xd37cbcf91b5e3511}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) (async) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file2\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x100}, 0x0) (async) openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val={'init_itable', 0x3d, 0x7ff}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x66}}, {@user_xattr}, {@nolazytime}, {@quota}]}, 0x3, 0x43d, &(0x7f0000002200)="$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") r3 = open(&(0x7f0000000000)='./file2\x00', 0x147842, 0x1ef) pwritev2(r3, &(0x7f0000000340)=[{&(0x7f00000002c0)="b0", 0x1}], 0x1, 0x3, 0xfff, 0x1d) (async) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) 15.033481226s ago: executing program 5 (id=5521): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r3, 0x2) dup3(r3, r2, 0x0) 14.922819497s ago: executing program 5 (id=5522): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r3, 0x2) dup3(r3, r2, 0x0) 14.88783667s ago: executing program 2 (id=5524): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x0, @rand_addr=0x64010105}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="180000000000000084000000000000004805dc000000090020000000000000008400000008"], 0x38}, 0x0) 14.849534554s ago: executing program 44 (id=5524): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x0, @rand_addr=0x64010105}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="180000000000000084000000000000004805dc000000090020000000000000008400000008"], 0x38}, 0x0) 14.837609825s ago: executing program 5 (id=5527): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000008c0)={0x1, &(0x7f00000002c0)=[{0x2, 0x0, 0x0, 0x7ffc9feb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000000)=ANY=[], 0x3, 0x7e4, &(0x7f0000001f80)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001300)={r1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000013c0)={{r4, 0xffffffffffffffff}, &(0x7f0000001340), &(0x7f0000001380)='%ps \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="180000000800000000000000030000008520000005000900000000000000060000001853000009000000000000000000000018460000f9ffffff0000000000000000022afdff0300000085000000550000008d430001000000009500000000000000"], &(0x7f0000001080)='GPL\x00', 0x5, 0x98, &(0x7f00000010c0)=""/152, 0x41000, 0x44, '\x00', 0x0, 0x1b, r4, 0x8, &(0x7f0000001200)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001240)={0x0, 0x6, 0x8537, 0xfffffffa}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001400)=[r5, r5, r5, 0xffffffffffffffff, r6, r1, r5, r7], 0x0, 0x10, 0x9cf5}, 0x94) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r8 = signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x3]}, 0x8) faccessat2(r8, &(0x7f0000000000)='\x00', 0x2, 0x1100) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/self/attr/current\x00', 0x64, 0x0) 14.669372942s ago: executing program 5 (id=5529): r0 = socket(0x1e, 0x4, 0x0) r1 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r1, &(0x7f0000000c40)={0x22, 0x5e, 0xc, 0x91, 0x6}, 0x6) r2 = socket(0x1e, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x2c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb8}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000540)={0x4, &(0x7f0000000200)=[{0x7, 0x92, 0x5, 0x10000}, {0x1, 0x0, 0x72, 0x2}, {0x8, 0x8, 0x5, 0x8}, {0x7ff, 0x8, 0xff, 0xbf4}]}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r4, 0x0, 0x100000000}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa85, 0xf) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x8}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) io_setup(0x3, &(0x7f0000000100)=0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000970000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r6}, 0x10) io_destroy(r5) r7 = dup3(r2, r0, 0x0) syz_clone3(0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xa2, 0x0, &(0x7f0000000340)="9991db0801a848f724a08d3bcd82b96502fc9e5d2a6c32d580ee8d535ce910f4c6f840e41c724840ab0355919af671fdf04d97a3e18774e07a389b466fcf5a35684158dbe620035025577c9bc44ec57d19c2a45fa98997cdacf236207925aabe2d705c75c2c74992d0acd4643e0e93350385abc02c36a150885ce6823887f6b659ff5465d1604665edd01fbf9c237538bdd2c58ecfd1acb80792d502e4aa60265e84"}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000400f9ff00fff5000000000000000000000000000100000000120002000a00060000000000000000000000000000000000000000bb000000000d0001007564703a73"], 0x6c}}, 0x0) recvmmsg(r7, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/34, 0x22}], 0x1}, 0x96d}], 0x1, 0x40, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x22c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xd, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r11}, 0x10) 13.46945173s ago: executing program 5 (id=5538): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000008c0)={0x1, &(0x7f00000002c0)=[{0x2, 0x0, 0x0, 0x7ffc9feb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000000)=ANY=[], 0x3, 0x7e4, &(0x7f0000001f80)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001300)={r1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000013c0)={{r4, 0xffffffffffffffff}, &(0x7f0000001340), &(0x7f0000001380)='%ps \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="180000000800000000000000030000008520000005000900000000000000060000001853000009000000000000000000000018460000f9ffffff0000000000000000022afdff0300000085000000550000008d430001000000009500000000000000"], &(0x7f0000001080)='GPL\x00', 0x5, 0x98, &(0x7f00000010c0)=""/152, 0x41000, 0x44, '\x00', 0x0, 0x1b, r4, 0x8, &(0x7f0000001200)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001240)={0x0, 0x6, 0x8537, 0xfffffffa}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001400)=[r5, r5, r5, 0xffffffffffffffff, r6, r1, r5, r7], 0x0, 0x10, 0x9cf5}, 0x94) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r8 = signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x3]}, 0x8) faccessat2(r8, &(0x7f0000000000)='\x00', 0x2, 0x1100) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/self/attr/current\x00', 0x64, 0x0) 13.437770493s ago: executing program 45 (id=5538): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000008c0)={0x1, &(0x7f00000002c0)=[{0x2, 0x0, 0x0, 0x7ffc9feb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000000)=ANY=[], 0x3, 0x7e4, &(0x7f0000001f80)="$eJzs3U2IG/fZAPBn1rv+2IAJeV/8BuM4YycvOOBstNpk8y4+JIp2dj2JVlok7YtNKWmI12HJOglJQxtfElNI2tJSempvaa659dZSaKGFpqdCc+ilt0BOJYV+kVAKW2YkrbXr/XD8mY/fT1j/0eiZ+T8zkufRaKW/AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIpD5bqUwm0cibS2fS7dVn262FHe4frO9XG5oNHt/Qb0RS/Iv9++Pjv/fm/ffluw8VV8fjSO/WkdhfNPvj4h2H7jz1X6Mjg+V3SOhaHbvKuCTix/1kV5df3nzvvhuf2E303V986kU+WSuu57Nm3ol8oTafpXmnlc5MT1ceOj3XSefyRtY52+lmC2m9ndW6rXZ6ov5AOjkzM5VmE2dbS8352VojG8x89MFqpTKdPjmxmNXanVbzoSejUz+dNxp5c76MqVa+EUXMo8UT8am8m3az2kKanl9ZXZ7aLdUiaHLjrD1x+To9cv+dH776wd9Wlosn5HYrSfqPdXVyslqdnH5k5pFHK5XRaqW6YcaeiKgMi/WIGIkoFrkpT1o+R27g0Ruuz0i//kcj8mjGUpyJdIvLWNRjNtrRioXi9h/HrojoG9T//33oL7/fqd/h+j+o8ndfvvtwlPX/aO/W0e3q/5a53srLK/FaXIzn45lYjdVYjpdve0a7XEaudw3JhlvzkUUz8uhEK/JYiFo5J+3PSWMmpmM6KvF0nI656EQac5FHI7LoxNnoRDey8hlVj3ZkUYtutKIdaZyIejwQaUzGTMzEVKSRxUScjVYsRTPmYzZq5VrOx0q536c2ZXnoQPz8uT98+HYxvR40udNmvVG8kIvl+OsOQZvL/RX1f3S49q+tFa8XNkeo/192N+EoDtdmbVD/AQAAgC+spHz3vTj/H4t7yqm5vJF9ZcdFPlkr3bokAQAAgOtS/uX/SNGMFVP3RFKc/1e2iHz/lucGAAAA3BhJ+R27JCLG497e1PlYiTdiObZ6EwAAAAD4HCr//n+0aMYjXi9nDIZLcf4PAAAAXxDf3m6M/Q8GY+x2FvclvxyLiLHk0uKZ+5MLtSKudmFPb7l+8//ra+zOHU4O9ldSNtOjF+9IImK0nh1JBqNf/ntfr/2ovD48ur74dmP9J+32jgnEzgmUt+J7cawXc+xc2dzRX2Q06fUyPpc3sol6q3GqHBKx+Nd99YWVb0YUvX+nuXAwifMrq8sTz764eq7M5VKx+KUL/QEUrxhHcYdc1vp7IO7ZeovHyi9i9Psd7/VbGd7+kd7iIzv3mQz3+WYc78UcH++144N7en3uL/qcnDg1GbXawZFudqb76trQ1vezmFzf8rFr2vI3475ezH0n7us1W2RR3ZDFC1dmUR3e/1e3LwbPsl2zePvY62f++dtWkk3tlsXUVlmMbp3F2p6IzfsC4HY5X476c7kKHSir0L/W+kP8JEn06m5RrGq9gL5djrXFUe4fl3tZf5VxYKw3NVTrRmNzdb98BL266r4WvSN634ne64nRw1vUlcoWR/SXVl56r39Ef/jdH/3kq0d/99Oy32uqbu/GA72YfhN3/XpTFqfeW9pbZFFs8/c3VdV3iiXe2bbfTqOaxKWIPV+/8FIceuW1iw+uXHjmueXnll+oVqemKw9XKo9U9256gLbNFIAvr91/Y2fbiEGdSR7edFYd5zbW3bvWP1IwEc/Gi7Ea5+Jk+W2DiLh3637Hhz6GcHKXs9bxoV94ObnLueXl2OqVsUlsEzs1tMf+54dl8/FNeTgA4JY4vkUd/k3/h213qf/r78yfjBO9iG3OuzfW8k1nx7F9Ld/K/928XQEAXxpZ+6NkvPtW0m7ni09PzsxM1rqns7Tdqj+VtvPZ+Szd2+xm7frpWnM+SxeLU/764I3j2ayTdpYWF1vtbjrXaqcx0snPlL/8nnb292MWas1uXu8sNrJaJ0vrrWa3Vu+ms3mnni4uPdHIO6ezdrlwZzGr53N5vdbNW82001pq17OJNO1k2VBgPps1u/lcXkw208V2vlBrX4qIxtJCls5mnXo7X+y2eisc9JU351rthXK1E1du/p9v5b4GgM+KV167+Pwzq6vLL1/bxJ+uJvh2byMAsJEqDQAAAAAAAAAAAAAAn33rn/+/czBRzL2ObwR+uol9cXXBY3Edfa31h9G9+ZvzmZq4YpP7Iy/H7U7sVk587bHHnh+ac2A45onX7z59deuJq/2mbLx1MGLvz37Qm/P49sHfuqGPxfsR1/IfZC3ZIWbDYWLvLTwkAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC2/hMAAP//oXlTQQ==") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001300)={r1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000013c0)={{r4, 0xffffffffffffffff}, &(0x7f0000001340), &(0x7f0000001380)='%ps \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="180000000800000000000000030000008520000005000900000000000000060000001853000009000000000000000000000018460000f9ffffff0000000000000000022afdff0300000085000000550000008d430001000000009500000000000000"], &(0x7f0000001080)='GPL\x00', 0x5, 0x98, &(0x7f00000010c0)=""/152, 0x41000, 0x44, '\x00', 0x0, 0x1b, r4, 0x8, &(0x7f0000001200)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001240)={0x0, 0x6, 0x8537, 0xfffffffa}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001400)=[r5, r5, r5, 0xffffffffffffffff, r6, r1, r5, r7], 0x0, 0x10, 0x9cf5}, 0x94) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r8 = signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x3]}, 0x8) faccessat2(r8, &(0x7f0000000000)='\x00', 0x2, 0x1100) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/self/attr/current\x00', 0x64, 0x0) 6.938546695s ago: executing program 6 (id=5578): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000000)={r5, 0x3}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000240)={r5, 0x40}, &(0x7f0000000300)=0x8) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000ac0)="d8000000180081064e81f782db4cb904021d0800fe027c05e8fe55a10a0005000140e90003600e41b0000900ac00060011000000a4000500000000000000035c3b61c1d6ddb2c124c2110e00367f6f94007174cf6efb8000a007a290eb49e2f11d457fbace2ee5a7cef4094200001b14d6d930dfe1d9d322fe7c4a50b5b9bd6ee6f61e59eb4edbb57a00e97a6f6e7b7e2720637a1e7892811eb64252f19e00360db798262f3d40fad95667e006dcdf61951f215ce3bb9ad809d5ad42ce81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b", 0xd8}], 0x1}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 6.138397324s ago: executing program 9 (id=5585): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x4008040, 0x6) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x168, &(0x7f0000000a40)="$eJzs27GK1FAUBuAzJqurNluLRcDGalArS0VWEAOKMoVWCrs2Gxlwmmg1z+AT+GI+gihTTXdFo5OZiDgoMbrzfU0O+RM4t0guJ5Bnl1+eHE1nL6YPF7E/GkV+K4pYjuIgzkQWjXkAAKfJMqX4lFJK5+Zx/l2klIbuCADom/0fAHbPL/f/mwM1BgD0xvwPALvn8ZOn92+X5eGjotiP+DCvJ/WkOTb53Xvl4bXiq4P2rkVdT7JVfr3Js818Ly58y280ebGZn42rV5r8S3bnQdnJL8ZR/8sHAACAnTBeje5r8/3Hdr4fj4vvOvN/U619H+jM73lcyv/eOgCA7c1evzl5XlXHrxT/Q5G3Z96//Qf6UfxQ5FV1vDd8G39cDP1mAvrWPvRDdwIAAAAAAAAAAAAAAPzM7/4hFNn2Fw+9RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOj6HAAA//8nKlEY") unshare(0x28000600) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="2f0000004520000504"], 0x20) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a80016000400014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) execve(&(0x7f0000000240)='./file0\x00', &(0x7f0000000340)={[&(0x7f00000002c0)='\x00', &(0x7f00000005c0)='\x00\x11\xde\x00\x00', &(0x7f0000000300)='}\\\x00']}, &(0x7f0000000580)={[&(0x7f00000003c0)='%\x00', &(0x7f0000000400)='\\@}\x00', &(0x7f0000000440)='/%\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='-\x00', &(0x7f0000000540)='*:}\x9d\xf9']}) unshare(0x80) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000100)=0x1, 0x4) r7 = syz_open_dev$loop(&(0x7f00000000c0), 0x81, 0x1c9a00) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000180)={r8, 0xfffffffd, {0x2a00, 0x80010000, 0x0, 0x8000000018, 0x0, 0x0, 0x0, 0x1a, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "280948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d4505d4992861ac00000600", "91be8b1c551265406c7f306003d8a0f4bd004ab3fde500", [0x9, 0x800000000000007b]}}) splice(r6, 0x0, r5, 0x0, 0x6, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000001c0)=""/65) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) sendmsg$NFNL_MSG_CTHELPER_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) 5.800915027s ago: executing program 6 (id=5587): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xd76}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x2082, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xf47bcc99370ffc54}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x214, 0x2c, 0xd27, 0xfffffffc, 0x400, {0x0, 0x0, 0x0, r5, {0xfff2, 0x4}, {}, {0x6, 0x10}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1e4, 0x2, [@TCA_CGROUP_EMATCHES={0x1e0, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x200}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xfd8d, 0x8, 0x3}, {0xffffffffffffffff, 0x1, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0xbc, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x5, 0x7, 0xc}, {{0x4, 0x0, 0x1, 0x1}, {0x2, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6}, {0x3, 0x3, 0x1}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x9, 0x3, 0x500}, {0xc23e, 0xfffffff9, 0x831, 0x800}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x5, 0x1, 0xcec}, {0x5ef, 0x7, 0x7fff, 0x6, 0x9, 0x1, 0x1}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x9, 0x8, 0x8001}, {0xffffffffffffffff, 0x6, 0xe}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xe, 0x3, 0x2d93}, {0x5, 0x83, 0x9}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xfffc, 0x3, 0x5}, {0x2, 0x8, 0x3, 0x6}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3, 0x1, 0xb47}, {0xfffffc00, 0x5, 0xfff, 0x5, 0x7, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x8000, 0x3, 0x6}, {0xfffffffe, 0x6, 0x70000000, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0xd4, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x3, 0x0, 0x0, {{0x1, 0x4, 0xc}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x9, 0x8, 0x7}, {0xffffffffffffffff, 0x4, 0x6}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8, 0x7, 0xa}, {{0x0, 0x0, 0x1}, {0x2, 0x1, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0x90, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x4}, "7423f89dd941c06464f4cc55c4fd4553cd5d5d7d6c8abb4650c6c45757103e0182e34896dbb0ef761929662aaca0a05beca7311409e50bd9f0a6798cde1f68fb0de0f6f821223cc31bb23036570eba3a35724b943eae039c045668d7ae41840729d826907deadd9c8e1acf01f61f58713c8d6fcbb1637b2886c73a3e14e3b405000000"}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x7ff}, {0x3, 0x6, 0x5}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffa}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}]}}]}, 0x24}, 0x1, 0x0, 0x0, 0xc021}, 0x20040054) 5.558655511s ago: executing program 6 (id=5591): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, 0x0, 0x804) 5.557857931s ago: executing program 6 (id=5592): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000008c0)={0x1, &(0x7f00000002c0)=[{0x2, 0x0, 0x0, 0x7ffc9feb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000000)=ANY=[], 0x3, 0x7e4, &(0x7f0000001f80)="$eJzs3U2IG/fZAPBn1rv+2IAJeV/8BuM4YycvOOBstNpk8y4+JIp2dj2JVlok7YtNKWmI12HJOglJQxtfElNI2tJSempvaa659dZSaKGFpqdCc+ilt0BOJYV+kVAKW2YkrbXr/XD8mY/fT1j/0eiZ+T8zkufRaKW/AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIpD5bqUwm0cibS2fS7dVn262FHe4frO9XG5oNHt/Qb0RS/Iv9++Pjv/fm/ffluw8VV8fjSO/WkdhfNPvj4h2H7jz1X6Mjg+V3SOhaHbvKuCTix/1kV5df3nzvvhuf2E303V986kU+WSuu57Nm3ol8oTafpXmnlc5MT1ceOj3XSefyRtY52+lmC2m9ndW6rXZ6ov5AOjkzM5VmE2dbS8352VojG8x89MFqpTKdPjmxmNXanVbzoSejUz+dNxp5c76MqVa+EUXMo8UT8am8m3az2kKanl9ZXZ7aLdUiaHLjrD1x+To9cv+dH776wd9Wlosn5HYrSfqPdXVyslqdnH5k5pFHK5XRaqW6YcaeiKgMi/WIGIkoFrkpT1o+R27g0Ruuz0i//kcj8mjGUpyJdIvLWNRjNtrRioXi9h/HrojoG9T//33oL7/fqd/h+j+o8ndfvvtwlPX/aO/W0e3q/5a53srLK/FaXIzn45lYjdVYjpdve0a7XEaudw3JhlvzkUUz8uhEK/JYiFo5J+3PSWMmpmM6KvF0nI656EQac5FHI7LoxNnoRDey8hlVj3ZkUYtutKIdaZyIejwQaUzGTMzEVKSRxUScjVYsRTPmYzZq5VrOx0q536c2ZXnoQPz8uT98+HYxvR40udNmvVG8kIvl+OsOQZvL/RX1f3S49q+tFa8XNkeo/192N+EoDtdmbVD/AQAAgC+spHz3vTj/H4t7yqm5vJF9ZcdFPlkr3bokAQAAgOtS/uX/SNGMFVP3RFKc/1e2iHz/lucGAAAA3BhJ+R27JCLG497e1PlYiTdiObZ6EwAAAAD4HCr//n+0aMYjXi9nDIZLcf4PAAAAXxDf3m6M/Q8GY+x2FvclvxyLiLHk0uKZ+5MLtSKudmFPb7l+8//ra+zOHU4O9ldSNtOjF+9IImK0nh1JBqNf/ntfr/2ovD48ur74dmP9J+32jgnEzgmUt+J7cawXc+xc2dzRX2Q06fUyPpc3sol6q3GqHBKx+Nd99YWVb0YUvX+nuXAwifMrq8sTz764eq7M5VKx+KUL/QEUrxhHcYdc1vp7IO7ZeovHyi9i9Psd7/VbGd7+kd7iIzv3mQz3+WYc78UcH++144N7en3uL/qcnDg1GbXawZFudqb76trQ1vezmFzf8rFr2vI3475ezH0n7us1W2RR3ZDFC1dmUR3e/1e3LwbPsl2zePvY62f++dtWkk3tlsXUVlmMbp3F2p6IzfsC4HY5X476c7kKHSir0L/W+kP8JEn06m5RrGq9gL5djrXFUe4fl3tZf5VxYKw3NVTrRmNzdb98BL266r4WvSN634ne64nRw1vUlcoWR/SXVl56r39Ef/jdH/3kq0d/99Oy32uqbu/GA72YfhN3/XpTFqfeW9pbZFFs8/c3VdV3iiXe2bbfTqOaxKWIPV+/8FIceuW1iw+uXHjmueXnll+oVqemKw9XKo9U9256gLbNFIAvr91/Y2fbiEGdSR7edFYd5zbW3bvWP1IwEc/Gi7Ea5+Jk+W2DiLh3637Hhz6GcHKXs9bxoV94ObnLueXl2OqVsUlsEzs1tMf+54dl8/FNeTgA4JY4vkUd/k3/h213qf/r78yfjBO9iG3OuzfW8k1nx7F9Ld/K/928XQEAXxpZ+6NkvPtW0m7ni09PzsxM1rqns7Tdqj+VtvPZ+Szd2+xm7frpWnM+SxeLU/764I3j2ayTdpYWF1vtbjrXaqcx0snPlL/8nnb292MWas1uXu8sNrJaJ0vrrWa3Vu+ms3mnni4uPdHIO6ezdrlwZzGr53N5vdbNW82001pq17OJNO1k2VBgPps1u/lcXkw208V2vlBrX4qIxtJCls5mnXo7X+y2eisc9JU351rthXK1E1du/p9v5b4GgM+KV167+Pwzq6vLL1/bxJ+uJvh2byMAsJEqDQAAAAAAAAAAAAAAn33rn/+/czBRzL2ObwR+uol9cXXBY3Edfa31h9G9+ZvzmZq4YpP7Iy/H7U7sVk587bHHnh+ac2A45onX7z59deuJq/2mbLx1MGLvz37Qm/P49sHfuqGPxfsR1/IfZC3ZIWbDYWLvLTwkAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC2/hMAAP//oXlTQQ==") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001300)={r1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000013c0)={{r4, 0xffffffffffffffff}, &(0x7f0000001340), &(0x7f0000001380)='%ps \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="180000000800000000000000030000008520000005000900000000000000060000001853000009000000000000000000000018460000f9ffffff0000000000000000022afdff0300000085000000550000008d430001000000009500000000000000"], &(0x7f0000001080)='GPL\x00', 0x5, 0x98, &(0x7f00000010c0)=""/152, 0x41000, 0x44, '\x00', 0x0, 0x1b, r4, 0x8, &(0x7f0000001200)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001240)={0x0, 0x6, 0x8537, 0xfffffffa}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001400)=[r5, r5, r5, 0xffffffffffffffff, r6, r1, r5, r7], 0x0, 0x10, 0x9cf5}, 0x94) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) faccessat2(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x2, 0x1100) r8 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/self/attr/current\x00', 0x64, 0x0) pread64(r8, &(0x7f0000000000)=""/4096, 0x1000, 0x4) 5.304242607s ago: executing program 9 (id=5595): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0, 0x0, 0x3}, 0x18) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x3e, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82002, 0xf) syz_pidfd_open(0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000140), 0x9, 0x80000) poll(&(0x7f0000000180)=[{r3, 0x500}], 0x1, 0x0) rt_sigpending(0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000340)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x2000c041) sendfile(r2, r1, 0x0, 0x80000001) openat$snapshot(0xffffffffffffff9c, 0x0, 0x84d03, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x174) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000040)=0xffffffffffffffff) 5.286631288s ago: executing program 6 (id=5596): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r1 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x58130, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x4}, 0x81203, 0x10000, 0xbdf7, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$key(r1, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x20, 0x1411, 0x4, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000000) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000067b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r7 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r9}, 0x18) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r10, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) bind$inet(r7, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r7, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=""/127, 0x7f}}], 0x1, 0x0, 0x0) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000400fd00000000"], 0x0, 0x26}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r6, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) 5.158464771s ago: executing program 9 (id=5598): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xd76}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x2082, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xf47bcc99370ffc54}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x214, 0x2c, 0xd27, 0xfffffffc, 0x400, {0x0, 0x0, 0x0, r5, {0xfff2, 0x4}, {}, {0x6, 0x10}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1e4, 0x2, [@TCA_CGROUP_EMATCHES={0x1e0, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x200}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xfd8d, 0x8, 0x3}, {0xffffffffffffffff, 0x1, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0xbc, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x5, 0x7, 0xc}, {{0x4, 0x0, 0x1, 0x1}, {0x2, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6}, {0x3, 0x3, 0x1}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x9, 0x3, 0x500}, {0xc23e, 0xfffffff9, 0x831, 0x800}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x5, 0x1, 0xcec}, {0x5ef, 0x7, 0x7fff, 0x6, 0x9, 0x1, 0x1}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x9, 0x8, 0x8001}, {0xffffffffffffffff, 0x6, 0xe}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xe, 0x3, 0x2d93}, {0x5, 0x83, 0x9}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xfffc, 0x3, 0x5}, {0x2, 0x8, 0x3, 0x6}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3, 0x1, 0xb47}, {0xfffffc00, 0x5, 0xfff, 0x5, 0x7, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x8000, 0x3, 0x6}, {0xfffffffe, 0x6, 0x70000000, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0xd4, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x3, 0x0, 0x0, {{0x1, 0x4, 0xc}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x9, 0x8, 0x7}, {0xffffffffffffffff, 0x4, 0x6}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8, 0x7, 0xa}, {{0x0, 0x0, 0x1}, {0x2, 0x1, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0x90, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x4}, "7423f89dd941c06464f4cc55c4fd4553cd5d5d7d6c8abb4650c6c45757103e0182e34896dbb0ef761929662aaca0a05beca7311409e50bd9f0a6798cde1f68fb0de0f6f821223cc31bb23036570eba3a35724b943eae039c045668d7ae41840729d826907deadd9c8e1acf01f61f58713c8d6fcbb1637b2886c73a3e14e3b405000000"}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x7ff}, {0x3, 0x6, 0x5}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffa}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}]}}]}, 0x214}, 0x1, 0x0, 0x0, 0xc021}, 0x20040054) (fail_nth: 5) 4.646313632s ago: executing program 9 (id=5603): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000008c0)={0x1, &(0x7f00000002c0)=[{0x2, 0x0, 0x0, 0x7ffc9feb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000000)=ANY=[], 0x3, 0x7e4, &(0x7f0000001f80)="$eJzs3U2IG/fZAPBn1rv+2IAJeV/8BuM4YycvOOBstNpk8y4+JIp2dj2JVlok7YtNKWmI12HJOglJQxtfElNI2tJSempvaa659dZSaKGFpqdCc+ilt0BOJYV+kVAKW2YkrbXr/XD8mY/fT1j/0eiZ+T8zkufRaKW/AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIpD5bqUwm0cibS2fS7dVn262FHe4frO9XG5oNHt/Qb0RS/Iv9++Pjv/fm/ffluw8VV8fjSO/WkdhfNPvj4h2H7jz1X6Mjg+V3SOhaHbvKuCTix/1kV5df3nzvvhuf2E303V986kU+WSuu57Nm3ol8oTafpXmnlc5MT1ceOj3XSefyRtY52+lmC2m9ndW6rXZ6ov5AOjkzM5VmE2dbS8352VojG8x89MFqpTKdPjmxmNXanVbzoSejUz+dNxp5c76MqVa+EUXMo8UT8am8m3az2kKanl9ZXZ7aLdUiaHLjrD1x+To9cv+dH776wd9Wlosn5HYrSfqPdXVyslqdnH5k5pFHK5XRaqW6YcaeiKgMi/WIGIkoFrkpT1o+R27g0Ruuz0i//kcj8mjGUpyJdIvLWNRjNtrRioXi9h/HrojoG9T//33oL7/fqd/h+j+o8ndfvvtwlPX/aO/W0e3q/5a53srLK/FaXIzn45lYjdVYjpdve0a7XEaudw3JhlvzkUUz8uhEK/JYiFo5J+3PSWMmpmM6KvF0nI656EQac5FHI7LoxNnoRDey8hlVj3ZkUYtutKIdaZyIejwQaUzGTMzEVKSRxUScjVYsRTPmYzZq5VrOx0q536c2ZXnoQPz8uT98+HYxvR40udNmvVG8kIvl+OsOQZvL/RX1f3S49q+tFa8XNkeo/192N+EoDtdmbVD/AQAAgC+spHz3vTj/H4t7yqm5vJF9ZcdFPlkr3bokAQAAgOtS/uX/SNGMFVP3RFKc/1e2iHz/lucGAAAA3BhJ+R27JCLG497e1PlYiTdiObZ6EwAAAAD4HCr//n+0aMYjXi9nDIZLcf4PAAAAXxDf3m6M/Q8GY+x2FvclvxyLiLHk0uKZ+5MLtSKudmFPb7l+8//ra+zOHU4O9ldSNtOjF+9IImK0nh1JBqNf/ntfr/2ovD48ur74dmP9J+32jgnEzgmUt+J7cawXc+xc2dzRX2Q06fUyPpc3sol6q3GqHBKx+Nd99YWVb0YUvX+nuXAwifMrq8sTz764eq7M5VKx+KUL/QEUrxhHcYdc1vp7IO7ZeovHyi9i9Psd7/VbGd7+kd7iIzv3mQz3+WYc78UcH++144N7en3uL/qcnDg1GbXawZFudqb76trQ1vezmFzf8rFr2vI3475ezH0n7us1W2RR3ZDFC1dmUR3e/1e3LwbPsl2zePvY62f++dtWkk3tlsXUVlmMbp3F2p6IzfsC4HY5X476c7kKHSir0L/W+kP8JEn06m5RrGq9gL5djrXFUe4fl3tZf5VxYKw3NVTrRmNzdb98BL266r4WvSN634ne64nRw1vUlcoWR/SXVl56r39Ef/jdH/3kq0d/99Oy32uqbu/GA72YfhN3/XpTFqfeW9pbZFFs8/c3VdV3iiXe2bbfTqOaxKWIPV+/8FIceuW1iw+uXHjmueXnll+oVqemKw9XKo9U9256gLbNFIAvr91/Y2fbiEGdSR7edFYd5zbW3bvWP1IwEc/Gi7Ea5+Jk+W2DiLh3637Hhz6GcHKXs9bxoV94ObnLueXl2OqVsUlsEzs1tMf+54dl8/FNeTgA4JY4vkUd/k3/h213qf/r78yfjBO9iG3OuzfW8k1nx7F9Ld/K/928XQEAXxpZ+6NkvPtW0m7ni09PzsxM1rqns7Tdqj+VtvPZ+Szd2+xm7frpWnM+SxeLU/764I3j2ayTdpYWF1vtbjrXaqcx0snPlL/8nnb292MWas1uXu8sNrJaJ0vrrWa3Vu+ms3mnni4uPdHIO6ezdrlwZzGr53N5vdbNW82001pq17OJNO1k2VBgPps1u/lcXkw208V2vlBrX4qIxtJCls5mnXo7X+y2eisc9JU351rthXK1E1du/p9v5b4GgM+KV167+Pwzq6vLL1/bxJ+uJvh2byMAsJEqDQAAAAAAAAAAAAAAn33rn/+/czBRzL2ObwR+uol9cXXBY3Edfa31h9G9+ZvzmZq4YpP7Iy/H7U7sVk587bHHnh+ac2A45onX7z59deuJq/2mbLx1MGLvz37Qm/P49sHfuqGPxfsR1/IfZC3ZIWbDYWLvLTwkAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC2/hMAAP//oXlTQQ==") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001300)={r1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000013c0)={{r4, 0xffffffffffffffff}, &(0x7f0000001340), &(0x7f0000001380)='%ps \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="180000000800000000000000030000008520000005000900000000000000060000001853000009000000000000000000000018460000f9ffffff0000000000000000022afdff0300000085000000550000008d430001000000009500000000000000"], &(0x7f0000001080)='GPL\x00', 