last executing test programs: 4m42.737566005s ago: executing program 32 (id=28): connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0x79, 0x8c, 0x5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r4 = socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendto$inet(r4, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r4, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r5], 0x28}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000001300290a29bd70000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000000c001a80080005800400058037f8f8665a7af3588d3dcde3dd09f89d4a2a5d49938e642ccf5e91c5c34ecf33c3be89268a3bc054f0049f85ebbfa74d9c9b63d33f1c79e109ebab0fcb6196487b3d8a4df2efc39c7dda316b6697cf27ba3e8bac810033db0dd858e3780f75c112279814e658fe0d969e3cdb1b36"], 0x2c}}, 0x0) 4m12.76507531s ago: executing program 33 (id=595): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) open_by_handle_at(r4, &(0x7f0000000240)=@reiserfs_2={0x4b, 0x2, {0xb}}, 0x36f0516f) 4m12.752658912s ago: executing program 5 (id=597): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000000000085"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000200)={{0x2, 0x0, @empty}, {0x0, @dev}, 0x12, {0x2, 0x0, @remote}, 'lo\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, 0xffffffffffffffff, 0x37, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0, 0x8001}}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r6, 0x0, 0x80}, 0x18) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r5) 4m12.705941706s ago: executing program 5 (id=598): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x288, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0x240, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x230, 0x1, [@m_nat={0xe0, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x6, 0x10000000, 0x675b}, @empty, @multicast1, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x6, 0x6, 0x6979, 0x28}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xffffffff, 0x1}}]}, {0x65, 0x6, "525dfeac86ce84c0651b02d8cfcfb2e8ebe4fa883a2e8593252c80a728a5f4291635480f6cbc84b2432cef684200149d9d5edd825c13eb2d4d0d699ac1ca3cc36e4a09f088dc445f0783cc90f1d501855767e6d7c186ca9b4e0cb1c4bf18117b10"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_bpf={0x14c, 0x19, 0x0, 0x0, {{0x8}, {0x5c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0xc, 0x4, [{0x6, 0x6, 0x9a, 0x560906c9}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xd4b, 0xf, 0x8, 0x2, 0xfffffff8}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS_LEN={0x6}]}, {0xcc, 0x6, "4a4674d63b1ffae87fec8771eee0fd0081ac38281ff88b9d6f84e1148b20b62a05cddcddd28aea2c3adc50d50fb09ed4c9fbe90be3c7c4cb77c64642d9cbbcbcdc885e8bf296abca15971d0ad01bb1b6954fd934a53deec0ba6a8879df06a28a3b533ae7d5347297ba6c9828d6b3d506e33d01bf35d8b3c7276b285e1859b481d7dc4154d165777892cafbbf4a32e430637acafc8a50209a4191d8909bd39d8a31ee8c24305a0458d6cfe6d052d556aed6b166be8eab5f1ca80ee561dce6265109651e9172ac71a0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x288}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x6, 0x4, 0x4, 0x21, 0x0, 0x6, 0x10000, 0xf, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8a2, 0x0, @perf_config_ext={0x10000, 0x300000000000000}, 0x11000, 0x2, 0xffff, 0xb, 0x1, 0xeb38, 0x218f, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0xa) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000001f) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000b80)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x20040840) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x8, 0x1, 0x9, 0x200, {{0x6, 0x4, 0x1, 0x2, 0x18, 0x67, 0x0, 0x48, 0x29, 0x0, @multicast2, @rand_addr=0x64010102, {[@noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000340)={'wg2\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r2, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0], 0x0, 0xd2, &(0x7f0000000780)=[{}, {}], 0x10, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x11, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0}, &(0x7f0000000680)=0x14) r13 = socket$inet6(0xa, 0x2, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r16, 0x5f501}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x11}, 0x40004) sendmmsg$inet(r13, &(0x7f00000017c0)=[{{&(0x7f0000000000)={0x2, 0x4e1c, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r16, @empty, @loopback}}}], 0x20}}], 0x1, 0x4000080) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000006c0)=0x0, &(0x7f0000000700)=0x4) sendmsg$ETHTOOL_MSG_FEATURES_GET(r9, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r10, @ANYBLOB="000129bd7000fddbdf250b00000048000180080003000300000008000300000000001400020076657468315f746f5f627269646765000800030000000000080003000000000008000100", @ANYRES32=r11, @ANYBLOB="08000300020000000c00018008000100", @ANYRES32=r12, @ANYBLOB="4000018008000100", @ANYRES32=r16, @ANYBLOB="0800030002000100080003000100000008000100", @ANYRES32=r17, @ANYBLOB="1400020069703665727370616e3000000000000008000300020000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000300010000002800018008000300010000001400020076657468315f746f5f6261746164760008000300020000000c0001800800030000000000"], 0xf8}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000c}, 0xc, &(0x7f0000000b00)={&(0x7f0000001fc0)={0x200, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x10}, 0x4000050) 4m12.624367274s ago: executing program 5 (id=600): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35b", 0x6) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0xfff2, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7800, 0x0, 0x3) 4m12.584133649s ago: executing program 5 (id=602): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file2\x00', 0x300c056, &(0x7f0000000200)={[{@noload}, {@data_err_abort}, {@data_err_abort}, {@dioread_lock}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@nojournal_checksum}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x560, &(0x7f0000000a00)="$eJzs3d9rW+UbAPDnpO1+f7/rYAwVkcIunMyla+uPCV7MS9HhQO9naM/KaLqMJh1rHbhduBtvZAgiDsR7vfdy+A/4Vwx0MGQUvfCmctKTLluTNOuypJrPB05533NO+p4n57xvnpM3IQEMrYnsTyHixYj4Kok4HBFJvm008o0TG/utPbw+my1JrK9//EdS3y+rN/5X