0x5, 0x98, &(0x7f00000010c0)=""/152, 0x41000, 0x44, '\x00', 0x0, 0x1b, r4, 0x8, &(0x7f0000001200)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001240)={0x0, 0x6, 0x8537, 0xfffffffa}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001400)=[r5, r5, r5, 0xffffffffffffffff, r6, r1, r5, r7], 0x0, 0x10, 0x9cf5}, 0x94) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x3]}, 0x8) r8 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/self/attr/current\x00', 0x64, 0x0) pread64(r8, &(0x7f0000000000)=""/4096, 0x1000, 0x4) 4.645571062s ago: executing program 6 (id=5604): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000008c0)={0x1, &(0x7f00000002c0)=[{0x2, 0x0, 0x0, 0x7ffc9feb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000000)=ANY=[], 0x3, 0x7e4, &(0x7f0000001f80)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001300)={r1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000013c0)={{r4, 0xffffffffffffffff}, &(0x7f0000001340), &(0x7f0000001380)='%ps \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="180000000800000000000000030000008520000005000900000000000000060000001853000009000000000000000000000018460000f9ffffff0000000000000000022afdff0300000085000000550000008d430001000000009500000000000000"], &(0x7f0000001080)='GPL\x00', 0x5, 0x98, &(0x7f00000010c0)=""/152, 0x41000, 0x44, '\x00', 0x0, 0x1b, r4, 0x8, &(0x7f0000001200)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001240)={0x0, 0x6, 0x8537, 0xfffffffa}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001400)=[r5, r5, r5, 0xffffffffffffffff, r6, r1, r5, r7], 0x0, 0x10, 0x9cf5}, 0x94) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r9 = signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x3]}, 0x8) faccessat2(r9, &(0x7f0000000000)='\x00', 0x2, 0x1100) r10 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/self/attr/current\x00', 0x64, 0x0) pread64(r10, &(0x7f0000000000)=""/4096, 0x1000, 0x4) 4.642882222s ago: executing program 46 (id=5604): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000008c0)={0x1, &(0x7f00000002c0)=[{0x2, 0x0, 0x0, 0x7ffc9feb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000000)=ANY=[], 0x3, 0x7e4, &(0x7f0000001f80)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001300)={r1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000013c0)={{r4, 0xffffffffffffffff}, &(0x7f0000001340), &(0x7f0000001380)='%ps \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="180000000800000000000000030000008520000005000900000000000000060000001853000009000000000000000000000018460000f9ffffff0000000000000000022afdff0300000085000000550000008d430001000000009500000000000000"], &(0x7f0000001080)='GPL\x00', 0x5, 0x98, &(0x7f00000010c0)=""/152, 0x41000, 0x44, '\x00', 0x0, 0x1b, r4, 0x8, &(0x7f0000001200)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001240)={0x0, 0x6, 0x8537, 0xfffffffa}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001400)=[r5, r5, r5, 0xffffffffffffffff, r6, r1, r5, r7], 0x0, 0x10, 0x9cf5}, 0x94) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r9 = signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x3]}, 0x8) faccessat2(r9, &(0x7f0000000000)='\x00', 0x2, 0x1100) r10 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/self/attr/current\x00', 0x64, 0x0) pread64(r10, &(0x7f0000000000)=""/4096, 0x1000, 0x4) 4.541020782s ago: executing program 9 (id=5608): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="dfbf00000000000000006700000008000300", @ANYRES32=r2, @ANYBLOB="0800c300741300000800c4"], 0x30}, 0x1, 0x0, 0x0, 0x240408c3}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r7}, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440091070be0c80c7c563aade35ab33a7c7013b4740cd3caca74b2d5ace71bfe1bdd7afe83b0c3ca58c322be0015ac76415cc7a1af2feeeaf8b36b4e28d93adaf884ca4ee0e9dab36ba58d73501baf150a78f73db94735d48623924f000000", @ANYRES16=r8, @ANYBLOB="080025bd7000ffdbdf250b00000008003a000600000005002f0001000000080032005cf10000060028000300000008003a000300000008000600", @ANYRES32=r6, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0xc8d0}, 0x4000) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b704000006000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r10, 0x2f000000, 0x138, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x8000000, 0x13}, 0x22) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r11}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r12 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_INIT(r12, 0x29, 0xc8, &(0x7f0000000580), 0x4) 4.196541046s ago: executing program 9 (id=5614): socket(0x10, 0x803, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000040)) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000680)={0x1c, 0x5e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x76, 0x0, 0x0, @u32=0x9}, @nested={0x4, 0x1}]}, 0x1c}], 0x1}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000005600)='sys_enter\x00', r5, 0x0, 0x2}, 0x18) syz_open_procfs(0x0, &(0x7f00000003c0)='fd\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r6 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004058}, 0x4000000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0xf5, &(0x7f0000009b00)={&(0x7f00000042c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a90000000060a030400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c000280240003007339f2f304fdd672bad09dfb040000002401000001f9580dabf95ddc91967c2008000240000000000c0001005241544545535400f7ff020073797a32000000001400000011000100f1000000000000000100000a"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x3a4, &(0x7f0000000bc0)="$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") r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x0) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r9, 0x4, 0x6000) bpf$PROG_LOAD(0x5, 0x0, 0x0) mq_timedreceive(r6, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xff}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 4.172617068s ago: executing program 47 (id=5614): socket(0x10, 0x803, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000040)) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000680)={0x1c, 0x5e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x76, 0x0, 0x0, @u32=0x9}, @nested={0x4, 0x1}]}, 0x1c}], 0x1}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000005600)='sys_enter\x00', r5, 0x0, 0x2}, 0x18) syz_open_procfs(0x0, &(0x7f00000003c0)='fd\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r6 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004058}, 0x4000000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0xf5, &(0x7f0000009b00)={&(0x7f00000042c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a90000000060a030400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c000280240003007339f2f304fdd672bad09dfb040000002401000001f9580dabf95ddc91967c2008000240000000000c0001005241544545535400f7ff020073797a32000000001400000011000100f1000000000000000100000a"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x3a4, &(0x7f0000000bc0)="$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") r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x0) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r9, 0x4, 0x6000) bpf$PROG_LOAD(0x5, 0x0, 0x0) mq_timedreceive(r6, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xff}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 4.030463822s ago: executing program 0 (id=5617): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x9) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) (fail_nth: 3) 3.807608124s ago: executing program 0 (id=5618): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340), 0x1, 0x512, &(0x7f0000000380)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOv7WNu0lCZNadJ1Whbt4H8ggoJPPvki+AcIwzz4B8jAgL6ID6KiiM7og6DOlSQ3TidN2rrTNp3m84HTnHPvzf2ec0NO7o/TewMYWy9FxFsRMRERr0ZEMZ+e5in2uqm93IP77y21UxJZ9s5fk0jyab11tdcxGRFX87dNRcTXvhzxzeRg3ObO7vpirVbdysuVVn2z0tzZvb5WX1ytrlY35ufn3lh4c+H1hdks90TtLPUyP/nS529/+lu/u/Hna99uV+tzH4lC9LXjJHWbXuhsi572Nto6jWAj0PvMC6OuCAAAx9Lex/9gRHyis/9fjInO3lyfiVHUDAAAADgp2Rem499JRAYAAABcWGlETEeSlvOxANORppfycwMfjitprdFsfWqlsb2x3J4XUYpCurJWq87mY4VLUUja5bl8jG2v/FpfeT4inouI7xcvd8rlpUZtecTnPgAAAGBcXO07/v9HMe3kjzbg/wQAAACA86s0tAAAAABcFA75AQAA4OLrP/6/PaJ6AAAAAKfiK2+/3U5Z7/nXy+/ubK833r2+XG2ul+vbS+WlxtZmebXRWO3cs69+1PpqjcbmZ2Jj+2alVW22Ks2d3Rv1xvZG68baY4/ABgAAAM7Qcx+/8+skIvY+e7mTIr8PIMBj/jDqCgAnaWLUFQBGxl28YXwVRl0BYOSSI+YbvAMAAE+/mY8evP7fe/6/cwNwsRnrAwDjx/V/GF8FIwBhrKUR8YFu9plhywy9/v/L40bJsoi7xf1TnF8EAICzNd1JSVrOjwOmI03L5YhnI9JSFJKVtVp1Nj8++FWx8Ey7PNd5Z3LkmGEAAAAAAAAAAAAAAAAAAAAAAAAAoCvLksgAAACACy0i/VPSuZt/xEzxlen+8wOXkn8W44954Ufv/ODmYqu1Ndee/rfOs7wuRUTrh/n014Y+PgwAAAA4acne0Fnd4/T8de5MawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGHhw/72lXjrLuH/5YkSUBsWfjKnO61QUIuLK35OY3Pe+JCImTiD+3q2IeH5Q/CQeZllWymvRHz+NiMunHL/U2TTD4189gfgwzu60+5+3Bn3/0nip8zr4+zeZpyc1vP9L88jPd/q5Qf3fswfWVh8Y44V7P6sMjX8r4oXJwf1Pr/9NhsR/+cDa/pVl2cEY3/j67u6w+NmPI2YG/v4kj8WqtOqblebO7vW1+uJqdbW6MT8/98bCmwuvL8xWVtZq1fzvwBjf+9jPHx7W/isD4v/2N93+97D2vzJspX3+c+/m/Q91s4VB8a+9PPD3dyqGxE/z375P5vn2/Jlefq+b3+/Fn9598bD2Lw/Z/kd9/teO2f5Xv/rd3x9zUQDgDDR3dtcXa7Xq1iGZqWMs8zRmfjF1Lqrxf2ay73Q/ufNSn/ebae+tPprSa9U5qNi+THZmsSbinDT5f5mRdksAAMApeLTTP+qaAAAAAAAAAAAAAAAAAAAAwPg6i9uJ9cfcG01TAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO9d8AAAD//yLg4A8=") (fail_nth: 4) 3.514594883s ago: executing program 0 (id=5619): openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) unshare(0x62000000) 2.842284439s ago: executing program 1 (id=5623): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000000480)={[{@nojournal_checksum}, {@noblock_validity}, {@discard}, {@errors_remount}, {@jqfmt_vfsv0, 0x0}, {@nouid32}, {@noload}, {@nodiscard}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x7}}, {@init_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@norecovery}, {@bh}, {@data_err_abort}, {@resgid}], [{@audit}, {@subj_user={'subj_user', 0x3d, 'audit'}}], 0x2c}, 0xa, 0x525, &(0x7f0000000bc0)="$eJzs3M9rHNcdAPDvrFaWVUmV6v503dZq3VLRUsuSfx56sE0LvrQUWopzCSiSbBzLTrAUsI3Acgg25JDgv8BJboGccswpuYQk5JDga0yOCQETdLHiQ5gwuzPrlVarX96VkPX5wGrfzLzZed+Z97TvzdvdAHaswexPEtEbEV/0RvRXFxdnGKw+LczPjn83PzueRJr+99ukku/h/Ox4kbXYrydfGCpFlF5JYl/jYbumr12/ODY1NXklXzE8U8pTl8bOT56fvDx64sSRw93Hj40ebUmcPUXh9p555s6/xs/eee7jd7JVab66Po6qgcrfXWs+Qsfj5LvlytNgDC4+l3X+tI6ybwd9demkEn5p6wrDmmW1NrtcnVn7j/7oiHJtW3/88+UtLRzQVmmapl0Na2vvZXNpvSSp7pCmN1PgKZDEajmW/BcAnhLFG/3D+WykOjveOA5+uj04FZURUBb3Qv6obilXRrCDA9WxUWebjv+ziDg79+hu0QfbaecfANh875+KuH262u8oHtUtpfhFXb4fR3VuaCAifhIReyLip3n/5ecRlby/jIhf1e3Tt+osQGd1/qlOY//n8+48Ud9dbZms//f3fG5rcf+vVvKBjnyprxJ/Z3LuwtTkofycDEVnV7Y80vjStdtqH/zj3uvNjj+Y9/+KR3b87PlxjtI35SU36CbGZsaeNO7Cg5uVE3ujMf4kykmRitgbEb/ewOtn5+zCX97+TbPti+LP4myI/7XmL17eQIGWSN+M+HP1+s/Fkvgjn/9LKvOTl14cnr52/W8X6ucnR44fGz06vDumJg8NF7Wi0Sef3fpPnmwYRqxw/Yum0daJtOz6/2jZ+l+buRzIUrX52un1H+PW/dtNxzQbrf+7kv9V0sX87NWxmZkrIxG7krnG9aOP97061r0ofxb/0IHl2/+eiO/fyPfbFxFZJf5tRPwuIvbnZf99RPwhIg6sEP9Hp//4fLMh5Orxt1cW/8S6rn+zxMlPI5bf1HHxw/caDvzqYEP8nfHo7kLDhHl2/Y9UUkP5momxmd2rxbVSSesTT3DqAAAAYNvYHxG9kZQO5jeaeqNUOngwoqd2B2V65q/nXnjp8kT1OwID0Vkq7nT1190PHcnvDWfL2V6jdcvZ9sOV+8Zpmqbd2XI2fp/q29rQYcfradL+M193bHXpgLZb1zxas2+0AdvS0vZ/f817tv4DGcDmasHnaIBtSvuHnWvN7b9d34IDtsxy7f9GxMIWFAXYZMu1//83rDm5KWUBNpfxP+xcG2//PgwA2533f9iR1vQl+Q0k9pxZIU9Sbs9BmydKUU189Ww17KW/AjAQUawp+jQrv+CXpYjWlLDjyQPMSpyv6V50TUvL7rU7WnFWo7RqnvI6foihaaK7Red5UaK09szdcfHf99paRbsaK+TS2lurbDeKxPV2N5lKI3hrC/81AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtMQPAQAA//8TNcUk") (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1008}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r2) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x88, &(0x7f0000000100)={[{@dioread_lock}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@nouid32}, {@noinit_itable}, {@abort}]}, 0x3, 0x438, &(0x7f0000000d80)="$eJzs289rHFUcAPDv7GZT01+Jpf5oWjVaxeCPpElr7cGLouBBQdBDPcYkLbHbRpoItgSNIvUoBe/iUfAv8KQXUU8Fr3oXoUgurZ5WZncm2d1sfnaTrd3PByb5vpm3vPfNzNt9My8bQNcaSn8kEfsj4veI6K8VGysM1X7dXlqY/GdpYTKJSuXtv5NqvVtLC5N51fx1+/JCT0Th8ySOtmh37srVCxPl8vTlrDw6f/GD0bkrV5+fuThxfvr89KXxM2dOnRx78fT4C23JM83r1uDHs8eOvP7u9Tcnz15/75fvkjz/pjzaZGi9g09VKm1urrMO1MVJTwc7wpYUa8M0StXx3x/FWDl5/fHaZx3tHLCjKpVK5cG1Dy9WgHtYEp3uAdAZ+Qd9ev+bb7s09bgr3Hy5dgOU5n0722pHeqKQ1Sk13d+201BEnF389+t0i515DgEA0OCHdP7zXKv5XyHqnwsdzNZQBiLi/og4FBGnI+JwRDwQUa37UEQ8vMX2mxdJVs9/Dm4rr81K538vZWtbjfO/fPYXA8WsdKCafyk5N1OePpH1bDhKe9Ly2Dpt/Pjqb1+2PJA1kc//0i1tP58LZpX+6tnT+LKpifmJO8m53s1PIwZ7WuWfLK8EJBFxJCIGt9nGzDPfHlvr2NCG+a+jDetMlW8inq6d/8Voyj+XrL8+OXpflKdPjOZXxWq/3rj21lrt31H+bZCe/70tr//l/AeS+vXaua23ce2PL9a8p9k4/9bXf2/yTsO+jybm5y+PRfQmb9Q6Xb9/vKne+Er9NP/h463H/6FY+UscjYj0In4kIh6NiMeyvj8eEU9ExPHVqd3ozYKfX3ny/WpQ2k7+OyvNf2pL538l6I3mPa2D4oWfvm9odGAr+afn/1Q1Gs72bOb9bzP92t7VDAAAAP8/hYjYH0lhZDkuFEZGav/Dfzj2Fsqzc/PPnpv98NJU7TsCA1Eq5E+6+uueh45lt/V5ebypfDJ7bvxVsa9aHpmcLU91OnnocvvWGP+pP4ud7h2w43xfC7qX8Q/dy/iH7mX8Q/dqMf77OtEPYPe1+vz/pAP9AHZf0/i37AddxP0/dC/jH7qX8Q9daa4vNv6SvECwKojCXdENwQ4FnX5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI//AgAA//9Lr+a0") (async) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x4}, 0x18) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="09000000040000000800000010"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) (async) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x1, 0x9, 0x0, 'queue0\x00', 0x5}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000380)) 2.756126618s ago: executing program 1 (id=5624): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 2.689551495s ago: executing program 1 (id=5625): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x2c}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001400)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="020000000097a99de082a6007b192fc1c4a2d5f0fa9d47d5198e24063000088968cdfcf73c0f01ee3aa15a9613e0c159a1f87531", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f00000013c0), 0x2}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0) shmget(0x3, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522ea, 0x0, {0x0, 0x0, 0x74, r3, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='f2fs_sync_fs\x00', r6, 0x0, 0x6}, 0x18) r8 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) getpid() setns(0xffffffffffffffff, 0x24020000) r9 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_open_procfs$pagemap(r9, &(0x7f00000001c0)) readv(r10, &(0x7f0000003400)=[{0x0}, {&(0x7f00000003c0)=""/4096, 0x1000}, {0x0, 0xffffffab}, {0x0}, {0x0}], 0x5) syz_pidfd_open(r9, 0x0) 1.546049737s ago: executing program 0 (id=5627): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003580)=@newtaction={0x1ce8, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x1cd4, 0x1, [@m_pedit={0x1cd0, 0x1, 0x0, 0x0, {{0xa}, {0x1ca4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x101, 0x5c, 0x0, 0xb, 0x9}, 0x8, 0x7}, [{0x7, 0x8, 0xb6f8, 0x8, 0x101, 0x3}, {0x9, 0x6, 0x6, 0xfffffff7, 0xd, 0xed7}, {0xaabee86, 0x100, 0x4, 0x8, 0x8, 0xb6d}, {0x66, 0x80000000, 0xfffffffd, 0x2, 0x10000, 0x9}, {0x2, 0xfffffffc, 0x9, 0x1, 0x9}, {0x3, 0x8, 0x9, 0x400, 0xf, 0x939b}, {0xdc11, 0xfffffff9, 0x3ff, 0xfada, 0x401, 0x10000}, {0x15, 0x9, 0x7, 0x81, 0x7, 0x1}, {0x5, 0x1, 0x2, 0x80000001, 0xfff, 0x8}, {0xb73, 0x5, 0x3, 0xfffffff7, 0x0, 0xd}, {0xffffff80, 0x3, 0x1, 0x80000001, 0x4, 0x4}, {0x519, 0xf0, 0x0, 0x3, 0x5, 0xfffffff7}, {0x400, 0x200, 0x1ff, 0x3, 0x5, 0x5}, {0x3, 0x20000005, 0x1, 0x101, 0x200}, {0x4, 0x7, 0x1, 0x9, 0xf, 0x1}, {0x401, 0x433, 0x7, 0xffffff7f, 0x9, 0x80000007}, {0x10, 0x6, 0x9, 0x0, 0x5, 0x2}, {0x5, 0x1, 0x8, 0x3, 0x3, 0xfffffffc}, {0x0, 0x80000000, 0x80000000, 0xce4, 0x1ff, 0x2}, {0x1400, 0x8, 0x5, 0x3ff, 0xfffffffe, 0x8}, {0xa177, 0x8, 0x1, 0x7, 0x9, 0x8000}, {0xce0, 0x4, 0x1ff, 0xd7, 0x7, 0x6}, {0xffff4234, 0x4f8, 0xfffffff6, 0x1, 0xc, 0xffffffdd}, {0x81, 0x2c, 0xc13, 0x7d1, 0x4, 0x6}, {0x5, 0x7, 0x7, 0x1000, 0x2, 0x7f}, {0x400, 0x6, 0x7, 0x6, 0x120, 0x6}, {0x6, 0x3, 0x4, 0x7ff, 0x0, 0x3}, {0x6, 0x0, 0x3, 0x2, 0xfff, 0x2}, {0x8, 0x3, 0x6, 0x5c6a, 0x5, 0x9}, {0x8, 0x1, 0x8, 0x8, 0x8, 0x95}, {0xf80, 0x8, 0x10000, 0x8, 0xe, 0xfffeffff}, {0x4, 0x8000, 0x3, 0x8aa6, 0xfffffff7, 0x5}, {0x8, 0x7, 0xfffffff7, 0x3fe, 0xd7d, 0x5}, {0xd50, 0x2, 0x8, 0x1, 0x8, 0x3}, {0x2, 0x6, 0x7f, 0x9, 0xfffffff9, 0x1}, {0x162, 0x0, 0x4b3, 0xcb5, 0x5, 0x7fffffdf}, {0x80200000, 0x0, 0x1, 0x2, 0x100, 0x3}, {0x8, 0x8, 0x1, 0xffffffff, 0x3ff, 0x5d1}, {0x3, 0xd054, 0x9, 0x5, 0xfffff801, 0x1}, {0x7, 0x8, 0x983, 0x0, 0x6, 0x200}, {0x47, 0x200, 0x8, 0x9, 0x2, 0x9}, {0x1, 0xfffffff9, 0x2, 0x7, 0x7, 0x1000}, {0x10000, 0x24056a58, 0x8, 0x400001, 0x0, 0x8}, {0x2, 0x1ff, 0x3ff, 0x0, 0x2, 0x40000000}, {0x7ff, 0x7ff, 0x0, 0x3, 0x9ca, 0xffffffff}, {0x80000000, 0x9, 0x2, 0x4, 0xdd9f, 0x40}, {0xa, 0x9, 0x3, 0x0, 0xe00, 0x7fff}, {0x4, 0x7, 0x3, 0x0, 0x7f, 0x8}, {0x7, 0x8, 0x10, 0x4, 0x0, 0x80000000}, {0x7, 0x7f, 0xfffff801, 0x1ff, 0x1, 0x10000}, {0x80000001, 0x2, 0x2, 0x3, 0x4}, {0x40, 0x0, 0x7, 0xc, 0x1, 0xffff0001}, {0x100006, 0x0, 0x2, 0x5, 0x742}, {0x4, 0x401, 0xc0, 0xffffffff, 0x8, 0x2}, {0x7, 0x6, 0x5, 0x4d2b, 0x4, 0x8001}, {0x6, 0xf731, 0x2b1, 0xfffffffa, 0x1, 0x101}, {0x5, 0x7, 0x101, 0x0, 0x7, 0x8}, {0x3, 0x6, 0x8, 0x8, 0x7, 0xa0}, {0x1a, 0xe, 0x3ff, 0x0, 0x3, 0xfe}, {0x2, 0x7, 0xcf0, 0x5, 0x7, 0x6}, {0xfff, 0x6, 0x0, 0x1000, 0x0, 0xf}, {0x9, 0xfffffbff, 0x2, 0x5}, {0x0, 0x22f, 0x2, 0xe7b, 0xba, 0x7ff}, {0x1, 0x7b7, 0x0, 0xcb2d, 0xe, 0x6}, {0x0, 0x30000, 0x50, 0x5, 0x5, 0x8000}, {0xf9, 0x5b, 0x8, 0x1000003, 0x3, 0xff36}, {0x2de, 0x6, 0x5, 0xa4, 0x6, 0x7}, {0xe65a, 0x9, 0xd32, 0xd4, 0x100, 0x1d}, {0x0, 0xb, 0xec36, 0x80052, 0x7, 0xe}, {0x80000000, 0x7f, 0x80, 0x4, 0x35b3, 0x5}, {0x8, 0x7, 0x44c9bfe0, 0x40, 0x4, 0x1}, {0xffff7fff, 0xf7af, 0x1ff, 0x21, 0x81, 0xa}, {0x2, 0x4, 0x7fffffff, 0x2, 0x1ff, 0x800}, {0x9, 0x9, 0x8, 0x2, 0x9, 0x6}, {0x6, 0x9, 0xafb, 0x3, 0x9, 0x5}, {0x2b20, 0x9, 0x7fffffff, 0x7c82, 0x7f, 0x8}, {0x1ff, 0x0, 0x0, 0x6, 0x8, 0x2}, {0x3, 0x6, 0x1c97600f, 0x6, 0xd, 0x800}, {0x1, 0x0, 0xfffffffc, 0x9, 0x19, 0x2}, {0x3, 0x7, 0xd, 0x7fffffff, 0x4}, {0x7f, 0x3, 0x5, 0x1, 0x75, 0x100}, {0xfff, 0x1, 0x1d, 0x40, 0x472, 0x1}, {0xe, 0x48f, 0x7, 0xfffffffc, 0x6, 0x7}, {0x9, 0x9, 0x401, 0x2, 0x1ff, 0x1}, {0xdd4, 0x0, 0x9, 0x6, 0x7, 0x7e27a179}, {0x3134, 0xfffffff9, 0x7, 0x6, 0x2, 0x1ff}, {0x81, 0x9, 0x611, 0x3, 0x2, 0x1}, {0x9, 0x3, 0x2, 0x9, 0x6, 0x4}, {0x5, 0x7, 0x1, 0x10000, 0xa, 0x1}, {0x9, 0x8, 0x0, 0x5, 0x3, 0x80000001}, {0x8, 0x9, 0x2, 0x5, 0x6, 0xd888}, {0x1, 0xdc13, 0x8, 0x6, 0x100005, 0x1}, {0xfffffff8, 0x7, 0xb13, 0x7f, 0x81, 0x2}, {0x2da, 0x0, 0x9, 0xa748, 0x4, 0x1}, {0x1, 0x5, 0x1, 0x6, 0x6, 0x4f}, {0x2a, 0x7, 0x1, 0x3000000, 0x2, 0x80000001}, {0x10, 0x2f, 0xfffffff9, 0x4, 0x200, 0x800}, {0x40, 0x6, 0xc, 0xa1f7, 0x9, 0x1000}, {0x4, 0x101, 0x3, 0x401, 0x0, 0xfff}, {0x1, 0x0, 0x9, 0xf, 0x1000, 0x40}, {0x3, 0x3, 0x1, 0x8, 0x600, 0x8}, {0x2, 0x1000, 0x5, 0x8, 0x200, 0x66d4}, {0x7, 0x2b914a38, 0xda2, 0x0, 0x2, 0x6}, {0x95, 0x9, 0x6, 0x3, 0x5, 0xfffffff3}, {0x3eb, 0x9, 0x4, 0x2, 0xfffff801, 0x9}, {0xf48, 0x80000000, 0x1000, 0x1, 0x9, 0x3}, {0x5, 0xffffffff, 0x3, 0xf, 0x6, 0x2}, {0x1, 0xbc9, 0x0, 0x6, 0x1}, {0x3ff, 0x0, 0x6, 0x3, 0x892, 0xffff5833}, {0x2, 0x5, 0x8, 0x8, 0xbcb7, 0x8}, {0x5, 0x3, 0xfffffffd, 0x7, 0x8, 0x3}, {0x6, 0x2, 0x8, 0x1, 0x9, 0x40}, {0x73d, 0x81, 0x4, 0x4c, 0x2, 0x10000}, {0x4, 0x1, 0x401, 0x4, 0x2e}, {0x99, 0x1, 0xfffffffb, 0x2, 0xd, 0x4}, {0x100, 0xfffffffc, 0x5, 0xa, 0x7, 0x5cf4}, {0x8, 0x5, 0x9, 0x1000, 0x1ff, 0x80}, {0x800, 0x10000, 0x2, 0xd3, 0xe, 0xfffffffd}, {0x4, 0x3, 0x6, 0x727b, 0xc, 0x5}, {0x6, 0x2bf3, 0x3, 0x35, 0xd, 0xf24}, {0x9, 0x890c, 0xcf3, 0x87ee, 0x5, 0xfffffffc}, {0x49424b5d, 0xf, 0x3, 0x7, 0x2d219f14, 0x1ff}, {0x3, 0x5, 0x9, 0x9, 0xffffffff, 0x4}, {0x40006, 0x5, 0x4, 0x80, 0x7fffffff, 0x8000}, {0x5, 0xfffff404, 0x1, 0x8, 0x879, 0x3}, {0x5, 0xc, 0x6, 0xfffffffb, 0x8, 0x2}, {0x4, 0x600, 0x39846a8c, 0x1, 0x7fff, 0xb}, {0xfffffff1, 0x8, 0x3, 0x3, 0x2, 0x3}], [{0x5, 0x1}, {}, {0x5, 0x1}, {0x1}, {}, {0x1, 0x4fa8102eea1673da}, {0x4}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x4}, {0x3}, {0x5}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1a2b73033141e383}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x7, 0x1}, {0x4}, {0x5}, {0x2}, {0x4, 0x1}, {}, {0x2}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x7}, {0x1, 0x1}, {0x3}, {0x2}, {0x1}, {0x8, 0x1}, {0x5}, {0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x1}, {0x0, 0xbfb90171edaf7461}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x2}, {0x2}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x2}, {0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {}, {0x0, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x5}, {0x3}, {0x3}, {0x4}, {}, {0x0, 0x1}, {0x2}]}}, @TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0xb5c, 0x80000000, 0x6, 0x5, 0x10000}, 0x1, 0x7, [{0x0, 0x10001, 0xe2, 0x80000000, 0x7, 0x30}, {0x31a, 0x9, 0x2f, 0x9, 0xd2e, 0xfffffff8}, {0x0, 0x1, 0x1, 0xff07, 0x7f, 0xfffffffb}, {0x8, 0xd3c, 0x1, 0x8c, 0x400, 0x62}]}, [{0x0, 0xffff, 0xe341, 0x0, 0x1, 0xd}, {0x5, 0x0, 0x80000001, 0xfffffffb, 0xffff, 0x9}, {0xfffffff7, 0x5, 0x7, 0x4, 0x9, 0x5}, {0x5, 0x3, 0x3, 0x5, 0x5}, {0x2, 0x4, 0xe247, 0x5e5, 0x9, 0x4575}, {0x4, 0x80, 0x9, 0x1bb20000, 0xffffffff, 0xf}, {0x523, 0xfff, 0x77, 0x88b2a2d, 0x42, 0x8}, {0xe0, 0x1, 0xc, 0x4, 0x400, 0xad}, {0x57f, 0xfffffa04, 0x4, 0x3, 0x9, 0x5}, {0x2, 0x2, 0x7, 0x9, 0x4, 0x401}, {0x5, 0x45ca, 0xfffffff9, 0x8, 0x4, 0x7fffffff}, {0x7, 0x5, 0x77600000, 0x2e, 0xfffffffa, 0x8}, {0x7, 0x5, 0x10000, 0x8, 0x3, 0x3}, {0xf88, 0x81f, 0xfa, 0x3, 0x23f67e31, 0x400}, {0xb, 0xaa, 0x2, 0xfff, 0x10000000, 0x2}, {0x3ff, 0x100, 0x82, 0x3, 0x3, 0x1000}, {0xda, 0x101, 0x4, 0x81, 0x8, 0x3}, {0x6, 0x200, 0x2, 0x2e, 0x100, 0x8000}, {0x6, 0x7, 0x0, 0x0, 0x6, 0x2}, {0x1, 0xff000000, 0x9, 0x0, 0x5, 0x7}, {0x2, 0x2, 0xd0, 0x2223, 0x7fffffff, 0x4}, {0x0, 0x5, 0x9, 0x1, 0xc022, 0x8}, {0x7fffffff, 0x1, 0x3, 0x0, 0x9, 0x9}, {0x401, 0xfffffffa, 0x8, 0xfffff800, 0x38a, 0x1}, {0xffff, 0x8, 0x100, 0x99b, 0x4, 0x6}, {0x5, 0x6, 0x1ff, 0x1, 0x6, 0x58d}, {0xffff, 0xfffffffe, 0xda, 0xfffffff8, 0x80000000, 0x4}, {0xffff, 0x1, 0x8001, 0xaa, 0x1ff, 0x9}, {0x7, 0x400, 0xf, 0x1, 0x5, 0x9}, {0x1, 0x5, 0x3ff, 0x7, 0x1, 0x7}, {0x5, 0xa0e, 0x2, 0x10, 0x4, 0x390}, {0x2, 0x7, 0x8, 0xde6, 0x0, 0x1}, {0x7, 0x9, 0x6, 0x1, 0x8, 0x8}, {0x1, 0x9, 0x1, 0x6, 0xeb, 0x5}, {0xffffff7f, 0x100, 0x5, 0x1fc, 0xfffffffe, 0x2}, {0x7, 0x0, 0xfffff215, 0x2, 0xfc3f, 0x8}, {0x0, 0x1000, 0x1000, 0x2, 0x40, 0xd}, {0xfffffff7, 0x101, 0x7, 0x4, 0x4, 0x7}, {0x1, 0x6, 0x0, 0x9025, 0x7ff, 0xffffffff}, {0x7, 0x1, 0x6, 0x5, 0x2, 0x5}, {0x3, 0x84b8, 0x5158, 0x2, 0x7, 0x5db}, {0x10, 0x8001, 0x50, 0xfff, 0x5, 0x1}, {0x80000000, 0x6, 0x7fffffff, 0x7, 0x6, 0x6}, {0x0, 0x4, 0x1, 0x5, 0x0, 0x4}, {0x67, 0x4, 0xd8, 0x401, 0xfff, 0xfffffffa}, {0x400, 0x2, 0x4, 0xa9, 0x8e, 0x6}, {0x5, 0x8, 0x0, 0x80000000, 0x40, 0x7}, {0x3, 0x9, 0x0, 0x6, 0x3022, 0x9}, {0x2, 0x10001, 0x6, 0xaf4, 0x242, 0xb}, {0x800, 0x8, 0xb309, 0x0, 0xffff8000, 0x9}, {0xfffffff9, 0x101, 0x5633, 0x4, 0x95c, 0x6}, {0x6, 0x0, 0x81, 0x6, 0x4, 0x6}, {0x7fffffff, 0x0, 0x19beb980, 0xfffffff8, 0x0, 0x2}, {0x0, 0x80000000, 0x8, 0x7, 0x4, 0x7fffffff}, {0x5, 0x5, 0x80000000, 0x74, 0xee, 0x1ff}, {0x2, 0xfff, 0x9, 0x370, 0x401, 0x9b}, {0x17, 0x3ff, 0x101, 0x7, 0x0, 0x5}, {0xcfa2, 0x7fff, 0x5, 0x1, 0x7, 0xe}, {0x2, 0x10000, 0xffff, 0x3, 0x0, 0x2}, {0xdd, 0x7, 0x5, 0x9, 0x8a, 0xaa9}, {0x4, 0x5, 0x45b, 0x7, 0x1, 0x7f}, {0x0, 0x1ff, 0xeff, 0x2943, 0x6, 0x3b57}, {0x7f, 0x1, 0x6, 0x9, 0x3, 0x8}, {0x7, 0x80000000, 0x7, 0x4, 0x6, 0x8}, {0x8, 0x3e2, 0xfff, 0x0, 0x2, 0x3}, {0x1, 0x17, 0x1, 0x76c, 0xfffff366, 0x3}, {0x4, 0x10000, 0x30, 0xfffffffa, 0x7, 0x81}, {0x3, 0x5, 0x2, 0x10001, 0xc, 0x101}, {0x92, 0x3, 0x800, 0x933d, 0xd9, 0x5}, {0x6, 0x0, 0x4, 0x2, 0xfffffff8, 0x5}, {0x7, 0x9, 0x8, 0xc, 0x7, 0x5785}, {0x4, 0x1e, 0x6aad, 0x200, 0x4b7, 0xfffffffe}, {0x3, 0x9, 0x28000000, 0x2, 0xfff, 0x3}, {0x101, 0x2, 0x4, 0x2, 0x1, 0x6}, {0x36, 0x59755c9f, 0x0, 0xfffffffe, 0x1, 0x5}, {0x2, 0x2, 0x0, 0x0, 0xc, 0x4}, {0x6, 0x40, 0x800, 0x0, 0x4665c56c, 0x7fffffff}, {0x1, 0x9, 0x0, 0x6, 0x5, 0x7f}, {0x8e, 0xfffffc00, 0x7fff, 0xa5, 0x3, 0x116a}, {0x8000, 0x2, 0x0, 0xfffffff8, 0x7, 0x5}, {0x2, 0x3, 0x79db8024, 0x1, 0x9, 0x9}, {0x8, 0xd1ed, 0x1ff, 0x3013dbb0, 0x9, 0x101}, {0x2, 0x400, 0x2, 0x3, 0x7fff, 0x3}, {0x2, 0xe3, 0xef2, 0x5, 0x7fff, 0x80000000}, {0x9, 0x0, 0xd62, 0x3e3fce0f, 0x0, 0x1}, {0x6, 0x8, 0xa, 0x3ff, 0xfff, 0x9}, {0x8, 0xffffff4e, 0x3103, 0x4, 0xba36, 0x4}, {0xfffffff9, 0x7, 0xc5, 0x5, 0x2, 0x1}, {0xba, 0x2, 0x3, 0x800, 0xe, 0xa436}, {0x524c, 0x0, 0x1, 0x2, 0xfff, 0x6}, {0x1, 0x10, 0x7, 0x1, 0x6, 0xfffff6fe}, {0x8, 0x615, 0xfffffbff, 0x6, 0x10000}, {0x1, 0x4, 0x3, 0x2, 0x3, 0x5}, {0x2, 0x80000001, 0x7, 0xfff, 0x100, 0x8}, {0x7, 0x1, 0x0, 0x3, 0x3, 0x4}, {0x5, 0x0, 0x1ff, 0x7, 0xf, 0x5da}, {0x6, 0xfffffff7, 0x1ff, 0x3, 0x3}, {0x2, 0x516a0be9, 0xd, 0x3, 0x80, 0x7}, {0x8, 0x1, 0xffff, 0x4, 0x2, 0x2}, {0x2, 0x80000000, 0x3ff, 0xfc70, 0xe, 0x3}, {0x5, 0x4, 0x1, 0x8, 0x95, 0x8}, {0x1, 0x60d, 0x7, 0x159, 0x5, 0xa}, {0x6, 0x4, 0x4, 0x0, 0x8}, {0x6, 0x7, 0x3, 0x4, 0x10001, 0x3ff}, {0xfff, 0x9, 0x9, 0xffff8adb, 0x8000, 0x5}, {0x8, 0x3, 0xffffffff, 0x3, 0x1, 0x400}, {0xfff, 0x4f6, 0x8, 0x60, 0x0, 0x1}, {0x8001, 0x9, 0x0, 0x7f, 0x4ead3d85, 0x7}, {0x7f, 0x8, 0x6, 0x0, 0x100, 0xa}, {0xfffffffd, 0x80, 0x1, 0x3, 0xf1, 0x81}, {0x4, 0xfffffff8, 0x7, 0x0, 0x5d, 0xf315}, {0x8, 0xa192, 0x0, 0x8, 0x8, 0x7}, {0x2, 0x40, 0x0, 0x8, 0x8000, 0x4}, {0x8, 0x2, 0xc, 0x7, 0x4, 0x4}, {0x5, 0x2, 0x1, 0x0, 0x7, 0xf}, {0x4, 0xf38a, 0x3, 0x200, 0x7, 0x7}, {0x7ff, 0x0, 0x6c, 0xfffffffb, 0x3, 0x5}, {0x80000000, 0x2, 0x0, 0x3, 0x2, 0x1}, {0x0, 0x4, 0x4, 0x4a3936d0, 0x7, 0x8}, {0x7ff, 0x6, 0x200, 0x1, 0x2, 0x80000000}, {0x200, 0x2, 0x8, 0x74, 0xffffffff, 0x17a2}, {0x7f, 0xfaac, 0xae, 0x9, 0xffff, 0x101}, {0x2, 0x8, 0x6, 0x7, 0xc, 0xfffffff9}, {0x9, 0x8, 0x7, 0x1, 0x7ff, 0x51}, {0x3, 0x3, 0x8, 0x30a2, 0x0, 0x7}, {0x3da3, 0x2fc1, 0x1, 0x1cc, 0x9, 0x9}, {0x1, 0x8, 0x1, 0x4, 0x800, 0x1}, {0x1, 0x4, 0x6, 0x4, 0x7, 0xfb}], [{0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0xcfd3f89a6caad6f8}, {0x5}, {0x1}, {}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x8, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x4}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x7, 0x1}, {}, {0x3}, {0x7}, {0x5}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0x1, 0x1}, {}, {0xa, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x8b915835e53fc9e5, 0x1}, {0x2}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x4}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x3}, {0x3}, {0x0, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x4}, {0x1, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x1ce8}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000012000000", @ANYRES32, @ANYBLOB="00007154bf"], 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) ioperm(0x9, 0x40, 0x8001) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r7 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x1000, 0xffffffff, 0x4000000, 0x0, r5}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') writev(r8, &(0x7f0000000240)=[{&(0x7f00000004c0)='\n', 0x1}, {&(0x7f0000000080)='=', 0x1}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.467273635s ago: executing program 0 (id=5628): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) tkill(0x0, 0x7) (fail_nth: 3) 1.402283671s ago: executing program 0 (id=5629): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x2c}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001400)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="020000000097a99de082a6007b192fc1c4a2d5f0fa9d47d5198e24063000088968cdfcf73c0f01ee3aa15a9613e0c159a1f87531", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f00000013c0), 0x2}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0) shmget(0x3, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522ea, 0x0, {0x0, 0x0, 0x74, r3, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='f2fs_sync_fs\x00', r6, 0x0, 0x6}, 0x18) r8 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = getpid() syz_pidfd_open(r9, 0x0) r10 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_open_procfs$pagemap(r10, &(0x7f00000001c0)) readv(r11, &(0x7f0000003400)=[{0x0}, {&(0x7f00000003c0)=""/4096, 0x1000}, {0x0, 0xffffffab}, {0x0}, {0x0}], 0x5) syz_pidfd_open(r10, 0x0) 1.065181925s ago: executing program 7 (id=5605): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000008c0)={0x1, &(0x7f00000002c0)=[{0x2, 0x0, 0x0, 0x7ffc9feb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000000)=ANY=[], 0x3, 0x7e4, &(0x7f0000001f80)="$eJzs3U2IG/fZAPBn1rv+2IAJeV/8BuM4YycvOOBstNpk8y4+JIp2dj2JVlok7YtNKWmI12HJOglJQxtfElNI2tJSempvaa659dZSaKGFpqdCc+ilt0BOJYV+kVAKW2YkrbXr/XD8mY/fT1j/0eiZ+T8zkufRaKW/AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIpD5bqUwm0cibS2fS7dVn262FHe4frO9XG5oNHt/Qb0RS/Iv9++Pjv/fm/ffluw8VV8fjSO/WkdhfNPvj4h2H7jz1X6Mjg+V3SOhaHbvKuCTix/1kV5df3nzvvhuf2E303V986kU+WSuu57Nm3ol8oTafpXmnlc5MT1ceOj3XSefyRtY52+lmC2m9ndW6rXZ6ov5AOjkzM5VmE2dbS8352VojG8x89MFqpTKdPjmxmNXanVbzoSejUz+dNxp5c76MqVa+EUXMo8UT8am8m3az2kKanl9ZXZ7aLdUiaHLjrD1x+To9cv+dH776wd9Wlosn5HYrSfqPdXVyslqdnH5k5pFHK5XRaqW6YcaeiKgMi/WIGIkoFrkpT1o+R27g0Ruuz0i//kcj8mjGUpyJdIvLWNRjNtrRioXi9h/HrojoG9T//33oL7/fqd/h+j+o8ndfvvtwlPX/aO/W0e3q/5a53srLK/FaXIzn45lYjdVYjpdve0a7XEaudw3JhlvzkUUz8uhEK/JYiFo5J+3PSWMmpmM6KvF0nI656EQac5FHI7LoxNnoRDey8hlVj3ZkUYtutKIdaZyIejwQaUzGTMzEVKSRxUScjVYsRTPmYzZq5VrOx0q536c2ZXnoQPz8uT98+HYxvR40udNmvVG8kIvl+OsOQZvL/RX1f3S49q+tFa8XNkeo/192N+EoDtdmbVD/AQAAgC+spHz3vTj/H4t7yqm5vJF9ZcdFPlkr3bokAQAAgOtS/uX/SNGMFVP3RFKc/1e2iHz/lucGAAAA3BhJ+R27JCLG497e1PlYiTdiObZ6EwAAAAD4HCr//n+0aMYjXi9nDIZLcf4PAAAAXxDf3m6M/Q8GY+x2FvclvxyLiLHk0uKZ+5MLtSKudmFPb7l+8//ra+zOHU4O9ldSNtOjF+9IImK0nh1JBqNf/ntfr/2ovD48ur74dmP9J+32jgnEzgmUt+J7cawXc+xc2dzRX2Q06fUyPpc3sol6q3GqHBKx+Nd99YWVb0YUvX+nuXAwifMrq8sTz764eq7M5VKx+KUL/QEUrxhHcYdc1vp7IO7ZeovHyi9i9Psd7/VbGd7+kd7iIzv3mQz3+WYc78UcH++144N7en3uL/qcnDg1GbXawZFudqb76trQ1vezmFzf8rFr2vI3475ezH0n7us1W2RR3ZDFC1dmUR3e/1e3LwbPsl2zePvY62f++dtWkk3tlsXUVlmMbp3F2p6IzfsC4HY5X476c7kKHSir0L/W+kP8JEn06m5RrGq9gL5djrXFUe4fl3tZf5VxYKw3NVTrRmNzdb98BL266r4WvSN634ne64nRw1vUlcoWR/SXVl56r39Ef/jdH/3kq0d/99Oy32uqbu/GA72YfhN3/XpTFqfeW9pbZFFs8/c3VdV3iiXe2bbfTqOaxKWIPV+/8FIceuW1iw+uXHjmueXnll+oVqemKw9XKo9U9256gLbNFIAvr91/Y2fbiEGdSR7edFYd5zbW3bvWP1IwEc/Gi7Ea5+Jk+W2DiLh3637Hhz6GcHKXs9bxoV94ObnLueXl2OqVsUlsEzs1tMf+54dl8/FNeTgA4JY4vkUd/k3/h213qf/r78yfjBO9iG3OuzfW8k1nx7F9Ld/K/928XQEAXxpZ+6NkvPtW0m7ni09PzsxM1rqns7Tdqj+VtvPZ+Szd2+xm7frpWnM+SxeLU/764I3j2ayTdpYWF1vtbjrXaqcx0snPlL/8nnb292MWas1uXu8sNrJaJ0vrrWa3Vu+ms3mnni4uPdHIO6ezdrlwZzGr53N5vdbNW82001pq17OJNO1k2VBgPps1u/lcXkw208V2vlBrX4qIxtJCls5mnXo7X+y2eisc9JU351rthXK1E1du/p9v5b4GgM+KV167+Pwzq6vLL1/bxJ+uJvh2byMAsJEqDQAAAAAAAAAAAAAAn33rn/+/czBRzL2ObwR+uol9cXXBY3Edfa31h9G9+ZvzmZq4YpP7Iy/H7U7sVk587bHHnh+ac2A45onX7z59deuJq/2mbLx1MGLvz37Qm/P49sHfuqGPxfsR1/IfZC3ZIWbDYWLvLTwkAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC2/hMAAP//oXlTQQ==") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001300)={r1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000013c0)={{r4, 0xffffffffffffffff}, &(0x7f0000001340), &(0x7f0000001380)='%ps \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="180000000800000000000000030000008520000005000900000000000000060000001853000009000000000000000000000018460000f9ffffff0000000000000000022afdff0300000085000000550000008d430001000000009500000000000000"], &(0x7f0000001080)='GPL\x00', 0x5, 0x98, &(0x7f00000010c0)=""/152, 0x41000, 0x44, '\x00', 0x0, 0x1b, r4, 0x8, &(0x7f0000001200)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001240)={0x0, 0x6, 0x8537, 0xfffffffa}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001400)=[r5, r5, r5, 0xffffffffffffffff, r6, r1, r5, r7], 0x0, 0x10, 0x9cf5}, 0x94) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r8 = signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x3]}, 0x8) faccessat2(r8, &(0x7f0000000000)='\x00', 0x2, 0x1100) r9 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/self/attr/current\x00', 0x64, 0x0) pread64(r9, &(0x7f0000000000)=""/4096, 0x1000, 0x4) 967.975824ms ago: executing program 7 (id=5630): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003580)=@newtaction={0x1ce8, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x1cd4, 0x1, [@m_pedit={0x1cd0, 0x1, 0x0, 0x0, {{0xa}, {0x1ca4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x101, 0x5c, 0x0, 0xb, 0x9}, 0x8, 0x7}, [{0x7, 0x8, 0xb6f8, 0x8, 0x101, 0x3}, {0x9, 0x6, 0x6, 0xfffffff7, 0xd, 0xed7}, {0xaabee86, 0x100, 0x4, 0x8, 0x8, 0xb6d}, {0x66, 0x80000000, 0xfffffffd, 0x2, 0x10000, 0x9}, {0x2, 0xfffffffc, 0x9, 0x1, 0x9}, {0x3, 0x8, 0x9, 0x400, 0xf, 0x939b}, {0xdc11, 0xfffffff9, 0x3ff, 0xfada, 0x401, 0x10000}, {0x15, 0x9, 0x7, 0x81, 0x7, 0x1}, {0x5, 0x1, 0x2, 0x80000001, 0xfff, 0x8}, {0xb73, 0x5, 0x3, 0xfffffff7, 0x0, 0xd}, {0xffffff80, 0x3, 0x1, 0x80000001, 0x4, 0x4}, {0x519, 0xf0, 0x0, 0x3, 0x5, 0xfffffff7}, {0x400, 0x200, 0x1ff, 0x3, 0x5, 0x5}, {0x3, 0x20000005, 0x1, 0x101, 0x200}, {0x4, 0x7, 0x1, 0x9, 0xf, 0x1}, {0x401, 0x433, 0x7, 0xffffff7f, 0x9, 0x80000007}, {0x10, 0x6, 0x9, 0x0, 0x5, 0x2}, {0x5, 0x1, 0x8, 0x3, 0x3, 0xfffffffc}, {0x0, 0x80000000, 0x80000000, 0xce4, 0x1ff, 0x2}, {0x1400, 0x8, 0x5, 0x3ff, 0xfffffffe, 0x8}, {0xa177, 0x8, 0x1, 0x7, 0x9, 0x8000}, {0xce0, 0x4, 0x1ff, 0xd7, 0x7, 0x6}, {0xffff4234, 0x4f8, 0xfffffff6, 0x1, 0xc, 0xffffffdd}, {0x81, 0x2c, 0xc13, 0x7d1, 0x4, 0x6}, {0x5, 0x7, 0x7, 0x1000, 0x2, 0x7f}, {0x400, 0x6, 0x7, 0x6, 0x120, 0x6}, {0x6, 0x3, 0x4, 0x7ff, 0x0, 0x3}, {0x6, 0x0, 0x3, 0x2, 0xfff, 0x2}, {0x8, 0x3, 0x6, 0x5c6a, 0x5, 0x9}, {0x8, 0x1, 0x8, 0x8, 0x8, 0x95}, {0xf80, 0x8, 0x10000, 0x8, 0xe, 0xfffeffff}, {0x4, 0x8000, 0x3, 0x8aa6, 0xfffffff7, 0x5}, {0x8, 0x7, 0xfffffff7, 0x3fe, 0xd7d, 0x5}, {0xd50, 0x2, 0x8, 0x1, 0x8, 0x3}, {0x2, 0x6, 0x7f, 0x9, 0xfffffff9, 0x1}, {0x162, 0x0, 0x4b3, 0xcb5, 0x5, 0x7fffffdf}, {0x80200000, 0x0, 0x1, 0x2, 0x100, 0x3}, {0x8, 0x8, 0x1, 0xffffffff, 0x3ff, 0x5d1}, {0x3, 0xd054, 0x9, 0x5, 0xfffff801, 0x1}, {0x7, 0x8, 0x983, 0x0, 0x6, 0x200}, {0x47, 0x200, 0x8, 0x9, 0x2, 0x9}, {0x1, 0xfffffff9, 0x2, 0x7, 0x7, 0x1000}, {0x10000, 0x24056a58, 0x8, 0x400001, 0x0, 0x8}, {0x2, 0x1ff, 0x3ff, 0x0, 0x2, 0x40000000}, {0x7ff, 0x7ff, 0x0, 0x3, 0x9ca, 0xffffffff}, {0x80000000, 0x9, 0x2, 0x4, 0xdd9f, 0x40}, {0xa, 0x9, 0x3, 0x0, 0xe00, 0x7fff}, {0x4, 0x7, 0x3, 0x0, 0x7f, 0x8}, {0x7, 0x8, 0x10, 0x4, 0x0, 0x80000000}, {0x7, 0x7f, 0xfffff801, 0x1ff, 0x1, 0x10000}, {0x80000001, 0x2, 0x2, 0x3, 0x4}, {0x40, 0x0, 0x7, 0xc, 0x1, 0xffff0001}, {0x100006, 0x0, 0x2, 0x5, 0x742}, {0x4, 0x401, 0xc0, 0xffffffff, 0x8, 0x2}, {0x7, 0x6, 0x5, 0x4d2b, 0x4, 0x8001}, {0x6, 0xf731, 0x2b1, 0xfffffffa, 0x1, 0x101}, {0x5, 0x7, 0x101, 0x0, 0x7, 0x8}, {0x3, 0x6, 0x8, 0x8, 0x7, 0xa0}, {0x1a, 0xe, 0x3ff, 0x0, 0x3, 0xfe}, {0x2, 0x7, 0xcf0, 0x5, 0x7, 0x6}, {0xfff, 0x6, 0x0, 0x1000, 0x0, 0xf}, {0x9, 0xfffffbff, 0x2, 0x5}, {0x0, 0x22f, 0x2, 0xe7b, 0xba, 0x7ff}, {0x1, 0x7b7, 0x0, 0xcb2d, 0xe, 0x6}, {0x0, 0x30000, 0x50, 0x5, 0x5, 0x8000}, {0xf9, 0x5b, 0x8, 0x1000003, 0x3, 0xff36}, {0x2de, 0x6, 0x5, 0xa4, 0x6, 0x7}, {0xe65a, 0x9, 0xd32, 0xd4, 0x100, 0x1d}, {0x0, 0xb, 0xec36, 0x80052, 0x7, 0xe}, {0x80000000, 0x7f, 0x80, 0x4, 0x35b3, 0x5}, {0x8, 0x7, 0x44c9bfe0, 0x40, 0x4, 0x1}, {0xffff7fff, 0xf7af, 0x1ff, 0x21, 0x81, 0xa}, {0x2, 0x4, 0x7fffffff, 0x2, 0x1ff, 0x800}, {0x9, 0x9, 0x8, 0x2, 0x9, 0x6}, {0x6, 0x9, 0xafb, 0x3, 0x9, 0x5}, {0x2b20, 0x9, 0x7fffffff, 0x7c82, 0x7f, 0x8}, {0x1ff, 0x0, 0x0, 0x6, 0x8, 0x2}, {0x3, 0x6, 0x1c97600f, 0x6, 0xd, 0x800}, {0x1, 0x0, 0xfffffffc, 0x9, 0x19, 0x2}, {0x3, 0x7, 0xd, 0x7fffffff, 0x4}, {0x7f, 0x3, 0x5, 0x1, 0x75, 0x100}, {0xfff, 0x1, 0x1d, 0x40, 0x472, 0x1}, {0xe, 0x48f, 0x7, 0xfffffffc, 0x6, 0x7}, {0x9, 0x9, 0x401, 0x2, 0x1ff, 0x1}, {0xdd4, 0x0, 0x9, 0x6, 0x7, 0x7e27a179}, {0x3134, 0xfffffff9, 0x7, 0x6, 0x2, 0x1ff}, {0x81, 0x9, 0x611, 0x3, 0x2, 0x1}, {0x9, 0x3, 0x2, 0x9, 0x6, 0x4}, {0x5, 0x7, 0x1, 0x10000, 0xa, 0x1}, {0x9, 0x8, 0x0, 0x5, 0x3, 0x80000001}, {0x8, 0x9, 0x2, 0x5, 0x6, 0xd888}, {0x1, 0xdc13, 0x8, 0x6, 0x100005, 0x1}, {0xfffffff8, 0x7, 0xb13, 0x7f, 0x81, 0x2}, {0x2da, 0x0, 0x9, 0xa748, 0x4, 0x1}, {0x1, 0x5, 0x1, 0x6, 0x6, 0x4f}, {0x2a, 0x7, 0x1, 0x3000000, 0x2, 0x80000001}, {0x10, 0x2f, 0xfffffff9, 0x4, 0x200, 0x800}, {0x40, 0x6, 0xc, 0xa1f7, 0x9, 0x1000}, {0x4, 0x101, 0x3, 0x401, 0x0, 0xfff}, {0x1, 0x0, 0x9, 0xf, 0x1000, 0x40}, {0x3, 0x3, 0x1, 0x8, 0x600, 0x8}, {0x2, 0x1000, 0x5, 0x8, 0x200, 0x66d4}, {0x7, 0x2b914a38, 0xda2, 0x0, 0x2, 0x6}, {0x95, 0x9, 0x6, 0x3, 0x5, 0xfffffff3}, {0x3eb, 0x9, 0x4, 0x2, 0xfffff801, 0x9}, {0xf48, 0x80000000, 0x1000, 0x1, 0x9, 0x3}, {0x5, 0xffffffff, 0x3, 0xf, 0x6, 0x2}, {0x1, 0xbc9, 0x0, 0x6, 0x1}, {0x3ff, 0x0, 0x6, 0x3, 0x892, 0xffff5833}, {0x2, 0x5, 0x8, 0x8, 0xbcb7, 0x8}, {0x5, 0x3, 0xfffffffd, 0x7, 0x8, 0x3}, {0x6, 0x2, 0x8, 0x1, 0x9, 0x40}, {0x73d, 0x81, 0x4, 0x4c, 0x2, 0x10000}, {0x4, 0x1, 0x401, 0x4, 0x2e}, {0x99, 0x1, 0xfffffffb, 0x2, 0xd, 0x4}, {0x100, 0xfffffffc, 0x5, 0xa, 0x7, 0x5cf4}, {0x8, 0x5, 0x9, 0x1000, 0x1ff, 0x80}, {0x800, 0x10000, 0x2, 0xd3, 0xe, 0xfffffffd}, {0x4, 0x3, 0x6, 0x727b, 0xc, 0x5}, {0x6, 0x2bf3, 0x3, 0x35, 0xd, 0xf24}, {0x9, 0x890c, 0xcf3, 0x87ee, 0x5, 0xfffffffc}, {0x49424b5d, 0xf, 0x3, 0x7, 0x2d219f14, 0x1ff}, {0x3, 0x5, 0x9, 0x9, 0xffffffff, 0x4}, {0x40006, 0x5, 0x4, 0x80, 0x7fffffff, 0x8000}, {0x5, 0xfffff404, 0x1, 0x8, 0x879, 0x3}, {0x5, 0xc, 0x6, 0xfffffffb, 0x8, 0x2}, {0x4, 0x600, 0x39846a8c, 0x1, 0x7fff, 0xb}, {0xfffffff1, 0x8, 0x3, 0x3, 0x2, 0x3}], [{0x5, 0x1}, {}, {0x5, 0x1}, {0x1}, {}, {0x1, 0x4fa8102eea1673da}, {0x4}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x4}, {0x3}, {0x5}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1a2b73033141e383}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x7, 0x1}, {0x4}, {0x5}, {0x2}, {0x4, 0x1}, {}, {0x2}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x7}, {0x1, 0x1}, {0x3}, {0x2}, {0x1}, {0x8, 0x1}, {0x5}, {0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x1}, {0x0, 0xbfb90171edaf7461}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x2}, {0x2}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x2}, {0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {}, {0x0, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x5}, {0x3}, {0x3}, {0x4}, {}, {0x0, 0x1}, {0x2}]}}, @TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0xb5c, 0x80000000, 0x6, 0x5, 0x10000}, 0x1, 0x7, [{0x0, 0x10001, 0xe2, 0x80000000, 0x7, 0x30}, {0x31a, 0x9, 0x2f, 0x9, 0xd2e, 0xfffffff8}, {0x0, 0x1, 0x1, 0xff07, 0x7f, 0xfffffffb}, {0x8, 0xd3c, 0x1, 0x8c, 0x400, 0x62}]}, [{0x0, 0xffff, 0xe341, 0x0, 0x1, 0xd}, {0x5, 0x0, 0x80000001, 0xfffffffb, 0xffff, 0x9}, {0xfffffff7, 0x5, 0x7, 0x4, 0x9, 0x5}, {0x5, 0x3, 0x3, 0x5, 0x5}, {0x2, 0x4, 0xe247, 0x5e5, 0x9, 0x4575}, {0x4, 0x80, 0x9, 0x1bb20000, 0xffffffff, 0xf}, {0x523, 0xfff, 0x77, 0x88b2a2d, 0x42, 0x8}, {0xe0, 0x1, 0xc, 0x4, 0x400, 0xad}, {0x57f, 0xfffffa04, 0x4, 0x3, 0x9, 0x5}, {0x2, 0x2, 0x7, 0x9, 0x4, 0x401}, {0x5, 0x45ca, 0xfffffff9, 0x8, 0x4, 0x7fffffff}, {0x7, 0x5, 0x77600000, 0x2e, 0xfffffffa, 0x8}, {0x7, 0x5, 0x10000, 0x8, 0x3, 0x3}, {0xf88, 0x81f, 0xfa, 0x3, 0x23f67e31, 0x400}, {0xb, 0xaa, 0x2, 0xfff, 0x10000000, 0x2}, {0x3ff, 0x100, 0x82, 0x3, 0x3, 0x1000}, {0xda, 0x101, 0x4, 0x81, 0x8, 0x3}, {0x6, 0x200, 0x2, 0x2e, 0x100, 0x8000}, {0x6, 0x7, 0x0, 0x0, 0x6, 0x2}, {0x1, 0xff000000, 0x9, 0x0, 0x5, 0x7}, {0x2, 0x2, 0xd0, 0x2223, 0x7fffffff, 0x4}, {0x0, 0x5, 0x9, 0x1, 0xc022, 0x8}, {0x7fffffff, 0x1, 0x3, 0x0, 0x9, 0x9}, {0x401, 0xfffffffa, 0x8, 0xfffff800, 0x38a, 0x1}, {0xffff, 0x8, 0x100, 0x99b, 0x4, 0x6}, {0x5, 0x6, 0x1ff, 0x1, 0x6, 0x58d}, {0xffff, 0xfffffffe, 0xda, 0xfffffff8, 0x80000000, 0x4}, {0xffff, 0x1, 0x8001, 0xaa, 0x1ff, 0x9}, {0x7, 0x400, 0xf, 0x1, 0x5, 0x9}, {0x1, 0x5, 0x3ff, 0x7, 0x1, 0x7}, {0x5, 0xa0e, 0x2, 0x10, 0x4, 0x390}, {0x2, 0x7, 0x8, 0xde6, 0x0, 0x1}, {0x7, 0x9, 0x6, 0x1, 0x8, 0x8}, {0x1, 0x9, 0x1, 0x6, 0xeb, 0x5}, {0xffffff7f, 0x100, 0x5, 0x1fc, 0xfffffffe, 0x2}, {0x7, 0x0, 0xfffff215, 0x2, 0xfc3f, 0x8}, {0x0, 0x1000, 0x1000, 0x2, 0x40, 0xd}, {0xfffffff7, 0x101, 0x7, 0x4, 0x4, 0x7}, {0x1, 0x6, 0x0, 0x9025, 0x7ff, 0xffffffff}, {0x7, 0x1, 0x6, 0x5, 0x2, 0x5}, {0x3, 0x84b8, 0x5158, 0x2, 0x7, 0x5db}, {0x10, 0x8001, 0x50, 0xfff, 0x5, 0x1}, {0x80000000, 0x6, 0x7fffffff, 0x7, 0x6, 0x6}, {0x0, 0x4, 0x1, 0x5, 0x0, 0x4}, {0x67, 0x4, 0xd8, 0x401, 0xfff, 0xfffffffa}, {0x400, 0x2, 0x4, 0xa9, 0x8e, 0x6}, {0x5, 0x8, 0x0, 0x80000000, 0x40, 0x7}, {0x3, 0x9, 0x0, 0x6, 0x3022, 0x9}, {0x2, 0x10001, 0x6, 0xaf4, 0x242, 0xb}, {0x800, 0x8, 0xb309, 0x0, 0xffff8000, 0x9}, {0xfffffff9, 0x101, 0x5633, 0x4, 0x95c, 0x6}, {0x6, 0x0, 0x81, 0x6, 0x4, 0x6}, {0x7fffffff, 0x0, 0x19beb980, 0xfffffff8, 0x0, 0x2}, {0x0, 0x80000000, 0x8, 0x7, 0x4, 0x7fffffff}, {0x5, 0x5, 0x80000000, 0x74, 0xee, 0x1ff}, {0x2, 0xfff, 0x9, 0x370, 0x401, 0x9b}, {0x17, 0x3ff, 0x101, 0x7, 0x0, 0x5}, {0xcfa2, 0x7fff, 0x5, 0x1, 0x7, 0xe}, {0x2, 0x10000, 0xffff, 0x3, 0x0, 0x2}, {0xdd, 0x7, 0x5, 0x9, 0x8a, 0xaa9}, {0x4, 0x5, 0x45b, 0x7, 0x1, 0x7f}, {0x0, 0x1ff, 0xeff, 0x2943, 0x6, 0x3b57}, {0x7f, 0x1, 0x6, 0x9, 0x3, 0x8}, {0x7, 0x80000000, 0x7, 0x4, 0x6, 0x8}, {0x8, 0x3e2, 0xfff, 0x0, 0x2, 0x3}, {0x1, 0x17, 0x1, 0x76c, 0xfffff366, 0x3}, {0x4, 0x10000, 0x30, 0xfffffffa, 0x7, 0x81}, {0x3, 0x5, 0x2, 0x10001, 0xc, 0x101}, {0x92, 0x3, 0x800, 0x933d, 0xd9, 0x5}, {0x6, 0x0, 0x4, 0x2, 0xfffffff8, 0x5}, {0x7, 0x9, 0x8, 0xc, 0x7, 0x5785}, {0x4, 0x1e, 0x6aad, 0x200, 0x4b7, 0xfffffffe}, {0x3, 0x9, 0x28000000, 0x2, 0xfff, 0x3}, {0x101, 0x2, 0x4, 0x2, 0x1, 0x6}, {0x36, 0x59755c9f, 0x0, 0xfffffffe, 0x1, 0x5}, {0x2, 0x2, 0x0, 0x0, 0xc, 0x4}, {0x6, 0x40, 0x800, 0x0, 0x4665c56c, 0x7fffffff}, {0x1, 0x9, 0x0, 0x6, 0x5, 0x7f}, {0x8e, 0xfffffc00, 0x7fff, 0xa5, 0x3, 0x116a}, {0x8000, 0x2, 0x0, 0xfffffff8, 0x7, 0x5}, {0x2, 0x3, 0x79db8024, 0x1, 0x9, 0x9}, {0x8, 0xd1ed, 0x1ff, 0x3013dbb0, 0x9, 0x101}, {0x2, 0x400, 0x2, 0x3, 0x7fff, 0x3}, {0x2, 0xe3, 0xef2, 0x5, 0x7fff, 0x80000000}, {0x9, 0x0, 0xd62, 0x3e3fce0f, 0x0, 0x1}, {0x6, 0x8, 0xa, 0x3ff, 0xfff, 0x9}, {0x8, 0xffffff4e, 0x3103, 0x4, 0xba36, 0x4}, {0xfffffff9, 0x7, 0xc5, 0x5, 0x2, 0x1}, {0xba, 0x2, 0x3, 0x800, 0xe, 0xa436}, {0x524c, 0x0, 0x1, 0x2, 0xfff, 0x6}, {0x1, 0x10, 0x7, 0x1, 0x6, 0xfffff6fe}, {0x8, 0x615, 0xfffffbff, 0x6, 0x10000}, {0x1, 0x4, 0x3, 0x2, 0x3, 0x5}, {0x2, 0x80000001, 0x7, 0xfff, 0x100, 0x8}, {0x7, 0x1, 0x0, 0x3, 0x3, 0x4}, {0x5, 0x0, 0x1ff, 0x7, 0xf, 0x5da}, {0x6, 0xfffffff7, 0x1ff, 0x3, 0x3}, {0x2, 0x516a0be9, 0xd, 0x3, 0x80, 0x7}, {0x8, 0x1, 0xffff, 0x4, 0x2, 0x2}, {0x2, 0x80000000, 0x3ff, 0xfc70, 0xe, 0x3}, {0x5, 0x4, 0x1, 0x8, 0x95, 0x8}, {0x1, 0x60d, 0x7, 0x159, 0x5, 0xa}, {0x6, 0x4, 0x4, 0x0, 0x8}, {0x6, 0x7, 0x3, 0x4, 0x10001, 0x3ff}, {0xfff, 0x9, 0x9, 0xffff8adb, 0x8000, 0x5}, {0x8, 0x3, 0xffffffff, 0x3, 0x1, 0x400}, {0xfff, 0x4f6, 0x8, 0x60, 0x0, 0x1}, {0x8001, 0x9, 0x0, 0x7f, 0x4ead3d85, 0x7}, {0x7f, 0x8, 0x6, 0x0, 0x100, 0xa}, {0xfffffffd, 0x80, 0x1, 0x3, 0xf1, 0x81}, {0x4, 0xfffffff8, 0x7, 0x0, 0x5d, 0xf315}, {0x8, 0xa192, 0x0, 0x8, 0x8, 0x7}, {0x2, 0x40, 0x0, 0x8, 0x8000, 0x4}, {0x8, 0x2, 0xc, 0x7, 0x4, 0x4}, {0x5, 0x2, 0x1, 0x0, 0x7, 0xf}, {0x4, 0xf38a, 0x3, 0x200, 0x7, 0x7}, {0x7ff, 0x0, 0x6c, 0xfffffffb, 0x3, 0x5}, {0x80000000, 0x2, 0x0, 0x3, 0x2, 0x1}, {0x0, 0x4, 0x4, 0x4a3936d0, 0x7, 0x8}, {0x7ff, 0x6, 0x200, 0x1, 0x2, 0x80000000}, {0x200, 0x2, 0x8, 0x74, 0xffffffff, 0x17a2}, {0x7f, 0xfaac, 0xae, 0x9, 0xffff, 0x101}, {0x2, 0x8, 0x6, 0x7, 0xc, 0xfffffff9}, {0x9, 0x8, 0x7, 0x1, 0x7ff, 0x51}, {0x3, 0x3, 0x8, 0x30a2, 0x0, 0x7}, {0x3da3, 0x2fc1, 0x1, 0x1cc, 0x9, 0x9}, {0x1, 0x8, 0x1, 0x4, 0x800, 0x1}, {0x1, 0x4, 0x6, 0x4, 0x7, 0xfb}], [{0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0xcfd3f89a6caad6f8}, {0x5}, {0x1}, {}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x8, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x4}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x7, 0x1}, {}, {0x3}, {0x7}, {0x5}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0x1, 0x1}, {}, {0xa, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x8b915835e53fc9e5, 0x1}, {0x2}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x4}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x3}, {0x3}, {0x0, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x4}, {0x1, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x1ce8}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000012000000", @ANYRES32, @ANYBLOB="00007154bf"], 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) ioperm(0x9, 0x40, 0x8001) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 756.522325ms ago: executing program 8 (id=5615): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000004018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x100006, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x5, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x8}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x80000}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) 661.410725ms ago: executing program 8 (id=5631): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ff9}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x0, 0xff, 0x81}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) msgsnd(0x0, &(0x7f0000002900)=ANY=[@ANYBLOB="01"], 0xfd1, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) 429.116158ms ago: executing program 1 (id=5632): openat$autofs(0xffffffffffffff9c, 0x0, 0x929080, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = semget$private(0x0, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x8, 0x0, 0x7ffc0002}]}) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) semop(r4, &(0x7f0000000140)=[{0x1, 0x5, 0x1800}, {0x4, 0x5, 0x800}, {0x4, 0x6f, 0x800}], 0x3) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_delete(r6) listen(r3, 0x0) execveat(0xffffffffffffff9c, &(0x7f00000001c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000004c0)={[&(0x7f00000002c0)='kmem_cache_free\x00', &(0x7f00000003c0)='GPL\x00', &(0x7f0000000400)='GPL\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)='GPL\x00']}, &(0x7f0000000580)={[&(0x7f0000000500)='\x00', &(0x7f0000000540)='kmem_cache_free\x00']}, 0x1000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x3, &(0x7f0000000040)=[{0x2, 0xf1, 0x4b, 0x2}, {0x3, 0x79, 0xeb, 0xffffff01}, {0xe90, 0x40, 0x2, 0x3ff}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000000085000000730000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$unix(r2, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 423.696518ms ago: executing program 3 (id=5633): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003580)=@newtaction={0x1ce8, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x1cd4, 0x1, [@m_pedit={0x1cd0, 0x1, 0x0, 0x0, {{0xa}, {0x1ca4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x101, 0x5c, 0x0, 0xb, 0x9}, 0x8, 0x7}, [{0x7, 0x8, 0xb6f8, 0x8, 0x101, 0x3}, {0x9, 0x6, 0x6, 0xfffffff7, 0xd, 0xed7}, {0xaabee86, 0x100, 0x4, 0x8, 0x8, 0xb6d}, {0x66, 0x80000000, 0xfffffffd, 0x2, 0x10000, 0x9}, {0x2, 0xfffffffc, 0x9, 0x1, 0x9}, {0x3, 0x8, 0x9, 0x400, 0xf, 0x939b}, {0xdc11, 0xfffffff9, 0x3ff, 0xfada, 0x401, 0x10000}, {0x15, 0x9, 0x7, 0x81, 0x7, 0x1}, {0x5, 0x1, 0x2, 0x80000001, 0xfff, 0x8}, {0xb73, 0x5, 0x3, 0xfffffff7, 0x0, 0xd}, {0xffffff80, 0x3, 0x1, 0x80000001, 0x4, 0x4}, {0x519, 0xf0, 0x0, 0x3, 0x5, 0xfffffff7}, {0x400, 0x200, 0x1ff, 0x3, 0x5, 0x5}, {0x3, 0x20000005, 0x1, 0x101, 0x200}, {0x4, 0x7, 0x1, 0x9, 0xf, 0x1}, {0x401, 0x433, 0x7, 0xffffff7f, 0x9, 0x80000007}, {0x10, 0x6, 0x9, 0x0, 0x5, 0x2}, {0x5, 0x1, 0x8, 0x3, 0x3, 0xfffffffc}, {0x0, 0x80000000, 0x80000000, 0xce4, 0x1ff, 0x2}, {0x1400, 0x8, 0x5, 0x3ff, 0xfffffffe, 0x8}, {0xa177, 0x8, 0x1, 0x7, 0x9, 0x8000}, {0xce0, 0x4, 0x1ff, 0xd7, 0x7, 0x6}, {0xffff4234, 0x4f8, 0xfffffff6, 0x1, 0xc, 0xffffffdd}, {0x81, 0x2c, 0xc13, 0x7d1, 0x4, 0x6}, {0x5, 0x7, 0x7, 0x1000, 0x2, 0x7f}, {0x400, 0x6, 0x7, 0x6, 0x120, 0x6}, {0x6, 0x3, 0x4, 0x7ff, 0x0, 0x3}, {0x6, 0x0, 0x3, 0x2, 0xfff, 0x2}, {0x8, 0x3, 0x6, 0x5c6a, 0x5, 0x9}, {0x8, 0x1, 0x8, 0x8, 0x8, 0x95}, {0xf80, 0x8, 0x10000, 0x8, 0xe, 0xfffeffff}, {0x4, 0x8000, 0x3, 0x8aa6, 0xfffffff7, 0x5}, {0x8, 0x7, 0xfffffff7, 0x3fe, 0xd7d, 0x5}, {0xd50, 0x2, 0x8, 0x1, 0x8, 0x3}, {0x2, 0x6, 0x7f, 0x9, 0xfffffff9, 0x1}, {0x162, 0x0, 0x4b3, 0xcb5, 0x5, 0x7fffffdf}, {0x80200000, 0x0, 0x1, 0x2, 0x100, 0x3}, {0x8, 0x8, 0x1, 0xffffffff, 0x3ff, 0x5d1}, {0x3, 0xd054, 0x9, 0x5, 0xfffff801, 0x1}, {0x7, 0x8, 0x983, 0x0, 0x6, 0x200}, {0x47, 0x200, 0x8, 0x9, 0x2, 0x9}, {0x1, 0xfffffff9, 0x2, 0x7, 0x7, 0x1000}, {0x10000, 0x24056a58, 0x8, 0x400001, 0x0, 0x8}, {0x2, 0x1ff, 0x3ff, 0x0, 0x2, 0x40000000}, {0x7ff, 0x7ff, 0x0, 0x3, 0x9ca, 0xffffffff}, {0x80000000, 0x9, 0x2, 0x4, 0xdd9f, 0x40}, {0xa, 0x9, 0x3, 0x0, 0xe00, 0x7fff}, {0x4, 0x7, 0x3, 0x0, 0x7f, 0x8}, {0x7, 0x8, 0x10, 0x4, 0x0, 0x80000000}, {0x7, 0x7f, 0xfffff801, 0x1ff, 0x1, 0x10000}, {0x80000001, 0x2, 0x2, 0x3, 0x4}, {0x40, 0x0, 0x7, 0xc, 0x1, 0xffff0001}, {0x100006, 0x0, 0x2, 0x5, 0x742}, {0x4, 0x401, 0xc0, 0xffffffff, 0x8, 0x2}, {0x7, 0x6, 0x5, 0x4d2b, 0x4, 0x8001}, {0x6, 0xf731, 0x2b1, 0xfffffffa, 0x1, 0x101}, {0x5, 0x7, 0x101, 0x0, 0x7, 0x8}, {0x3, 0x6, 0x8, 0x8, 0x7, 0xa0}, {0x1a, 0xe, 0x3ff, 0x0, 0x3, 0xfe}, {0x2, 0x7, 0xcf0, 0x5, 0x7, 0x6}, {0xfff, 0x6, 0x0, 0x1000, 0x0, 0xf}, {0x9, 0xfffffbff, 0x2, 0x5}, {0x0, 0x22f, 0x2, 0xe7b, 0xba, 0x7ff}, {0x1, 0x7b7, 0x0, 0xcb2d, 0xe, 0x6}, {0x0, 0x30000, 0x50, 0x5, 0x5, 0x8000}, {0xf9, 0x5b, 0x8, 0x1000003, 0x3, 0xff36}, {0x2de, 0x6, 0x5, 0xa4, 0x6, 0x7}, {0xe65a, 0x9, 0xd32, 0xd4, 0x100, 0x1d}, {0x0, 0xb, 0xec36, 0x80052, 0x7, 0xe}, {0x80000000, 0x7f, 0x80, 0x4, 0x35b3, 0x5}, {0x8, 0x7, 0x44c9bfe0, 0x40, 0x4, 0x1}, {0xffff7fff, 0xf7af, 0x1ff, 0x21, 0x81, 0xa}, {0x2, 0x4, 0x7fffffff, 0x2, 0x1ff, 0x800}, {0x9, 0x9, 0x8, 0x2, 0x9, 0x6}, {0x6, 0x9, 0xafb, 0x3, 0x9, 0x5}, {0x2b20, 0x9, 0x7fffffff, 0x7c82, 0x7f, 0x8}, {0x1ff, 0x0, 0x0, 0x6, 0x8, 0x2}, {0x3, 0x6, 0x1c97600f, 0x6, 0xd, 0x800}, {0x1, 0x0, 0xfffffffc, 0x9, 0x19, 0x2}, {0x3, 0x7, 0xd, 0x7fffffff, 0x4}, {0x7f, 0x3, 0x5, 0x1, 0x75, 0x100}, {0xfff, 0x1, 0x1d, 0x40, 0x472, 0x1}, {0xe, 0x48f, 0x7, 0xfffffffc, 0x6, 0x7}, {0x9, 0x9, 0x401, 0x2, 0x1ff, 0x1}, {0xdd4, 0x0, 0x9, 0x6, 0x7, 0x7e27a179}, {0x3134, 0xfffffff9, 0x7, 0x6, 0x2, 0x1ff}, {0x81, 0x9, 0x611, 0x3, 0x2, 0x1}, {0x9, 0x3, 0x2, 0x9, 0x6, 0x4}, {0x5, 0x7, 0x1, 0x10000, 0xa, 0x1}, {0x9, 0x8, 0x0, 0x5, 0x3, 0x80000001}, {0x8, 0x9, 0x2, 0x5, 0x6, 0xd888}, {0x1, 0xdc13, 0x8, 0x6, 0x100005, 0x1}, {0xfffffff8, 0x7, 0xb13, 0x7f, 0x81, 0x2}, {0x2da, 0x0, 0x9, 0xa748, 0x4, 0x1}, {0x1, 0x5, 0x1, 0x6, 0x6, 0x4f}, {0x2a, 0x7, 0x1, 0x3000000, 0x2, 0x80000001}, {0x10, 0x2f, 0xfffffff9, 0x4, 0x200, 0x800}, {0x40, 0x6, 0xc, 0xa1f7, 0x9, 0x1000}, {0x4, 0x101, 0x3, 0x401, 0x0, 0xfff}, {0x1, 0x0, 0x9, 0xf, 0x1000, 0x40}, {0x3, 0x3, 0x1, 0x8, 0x600, 0x8}, {0x2, 0x1000, 0x5, 0x8, 0x200, 0x66d4}, {0x7, 0x2b914a38, 0xda2, 0x0, 0x2, 0x6}, {0x95, 0x9, 0x6, 0x3, 0x5, 0xfffffff3}, {0x3eb, 0x9, 0x4, 0x2, 0xfffff801, 0x9}, {0xf48, 0x80000000, 0x1000, 0x1, 0x9, 0x3}, {0x5, 0xffffffff, 0x3, 0xf, 0x6, 0x2}, {0x1, 0xbc9, 0x0, 0x6, 0x1}, {0x3ff, 0x0, 0x6, 0x3, 0x892, 0xffff5833}, {0x2, 0x5, 0x8, 0x8, 0xbcb7, 0x8}, {0x5, 0x3, 0xfffffffd, 0x7, 0x8, 0x3}, {0x6, 0x2, 0x8, 0x1, 0x9, 0x40}, {0x73d, 0x81, 0x4, 0x4c, 0x2, 0x10000}, {0x4, 0x1, 0x401, 0x4, 0x2e}, {0x99, 0x1, 0xfffffffb, 0x2, 0xd, 0x4}, {0x100, 0xfffffffc, 0x5, 0xa, 0x7, 0x5cf4}, {0x8, 0x5, 0x9, 0x1000, 0x1ff, 0x80}, {0x800, 0x10000, 0x2, 0xd3, 0xe, 0xfffffffd}, {0x4, 0x3, 0x6, 0x727b, 0xc, 0x5}, {0x6, 0x2bf3, 0x3, 0x35, 0xd, 0xf24}, {0x9, 0x890c, 0xcf3, 0x87ee, 0x5, 0xfffffffc}, {0x49424b5d, 0xf, 0x3, 0x7, 0x2d219f14, 0x1ff}, {0x3, 0x5, 0x9, 0x9, 0xffffffff, 0x4}, {0x40006, 0x5, 0x4, 0x80, 0x7fffffff, 0x8000}, {0x5, 0xfffff404, 0x1, 0x8, 0x879, 0x3}, {0x5, 0xc, 0x6, 0xfffffffb, 0x8, 0x2}, {0x4, 0x600, 0x39846a8c, 0x1, 0x7fff, 0xb}, {0xfffffff1, 0x8, 0x3, 0x3, 0x2, 0x3}], [{0x5, 0x1}, {}, {0x5, 0x1}, {0x1}, {}, {0x1, 0x4fa8102eea1673da}, {0x4}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x4}, {0x3}, {0x5}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1a2b73033141e383}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x7, 0x1}, {0x4}, {0x5}, {0x2}, {0x4, 0x1}, {}, {0x2}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x7}, {0x1, 0x1}, {0x3}, {0x2}, {0x1}, {0x8, 0x1}, {0x5}, {0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x1}, {0x0, 0xbfb90171edaf7461}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x2}, {0x2}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x2}, {0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {}, {0x0, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x5}, {0x3}, {0x3}, {0x4}, {}, {0x0, 0x1}, {0x2}]}}, @TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0xb5c, 0x80000000, 0x6, 0x5, 0x10000}, 0x1, 0x7, [{0x0, 0x10001, 0xe2, 0x80000000, 0x7, 0x30}, {0x31a, 0x9, 0x2f, 0x9, 0xd2e, 0xfffffff8}, {0x0, 0x1, 0x1, 0xff07, 0x7f, 0xfffffffb}, {0x8, 0xd3c, 0x1, 0x8c, 0x400, 0x62}]}, [{0x0, 0xffff, 0xe341, 0x0, 0x1, 0xd}, {0x5, 0x0, 0x80000001, 0xfffffffb, 0xffff, 0x9}, {0xfffffff7, 0x5, 0x7, 0x4, 0x9, 0x5}, {0x5, 0x3, 0x3, 0x5, 0x5}, {0x2, 0x4, 0xe247, 0x5e5, 0x9, 0x4575}, {0x4, 0x80, 0x9, 0x1bb20000, 0xffffffff, 0xf}, {0x523, 0xfff, 0x77, 0x88b2a2d, 0x42, 0x8}, {0xe0, 0x1, 0xc, 0x4, 0x400, 0xad}, {0x57f, 0xfffffa04, 0x4, 0x3, 0x9, 0x5}, {0x2, 0x2, 0x7, 0x9, 0x4, 0x401}, {0x5, 0x45ca, 0xfffffff9, 0x8, 0x4, 0x7fffffff}, {0x7, 0x5, 0x77600000, 0x2e, 0xfffffffa, 0x8}, {0x7, 0x5, 0x10000, 0x8, 0x3, 0x3}, {0xf88, 0x81f, 0xfa, 0x3, 0x23f67e31, 0x400}, {0xb, 0xaa, 0x2, 0xfff, 0x10000000, 0x2}, {0x3ff, 0x100, 0x82, 0x3, 0x3, 0x1000}, {0xda, 0x101, 0x4, 0x81, 0x8, 0x3}, {0x6, 0x200, 0x2, 0x2e, 0x100, 0x8000}, {0x6, 0x7, 0x0, 0x0, 0x6, 0x2}, {0x1, 0xff000000, 0x9, 0x0, 0x5, 0x7}, {0x2, 0x2, 0xd0, 0x2223, 0x7fffffff, 0x4}, {0x0, 0x5, 0x9, 0x1, 0xc022, 0x8}, {0x7fffffff, 0x1, 0x3, 0x0, 0x9, 0x9}, {0x401, 0xfffffffa, 0x8, 0xfffff800, 0x38a, 0x1}, {0xffff, 0x8, 0x100, 0x99b, 0x4, 0x6}, {0x5, 0x6, 0x1ff, 0x1, 0x6, 0x58d}, {0xffff, 0xfffffffe, 0xda, 0xfffffff8, 0x80000000, 0x4}, {0xffff, 0x1, 0x8001, 0xaa, 0x1ff, 0x9}, {0x7, 0x400, 0xf, 0x1, 0x5, 0x9}, {0x1, 0x5, 0x3ff, 0x7, 0x1, 0x7}, {0x5, 0xa0e, 0x2, 0x10, 0x4, 0x390}, {0x2, 0x7, 0x8, 0xde6, 0x0, 0x1}, {0x7, 0x9, 0x6, 0x1, 0x8, 0x8}, {0x1, 0x9, 0x1, 0x6, 0xeb, 0x5}, {0xffffff7f, 0x100, 0x5, 0x1fc, 0xfffffffe, 0x2}, {0x7, 0x0, 0xfffff215, 0x2, 0xfc3f, 0x8}, {0x0, 0x1000, 0x1000, 0x2, 0x40, 0xd}, {0xfffffff7, 0x101, 0x7, 0x4, 0x4, 0x7}, {0x1, 0x6, 0x0, 0x9025, 0x7ff, 0xffffffff}, {0x7, 0x1, 0x6, 0x5, 0x2, 0x5}, {0x3, 0x84b8, 0x5158, 0x2, 0x7, 0x5db}, {0x10, 0x8001, 0x50, 0xfff, 0x5, 0x1}, {0x80000000, 0x6, 0x7fffffff, 0x7, 0x6, 0x6}, {0x0, 0x4, 0x1, 0x5, 0x0, 0x4}, {0x67, 0x4, 0xd8, 0x401, 0xfff, 0xfffffffa}, {0x400, 0x2, 0x4, 0xa9, 0x8e, 0x6}, {0x5, 0x8, 0x0, 0x80000000, 0x40, 0x7}, {0x3, 0x9, 0x0, 0x6, 0x3022, 0x9}, {0x2, 0x10001, 0x6, 0xaf4, 0x242, 0xb}, {0x800, 0x8, 0xb309, 0x0, 0xffff8000, 0x9}, {0xfffffff9, 0x101, 0x5633, 0x4, 0x95c, 0x6}, {0x6, 0x0, 0x81, 0x6, 0x4, 0x6}, {0x7fffffff, 0x0, 0x19beb980, 0xfffffff8, 0x0, 0x2}, {0x0, 0x80000000, 0x8, 0x7, 0x4, 0x7fffffff}, {0x5, 0x5, 0x80000000, 0x74, 0xee, 0x1ff}, {0x2, 0xfff, 0x9, 0x370, 0x401, 0x9b}, {0x17, 0x3ff, 0x101, 0x7, 0x0, 0x5}, {0xcfa2, 0x7fff, 0x5, 0x1, 0x7, 0xe}, {0x2, 0x10000, 0xffff, 0x3, 0x0, 0x2}, {0xdd, 0x7, 0x5, 0x9, 0x8a, 0xaa9}, {0x4, 0x5, 0x45b, 0x7, 0x1, 0x7f}, {0x0, 0x1ff, 0xeff, 0x2943, 0x6, 0x3b57}, {0x7f, 0x1, 0x6, 0x9, 0x3, 0x8}, {0x7, 0x80000000, 0x7, 0x4, 0x6, 0x8}, {0x8, 0x3e2, 0xfff, 0x0, 0x2, 0x3}, {0x1, 0x17, 0x1, 0x76c, 0xfffff366, 0x3}, {0x4, 0x10000, 0x30, 0xfffffffa, 0x7, 0x81}, {0x3, 0x5, 0x2, 0x10001, 0xc, 0x101}, {0x92, 0x3, 0x800, 0x933d, 0xd9, 0x5}, {0x6, 0x0, 0x4, 0x2, 0xfffffff8, 0x5}, {0x7, 0x9, 0x8, 0xc, 0x7, 0x5785}, {0x4, 0x1e, 0x6aad, 0x200, 0x4b7, 0xfffffffe}, {0x3, 0x9, 0x28000000, 0x2, 0xfff, 0x3}, {0x101, 0x2, 0x4, 0x2, 0x1, 0x6}, {0x36, 0x59755c9f, 0x0, 0xfffffffe, 0x1, 0x5}, {0x2, 0x2, 0x0, 0x0, 0xc, 0x4}, {0x6, 0x40, 0x800, 0x0, 0x4665c56c, 0x7fffffff}, {0x1, 0x9, 0x0, 0x6, 0x5, 0x7f}, {0x8e, 0xfffffc00, 0x7fff, 0xa5, 0x3, 0x116a}, {0x8000, 0x2, 0x0, 0xfffffff8, 0x7, 0x5}, {0x2, 0x3, 0x79db8024, 0x1, 0x9, 0x9}, {0x8, 0xd1ed, 0x1ff, 0x3013dbb0, 0x9, 0x101}, {0x2, 0x400, 0x2, 0x3, 0x7fff, 0x3}, {0x2, 0xe3, 0xef2, 0x5, 0x7fff, 0x80000000}, {0x9, 0x0, 0xd62, 0x3e3fce0f, 0x0, 0x1}, {0x6, 0x8, 0xa, 0x3ff, 0xfff, 0x9}, {0x8, 0xffffff4e, 0x3103, 0x4, 0xba36, 0x4}, {0xfffffff9, 0x7, 0xc5, 0x5, 0x2, 0x1}, {0xba, 0x2, 0x3, 0x800, 0xe, 0xa436}, {0x524c, 0x0, 0x1, 0x2, 0xfff, 0x6}, {0x1, 0x10, 0x7, 0x1, 0x6, 0xfffff6fe}, {0x8, 0x615, 0xfffffbff, 0x6, 0x10000}, {0x1, 0x4, 0x3, 0x2, 0x3, 0x5}, {0x2, 0x80000001, 0x7, 0xfff, 0x100, 0x8}, {0x7, 0x1, 0x0, 0x3, 0x3, 0x4}, {0x5, 0x0, 0x1ff, 0x7, 0xf, 0x5da}, {0x6, 0xfffffff7, 0x1ff, 0x3, 0x3}, {0x2, 0x516a0be9, 0xd, 0x3, 0x80, 0x7}, {0x8, 0x1, 0xffff, 0x4, 0x2, 0x2}, {0x2, 0x80000000, 0x3ff, 0xfc70, 0xe, 0x3}, {0x5, 0x4, 0x1, 0x8, 0x95, 0x8}, {0x1, 0x60d, 0x7, 0x159, 0x5, 0xa}, {0x6, 0x4, 0x4, 0x0, 0x8}, {0x6, 0x7, 0x3, 0x4, 0x10001, 0x3ff}, {0xfff, 0x9, 0x9, 0xffff8adb, 0x8000, 0x5}, {0x8, 0x3, 0xffffffff, 0x3, 0x1, 0x400}, {0xfff, 0x4f6, 0x8, 0x60, 0x0, 0x1}, {0x8001, 0x9, 0x0, 0x7f, 0x4ead3d85, 0x7}, {0x7f, 0x8, 0x6, 0x0, 0x100, 0xa}, {0xfffffffd, 0x80, 0x1, 0x3, 0xf1, 0x81}, {0x4, 0xfffffff8, 0x7, 0x0, 0x5d, 0xf315}, {0x8, 0xa192, 0x0, 0x8, 0x8, 0x7}, {0x2, 0x40, 0x0, 0x8, 0x8000, 0x4}, {0x8, 0x2, 0xc, 0x7, 0x4, 0x4}, {0x5, 0x2, 0x1, 0x0, 0x7, 0xf}, {0x4, 0xf38a, 0x3, 0x200, 0x7, 0x7}, {0x7ff, 0x0, 0x6c, 0xfffffffb, 0x3, 0x5}, {0x80000000, 0x2, 0x0, 0x3, 0x2, 0x1}, {0x0, 0x4, 0x4, 0x4a3936d0, 0x7, 0x8}, {0x7ff, 0x6, 0x200, 0x1, 0x2, 0x80000000}, {0x200, 0x2, 0x8, 0x74, 0xffffffff, 0x17a2}, {0x7f, 0xfaac, 0xae, 0x9, 0xffff, 0x101}, {0x2, 0x8, 0x6, 0x7, 0xc, 0xfffffff9}, {0x9, 0x8, 0x7, 0x1, 0x7ff, 0x51}, {0x3, 0x3, 0x8, 0x30a2, 0x0, 0x7}, {0x3da3, 0x2fc1, 0x1, 0x1cc, 0x9, 0x9}, {0x1, 0x8, 0x1, 0x4, 0x800, 0x1}, {0x1, 0x4, 0x6, 0x4, 0x7, 0xfb}], [{0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0xcfd3f89a6caad6f8}, {0x5}, {0x1}, {}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x8, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x4}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x7, 0x1}, {}, {0x3}, {0x7}, {0x5}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0x1, 0x1}, {}, {0xa, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x8b915835e53fc9e5, 0x1}, {0x2}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x4}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x3}, {0x3}, {0x0, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x4}, {0x1, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x1ce8}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000012000000", @ANYRES32, @ANYBLOB="00007154bf"], 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) ioperm(0x9, 0x40, 0x8001) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r7 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x1000, 0xffffffff, 0x4000000, 0x0, r5}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 420.221279ms ago: executing program 8 (id=5634): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x40}, 0x18) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x1f) 372.029404ms ago: executing program 8 (id=5635): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x2c}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001400)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="020000000097a99de082a6007b192fc1c4a2d5f0fa9d47d5198e24063000088968cdfcf73c0f01ee3aa15a9613e0c159a1f87531", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f00000013c0), 0x2}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522ea, 0x0, {0x0, 0x0, 0x74, r3, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 370.470494ms ago: executing program 3 (id=5636): openat$autofs(0xffffffffffffff9c, 0x0, 0x929080, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = semget$private(0x0, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x8, 0x0, 0x7ffc0002}]}) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) semop(r4, &(0x7f0000000140)=[{0x1, 0x5, 0x1800}, {0x4, 0x5, 0x800}, {0x4, 0x6f, 0x800}], 0x3) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_delete(r6) listen(r3, 0x0) execveat(0xffffffffffffff9c, &(0x7f00000001c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000004c0)={[&(0x7f00000002c0)='kmem_cache_free\x00', &(0x7f00000003c0)='GPL\x00', &(0x7f0000000400)='GPL\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)='GPL\x00']}, &(0x7f0000000580)={[&(0x7f0000000500)='\x00', &(0x7f0000000540)='kmem_cache_free\x00']}, 0x1000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x3, &(0x7f0000000040)=[{0x2, 0xf1, 0x4b, 0x2}, {0x3, 0x79, 0xeb, 0xffffff01}, {0xe90, 0x40, 0x2, 0x3ff}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$unix(r2, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 282.356352ms ago: executing program 1 (id=5637): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={0x14, 0x16, 0xa01, 0x0, 0x25dfdbfd, {0xa}}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x81080000}, 0xc, &(0x7f0000000180)={&(0x7f0000000ac0)={0x350, r2, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x2f4, 0x11d, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x77}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xb}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x80}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8000000000000000}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffffffffffff}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xff}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x83}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7e}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x13}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3b}]}, {0x1e0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x120, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xe4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x101, 0x2, 0x0, 0x5, 0x9, 0x400, 0x6b]}}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x7, 0x9}, {0x4, 0x1}, {0x0, 0xa}, {0x7, 0x2}, {0x2, 0x3}, {0x0, 0xa}, {0x3}, {0x7, 0x4}, {0x2, 0x6}, {0x2, 0x7}, {0x6, 0x6}, {0x5, 0x2}, {0x4, 0xa}, {0x7, 0x4}, {0x7, 0x5}, {0x5, 0x7}, {0x7, 0xa}, {0x4, 0x8}, {0x4, 0xa}, {0x6, 0x4}, {0x7, 0x4}, {0x0, 0x8}, {}, {0x0, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x0, 0x0, 0x0, 0x7fff, 0x7, 0x101, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x3, 0xa}, {0x6, 0x7}, {0x1, 0x2}, {0x1, 0xa}, {0x7, 0x3}, {0x4, 0x6}, {0x5, 0x2}, {0x0, 0x6}, {0x0, 0x5}, {0x2}, {0x7, 0x5}, {0x1, 0x3}, {0x7, 0x6}, {0x1, 0x2}, {0x4}, {0x1, 0x6}, {0x7, 0xa}, {0x5, 0x8}, {0x2, 0xa}, {0x1, 0x1}, {0x1, 0x8}, {0x7, 0x5}, {0x1, 0x9}, {0x1, 0x1}, {0x0, 0x5}, {0x7, 0x9}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0xa}, {0x2, 0x5}, {0x7, 0x2}, {0x6, 0x8}, {0x3, 0x1}, {0x6, 0x5}, {0x0, 0x6}, {0x1}, {0x1, 0x4}, {0x7, 0x8}, {0x5, 0x9}, {0x4, 0xa}, {0x4, 0x3}, {0x7, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xdc1, 0x1, 0x9, 0x0, 0x800, 0x4, 0x10, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x9, 0xd9, 0x4, 0xfffc, 0xff00, 0x3645, 0x1f]}}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x1, 0x1}, {0x1, 0x8}, {0x5, 0x6}, {0x1, 0x3}, {0x4, 0x7}, {0x6, 0x4}, {0x7, 0x2}, {0x2, 0x2}, {0x6}, {0x5, 0x6}, {0x0, 0x7}, {0x0, 0x5}, {0x2, 0x6}, {0x5, 0x5}, {0x3, 0x6}, {0x7, 0x1}, {0x0, 0xa}, {0x2, 0x2}, {0x6, 0x5}, {0x4, 0x5}, {0x3, 0x3}, {0x4, 0x8}, {0x1, 0x6}, {0x1, 0x3}, {0x6, 0x8}, {0x6, 0x9}, {0x3, 0x3}, {0x1, 0x6}, {0x3}, {0x5, 0x3}, {0x0, 0x2}, {0x7, 0x1}, {0x0, 0x7}, {0x1, 0x7}, {0x1, 0x3}, {0x5, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x10, 0x8, 0x4, 0x3, 0x9, 0x8, 0x5]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x5, 0x800, 0x7, 0x6, 0x1000, 0x4, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x48, 0x8, 0x9, 0xa, 0x4, 0x0, 0x517, 0x1ff]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x79}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc0}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x84, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x3, 0x0, 0x9, 0x5, 0x7fff, 0x8, 0xffff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0xd, 0x66c1, 0x200, 0x5, 0x2, 0x1, 0x401]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x9, 0xb, 0x9, 0x0, 0x1000, 0x800]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0xb, 0x60, 0x18, 0x6, 0x0, 0x36, 0x48, 0x6, 0x2, 0x1b, 0xc, 0x1, 0x1b, 0x60, 0x1b, 0x12]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7d}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x48, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8000000000000000}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x38}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xdd}]}]}]}, 0x350}, 0x1, 0x0, 0x0, 0x40000c0}, 0x40010) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xb, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r3, 0x0, 0x4ab}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x512, &(0x7f0000000380)="$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") 185.746441ms ago: executing program 3 (id=5638): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x83, &(0x7f0000000480)=ANY=[@ANYBLOB="e10931d8640affff1f09ffff86dd60014100004d8800"], 0x0) 158.230794ms ago: executing program 3 (id=5639): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x83, &(0x7f0000000480)=ANY=[@ANYBLOB="e10931d8640affff1f09ffff86dd60014100004d880020"], 0x0) 124.224098ms ago: executing program 3 (id=5640): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40000, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r2}, 0x10) writev(r0, &(0x7f0000001480)=[{&(0x7f0000000200)='4', 0x1}, {0x0}], 0x2) r4 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000100), 0x1, 0x57e, &(0x7f00000005c0)="$eJzs3U1oHGUfAPD/zGbffuV90xcUVHooKlQo3ST90OqpvYqFQg+CFw2bbSjZZEM20SbkkN6L2IOo9FJvevCoePAgXjx6ErwonoVig0LTg67MfqRpvtzUJlszvx/M7jzz7Oz/eXb2/+zMMMMGkFtHs4c04umIuJhEDKyq64t25dHW65aXFsr3lhbKSTQal35NIomIu0sL5c7rk/bzoYhYjIinIuKbYsTxdH3c+tz8+Ei1WplulwdnJqYG63PzJ65MjIxVxiqTp156+czZ02eGTw6vXu1eY3WpuL2+Xv/pxrvXv3v11o1PPzuyWH5/JIlz0d+uW92PR6n1mRTj3Jrlp3ciWA8lvW4AD6XQzvMslZ6MgSi0s34jjYFdbRqwwxr7IhpATiXyH3Kqsx+QHf92pt3c/7h9vnUAksVdbk+tmr7WuYnY3zw2Ofhb8sCRSXa8eXg3G8qetHgtIob6+tZ//5P29+/hDT2KBrKjvj7f2lDrt3+6Mv7EBuNPf+fc6T/UGf+W141/9+MXNhn/LnYZ4483fv5o0/jXIp7ZMH6yEj/ZIH4aEW91Gf/m61+e3ayu8XHEsdg4fkey9fnhwctXqpWh1uOGMb46duSVrfp/cJP4rXO2+5s/M2v6fyhr01SX/f/i28+fXdwi/gvPbb39N/r8D0TEe13G///dT17brO72teROthew3e2fLbvVZfwXzx39scuXAgAAAAAAAAAA25A2r2VL0tLKfJqWSq17eJ+Ig2m1Vp85frk2OznauubtcBTTzpVWA61ykpWH29fjdson15RPFdoBCwea5VK5Vh3tcd8BAAAAAAAAAAAAAAAAAADgcXFozf3/vxea9/+v/btqYK/a/C+/gb1O/kN+PZj/Sc/aAew+v/+QWw35D/kl/yG/5D/kl/yH/JL/kF/yH/JL/gMAAAAAAAAAAAAAAAAAAAAAAAAAwI64eOFCNjXuLS2Us/Jo39zseO3tE6OV+nhpYrZcKtemp0pjtdpYtVIq1yb+7v2SWm1qKCZnrw7OVOozg/W5+TcnarOTSXzfrK4Ud6FPAAAAAAAAAAAAAAAAAAAA8G/T35yStBQRaXM+TUuliP9GxOEoJpevVCtDEfG/iPihUNyXlYd73WgAAAAAAAAAAAAAAAAAAADYY+pz8+Mj1Wplek/O7I+IB5f0bWf1iFh8tA3L3nHbaxXb2+px+VTN5GGmxwMTAAAAAAAAAAAAAAAAAADk0P2bfrtd48+dbRAAAAAAAAAAAAAAAAAAAADkUvpLEhHZdGzg+f61tf9JlgvN54h45+alD66OzMxMD2fL76wsn/mwvfxkL9oPdKuTp508BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO6rz82Pj1SrlekdnOl1HwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAexl8BAAD//5aV1q4=") r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x14, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfb1, 0x0, 0x0, 0x0, 0xdc}, [@call={0x85, 0x0, 0x0, 0x85}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x8}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x94fa}}, @exit, @alu={0x4, 0x1, 0x5, 0xa, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x4}, @exit]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x1000, &(0x7f00000014c0)=""/4096, 0x40f00, 0x10, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000001c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x8, 0xffffffff, 0x100}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000380)=[r1, r1], &(0x7f00000003c0)=[{0x3, 0x2, 0xa, 0x5}], 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000000)='kvm_msi_set_irq\x00', r5, 0x0, 0x1}, 0x18) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) write$tun(r6, 0x0, 0x11) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) unlinkat(r4, &(0x7f0000000540)='./file1\x00', 0x200) unshare(0x2c020400) 18.598078ms ago: executing program 1 (id=5641): r0 = syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0x5e99, 0x3000, 0x3, 0x19a}, &(0x7f0000000040), &(0x7f0000000200)) pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x80, 0x0) ppoll(&(0x7f00000001c0)=[{r0, 0x20}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0xa4}, [@ldst={0x4, 0x0, 0x4, 0x0, 0x5, 0x0, 0x8}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) 0s ago: executing program 3 (id=5642): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, r1, 0x801, 0x70bd2a, 0x3effffff, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) unshare(0x62000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8803, 0x0) socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) kernel console output (not intermixed with test programs): op8: detected capacity change from 0 to 164 [ 586.373487][ T4846] Bluetooth: hci1: Frame reassembly failed (-84) [ 586.496606][ T2790] loop7: detected capacity change from 0 to 764 [ 586.511175][ T2790] Symlink component flag not implemented [ 586.516880][ T2790] Symlink component flag not implemented [ 586.532912][ T2790] Symlink component flag not implemented (129) [ 586.539245][ T2790] Symlink component flag not implemented (6) [ 586.555938][ T2790] rock: directory entry would overflow storage [ 586.562303][ T2790] rock: sig=0x4f50, size=4, remaining=3 [ 586.568036][ T2790] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 586.600755][ T1974] rock: directory entry would overflow storage [ 586.607115][ T1974] rock: sig=0x4f50, size=4, remaining=3 [ 586.612911][ T1974] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 586.621311][ T1974] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 586.768566][ T1704] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.873522][ T2809] __nla_validate_parse: 2 callbacks suppressed [ 586.873541][ T2809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5384'. [ 586.889131][ T2809] tipc: Enabling of bearer rejected, failed to enable media [ 587.021037][ T2828] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 587.536107][ T4783] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.767336][ T2864] FAULT_INJECTION: forcing a failure. [ 587.767336][ T2864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 587.780686][ T2864] CPU: 0 UID: 0 PID: 2864 Comm: syz.0.5392 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 587.780727][ T2864] Tainted: [W]=WARN [ 587.780736][ T2864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 587.780753][ T2864] Call Trace: [ 587.780761][ T2864] [ 587.780772][ T2864] __dump_stack+0x1d/0x30 [ 587.780819][ T2864] dump_stack_lvl+0xe8/0x140 [ 587.780844][ T2864] dump_stack+0x15/0x1b [ 587.780883][ T2864] should_fail_ex+0x265/0x280 [ 587.780919][ T2864] should_fail+0xb/0x20 [ 587.780957][ T2864] should_fail_usercopy+0x1a/0x20 [ 587.781059][ T2864] _copy_from_user+0x1c/0xb0 [ 587.781086][ T2864] dev_ethtool+0xce/0x1670 [ 587.781124][ T2864] ? full_name_hash+0x92/0xe0 [ 587.781190][ T2864] ? strcmp+0x22/0x50 [ 587.781218][ T2864] dev_ioctl+0x2e0/0x960 [ 587.781251][ T2864] sock_do_ioctl+0x197/0x220 [ 587.781395][ T2864] sock_ioctl+0x41b/0x610 [ 587.781477][ T2864] ? __pfx_sock_ioctl+0x10/0x10 [ 587.781518][ T2864] __se_sys_ioctl+0xcb/0x140 [ 587.781600][ T2864] __x64_sys_ioctl+0x43/0x50 [ 587.781645][ T2864] x64_sys_call+0x1816/0x3000 [ 587.781721][ T2864] do_syscall_64+0xd2/0x200 [ 587.781751][ T2864] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 587.781829][ T2864] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 587.781855][ T2864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.782017][ T2864] RIP: 0033:0x7fd2ad6ceec9 [ 587.782037][ T2864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 587.782056][ T2864] RSP: 002b:00007fd2ac137038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 587.782081][ T2864] RAX: ffffffffffffffda RBX: 00007fd2ad925fa0 RCX: 00007fd2ad6ceec9 [ 587.782098][ T2864] RDX: 0000200000000340 RSI: 0000000000008946 RDI: 0000000000000005 [ 587.782133][ T2864] RBP: 00007fd2ac137090 R08: 0000000000000000 R09: 0000000000000000 [ 587.782150][ T2864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.782168][ T2864] R13: 00007fd2ad926038 R14: 00007fd2ad925fa0 R15: 00007ffce5f0d308 [ 587.782275][ T2864] [ 587.798901][ T2636] Bluetooth: hci0: command 0x1003 tx timeout [ 587.838534][ T3570] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 588.049900][ T2833] chnl_net:caif_netlink_parms(): no params data found [ 588.169921][ T2833] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.177110][ T2833] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.245864][ T2833] bridge_slave_0: entered allmulticast mode [ 588.253499][ T2833] bridge_slave_0: entered promiscuous mode [ 588.260637][ T2833] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.267856][ T2833] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.275451][ T2833] bridge_slave_1: entered allmulticast mode [ 588.284515][ T2833] bridge_slave_1: entered promiscuous mode [ 588.292136][ T29] kauditd_printk_skb: 641 callbacks suppressed [ 588.292157][ T29] audit: type=1326 audit(1759984587.194:51405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3016 comm="syz.8.5395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5f51eec9 code=0x7ffc0000 [ 588.328716][ T29] audit: type=1326 audit(1759984587.194:51406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3016 comm="syz.8.5395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5f51eec9 code=0x7ffc0000 [ 588.353961][ T3017] 9pnet_fd: Insufficient options for proto=fd [ 588.386124][ T2833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.407078][ T2833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.417263][T31335] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 588.423688][ T3570] Bluetooth: hci1: command 0x1003 tx timeout [ 588.445932][ T29] audit: type=1326 audit(1759984587.234:51407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3016 comm="syz.8.5395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fda5f51eec9 code=0x7ffc0000 [ 588.469646][ T29] audit: type=1326 audit(1759984587.234:51408): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3016 comm="syz.8.5395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5f51eec9 code=0x7ffc0000 [ 588.493800][ T29] audit: type=1326 audit(1759984587.234:51409): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3016 comm="syz.8.5395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5f51eec9 code=0x7ffc0000 [ 588.518373][ T29] audit: type=1326 audit(1759984587.254:51410): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3016 comm="syz.8.5395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fda5f51eec9 code=0x7ffc0000 [ 588.542783][ T29] audit: type=1326 audit(1759984587.254:51411): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3016 comm="syz.8.5395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5f51eec9 code=0x7ffc0000 [ 588.567306][ T29] audit: type=1326 audit(1759984587.254:51412): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3016 comm="syz.8.5395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fda5f51eec9 code=0x7ffc0000 [ 588.591380][ T29] audit: type=1326 audit(1759984587.264:51413): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3016 comm="syz.8.5395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5f51eec9 code=0x7ffc0000 [ 588.615710][ T29] audit: type=1326 audit(1759984587.264:51414): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3016 comm="syz.8.5395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda5f51eec9 code=0x7ffc0000 [ 588.620969][ T4846] Bluetooth: hci0: Frame reassembly failed (-84) [ 588.647918][ T3570] Bluetooth: hci0: Malformed Event: 0x02 [ 588.667307][ T3060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5398'. [ 588.679230][ T2833] team0: Port device team_slave_0 added [ 588.686057][ T2833] team0: Port device team_slave_1 added [ 588.709611][ T3060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5398'. [ 588.762877][ T2833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 588.769985][ T2833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 588.796887][ T2833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 588.814886][ T2833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 588.822024][ T2833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 588.848848][ T2833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 588.878306][ T3017] program syz.8.5395 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 588.893634][ T3017] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5395'. [ 588.917137][ T2833] hsr_slave_0: entered promiscuous mode [ 588.923558][ T2833] hsr_slave_1: entered promiscuous mode [ 588.929617][ T2833] debugfs: 'hsr0' already exists in 'hsr' [ 588.935465][ T2833] Cannot create hsr debugfs directory [ 588.948378][ T3066] loop8: detected capacity change from 0 to 512 [ 588.957941][ T3151] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 588.967252][ T3066] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 588.981155][ T3066] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 588.981629][ T3152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5399'. [ 589.000950][ T3152] tipc: Started in network mode [ 589.005889][ T3152] tipc: Node identity fff50000000000000000000000000001, cluster identity 4711 [ 589.015012][ T3152] tipc: Enabling of bearer rejected, failed to enable media [ 589.039314][ T4783] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.123026][ T4783] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.136548][T32326] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.161870][ T3224] FAULT_INJECTION: forcing a failure. [ 589.161870][ T3224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 589.178679][ T3224] CPU: 0 UID: 0 PID: 3224 Comm: syz.8.5403 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 589.178814][ T3224] Tainted: [W]=WARN [ 589.178821][ T3224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 589.178915][ T3224] Call Trace: [ 589.178923][ T3224] [ 589.178932][ T3224] __dump_stack+0x1d/0x30 [ 589.178960][ T3224] dump_stack_lvl+0xe8/0x140 [ 589.179043][ T3224] dump_stack+0x15/0x1b [ 589.179066][ T3224] should_fail_ex+0x265/0x280 [ 589.179102][ T3224] should_fail+0xb/0x20 [ 589.179146][ T3224] should_fail_usercopy+0x1a/0x20 [ 589.179197][ T3224] _copy_from_user+0x1c/0xb0 [ 589.179231][ T3224] __se_sys_mount+0x10d/0x2e0 [ 589.179285][ T3224] ? __bpf_trace_sys_enter+0x10/0x30 [ 589.179313][ T3224] ? trace_sys_enter+0xd0/0xf0 [ 589.179340][ T3224] __x64_sys_mount+0x67/0x80 [ 589.179407][ T3224] x64_sys_call+0x2b51/0x3000 [ 589.179438][ T3224] do_syscall_64+0xd2/0x200 [ 589.179534][ T3224] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 589.179648][ T3224] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 589.179672][ T3224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.179694][ T3224] RIP: 0033:0x7fda5f51eec9 [ 589.179724][ T3224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 589.179747][ T3224] RSP: 002b:00007fda5df7f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 589.179773][ T3224] RAX: ffffffffffffffda RBX: 00007fda5f775fa0 RCX: 00007fda5f51eec9 [ 589.179790][ T3224] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000 [ 589.179807][ T3224] RBP: 00007fda5df7f090 R08: 0000200000000300 R09: 0000000000000000 [ 589.180096][ T3224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 589.180113][ T3224] R13: 00007fda5f776038 R14: 00007fda5f775fa0 R15: 00007ffd4c87ad68 [ 589.180139][ T3224] [ 589.181781][ T3224] 9p: Unknown access argument ¿: -22 [ 589.383006][ T4783] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.518648][ T4783] bridge_slave_1: left allmulticast mode [ 589.524533][ T4783] bridge_slave_1: left promiscuous mode [ 589.531218][ T4783] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.540227][ T4783] bridge_slave_0: left allmulticast mode [ 589.546196][ T4783] bridge_slave_0: left promiscuous mode [ 589.552184][ T4783] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.653332][ T4783] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.664129][ T4783] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.674481][ T4783] bond0 (unregistering): Released all slaves [ 589.686691][ T3248] vxcan1: entered allmulticast mode [ 589.779853][ T4783] hsr_slave_0: left promiscuous mode [ 589.787500][ T4783] hsr_slave_1: left promiscuous mode [ 589.794438][ T4783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 589.802636][ T4783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 589.811503][ T4783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 589.819043][ T4783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 589.845969][ T4783] veth1_macvtap: left promiscuous mode [ 589.854329][ T4783] veth0_macvtap: left promiscuous mode [ 589.860642][ T4783] veth1_vlan: left promiscuous mode [ 589.866119][ T4783] veth0_vlan: left promiscuous mode [ 589.979856][ T4783] team0 (unregistering): Port device team_slave_1 removed [ 590.000495][ T4783] team0 (unregistering): Port device team_slave_0 removed [ 590.139541][ T2833] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 590.170605][ T2833] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 590.180870][ T2833] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 590.201331][ T2833] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 590.275106][ T2833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.288115][ T2833] 8021q: adding VLAN 0 to HW filter on device team0 [ 590.300418][ T4784] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.307747][ T4784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 590.332462][ T2833] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 590.343334][ T2833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 590.360245][ T4784] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.367475][ T4784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.426167][ T3340] loop8: detected capacity change from 0 to 764 [ 590.435366][ T3340] Symlink component flag not implemented [ 590.441266][ T3340] Symlink component flag not implemented [ 590.447516][ T3340] Symlink component flag not implemented (129) [ 590.454065][ T3340] Symlink component flag not implemented (6) [ 590.461230][ T3340] rock: directory entry would overflow storage [ 590.467561][ T3340] rock: sig=0x4f50, size=4, remaining=3 [ 590.473625][ T3340] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 590.488704][ T2833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 590.515389][T32326] rock: directory entry would overflow storage [ 590.522293][T32326] rock: sig=0x4f50, size=4, remaining=3 [ 590.527859][T32326] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 590.536325][T32326] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 590.661448][T31335] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 590.759690][ T3368] sd 0:0:1:0: device reset [ 590.810456][ T2833] veth0_vlan: entered promiscuous mode [ 590.837779][ T2833] veth1_vlan: entered promiscuous mode [ 590.857620][ T3375] FAULT_INJECTION: forcing a failure. [ 590.857620][ T3375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 590.871603][ T3375] CPU: 1 UID: 0 PID: 3375 Comm: syz.4.5414 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 590.871646][ T3375] Tainted: [W]=WARN [ 590.871653][ T3375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 590.871699][ T3375] Call Trace: [ 590.871706][ T3375] [ 590.871715][ T3375] __dump_stack+0x1d/0x30 [ 590.871742][ T3375] dump_stack_lvl+0xe8/0x140 [ 590.871762][ T3375] dump_stack+0x15/0x1b [ 590.871779][ T3375] should_fail_ex+0x265/0x280 [ 590.871868][ T3375] should_fail+0xb/0x20 [ 590.871901][ T3375] should_fail_usercopy+0x1a/0x20 [ 590.871929][ T3375] _copy_from_user+0x1c/0xb0 [ 590.872090][ T3375] __sys_bpf+0x183/0x7c0 [ 590.872143][ T3375] __x64_sys_bpf+0x41/0x50 [ 590.872179][ T3375] x64_sys_call+0x2aee/0x3000 [ 590.872243][ T3375] do_syscall_64+0xd2/0x200 [ 590.872287][ T3375] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 590.872315][ T3375] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 590.872343][ T3375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.872372][ T3375] RIP: 0033:0x7f5226b2eec9 [ 590.872458][ T3375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 590.872476][ T3375] RSP: 002b:00007f5225597038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 590.872502][ T3375] RAX: ffffffffffffffda RBX: 00007f5226d85fa0 RCX: 00007f5226b2eec9 [ 590.872575][ T3375] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 590.872588][ T3375] RBP: 00007f5225597090 R08: 0000000000000000 R09: 0000000000000000 [ 590.872600][ T3375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 590.872632][ T3375] R13: 00007f5226d86038 R14: 00007f5226d85fa0 R15: 00007fff357771e8 [ 590.872654][ T3375] [ 591.079895][ T2833] veth0_macvtap: entered promiscuous mode [ 591.097151][ T2833] veth1_macvtap: entered promiscuous mode [ 591.109368][ T2833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 591.122174][ T2833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 591.134897][ T4811] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.144843][ T4811] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.158204][ T4811] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.173971][ T4811] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.194495][ T4846] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.213588][ T3383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5415'. [ 591.222773][ T3383] tipc: Started in network mode [ 591.227963][ T3383] tipc: Node identity fff50000000000000000000000000001, cluster identity 4711 [ 591.237219][ T3383] tipc: Enabling of bearer rejected, failed to enable media [ 591.351702][ T4846] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.413114][ T4846] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.482930][ T4846] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.581720][ T4846] bridge_slave_1: left allmulticast mode [ 591.587466][ T4846] bridge_slave_1: left promiscuous mode [ 591.593297][ T4846] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.603298][ T4846] bridge_slave_0: left allmulticast mode [ 591.609260][ T4846] bridge_slave_0: left promiscuous mode [ 591.615420][ T4846] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.721008][ T4846] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 591.740443][ T4846] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 591.750312][ T4846] bond0 (unregistering): Released all slaves [ 591.787182][ T3397] chnl_net:caif_netlink_parms(): no params data found [ 591.859375][ T4846] hsr_slave_0: left promiscuous mode [ 591.865487][ T4846] hsr_slave_1: left promiscuous mode [ 591.877446][ T4846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 591.885391][ T4846] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 591.918686][ T4846] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 591.926542][ T4846] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 591.978618][ T4846] veth1_macvtap: left promiscuous mode [ 591.999221][ T4846] veth0_macvtap: left promiscuous mode [ 592.014956][ T4846] veth1_vlan: left promiscuous mode [ 592.028213][ T4846] veth0_vlan: left promiscuous mode [ 592.156805][ T3569] FAULT_INJECTION: forcing a failure. [ 592.156805][ T3569] name failslab, interval 1, probability 0, space 0, times 0 [ 592.169773][ T3569] CPU: 1 UID: 0 PID: 3569 Comm: syz.4.5422 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 592.169807][ T3569] Tainted: [W]=WARN [ 592.169828][ T3569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 592.169908][ T3569] Call Trace: [ 592.169921][ T3569] [ 592.169932][ T3569] __dump_stack+0x1d/0x30 [ 592.170036][ T3569] dump_stack_lvl+0xe8/0x140 [ 592.170061][ T3569] dump_stack+0x15/0x1b [ 592.170082][ T3569] should_fail_ex+0x265/0x280 [ 592.170202][ T3569] ? vt_do_diacrit+0x121/0x6b0 [ 592.170232][ T3569] should_failslab+0x8c/0xb0 [ 592.170332][ T3569] __kmalloc_cache_noprof+0x4c/0x4a0 [ 592.170406][ T3569] vt_do_diacrit+0x121/0x6b0 [ 592.170437][ T3569] vt_ioctl+0xe0d/0x18a0 [ 592.170461][ T3569] ? tty_jobctrl_ioctl+0x29e/0x810 [ 592.170500][ T3569] tty_ioctl+0x7d5/0xb80 [ 592.170562][ T3569] ? __pfx_tty_ioctl+0x10/0x10 [ 592.170591][ T3569] __se_sys_ioctl+0xcb/0x140 [ 592.170663][ T3569] __x64_sys_ioctl+0x43/0x50 [ 592.170765][ T3569] x64_sys_call+0x1816/0x3000 [ 592.170796][ T3569] do_syscall_64+0xd2/0x200 [ 592.170829][ T3569] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 592.170875][ T3569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.170916][ T3569] RIP: 0033:0x7f5226b2eec9 [ 592.170938][ T3569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.170964][ T3569] RSP: 002b:00007f5225597038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 592.170990][ T3569] RAX: ffffffffffffffda RBX: 00007f5226d85fa0 RCX: 00007f5226b2eec9 [ 592.171009][ T3569] RDX: 0000000000000000 RSI: 0000000000004b4a RDI: 0000000000000008 [ 592.171025][ T3569] RBP: 00007f5225597090 R08: 0000000000000000 R09: 0000000000000000 [ 592.171050][ T3569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.171068][ T3569] R13: 00007f5226d86038 R14: 00007f5226d85fa0 R15: 00007fff357771e8 [ 592.171101][ T3569] [ 592.376631][ T4846] team0 (unregistering): Port device team_slave_1 removed [ 592.404199][ T4846] team0 (unregistering): Port device team_slave_0 removed [ 592.481750][ T3561] veth0: entered promiscuous mode [ 592.529738][ T3564] veth0: left promiscuous mode [ 592.567457][ T3397] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.574663][ T3397] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.582668][ T3397] bridge_slave_0: entered allmulticast mode [ 592.590352][ T3397] bridge_slave_0: entered promiscuous mode [ 592.596721][ T4783] Bluetooth: hci0: Frame reassembly failed (-84) [ 592.596745][T31335] Bluetooth: hci0: Malformed Event: 0x02 [ 592.620014][ T3397] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.627389][ T3397] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.651951][ T3397] bridge_slave_1: entered allmulticast mode [ 592.665973][ T3397] bridge_slave_1: entered promiscuous mode [ 592.685119][ T3598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5424'. [ 592.724655][ T3397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 592.756635][ T3598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5424'. [ 592.759773][ T3397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 592.801209][ T3397] team0: Port device team_slave_0 added [ 592.831203][ T3397] team0: Port device team_slave_1 added [ 592.916280][ T3397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 592.923473][ T3397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 592.949513][ T3397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 592.965040][ T3397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 592.972193][ T3397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 592.998410][ T3397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.050566][ T3397] hsr_slave_0: entered promiscuous mode [ 593.061575][ T3397] hsr_slave_1: entered promiscuous mode [ 593.075674][ T3397] debugfs: 'hsr0' already exists in 'hsr' [ 593.081537][ T3397] Cannot create hsr debugfs directory [ 593.300491][ T29] kauditd_printk_skb: 994 callbacks suppressed [ 593.300510][ T29] audit: type=1400 audit(1759984592.204:52409): avc: denied { map_create } for pid=3808 comm="syz.4.5429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 593.334023][ T29] audit: type=1400 audit(1759984592.234:52410): avc: denied { read write } for pid=3808 comm="syz.4.5429" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 593.358144][ T29] audit: type=1400 audit(1759984592.234:52411): avc: denied { open } for pid=3808 comm="syz.4.5429" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 593.381524][ T29] audit: type=1400 audit(1759984592.234:52412): avc: denied { ioctl } for pid=3808 comm="syz.4.5429" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 593.571428][ T29] audit: type=1400 audit(1759984592.474:52413): avc: denied { map_read map_write } for pid=3826 comm="syz.4.5431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 593.631141][ T3397] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 593.643138][ T3397] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 593.655459][ T3397] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 593.678120][ T3397] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 593.720440][ T29] audit: type=1400 audit(1759984592.624:52414): avc: denied { write } for pid=3844 comm="syz.0.5433" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 593.740401][ T3845] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5433'. [ 593.769623][ T3845] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3845 comm=syz.0.5433 [ 593.786573][ T29] audit: type=1400 audit(1759984592.694:52415): avc: denied { execute } for pid=3861 comm="syz.2.5434" dev="tmpfs" ino=3276 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 593.841049][ T3866] FAULT_INJECTION: forcing a failure. [ 593.841049][ T3866] name failslab, interval 1, probability 0, space 0, times 0 [ 593.853970][ T29] audit: type=1400 audit(1759984592.694:52416): avc: denied { execute_no_trans } for pid=3861 comm="syz.2.5434" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=3276 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 593.854053][ T29] audit: type=1400 audit(1759984592.744:52417): avc: denied { prog_run } for pid=3865 comm="syz.2.5435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 593.861010][ T3397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.885442][ T3866] CPU: 0 UID: 0 PID: 3866 Comm: syz.2.5435 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 593.885485][ T3866] Tainted: [W]=WARN [ 593.885495][ T3866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 593.885592][ T3866] Call Trace: [ 593.885602][ T3866] [ 593.885614][ T3866] __dump_stack+0x1d/0x30 [ 593.885646][ T3866] dump_stack_lvl+0xe8/0x140 [ 593.885725][ T3866] dump_stack+0x15/0x1b [ 593.885750][ T3866] should_fail_ex+0x265/0x280 [ 593.885856][ T3866] ? bpf_prog_alloc_no_stats+0xc4/0x3b0 [ 593.885966][ T3866] should_failslab+0x8c/0xb0 [ 593.886027][ T3866] __kmalloc_cache_noprof+0x4c/0x4a0 [ 593.886070][ T3866] bpf_prog_alloc_no_stats+0xc4/0x3b0 [ 593.886119][ T3866] bpf_prog_alloc+0x3c/0x150 [ 593.886175][ T3866] bpf_prog_load+0x506/0x1100 [ 593.886213][ T3866] ? security_bpf+0x2b/0x90 [ 593.886250][ T3866] __sys_bpf+0x469/0x7c0 [ 593.886305][ T3866] __x64_sys_bpf+0x41/0x50 [ 593.886381][ T3866] x64_sys_call+0x2aee/0x3000 [ 593.886483][ T3866] do_syscall_64+0xd2/0x200 [ 593.886518][ T3866] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 593.886586][ T3866] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 593.886653][ T3866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.886683][ T3866] RIP: 0033:0x7f3277a8eec9 [ 593.886706][ T3866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 593.886733][ T3866] RSP: 002b:00007f32764f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 593.886760][ T3866] RAX: ffffffffffffffda RBX: 00007f3277ce5fa0 RCX: 00007f3277a8eec9 [ 593.886851][ T3866] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 593.886869][ T3866] RBP: 00007f32764f7090 R08: 0000000000000000 R09: 0000000000000000 [ 593.886887][ T3866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 593.886905][ T3866] R13: 00007f3277ce6038 R14: 00007f3277ce5fa0 R15: 00007ffe3a4a1d58 [ 593.886932][ T3866] [ 594.117912][ T3397] 8021q: adding VLAN 0 to HW filter on device team0 [ 594.143303][ T4827] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.150683][ T4827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 594.161991][ T29] audit: type=1400 audit(1759984593.064:52418): avc: denied { create } for pid=3870 comm="syz.2.5437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 594.186193][ T4827] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.193328][ T4827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.235183][ T3873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5438'. [ 594.251234][ T3397] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 594.261920][ T3397] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 594.307093][ T3873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5438'. [ 594.371502][ T3877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5437'. [ 594.380608][ T3877] tipc: Enabling of bearer rejected, failed to enable media [ 594.390593][ T3397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 594.621899][ T3397] veth0_vlan: entered promiscuous mode [ 594.632005][ T3397] veth1_vlan: entered promiscuous mode [ 594.648696][ T2636] Bluetooth: hci0: command 0x1003 tx timeout [ 594.649128][ T3570] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 594.666814][ T3397] veth0_macvtap: entered promiscuous mode [ 594.675477][ T3397] veth1_macvtap: entered promiscuous mode [ 594.690029][ T3397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 594.710078][ T3397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 594.722570][ T4783] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.738261][ T3921] loop4: detected capacity change from 0 to 1024 [ 594.749303][ T3921] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 594.760568][ T3921] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 594.762750][ T4783] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.789570][ T3921] JBD2: no valid journal superblock found [ 594.789583][ T3921] EXT4-fs (loop4): Could not load journal inode [ 594.790063][ T4783] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.798072][ T4783] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.100842][ T3943] netlink: 'syz.6.5449': attribute type 10 has an invalid length. [ 595.377386][ T3958] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5451'. [ 595.386724][ T3958] tipc: Enabling of bearer rejected, failed to enable media [ 596.050213][ T3967] 9pnet_fd: Insufficient options for proto=fd [ 596.109764][ T3969] loop4: detected capacity change from 0 to 764 [ 596.119126][ T3969] Symlink component flag not implemented [ 596.124862][ T3969] Symlink component flag not implemented [ 596.131597][ T3969] Symlink component flag not implemented (129) [ 596.137854][ T3969] Symlink component flag not implemented (6) [ 596.145399][ T3969] rock: directory entry would overflow storage [ 596.151662][ T3969] rock: sig=0x4f50, size=4, remaining=3 [ 596.157267][ T3969] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 596.176783][ T3967] program syz.5.5453 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 596.188485][ T3967] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5453'. [ 596.189127][ T1390] rock: directory entry would overflow storage [ 596.203744][ T1390] rock: sig=0x4f50, size=4, remaining=3 [ 596.209634][ T1390] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 596.218194][ T1390] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 596.242704][ T3971] loop5: detected capacity change from 0 to 512 [ 596.249082][T31335] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 596.284153][ T3971] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 596.300440][ T3984] FAULT_INJECTION: forcing a failure. [ 596.300440][ T3984] name failslab, interval 1, probability 0, space 0, times 0 [ 596.313179][ T3984] CPU: 1 UID: 0 PID: 3984 Comm: syz.0.5457 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 596.313227][ T3971] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 596.313252][ T3984] Tainted: [W]=WARN [ 596.313262][ T3984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 596.313326][ T3984] Call Trace: [ 596.313334][ T3984] [ 596.313343][ T3984] __dump_stack+0x1d/0x30 [ 596.313364][ T3984] dump_stack_lvl+0xe8/0x140 [ 596.313384][ T3984] dump_stack+0x15/0x1b [ 596.313457][ T3984] should_fail_ex+0x265/0x280 [ 596.313503][ T3984] ? __se_sys_mount+0xef/0x2e0 [ 596.313544][ T3984] should_failslab+0x8c/0xb0 [ 596.313585][ T3984] __kmalloc_cache_noprof+0x4c/0x4a0 [ 596.313626][ T3984] ? memdup_user+0x99/0xd0 [ 596.313663][ T3984] __se_sys_mount+0xef/0x2e0 [ 596.313728][ T3984] ? fput+0x8f/0xc0 [ 596.313778][ T3984] ? ksys_write+0x192/0x1a0 [ 596.313813][ T3984] __x64_sys_mount+0x67/0x80 [ 596.313846][ T3984] x64_sys_call+0x2b51/0x3000 [ 596.313877][ T3984] do_syscall_64+0xd2/0x200 [ 596.313989][ T3984] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 596.314030][ T3984] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 596.314060][ T3984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.314158][ T3984] RIP: 0033:0x7fd2ad6ceec9 [ 596.314180][ T3984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 596.314207][ T3984] RSP: 002b:00007fd2ac137038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 596.314244][ T3984] RAX: ffffffffffffffda RBX: 00007fd2ad925fa0 RCX: 00007fd2ad6ceec9 [ 596.314262][ T3984] RDX: 0000200000000280 RSI: 0000200000000300 RDI: 0000000000000000 [ 596.314280][ T3984] RBP: 00007fd2ac137090 R08: 0000200000000180 R09: 0000000000000000 [ 596.314298][ T3984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 596.314317][ T3984] R13: 00007fd2ad926038 R14: 00007fd2ad925fa0 R15: 00007ffce5f0d308 [ 596.314386][ T3984] [ 596.522895][ T3991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5459'. [ 596.533034][ T3991] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5459'. [ 596.689087][ T2833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.729566][ T4012] loop5: detected capacity change from 0 to 164 [ 596.730638][ T4846] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.870829][ T4024] loop2: detected capacity change from 0 to 1024 [ 596.879624][ T4024] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 596.890901][ T4024] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 596.947622][ T4024] JBD2: no valid journal superblock found [ 596.953486][ T4024] EXT4-fs (loop2): Could not load journal inode [ 596.982172][ T4846] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.046994][ T4043] netlink: 'syz.6.5473': attribute type 13 has an invalid length. [ 597.067360][ T4043] gretap0: refused to change device tx_queue_len [ 597.077299][ T4043] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 597.096559][ T4846] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.131494][ T4052] 9pnet_fd: Insufficient options for proto=fd [ 597.161276][ T4846] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.322100][ T4846] bridge_slave_1: left allmulticast mode [ 597.327810][ T4846] bridge_slave_1: left promiscuous mode [ 597.333589][ T4846] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.382510][ T4846] bridge_slave_0: left allmulticast mode [ 597.388218][ T4846] bridge_slave_0: left promiscuous mode [ 597.394075][ T4846] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.501938][ T4846] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 597.512270][ T4846] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 597.522340][ T4846] bond0 (unregistering): Released all slaves [ 597.536830][ T4052] program syz.2.5474 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 597.586899][ T4846] tipc: Left network mode [ 597.612320][ T4846] hsr_slave_0: left promiscuous mode [ 597.642691][ T4846] hsr_slave_1: left promiscuous mode [ 597.659342][ T4846] veth1_macvtap: left promiscuous mode [ 597.665117][ T4846] veth0_macvtap: left promiscuous mode [ 597.665371][ T4052] loop2: detected capacity change from 0 to 512 [ 597.678336][ T4846] veth1_vlan: left promiscuous mode [ 597.683880][ T4846] veth0_vlan: left promiscuous mode [ 597.758383][ T4052] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 597.808775][ T4052] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 597.827370][ T4846] team0 (unregistering): Port device team_slave_1 removed [ 597.863905][ T4846] team0 (unregistering): Port device team_slave_0 removed [ 597.908546][ T4030] chnl_net:caif_netlink_parms(): no params data found [ 597.995115][ T1704] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.055532][ T4030] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.063144][ T4030] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.072794][ T4030] bridge_slave_0: entered allmulticast mode [ 598.079805][ T4030] bridge_slave_0: entered promiscuous mode [ 598.084035][ T4302] FAULT_INJECTION: forcing a failure. [ 598.084035][ T4302] name failslab, interval 1, probability 0, space 0, times 0 [ 598.087171][ T4030] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.098573][ T4302] CPU: 1 UID: 0 PID: 4302 Comm: syz.2.5485 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 598.098623][ T4302] Tainted: [W]=WARN [ 598.098632][ T4302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 598.098651][ T4302] Call Trace: [ 598.098662][ T4302] [ 598.098674][ T4302] __dump_stack+0x1d/0x30 [ 598.098771][ T4302] dump_stack_lvl+0xe8/0x140 [ 598.098799][ T4302] dump_stack+0x15/0x1b [ 598.098912][ T4302] should_fail_ex+0x265/0x280 [ 598.098966][ T4302] should_failslab+0x8c/0xb0 [ 598.099036][ T4302] kmem_cache_alloc_noprof+0x50/0x480 [ 598.099073][ T4302] ? security_inode_alloc+0x37/0x100 [ 598.099219][ T4302] security_inode_alloc+0x37/0x100 [ 598.099322][ T4302] inode_init_always_gfp+0x4b7/0x500 [ 598.099359][ T4302] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 598.099388][ T4302] alloc_inode+0x58/0x170 [ 598.099419][ T4302] new_inode+0x1d/0xe0 [ 598.099457][ T4302] shmem_get_inode+0x244/0x750 [ 598.099489][ T4302] __shmem_file_setup+0x113/0x210 [ 598.099578][ T4302] shmem_file_setup+0x3b/0x50 [ 598.099655][ T4302] __se_sys_memfd_create+0x2c3/0x590 [ 598.099690][ T4302] __x64_sys_memfd_create+0x31/0x40 [ 598.099793][ T4302] x64_sys_call+0x2ac2/0x3000 [ 598.099901][ T4302] do_syscall_64+0xd2/0x200 [ 598.099935][ T4302] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 598.099974][ T4302] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 598.100006][ T4302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.100058][ T4302] RIP: 0033:0x7f3277a8eec9 [ 598.100084][ T4302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 598.100112][ T4302] RSP: 002b:00007f32764f6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 598.100139][ T4302] RAX: ffffffffffffffda RBX: 0000000000000512 RCX: 00007f3277a8eec9 [ 598.100158][ T4302] RDX: 00007f32764f6ef0 RSI: 0000000000000000 RDI: 00007f3277b12960 [ 598.100175][ T4302] RBP: 0000200000000380 R08: 00007f32764f6bb7 R09: 00007f32764f6e40 [ 598.100203][ T4302] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000080 [ 598.100220][ T4302] R13: 00007f32764f6ef0 R14: 00007f32764f6eb0 R15: 0000200000000000 [ 598.100303][ T4302] [ 598.187274][ T4304] loop6: detected capacity change from 0 to 1024 [ 598.191674][ T4030] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.217149][ T4304] EXT4-fs: Ignoring removed orlov option [ 598.228539][ T4030] bridge_slave_1: entered allmulticast mode [ 598.247984][ T4307] loop2: detected capacity change from 0 to 764 [ 598.251235][ T4030] bridge_slave_1: entered promiscuous mode [ 598.369203][ T4307] Symlink component flag not implemented [ 598.369587][ T4304] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 598.374876][ T4307] Symlink component flag not implemented [ 598.374915][ T4307] Symlink component flag not implemented (129) [ 598.399091][ T4307] Symlink component flag not implemented (6) [ 598.404404][ T4304] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.405792][ T4307] rock: directory entry would overflow storage [ 598.420520][ T4307] rock: sig=0x4f50, size=4, remaining=3 [ 598.426089][ T4307] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 598.465947][ T4287] loop6: detected capacity change from 0 to 1024 [ 598.472458][ T29] kauditd_printk_skb: 1199 callbacks suppressed [ 598.472475][ T29] audit: type=1326 audit(1759984597.364:53616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.2.5487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3277a8eec9 code=0x7ffc0000 [ 598.502607][ T29] audit: type=1326 audit(1759984597.364:53617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.2.5487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f3277a8eec9 code=0x7ffc0000 [ 598.526504][ T29] audit: type=1326 audit(1759984597.364:53618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.2.5487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3277a8eec9 code=0x7ffc0000 [ 598.550772][ T29] audit: type=1326 audit(1759984597.364:53619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.2.5487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f3277a8eec9 code=0x7ffc0000 [ 598.553206][ T4030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 598.577084][ T29] audit: type=1326 audit(1759984597.364:53620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.2.5487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3277a8eec9 code=0x7ffc0000 [ 598.609932][ T29] audit: type=1326 audit(1759984597.364:53621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.2.5487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f3277a8eec9 code=0x7ffc0000 [ 598.633697][ T29] audit: type=1326 audit(1759984597.364:53622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.2.5487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3277a8eec9 code=0x7ffc0000 [ 598.658722][ T4287] EXT4-fs: Ignoring removed nobh option [ 598.664294][ T4030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 598.678513][ T4287] EXT4-fs: dax option not supported [ 598.711153][ T4349] loop2: detected capacity change from 0 to 164 [ 598.795399][ T4030] team0: Port device team_slave_0 added [ 598.809461][ T4380] FAULT_INJECTION: forcing a failure. [ 598.809461][ T4380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 598.824421][ T4380] CPU: 0 UID: 0 PID: 4380 Comm: syz.2.5491 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 598.824455][ T4380] Tainted: [W]=WARN [ 598.824462][ T4380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 598.824480][ T4380] Call Trace: [ 598.824488][ T4380] [ 598.824499][ T4380] __dump_stack+0x1d/0x30 [ 598.824528][ T4380] dump_stack_lvl+0xe8/0x140 [ 598.824616][ T4380] dump_stack+0x15/0x1b [ 598.824713][ T4380] should_fail_ex+0x265/0x280 [ 598.824748][ T4380] should_fail+0xb/0x20 [ 598.824799][ T4380] should_fail_usercopy+0x1a/0x20 [ 598.824822][ T4380] _copy_from_user+0x1c/0xb0 [ 598.824847][ T4380] ___sys_sendmsg+0xc1/0x1d0 [ 598.824935][ T4380] __x64_sys_sendmsg+0xd4/0x160 [ 598.824989][ T4380] x64_sys_call+0x191e/0x3000 [ 598.825089][ T4380] do_syscall_64+0xd2/0x200 [ 598.825120][ T4380] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 598.825153][ T4380] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 598.825180][ T4380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.825278][ T4380] RIP: 0033:0x7f3277a8eec9 [ 598.825299][ T4380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 598.825323][ T4380] RSP: 002b:00007f32764f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 598.825349][ T4380] RAX: ffffffffffffffda RBX: 00007f3277ce5fa0 RCX: 00007f3277a8eec9 [ 598.825365][ T4380] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 598.825378][ T4380] RBP: 00007f32764f7090 R08: 0000000000000000 R09: 0000000000000000 [ 598.825390][ T4380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.825402][ T4380] R13: 00007f3277ce6038 R14: 00007f3277ce5fa0 R15: 00007ffe3a4a1d58 [ 598.825422][ T4380] [ 598.940884][ T4030] team0: Port device team_slave_1 added [ 599.016083][ T4378] bridge0: entered promiscuous mode [ 599.021595][ T4378] macvtap0: entered allmulticast mode [ 599.027047][ T4378] bridge0: entered allmulticast mode [ 599.050166][ T4378] bridge0: port 3(macvtap0) entered blocking state [ 599.056878][ T4378] bridge0: port 3(macvtap0) entered disabled state [ 599.084328][ T4378] bridge0: left allmulticast mode [ 599.089529][ T4378] bridge0: left promiscuous mode [ 599.134419][ T29] audit: type=1326 audit(1759984598.034:53623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4390 comm="syz.0.5495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2ad6ceec9 code=0x7ffc0000 [ 599.134909][ T4391] 9pnet_fd: Insufficient options for proto=fd [ 599.158551][ T29] audit: type=1326 audit(1759984598.034:53624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4390 comm="syz.0.5495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fd2ad6ceec9 code=0x7ffc0000 [ 599.189116][ T29] audit: type=1326 audit(1759984598.034:53625): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4390 comm="syz.0.5495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2ad6ceec9 code=0x7ffc0000 [ 599.264638][ T4388] bridge0: entered promiscuous mode [ 599.270053][ T4388] macvtap1: entered allmulticast mode [ 599.275463][ T4388] bridge0: entered allmulticast mode [ 599.283187][ T4388] bridge0: port 3(macvtap1) entered blocking state [ 599.290060][ T4388] bridge0: port 3(macvtap1) entered disabled state [ 599.300856][ T4388] bridge0: left allmulticast mode [ 599.305966][ T4388] bridge0: left promiscuous mode [ 599.341719][ T4030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 599.348821][ T4030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 599.375122][ T4030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 599.398128][ T4030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 599.405201][ T4030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 599.431384][ T4030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 599.444573][ T4391] program syz.0.5495 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 599.507541][ T4428] tipc: Started in network mode [ 599.512535][ T4428] tipc: Node identity b20e96ce2fb3, cluster identity 4711 [ 599.520031][ T4428] tipc: Enabled bearer , priority 0 [ 599.537385][ T4391] __nla_validate_parse: 1 callbacks suppressed [ 599.537404][ T4391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5495'. [ 599.562550][ T4030] hsr_slave_0: entered promiscuous mode [ 599.569534][ T4030] hsr_slave_1: entered promiscuous mode [ 599.575945][ T4030] debugfs: 'hsr0' already exists in 'hsr' [ 599.582133][ T4030] Cannot create hsr debugfs directory [ 599.607346][ T4428] syzkaller0: entered promiscuous mode [ 599.613028][ T4428] syzkaller0: entered allmulticast mode [ 599.693158][ T4428] syzkaller0: mtu less than device minimum [ 599.730379][ T4427] tipc: Resetting bearer [ 599.749301][ T4427] tipc: Disabling bearer [ 599.823007][ T4552] loop2: detected capacity change from 0 to 1024 [ 599.856264][ T4552] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 599.868702][ T4552] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 599.898511][ T4552] JBD2: no valid journal superblock found [ 599.904469][ T4552] EXT4-fs (loop2): Could not load journal inode [ 599.934102][ T4563] loop6: detected capacity change from 0 to 512 [ 599.962552][ T4563] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.5502: couldn't read orphan inode 26 (err -116) [ 599.984049][ T4563] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 600.028610][ T4563] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 600.060136][ T3397] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.067887][ T4030] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 600.100406][ T4030] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 600.120553][ T4030] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 600.141197][ T4030] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 600.250301][ T4030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.421578][ T4030] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.481543][ T4784] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.488754][ T4784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.510806][ T4784] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.518005][ T4784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.531932][ T4627] loop2: detected capacity change from 0 to 764 [ 600.541689][ T4627] Symlink component flag not implemented [ 600.547551][ T4627] Symlink component flag not implemented [ 600.554346][ T4627] Symlink component flag not implemented (129) [ 600.560566][ T4627] Symlink component flag not implemented (6) [ 600.566704][ T4625] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5511'. [ 600.575991][ T4625] tipc: Enabling of bearer rejected, failed to enable media [ 600.600394][ T4627] rock: directory entry would overflow storage [ 600.606899][ T4627] rock: sig=0x4f50, size=4, remaining=3 [ 600.612976][ T4627] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 600.625473][ T4030] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 600.635963][ T4030] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 600.699349][ T1704] rock: directory entry would overflow storage [ 600.705763][ T1704] rock: sig=0x4f50, size=4, remaining=3 [ 600.711452][ T1704] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 600.758286][ T4641] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5519'. [ 600.767835][ T4784] Bluetooth: hci0: Frame reassembly failed (-84) [ 600.767846][ T4645] loop5: detected capacity change from 0 to 512 [ 600.768810][T31335] Bluetooth: hci0: Malformed Event: 0x02 [ 600.781183][ T1704] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 600.790752][ T4645] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 600.807233][ T4030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 600.832867][ T4641] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5519'. [ 600.843967][ T4645] EXT4-fs (loop5): 1 truncate cleaned up [ 600.850817][ T4645] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 600.868960][ T4641] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 600.877048][ T4641] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 600.886716][ T4641] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 600.894531][ T4641] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 600.903013][ T2833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.961659][ T4030] veth0_vlan: entered promiscuous mode [ 600.971486][ T4030] veth1_vlan: entered promiscuous mode [ 600.990616][ T4030] veth0_macvtap: entered promiscuous mode [ 600.999219][ T4030] veth1_macvtap: entered promiscuous mode [ 601.012232][ T4030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 601.026110][ T4030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 601.038606][ T4784] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.065597][ T4846] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.068968][ T4675] netlink: 'syz.0.5525': attribute type 10 has an invalid length. [ 601.101983][ T4783] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.127561][ T4679] loop5: detected capacity change from 0 to 764 [ 601.149574][ T4783] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.159120][ T4679] Symlink component flag not implemented [ 601.164944][ T4679] Symlink component flag not implemented [ 601.171711][ T4679] Symlink component flag not implemented (129) [ 601.179727][ T4679] Symlink component flag not implemented (6) [ 601.187410][ T4846] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.198419][ T4679] rock: directory entry would overflow storage [ 601.204629][ T4679] rock: sig=0x4f50, size=4, remaining=3 [ 601.210876][ T4679] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 601.224527][ T4783] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.251454][ T4846] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.272904][ T2833] rock: directory entry would overflow storage [ 601.279278][ T2833] rock: sig=0x4f50, size=4, remaining=3 [ 601.285410][ T2833] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 601.300215][ T2833] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 601.331908][ T4846] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.343684][ T4707] FAULT_INJECTION: forcing a failure. [ 601.343684][ T4707] name failslab, interval 1, probability 0, space 0, times 0 [ 601.356605][ T4707] CPU: 1 UID: 0 PID: 4707 Comm: syz.0.5530 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 601.356649][ T4707] Tainted: [W]=WARN [ 601.356699][ T4707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 601.356717][ T4707] Call Trace: [ 601.356725][ T4707] [ 601.356735][ T4707] __dump_stack+0x1d/0x30 [ 601.356795][ T4707] dump_stack_lvl+0xe8/0x140 [ 601.356820][ T4707] dump_stack+0x15/0x1b [ 601.356909][ T4707] should_fail_ex+0x265/0x280 [ 601.356958][ T4707] should_failslab+0x8c/0xb0 [ 601.356992][ T4707] __kmalloc_node_noprof+0xaa/0x580 [ 601.357041][ T4707] ? __vmalloc_node_range_noprof+0x410/0xed0 [ 601.357087][ T4707] __vmalloc_node_range_noprof+0x410/0xed0 [ 601.357141][ T4707] ? cred_has_capability+0x210/0x280 [ 601.357230][ T4707] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 601.357318][ T4707] __vmalloc_noprof+0x83/0xc0 [ 601.357359][ T4707] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 601.357460][ T4707] bpf_prog_alloc_no_stats+0x47/0x3b0 [ 601.357499][ T4707] ? bpf_prog_alloc+0x2a/0x150 [ 601.357542][ T4707] bpf_prog_alloc+0x3c/0x150 [ 601.357669][ T4707] bpf_prog_load+0x506/0x1100 [ 601.357697][ T4707] ? security_bpf+0x2b/0x90 [ 601.357729][ T4707] __sys_bpf+0x469/0x7c0 [ 601.357784][ T4707] __x64_sys_bpf+0x41/0x50 [ 601.357820][ T4707] x64_sys_call+0x2aee/0x3000 [ 601.357869][ T4707] do_syscall_64+0xd2/0x200 [ 601.357902][ T4707] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 601.357942][ T4707] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 601.358024][ T4707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.358055][ T4707] RIP: 0033:0x7fd2ad6ceec9 [ 601.358157][ T4707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 601.358183][ T4707] RSP: 002b:00007fd2ac137038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 601.358209][ T4707] RAX: ffffffffffffffda RBX: 00007fd2ad925fa0 RCX: 00007fd2ad6ceec9 [ 601.358228][ T4707] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 601.358308][ T4707] RBP: 00007fd2ac137090 R08: 0000000000000000 R09: 0000000000000000 [ 601.358385][ T4707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.358398][ T4707] R13: 00007fd2ad926038 R14: 00007fd2ad925fa0 R15: 00007ffce5f0d308 [ 601.358422][ T4707] [ 601.588535][ T4707] syz.0.5530: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 601.606531][ T4707] CPU: 1 UID: 0 PID: 4707 Comm: syz.0.5530 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 601.606571][ T4707] Tainted: [W]=WARN [ 601.606579][ T4707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 601.606596][ T4707] Call Trace: [ 601.606604][ T4707] [ 601.606614][ T4707] __dump_stack+0x1d/0x30 [ 601.606641][ T4707] dump_stack_lvl+0xe8/0x140 [ 601.606725][ T4707] dump_stack+0x15/0x1b [ 601.606744][ T4707] warn_alloc+0x12b/0x1a0 [ 601.606780][ T4707] __vmalloc_node_range_noprof+0x4b9/0xed0 [ 601.606895][ T4707] ? cred_has_capability+0x210/0x280 [ 601.606936][ T4707] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 601.607052][ T4707] __vmalloc_noprof+0x83/0xc0 [ 601.607091][ T4707] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 601.607134][ T4707] bpf_prog_alloc_no_stats+0x47/0x3b0 [ 601.607203][ T4707] ? bpf_prog_alloc+0x2a/0x150 [ 601.607234][ T4707] bpf_prog_alloc+0x3c/0x150 [ 601.607332][ T4707] bpf_prog_load+0x506/0x1100 [ 601.607367][ T4707] ? security_bpf+0x2b/0x90 [ 601.607400][ T4707] __sys_bpf+0x469/0x7c0 [ 601.607451][ T4707] __x64_sys_bpf+0x41/0x50 [ 601.607559][ T4707] x64_sys_call+0x2aee/0x3000 [ 601.607583][ T4707] do_syscall_64+0xd2/0x200 [ 601.607653][ T4707] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 601.607682][ T4707] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 601.607702][ T4707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.607742][ T4707] RIP: 0033:0x7fd2ad6ceec9 [ 601.607873][ T4707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 601.607901][ T4707] RSP: 002b:00007fd2ac137038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 601.607928][ T4707] RAX: ffffffffffffffda RBX: 00007fd2ad925fa0 RCX: 00007fd2ad6ceec9 [ 601.607946][ T4707] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 601.607963][ T4707] RBP: 00007fd2ac137090 R08: 0000000000000000 R09: 0000000000000000 [ 601.608031][ T4707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.608078][ T4707] R13: 00007fd2ad926038 R14: 00007fd2ad925fa0 R15: 00007ffce5f0d308 [ 601.608120][ T4707] [ 601.608128][ T4707] Mem-Info: [ 601.827950][ T4707] active_anon:21280 inactive_anon:6 isolated_anon:0 [ 601.827950][ T4707] active_file:18567 inactive_file:9269 isolated_file:0 [ 601.827950][ T4707] unevictable:0 dirty:442 writeback:1 [ 601.827950][ T4707] slab_reclaimable:3737 slab_unreclaimable:19273 [ 601.827950][ T4707] mapped:34508 shmem:17757 pagetables:992 [ 601.827950][ T4707] sec_pagetables:0 bounce:0 [ 601.827950][ T4707] kernel_misc_reclaimable:0 [ 601.827950][ T4707] free:1841311 free_pcp:19216 free_cma:0 [ 601.853266][ T4689] chnl_net:caif_netlink_parms(): no params data found [ 601.875524][ T4707] Node 0 active_anon:85120kB inactive_anon:24kB active_file:74268kB inactive_file:37076kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:138032kB dirty:1768kB writeback:4kB shmem:71028kB kernel_stack:6560kB pagetables:4084kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 601.910831][ T4707] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 601.941006][ T4707] lowmem_reserve[]: 0 2883 7862 7862 [ 601.946528][ T4707] Node 0 DMA32 free:2949060kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2952692kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 601.978417][ T4707] lowmem_reserve[]: 0 0 4978 4978 [ 601.983567][ T4707] Node 0 Normal free:4400696kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:85236kB inactive_anon:24kB active_file:74268kB inactive_file:37076kB unevictable:0kB writepending:1772kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:72956kB local_pcp:37312kB free_cma:0kB [ 602.017344][ T4707] lowmem_reserve[]: 0 0 0 0 [ 602.021972][ T4707] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 602.035037][ T4707] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 4*16kB (M) 1*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949060kB [ 602.051328][ T4707] Node 0 Normal: 1745*4kB (UME) 440*8kB (ME) 223*16kB (M) 430*32kB (ME) 232*64kB (UM) 162*128kB (UM) 364*256kB (UM) 267*512kB (UME) 153*1024kB (UM) 33*2048kB (UM) 948*4096kB (UM) = 4400564kB [ 602.071735][ T4707] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 602.081250][ T4707] 45590 total pagecache pages [ 602.086045][ T4707] 2 pages in swap cache [ 602.090569][ T4707] Free swap = 124984kB [ 602.094736][ T4707] Total swap = 124996kB [ 602.099099][ T4707] 2097051 pages RAM [ 602.102920][ T4707] 0 pages HighMem/MovableOnly [ 602.107678][ T4707] 80478 pages reserved [ 602.213371][ T4901] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5534'. [ 602.222526][ T4901] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5534'. [ 602.243321][ T4901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5534'. [ 602.317619][ T4689] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.324899][ T4689] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.339518][ T4949] loop1: detected capacity change from 0 to 164 [ 602.369837][ T4954] netlink: 'syz.1.5537': attribute type 10 has an invalid length. [ 602.372590][ T4689] bridge_slave_0: entered allmulticast mode [ 602.389113][ T4689] bridge_slave_0: entered promiscuous mode [ 602.413012][ T4689] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.420369][ T4689] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.427932][ T4689] bridge_slave_1: entered allmulticast mode [ 602.435891][ T4689] bridge_slave_1: entered promiscuous mode [ 602.451670][ T4846] bridge_slave_1: left allmulticast mode [ 602.458000][ T4846] bridge_slave_1: left promiscuous mode [ 602.464199][ T4846] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.478275][ T4846] bridge_slave_0: left allmulticast mode [ 602.484410][ T4846] bridge_slave_0: left promiscuous mode [ 602.490415][ T4846] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.673083][ T4846] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 602.696536][ T4846] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 602.707144][ T4846] bond0 (unregistering): Released all slaves [ 602.789473][ T4846] tipc: Left network mode [ 602.808568][ T3570] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 602.819869][ T4846] hsr_slave_0: left promiscuous mode [ 602.826724][ T4846] hsr_slave_1: left promiscuous mode [ 602.832842][ T4846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 602.840487][ T4846] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 602.854137][ T4846] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 602.862005][ T4846] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 602.918239][ T4846] veth1_macvtap: left promiscuous mode [ 602.941576][ T4846] veth0_macvtap: left promiscuous mode [ 602.966608][ T4846] veth1_vlan: left promiscuous mode [ 602.983971][ T4846] veth0_vlan: left promiscuous mode [ 603.035612][ T4987] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5541'. [ 603.148047][ T4846] team0 (unregistering): Port device team_slave_1 removed [ 603.159157][ T4846] team0 (unregistering): Port device team_slave_0 removed [ 603.199287][ T4990] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4990 comm=syz.6.5541 [ 603.450872][ T4689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.465665][ T4689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 603.521086][ T4689] team0: Port device team_slave_0 added [ 603.543731][ T4689] team0: Port device team_slave_1 added [ 603.563963][ T4811] Bluetooth: hci0: Frame reassembly failed (-84) [ 603.575824][ T5055] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5542'. [ 603.596061][ T4689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.603228][ T4689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.629908][ T4689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.663239][ T5055] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5542'. [ 603.678761][ T4846] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.692547][ T4689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.699597][ T4689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.726005][ T4689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.763425][ T4689] hsr_slave_0: entered promiscuous mode [ 603.770911][ T4689] hsr_slave_1: entered promiscuous mode [ 603.776873][ T4689] debugfs: 'hsr0' already exists in 'hsr' [ 603.782891][ T4689] Cannot create hsr debugfs directory [ 603.792545][ T4846] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.881897][ T4846] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.992535][ T4846] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.012747][ T4978] chnl_net:caif_netlink_parms(): no params data found [ 604.068950][ T4978] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.076822][ T4978] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.078976][ T5200] FAULT_INJECTION: forcing a failure. [ 604.078976][ T5200] name failslab, interval 1, probability 0, space 0, times 0 [ 604.085384][ T4978] bridge_slave_0: entered allmulticast mode [ 604.096645][ T5200] CPU: 0 UID: 0 PID: 5200 Comm: syz.0.5543 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 604.096692][ T5200] Tainted: [W]=WARN [ 604.096700][ T5200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 604.096720][ T5200] Call Trace: [ 604.096730][ T5200] [ 604.096741][ T5200] __dump_stack+0x1d/0x30 [ 604.096770][ T5200] dump_stack_lvl+0xe8/0x140 [ 604.096797][ T5200] dump_stack+0x15/0x1b [ 604.096821][ T5200] should_fail_ex+0x265/0x280 [ 604.096870][ T5200] should_failslab+0x8c/0xb0 [ 604.096910][ T5200] kmem_cache_alloc_noprof+0x50/0x480 [ 604.096947][ T5200] ? __mpol_dup+0x42/0x1b0 [ 604.096975][ T5200] __mpol_dup+0x42/0x1b0 [ 604.097001][ T5200] mbind_range+0x1e8/0x440 [ 604.097025][ T5200] ? mas_find+0x5d5/0x700 [ 604.097058][ T5200] __se_sys_mbind+0x648/0xac0 [ 604.097115][ T5200] __x64_sys_mbind+0x78/0x90 [ 604.097158][ T5200] x64_sys_call+0x2936/0x3000 [ 604.097189][ T5200] do_syscall_64+0xd2/0x200 [ 604.097222][ T5200] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 604.097261][ T5200] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 604.097292][ T5200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.097324][ T5200] RIP: 0033:0x7fd2ad6ceec9 [ 604.097346][ T5200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 604.097373][ T5200] RSP: 002b:00007fd2ac137038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 604.097400][ T5200] RAX: ffffffffffffffda RBX: 00007fd2ad925fa0 RCX: 00007fd2ad6ceec9 [ 604.097418][ T5200] RDX: 0000000000000001 RSI: 0000000000800000 RDI: 0000200000001000 [ 604.097436][ T5200] RBP: 00007fd2ac137090 R08: 0000000000000000 R09: 0000000000000000 [ 604.097454][ T5200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 604.097471][ T5200] R13: 00007fd2ad926038 R14: 00007fd2ad925fa0 R15: 00007ffce5f0d308 [ 604.097509][ T5200] [ 604.298912][ T4978] bridge_slave_0: entered promiscuous mode [ 604.305396][ T5337] FAULT_INJECTION: forcing a failure. [ 604.305396][ T5337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 604.306552][ T4978] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.318584][ T5337] CPU: 1 UID: 0 PID: 5337 Comm: syz.0.5544 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 604.318621][ T5337] Tainted: [W]=WARN [ 604.318630][ T5337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 604.318646][ T5337] Call Trace: [ 604.318654][ T5337] [ 604.318664][ T5337] __dump_stack+0x1d/0x30 [ 604.318711][ T5337] dump_stack_lvl+0xe8/0x140 [ 604.318742][ T5337] dump_stack+0x15/0x1b [ 604.318941][ T5337] should_fail_ex+0x265/0x280 [ 604.318990][ T5337] should_fail+0xb/0x20 [ 604.319093][ T5337] should_fail_usercopy+0x1a/0x20 [ 604.319170][ T5337] _copy_from_user+0x1c/0xb0 [ 604.319196][ T5337] ___sys_sendmsg+0xc1/0x1d0 [ 604.319273][ T5337] __x64_sys_sendmsg+0xd4/0x160 [ 604.319383][ T5337] x64_sys_call+0x191e/0x3000 [ 604.319414][ T5337] do_syscall_64+0xd2/0x200 [ 604.319523][ T5337] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 604.319565][ T5337] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 604.319672][ T5337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.319702][ T5337] RIP: 0033:0x7fd2ad6ceec9 [ 604.319761][ T5337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 604.319786][ T5337] RSP: 002b:00007fd2ac137038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 604.319813][ T5337] RAX: ffffffffffffffda RBX: 00007fd2ad925fa0 RCX: 00007fd2ad6ceec9 [ 604.319844][ T5337] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 604.319860][ T5337] RBP: 00007fd2ac137090 R08: 0000000000000000 R09: 0000000000000000 [ 604.319944][ T5337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 604.319962][ T5337] R13: 00007fd2ad926038 R14: 00007fd2ad925fa0 R15: 00007ffce5f0d308 [ 604.319990][ T5337] [ 604.506495][ T4978] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.514086][ T4978] bridge_slave_1: entered allmulticast mode [ 604.520935][ T4978] bridge_slave_1: entered promiscuous mode [ 604.551814][ T4978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 604.563210][ T4978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 604.593367][ T29] kauditd_printk_skb: 282 callbacks suppressed [ 604.593386][ T29] audit: type=1326 audit(1759984603.494:53908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5369 comm="syz.0.5547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2ad6ceec9 code=0x7ffc0000 [ 604.628521][ T29] audit: type=1326 audit(1759984603.494:53909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5369 comm="syz.0.5547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fd2ad6ceec9 code=0x7ffc0000 [ 604.654280][ T29] audit: type=1326 audit(1759984603.494:53910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5369 comm="syz.0.5547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2ad6ceec9 code=0x7ffc0000 [ 604.678262][ T29] audit: type=1326 audit(1759984603.494:53911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5369 comm="syz.0.5547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fd2ad6ceec9 code=0x7ffc0000 [ 604.699701][ T5400] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5548'. [ 604.702314][ T29] audit: type=1326 audit(1759984603.494:53912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5369 comm="syz.0.5547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2ad6ceec9 code=0x7ffc0000 [ 604.739671][ T29] audit: type=1326 audit(1759984603.494:53913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5369 comm="syz.0.5547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd2ad6ceec9 code=0x7ffc0000 [ 604.765566][ T29] audit: type=1326 audit(1759984603.494:53914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5369 comm="syz.0.5547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2ad6ceec9 code=0x7ffc0000 [ 604.789112][ T29] audit: type=1326 audit(1759984603.494:53915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5369 comm="syz.0.5547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fd2ad6ceec9 code=0x7ffc0000 [ 604.813072][ T29] audit: type=1326 audit(1759984603.494:53916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5369 comm="syz.0.5547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2ad6ceec9 code=0x7ffc0000 [ 604.836840][ T29] audit: type=1326 audit(1759984603.504:53917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5369 comm="syz.0.5547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2ad6ceec9 code=0x7ffc0000 [ 604.869613][ T4846] bridge_slave_1: left allmulticast mode [ 604.875341][ T4846] bridge_slave_1: left promiscuous mode [ 604.881106][ T4846] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.890483][ T4846] bridge_slave_0: left allmulticast mode [ 604.896287][ T4846] bridge_slave_0: left promiscuous mode [ 604.902156][ T4846] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.011971][ T4846] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 605.021974][ T4846] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 605.031561][ T4846] bond0 (unregistering): Released all slaves [ 605.051582][ T4978] team0: Port device team_slave_0 added [ 605.060114][ T4978] team0: Port device team_slave_1 added [ 605.084281][ T4689] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 605.107782][ T4978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 605.115030][ T4978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.141771][ T4978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 605.208175][ T4846] hsr_slave_0: left promiscuous mode [ 605.217291][ T4846] hsr_slave_1: left promiscuous mode [ 605.228836][ T4846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 605.233175][ T5478] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5551'. [ 605.236374][ T4846] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 605.253712][ T4846] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 605.261318][ T4846] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 605.272161][ T4846] veth1_macvtap: left promiscuous mode [ 605.277691][ T4846] veth0_macvtap: left promiscuous mode [ 605.283691][ T4846] veth1_vlan: left promiscuous mode [ 605.289362][ T4846] veth0_vlan: left promiscuous mode [ 605.348829][ T5480] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5480 comm=syz.0.5551 [ 605.387570][ T4846] team0 (unregistering): Port device team_slave_1 removed [ 605.397613][ T4846] team0 (unregistering): Port device team_slave_0 removed [ 605.435013][ T4689] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 605.444489][ T4978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 605.451768][ T4978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.477915][ T4978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.502882][ T4689] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 605.520806][ T4689] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 605.608491][ T3570] Bluetooth: hci0: command 0x1003 tx timeout [ 605.614621][T31335] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 605.679363][ T4978] hsr_slave_0: entered promiscuous mode [ 605.685629][ T4978] hsr_slave_1: entered promiscuous mode [ 605.699402][ T4978] debugfs: 'hsr0' already exists in 'hsr' [ 605.705472][ T4978] Cannot create hsr debugfs directory [ 605.927514][ T5571] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5556'. [ 605.955974][ T4689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.094115][ T5571] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5571 comm=syz.6.5556 [ 606.343743][ T4689] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.448476][ T4784] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.455713][ T4784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.472143][ T10] IPVS: starting estimator thread 0... [ 606.477949][ T5634] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 606.485238][ C0] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 606.499802][ T4784] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.506928][ T4784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.537777][ T5634] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 606.545190][ C0] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 606.577400][ T4689] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 606.589758][ T4689] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 606.600629][ T5635] IPVS: using max 2304 ests per chain, 115200 per kthread [ 606.714144][ T4689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 606.803522][ T5658] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 606.945961][ T5681] loop6: detected capacity change from 0 to 164 [ 606.955528][ T4978] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 606.992940][ T4978] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 607.028928][ T4978] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 607.049802][ T5692] FAULT_INJECTION: forcing a failure. [ 607.049802][ T5692] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 607.063342][ T5692] CPU: 0 UID: 0 PID: 5692 Comm: syz.6.5561 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 607.063430][ T5692] Tainted: [W]=WARN [ 607.063438][ T5692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 607.063455][ T5692] Call Trace: [ 607.063466][ T5692] [ 607.063476][ T5692] __dump_stack+0x1d/0x30 [ 607.063504][ T5692] dump_stack_lvl+0xe8/0x140 [ 607.063554][ T5692] dump_stack+0x15/0x1b [ 607.063575][ T5692] should_fail_ex+0x265/0x280 [ 607.063650][ T5692] should_fail+0xb/0x20 [ 607.063744][ T5692] should_fail_usercopy+0x1a/0x20 [ 607.063792][ T5692] _copy_from_iter+0xd2/0xe80 [ 607.063877][ T5692] ? __build_skb_around+0x1ab/0x200 [ 607.063903][ T5692] ? __alloc_skb+0x223/0x320 [ 607.063929][ T5692] netlink_sendmsg+0x471/0x6b0 [ 607.063988][ T5692] ? __pfx_netlink_sendmsg+0x10/0x10 [ 607.064021][ T5692] __sock_sendmsg+0x142/0x180 [ 607.064121][ T5692] ____sys_sendmsg+0x31e/0x4e0 [ 607.064159][ T5692] ___sys_sendmsg+0x17b/0x1d0 [ 607.064222][ T5692] __x64_sys_sendmsg+0xd4/0x160 [ 607.064258][ T5692] x64_sys_call+0x191e/0x3000 [ 607.064300][ T5692] do_syscall_64+0xd2/0x200 [ 607.064323][ T5692] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 607.064358][ T5692] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 607.064411][ T5692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.064475][ T5692] RIP: 0033:0x7f5093fceec9 [ 607.064491][ T5692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 607.064619][ T5692] RSP: 002b:00007f5092a37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 607.064644][ T5692] RAX: ffffffffffffffda RBX: 00007f5094225fa0 RCX: 00007f5093fceec9 [ 607.064657][ T5692] RDX: 0000000000000800 RSI: 0000200000000000 RDI: 0000000000000003 [ 607.064671][ T5692] RBP: 00007f5092a37090 R08: 0000000000000000 R09: 0000000000000000 [ 607.064686][ T5692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.064701][ T5692] R13: 00007f5094226038 R14: 00007f5094225fa0 R15: 00007ffd284b17c8 [ 607.064783][ T5692] [ 607.313818][ T4978] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 607.401192][ T4978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.438881][ T4689] veth0_vlan: entered promiscuous mode [ 607.455896][ T4689] veth1_vlan: entered promiscuous mode [ 607.464525][ T5712] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5565'. [ 607.470982][ T5713] 9pnet_fd: Insufficient options for proto=fd [ 607.511996][ T5712] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5712 comm=syz.6.5565 [ 607.512974][ T4978] 8021q: adding VLAN 0 to HW filter on device team0 [ 607.555316][ T4689] veth0_macvtap: entered promiscuous mode [ 607.571114][ T4811] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.578744][ T4811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 607.612299][ T4811] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.619590][ T4811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.660866][ T4689] veth1_macvtap: entered promiscuous mode [ 607.690722][ T4978] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 607.715366][ T4689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 607.729806][ T4689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 607.760555][ T5729] mmap: syz.6.5568 (5729) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 607.790094][ T4811] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.813592][ T4811] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.830028][ T4978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.856738][ T4811] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.881218][ T4811] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.946556][ T5713] program syz.0.5566 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 607.965255][ T5741] loop9: detected capacity change from 0 to 1024 [ 607.989650][ T4978] veth0_vlan: entered promiscuous mode [ 608.016113][ T4978] veth1_vlan: entered promiscuous mode [ 608.031552][ T5734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5566'. [ 608.057565][ T5741] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 608.065929][ T4978] veth0_macvtap: entered promiscuous mode [ 608.077882][ T4978] veth1_macvtap: entered promiscuous mode [ 608.092045][ T4978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 608.105049][ T4978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 608.115466][ T6708] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.156794][ T279] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.252579][ T5741] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4193: comm syz.9.5526: Allocating blocks 449-513 which overlap fs metadata [ 608.279758][ T5765] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5539'. [ 608.298990][ T279] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.310189][ T279] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.320031][ T5765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5539'. [ 608.347379][ T5741] EXT4-fs (loop9): pa ffff888106dfcaf0: logic 48, phys. 177, len 21 [ 608.355656][ T5741] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 608.368929][ T5767] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5570'. [ 608.377947][ T5767] tipc: Enabling of bearer rejected, failed to enable media [ 608.493321][ T4689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.564850][ T5776] loop9: detected capacity change from 0 to 764 [ 608.590260][ T5776] Symlink component flag not implemented [ 608.596172][ T5776] Symlink component flag not implemented [ 608.614540][ T5776] Symlink component flag not implemented (129) [ 608.620860][ T5776] Symlink component flag not implemented (6) [ 608.646221][ T5776] rock: directory entry would overflow storage [ 608.653211][ T5776] rock: sig=0x4f50, size=4, remaining=3 [ 608.659180][ T5776] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 608.873618][ T4689] rock: directory entry would overflow storage [ 608.879912][ T4689] rock: sig=0x4f50, size=4, remaining=3 [ 608.886012][ T4689] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 609.039326][ T4689] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 609.167099][ T5815] netlink: 'syz.6.5578': attribute type 5 has an invalid length. [ 609.277898][ T5819] lo speed is unknown, defaulting to 1000 [ 609.342247][ T5820] loop1: detected capacity change from 0 to 164 [ 609.378278][ T5819] lo speed is unknown, defaulting to 1000 [ 609.402576][ T5819] lo speed is unknown, defaulting to 1000 [ 609.429947][ T5819] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 609.475702][ T5819] lo speed is unknown, defaulting to 1000 [ 609.501727][ T5819] lo speed is unknown, defaulting to 1000 [ 609.526828][ T5819] lo speed is unknown, defaulting to 1000 [ 609.557384][ T5819] lo speed is unknown, defaulting to 1000 [ 609.579352][ T5819] lo speed is unknown, defaulting to 1000 [ 609.603972][ T5819] lo speed is unknown, defaulting to 1000 [ 609.657946][ T29] kauditd_printk_skb: 368 callbacks suppressed [ 609.657964][ T29] audit: type=1400 audit(1759984608.554:54286): avc: denied { map } for pid=5829 comm="syz.1.5582" path="socket:[73809]" dev="sockfs" ino=73809 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 609.747744][ T5843] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5584'. [ 609.770635][ T29] audit: type=1400 audit(1759984608.644:54287): avc: denied { create } for pid=5842 comm="syz.0.5584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 609.801487][ T5845] loop9: detected capacity change from 0 to 128 [ 609.839156][ T5845] netlink: 132 bytes leftover after parsing attributes in process `syz.9.5585'. [ 609.854783][ T29] audit: type=1400 audit(1759984608.734:54288): avc: denied { mount } for pid=5844 comm="syz.9.5585" name="/" dev="loop9" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 609.900330][ T5845] netlink: 'syz.9.5585': attribute type 21 has an invalid length. [ 609.925968][ T5845] Invalid logical block size (-3) [ 609.966275][ T29] audit: type=1326 audit(1759984608.784:54289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5842 comm="syz.0.5584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2ad6ceec9 code=0x7ffc0000 [ 609.991460][ T29] audit: type=1326 audit(1759984608.784:54290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5842 comm="syz.0.5584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fd2ad6ceec9 code=0x7ffc0000 [ 610.018004][ T29] audit: type=1326 audit(1759984608.784:54291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5842 comm="syz.0.5584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2ad6ceec9 code=0x7ffc0000 [ 610.043270][ T29] audit: type=1326 audit(1759984608.784:54292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5842 comm="syz.0.5584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2ad6ceec9 code=0x7ffc0000 [ 610.067794][ T29] audit: type=1326 audit(1759984608.784:54293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5842 comm="syz.0.5584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2ad6ceec9 code=0x7ffc0000 [ 610.094251][ T29] audit: type=1326 audit(1759984608.784:54294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5842 comm="syz.0.5584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7fd2ad6ceec9 code=0x7ffc0000 [ 610.118294][ T29] audit: type=1326 audit(1759984608.784:54295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5842 comm="syz.0.5584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2ad6ceec9 code=0x7ffc0000 [ 610.416832][ T5872] loop6: detected capacity change from 0 to 764 [ 610.441255][ T5872] Symlink component flag not implemented [ 610.447300][ T5872] Symlink component flag not implemented [ 610.468396][ T5872] Symlink component flag not implemented (129) [ 610.474780][ T5872] Symlink component flag not implemented (6) [ 610.505094][ T5872] rock: directory entry would overflow storage [ 610.511419][ T5872] rock: sig=0x4f50, size=4, remaining=3 [ 610.517016][ T5872] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 610.662346][ T3397] rock: directory entry would overflow storage [ 610.668676][ T3397] rock: sig=0x4f50, size=4, remaining=3 [ 610.674424][ T3397] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 610.702587][ T3397] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 610.757674][ T4846] Bluetooth: hci0: Frame reassembly failed (-84) [ 610.764937][ T5884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5597'. [ 610.792280][ T5886] FAULT_INJECTION: forcing a failure. [ 610.792280][ T5886] name failslab, interval 1, probability 0, space 0, times 0 [ 610.805389][ T5886] CPU: 0 UID: 0 PID: 5886 Comm: syz.9.5598 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 610.805477][ T5886] Tainted: [W]=WARN [ 610.805554][ T5886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 610.805572][ T5886] Call Trace: [ 610.805579][ T5886] [ 610.805588][ T5886] __dump_stack+0x1d/0x30 [ 610.805611][ T5886] dump_stack_lvl+0xe8/0x140 [ 610.805630][ T5886] dump_stack+0x15/0x1b [ 610.805647][ T5886] should_fail_ex+0x265/0x280 [ 610.805797][ T5886] should_failslab+0x8c/0xb0 [ 610.805833][ T5886] kmem_cache_alloc_noprof+0x50/0x480 [ 610.805867][ T5886] ? skb_clone+0x151/0x1f0 [ 610.805906][ T5886] skb_clone+0x151/0x1f0 [ 610.805979][ T5886] __netlink_deliver_tap+0x2c9/0x500 [ 610.806082][ T5886] netlink_unicast+0x66b/0x690 [ 610.806118][ T5886] netlink_sendmsg+0x58b/0x6b0 [ 610.806158][ T5886] ? __pfx_netlink_sendmsg+0x10/0x10 [ 610.806235][ T5886] __sock_sendmsg+0x142/0x180 [ 610.806262][ T5886] ____sys_sendmsg+0x31e/0x4e0 [ 610.806306][ T5886] ___sys_sendmsg+0x17b/0x1d0 [ 610.806363][ T5886] __x64_sys_sendmsg+0xd4/0x160 [ 610.806453][ T5886] x64_sys_call+0x191e/0x3000 [ 610.806482][ T5886] do_syscall_64+0xd2/0x200 [ 610.806516][ T5886] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 610.806552][ T5886] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 610.806581][ T5886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.806610][ T5886] RIP: 0033:0x7f034fe0eec9 [ 610.806630][ T5886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.806664][ T5886] RSP: 002b:00007f034e86f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 610.806769][ T5886] RAX: ffffffffffffffda RBX: 00007f0350065fa0 RCX: 00007f034fe0eec9 [ 610.806786][ T5886] RDX: 0000000020040054 RSI: 0000200000006040 RDI: 0000000000000003 [ 610.806803][ T5886] RBP: 00007f034e86f090 R08: 0000000000000000 R09: 0000000000000000 [ 610.806820][ T5886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 610.806836][ T5886] R13: 00007f0350066038 R14: 00007f0350065fa0 R15: 00007ffccb6c8078 [ 610.806861][ T5886] [ 610.823461][ T5884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5597'. [ 610.922255][ T5895] netlink: 'syz.0.5600': attribute type 10 has an invalid length. [ 610.947680][ T5900] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5599'. [ 611.047282][ T5901] loop1: detected capacity change from 0 to 512 [ 611.064700][ T5901] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 611.079536][ T5884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 611.087158][ T5884] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 611.096612][ T5884] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 611.104117][ T5884] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 611.159483][ T5912] loop1: detected capacity change from 0 to 128 [ 611.167517][ T5912] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 611.180444][ T5912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5601'. [ 611.189733][ T5912] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5601'. [ 611.203721][ T4811] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.212656][ T4811] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.232251][ T4811] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.242061][ T4811] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.264032][ T4811] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.276734][ T5921] loop9: detected capacity change from 0 to 764 [ 611.311451][ T4811] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.322250][ T5921] Symlink component flag not implemented [ 611.328228][ T5921] Symlink component flag not implemented [ 611.336256][ T5921] Symlink component flag not implemented (129) [ 611.342824][ T5921] Symlink component flag not implemented (6) [ 611.351583][ T5921] rock: directory entry would overflow storage [ 611.357865][ T5921] rock: sig=0x4f50, size=4, remaining=3 [ 611.363845][ T5921] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 611.405792][ T4689] rock: directory entry would overflow storage [ 611.412090][ T4689] rock: sig=0x4f50, size=4, remaining=3 [ 611.417753][ T4689] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 611.428830][ T4811] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.436369][ T4689] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 611.491563][ T4811] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.509060][ T5953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5610'. [ 611.554247][ T5944] lo speed is unknown, defaulting to 1000 [ 611.596764][ T5984] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5612'. [ 611.608771][ T4811] bridge_slave_1: left allmulticast mode [ 611.614511][ T4811] bridge_slave_1: left promiscuous mode [ 611.620378][ T4811] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.628269][ T4811] bridge_slave_0: left allmulticast mode [ 611.634071][ T4811] bridge_slave_0: left promiscuous mode [ 611.639790][ T4811] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.715197][ T6000] netlink: 'syz.0.5613': attribute type 10 has an invalid length. [ 611.761380][ T4811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 611.775144][ T4811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 611.785433][ T4811] bond0 (unregistering): Released all slaves [ 611.843366][ T4811] tipc: Left network mode [ 611.865670][ T4811] hsr_slave_0: left promiscuous mode [ 611.880614][ T4811] hsr_slave_1: left promiscuous mode [ 611.891926][ T4811] veth1_vlan: left promiscuous mode [ 611.897501][ T4811] veth0_vlan: left promiscuous mode [ 611.898964][ T6083] FAULT_INJECTION: forcing a failure. [ 611.898964][ T6083] name failslab, interval 1, probability 0, space 0, times 0 [ 611.915599][ T6083] CPU: 1 UID: 0 PID: 6083 Comm: syz.0.5617 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 611.915688][ T6083] Tainted: [W]=WARN [ 611.915698][ T6083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 611.915716][ T6083] Call Trace: [ 611.915726][ T6083] [ 611.915737][ T6083] __dump_stack+0x1d/0x30 [ 611.915839][ T6083] dump_stack_lvl+0xe8/0x140 [ 611.915867][ T6083] dump_stack+0x15/0x1b [ 611.915888][ T6083] should_fail_ex+0x265/0x280 [ 611.915948][ T6083] should_failslab+0x8c/0xb0 [ 611.915988][ T6083] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 611.916026][ T6083] ? __alloc_skb+0x101/0x320 [ 611.916085][ T6083] __alloc_skb+0x101/0x320 [ 611.916125][ T6083] netlink_alloc_large_skb+0xbf/0xf0 [ 611.916157][ T6083] netlink_sendmsg+0x3cf/0x6b0 [ 611.916195][ T6083] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.916225][ T6083] __sock_sendmsg+0x142/0x180 [ 611.916250][ T6083] ____sys_sendmsg+0x31e/0x4e0 [ 611.916294][ T6083] ___sys_sendmsg+0x17b/0x1d0 [ 611.916356][ T6083] __x64_sys_sendmsg+0xd4/0x160 [ 611.916443][ T6083] x64_sys_call+0x191e/0x3000 [ 611.916469][ T6083] do_syscall_64+0xd2/0x200 [ 611.916497][ T6083] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 611.916529][ T6083] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 611.916555][ T6083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.916650][ T6083] RIP: 0033:0x7fd2ad6ceec9 [ 611.916671][ T6083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 611.916696][ T6083] RSP: 002b:00007fd2ac137038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 611.916722][ T6083] RAX: ffffffffffffffda RBX: 00007fd2ad925fa0 RCX: 00007fd2ad6ceec9 [ 611.916739][ T6083] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000005 [ 611.916799][ T6083] RBP: 00007fd2ac137090 R08: 0000000000000000 R09: 0000000000000000 [ 611.916812][ T6083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 611.916875][ T6083] R13: 00007fd2ad926038 R14: 00007fd2ad925fa0 R15: 00007ffce5f0d308 [ 611.916902][ T6083] [ 612.145228][ T6086] FAULT_INJECTION: forcing a failure. [ 612.145228][ T6086] name failslab, interval 1, probability 0, space 0, times 0 [ 612.158168][ T6086] CPU: 0 UID: 0 PID: 6086 Comm: syz.0.5618 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 612.158270][ T6086] Tainted: [W]=WARN [ 612.158277][ T6086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 612.158290][ T6086] Call Trace: [ 612.158296][ T6086] [ 612.158307][ T6086] __dump_stack+0x1d/0x30 [ 612.158335][ T6086] dump_stack_lvl+0xe8/0x140 [ 612.158360][ T6086] dump_stack+0x15/0x1b [ 612.158439][ T6086] should_fail_ex+0x265/0x280 [ 612.158479][ T6086] should_failslab+0x8c/0xb0 [ 612.158513][ T6086] kmem_cache_alloc_noprof+0x50/0x480 [ 612.158582][ T6086] ? security_inode_alloc+0x37/0x100 [ 612.158679][ T6086] security_inode_alloc+0x37/0x100 [ 612.158783][ T6086] inode_init_always_gfp+0x4b7/0x500 [ 612.158812][ T6086] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 612.158906][ T6086] alloc_inode+0x58/0x170 [ 612.158936][ T6086] new_inode+0x1d/0xe0 [ 612.158962][ T6086] shmem_get_inode+0x244/0x750 [ 612.159046][ T6086] ? __se_sys_memfd_create+0x1cc/0x590 [ 612.159095][ T6086] __shmem_file_setup+0x113/0x210 [ 612.159141][ T6086] shmem_file_setup+0x3b/0x50 [ 612.159228][ T6086] __se_sys_memfd_create+0x2c3/0x590 [ 612.159254][ T6086] __x64_sys_memfd_create+0x31/0x40 [ 612.159280][ T6086] x64_sys_call+0x2ac2/0x3000 [ 612.159330][ T6086] do_syscall_64+0xd2/0x200 [ 612.159418][ T6086] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 612.159454][ T6086] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 612.159499][ T6086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.159531][ T6086] RIP: 0033:0x7fd2ad6ceec9 [ 612.159547][ T6086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 612.159565][ T6086] RSP: 002b:00007fd2ac136e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 612.159640][ T6086] RAX: ffffffffffffffda RBX: 0000000000000512 RCX: 00007fd2ad6ceec9 [ 612.159654][ T6086] RDX: 00007fd2ac136ef0 RSI: 0000000000000000 RDI: 00007fd2ad752960 [ 612.159670][ T6086] RBP: 0000200000000380 R08: 00007fd2ac136bb7 R09: 00007fd2ac136e40 [ 612.159702][ T6086] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000080 [ 612.159718][ T6086] R13: 00007fd2ac136ef0 R14: 00007fd2ac136eb0 R15: 0000200000000340 [ 612.159751][ T6086] [ 612.392428][ T4811] team0 (unregistering): Port device team_slave_1 removed [ 612.403042][ T4811] team0 (unregistering): Port device team_slave_0 removed [ 612.443113][ T3394] lo speed is unknown, defaulting to 1000 [ 612.449103][ T3394] infiniband syz2: ib_query_port failed (-19) [ 612.467545][ T5944] chnl_net:caif_netlink_parms(): no params data found [ 612.551498][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.559534][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.567187][ T5944] bridge_slave_0: entered allmulticast mode [ 612.575383][ T5944] bridge_slave_0: entered promiscuous mode [ 612.582544][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.589780][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.597476][ T5944] bridge_slave_1: entered allmulticast mode [ 612.604380][ T5944] bridge_slave_1: entered promiscuous mode [ 612.628199][ T6158] loop1: detected capacity change from 0 to 512 [ 612.637023][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.648715][ T6158] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.5620: error while reading EA inode 32 err=-116 [ 612.662479][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.668761][ T6158] EXT4-fs (loop1): Remounting filesystem read-only [ 612.679072][ T6158] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 612.689418][ T6158] EXT4-fs (loop1): 1 orphan inode deleted [ 612.699929][ T5944] team0: Port device team_slave_0 added [ 612.707008][ T5944] team0: Port device team_slave_1 added [ 612.713429][ T6158] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 612.744939][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.746132][ T4811] IPVS: stop unused estimator thread 0... [ 612.751954][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.751993][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.755614][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.802007][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.828288][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.842321][T31335] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 612.848493][ T3570] Bluetooth: hci0: command 0x1003 tx timeout [ 612.888591][ T5944] hsr_slave_0: entered promiscuous mode [ 612.899433][ T5944] hsr_slave_1: entered promiscuous mode [ 612.905654][ T5944] debugfs: 'hsr0' already exists in 'hsr' [ 612.911510][ T5944] Cannot create hsr debugfs directory [ 612.995717][ T4811] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.059788][ T4030] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.070241][ T4811] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.082578][ T6403] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5622'. [ 613.095890][ T6403] loop3: detected capacity change from 0 to 512 [ 613.107568][ T6407] loop1: detected capacity change from 0 to 512 [ 613.115025][ T6407] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 613.126436][ T6403] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 613.140847][ T6407] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 613.140897][ T6407] EXT4-fs: failed to create workqueue [ 613.155831][ T6407] EXT4-fs (loop1): mount failed [ 613.178313][ T4811] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.233825][ T6036] chnl_net:caif_netlink_parms(): no params data found [ 613.266395][ T4811] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.338010][ T4783] Bluetooth: hci0: Frame reassembly failed (-84) [ 613.377285][ T6708] Bluetooth: hci1: Frame reassembly failed (-84) [ 613.397158][ T6445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 613.404696][ T6445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 613.413633][ T6445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 613.421384][ T6445] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 613.490019][ T6036] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.497128][ T6036] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.505137][ T6036] bridge_slave_0: entered allmulticast mode [ 613.512430][ T6036] bridge_slave_0: entered promiscuous mode [ 613.519858][ T6036] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.526968][ T6036] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.535742][ T6036] bridge_slave_1: entered allmulticast mode [ 613.542451][ T6036] bridge_slave_1: entered promiscuous mode [ 613.567577][ T4811] bridge_slave_1: left allmulticast mode [ 613.573382][ T4811] bridge_slave_1: left promiscuous mode [ 613.579166][ T4811] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.587547][ T4811] bridge_slave_0: left allmulticast mode [ 613.593307][ T4811] bridge_slave_0: left promiscuous mode [ 613.599343][ T4811] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.701238][ T4811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 613.712401][ T4811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 613.722495][ T4811] bond0 (unregistering): Released all slaves [ 613.744117][ T6036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.755174][ T6036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.786173][ T4811] hsr_slave_0: left promiscuous mode [ 613.792252][ T4811] hsr_slave_1: left promiscuous mode [ 613.798012][ T4811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 613.805445][ T4811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 613.813708][ T4811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 613.821209][ T4811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 613.833573][ T4811] veth1_macvtap: left promiscuous mode [ 613.840334][ T4811] veth0_macvtap: left promiscuous mode [ 613.846191][ T4811] veth1_vlan: left promiscuous mode [ 613.854504][ T4811] veth0_vlan: left promiscuous mode [ 613.927396][ T4811] team0 (unregistering): Port device team_slave_1 removed [ 613.941188][ T4811] team0 (unregistering): Port device team_slave_0 removed [ 613.979604][ T6036] team0: Port device team_slave_0 added [ 613.988340][ T6036] team0: Port device team_slave_1 added [ 614.008298][ T6036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 614.015515][ T6036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 614.042238][ T6036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 614.055207][ T6036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 614.062284][ T6036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 614.088355][ T6036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 614.118977][ T6036] hsr_slave_0: entered promiscuous mode [ 614.125525][ T6036] hsr_slave_1: entered promiscuous mode [ 614.131574][ T6036] debugfs: 'hsr0' already exists in 'hsr' [ 614.137519][ T6036] Cannot create hsr debugfs directory [ 614.262156][ T5944] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 614.272653][ T5944] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 614.281715][ T5944] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 614.291575][ T5944] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 614.334545][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.352245][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.362714][ T4846] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.370072][ T4846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.381519][ T4846] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.388743][ T4846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.471504][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.530875][ T4846] Bluetooth: hci2: Frame reassembly failed (-84) [ 614.602248][ T6036] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 614.616523][ T6036] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 614.626704][ T6036] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 614.636450][ T6036] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 614.666552][ T5944] veth0_vlan: entered promiscuous mode [ 614.678229][ T5944] veth1_vlan: entered promiscuous mode [ 614.704981][ T5944] veth0_macvtap: entered promiscuous mode [ 614.713038][ T5944] veth1_macvtap: entered promiscuous mode [ 614.721937][ T6036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.735680][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 614.747768][ T6036] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.756712][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 614.768295][ T4783] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.779518][ T4811] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.786608][ T4811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.802889][ T279] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.812257][ T279] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.823370][ T6708] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.830735][ T6708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.840261][ T279] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.899262][ T6803] loop7: detected capacity change from 0 to 764 [ 614.907391][ T6803] Symlink component flag not implemented [ 614.913203][ T6803] Symlink component flag not implemented [ 614.919822][ T6803] Symlink component flag not implemented (129) [ 614.922445][ T6036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.926063][ T6803] Symlink component flag not implemented (6) [ 614.939723][ T6803] rock: directory entry would overflow storage [ 614.945952][ T6803] rock: sig=0x4f50, size=4, remaining=3 [ 614.951832][ T6803] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 614.980652][ T5944] rock: directory entry would overflow storage [ 614.987008][ T5944] rock: sig=0x4f50, size=4, remaining=3 [ 614.993069][ T5944] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 615.003434][ T5944] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 615.063269][ T6036] veth0_vlan: entered promiscuous mode [ 615.071030][ T6036] veth1_vlan: entered promiscuous mode [ 615.087270][ T6036] veth0_macvtap: entered promiscuous mode [ 615.094782][ T6036] veth1_macvtap: entered promiscuous mode [ 615.106300][ T6036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 615.117476][ T6036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 615.131175][ T4811] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.142682][ T4811] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.152441][ T4811] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.162453][ T4811] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.231664][ T29] kauditd_printk_skb: 174 callbacks suppressed [ 615.231679][ T29] audit: type=1326 audit(1759984614.134:54468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6828 comm="syz.8.5631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7a77eec9 code=0x7ffc0000 [ 615.261898][ T29] audit: type=1326 audit(1759984614.134:54469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6828 comm="syz.8.5631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7a77eec9 code=0x7ffc0000 [ 615.285785][ T29] audit: type=1326 audit(1759984614.134:54470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6828 comm="syz.8.5631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe7a77eec9 code=0x7ffc0000 [ 615.309802][ T29] audit: type=1326 audit(1759984614.134:54471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6828 comm="syz.8.5631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7a77eec9 code=0x7ffc0000 [ 615.335734][ T29] audit: type=1326 audit(1759984614.134:54472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6828 comm="syz.8.5631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efe7a77eec9 code=0x7ffc0000 [ 615.359625][ T29] audit: type=1326 audit(1759984614.134:54473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6828 comm="syz.8.5631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7a77eec9 code=0x7ffc0000 [ 615.383423][ T29] audit: type=1326 audit(1759984614.134:54474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6828 comm="syz.8.5631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7efe7a77eec9 code=0x7ffc0000 [ 615.407093][ T29] audit: type=1400 audit(1759984614.134:54475): avc: denied { connect } for pid=6828 comm="syz.8.5631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 615.407156][ T6769] Bluetooth: hci0: command 0x1003 tx timeout [ 615.427295][ T29] audit: type=1326 audit(1759984614.134:54476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6828 comm="syz.8.5631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7a77eec9 code=0x7ffc0000 [ 615.439318][T31335] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 615.457711][ T29] audit: type=1326 audit(1759984614.134:54477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6828 comm="syz.8.5631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe7a77eec9 code=0x7ffc0000 [ 615.463775][ T6769] Bluetooth: hci1: command 0x1003 tx timeout [ 615.493850][ T3570] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 615.604095][ T4846] Bluetooth: hci0: Frame reassembly failed (-84) [ 615.611322][ T6846] __nla_validate_parse: 6 callbacks suppressed [ 615.611342][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5635'. [ 615.630445][ T6846] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5635'. [ 615.639661][ T6846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 615.647109][ T6846] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 615.655540][ T6846] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 615.664021][ T6846] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 615.675600][ T6857] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=6857 comm=syz.1.5637 [ 615.692561][ T6857] loop1: detected capacity change from 0 to 512 [ 615.712710][ T6857] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #16: comm syz.1.5637: corrupted inode contents [ 615.725444][ T6857] EXT4-fs error (device loop1): ext4_dirty_inode:6509: inode #16: comm syz.1.5637: mark_inode_dirty error [ 615.737774][ T6857] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #16: comm syz.1.5637: corrupted inode contents [ 615.750277][ T6857] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.5637: mark_inode_dirty error [ 615.762052][ T6857] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #16: comm syz.1.5637: corrupted inode contents [ 615.776719][ T6857] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 615.787543][ T6857] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #16: comm syz.1.5637: corrupted inode contents [ 615.800067][ T6857] EXT4-fs error (device loop1): ext4_truncate:4637: inode #16: comm syz.1.5637: mark_inode_dirty error [ 615.812770][ T6857] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 615.822549][ T6857] EXT4-fs (loop1): 1 truncate cleaned up [ 615.829146][ T6857] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 615.843533][ T4846] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:67: Failed to release dquot type 1 [ 615.852775][ T6857] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 615.875876][ T6868] loop3: detected capacity change from 0 to 1024 [ 615.885758][ T4030] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 615.890319][ T6868] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 615.908020][ T6868] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 615.946858][ T4811] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 615.963220][ T4811] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 615.975614][ T4811] EXT4-fs (loop3): This should not happen!! Data will be lost [ 615.975614][ T4811] [ 615.985464][ T4811] EXT4-fs (loop3): Total free blocks count 0 [ 615.991638][ T4811] EXT4-fs (loop3): Free/Dirty block details [ 615.997666][ T4811] EXT4-fs (loop3): free_blocks=4293918720 [ 616.003713][ T4811] EXT4-fs (loop3): dirty_blocks=16 [ 616.009165][ T4811] EXT4-fs (loop3): Block reservation details [ 616.015283][ T4811] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 616.022292][ T4978] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.568894][ T2636] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 616.568998][T31335] ================================================================== [ 616.583247][T31335] BUG: KCSAN: data-race in data_alloc / prb_reserve [ 616.590076][T31335] [ 616.592526][T31335] write to 0xffffffff86887de8 of 8 bytes by task 2636 on cpu 1: [ 616.600264][T31335] data_alloc+0x280/0x2e0 [ 616.604638][T31335] prb_reserve+0x807/0xaf0 [ 616.609075][T31335] vprintk_store+0x56d/0x860 [ 616.613780][T31335] vprintk_emit+0x10d/0x580 [ 616.618324][T31335] vprintk_default+0x26/0x30 [ 616.622955][T31335] vprintk+0x1d/0x30 [ 616.626925][T31335] _printk+0x79/0xa0 [ 616.630902][T31335] bt_err+0x9d/0xd0 [ 616.634744][T31335] hci_dev_open_sync+0xfa4/0x2290 [ 616.639794][T31335] hci_power_on+0xef/0x390 [ 616.644331][T31335] process_scheduled_works+0x4cb/0x9d0 [ 616.650112][T31335] worker_thread+0x582/0x770 [ 616.655160][T31335] kthread+0x486/0x510 [ 616.659255][T31335] ret_from_fork+0x122/0x1b0 [ 616.663964][T31335] ret_from_fork_asm+0x1a/0x30 [ 616.668773][T31335] [ 616.671122][T31335] read to 0xffffffff86887de8 of 8 bytes by task 31335 on cpu 0: [ 616.678810][T31335] prb_reserve+0x220/0xaf0 [ 616.683245][T31335] vprintk_store+0x56d/0x860 [ 616.687850][T31335] vprintk_emit+0x10d/0x580 [ 616.692379][T31335] vprintk_default+0x26/0x30 [ 616.697096][T31335] vprintk+0x1d/0x30 [ 616.701037][T31335] _printk+0x79/0xa0 [ 616.704979][T31335] bt_err+0x9d/0xd0 [ 616.708928][T31335] hci_cmd_timeout+0x97/0x140 [ 616.713628][T31335] process_scheduled_works+0x4cb/0x9d0 [ 616.719157][T31335] worker_thread+0x582/0x770 [ 616.723769][T31335] kthread+0x486/0x510 [ 616.728124][T31335] ret_from_fork+0x122/0x1b0 [ 616.732840][T31335] ret_from_fork_asm+0x1a/0x30 [ 616.737636][T31335] [ 616.739983][T31335] value changed: 0x0000000000039510 -> 0x00000000000eb7b8 [ 616.747191][T31335] [ 616.749530][T31335] Reported by Kernel Concurrency Sanitizer on: [ 616.755702][T31335] CPU: 0 UID: 0 PID: 31335 Comm: kworker/u9:2 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 616.767795][T31335] Tainted: [W]=WARN [ 616.771608][T31335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 616.781789][T31335] Workqueue: hci2 hci_cmd_timeout [ 616.786862][T31335] ================================================================== [ 616.568894][T31335] Bluetooth: hci2: command 0x1003 tx timeout [ 617.153196][ T4811] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.608477][ T2636] Bluetooth: hci0: command 0x1003 tx timeout [ 617.608480][ T3570] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 618.971547][ T4811] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.021803][ T4811] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.071640][ T4811] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.135897][ T4811] bridge_slave_1: left allmulticast mode [ 619.142100][ T4811] bridge_slave_1: left promiscuous mode [ 619.148032][ T4811] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.156070][ T4811] bridge_slave_0: left allmulticast mode [ 619.162008][ T4811] bridge_slave_0: left promiscuous mode [ 619.167763][ T4811] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.271337][ T4811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 619.281622][ T4811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 619.291987][ T4811] bond0 (unregistering): Released all slaves [ 619.353326][ T4811] hsr_slave_0: left promiscuous mode [ 619.359429][ T4811] hsr_slave_1: left promiscuous mode [ 619.365434][ T4811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 619.373432][ T4811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 619.382916][ T4811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 619.390596][ T4811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 619.401396][ T4811] veth1_macvtap: left promiscuous mode [ 619.406892][ T4811] veth0_macvtap: left promiscuous mode [ 619.412486][ T4811] veth1_vlan: left promiscuous mode [ 619.417842][ T4811] veth0_vlan: left promiscuous mode [ 619.486262][ T4811] team0 (unregistering): Port device team_slave_1 removed [ 619.497892][ T4811] team0 (unregistering): Port device team_slave_0 removed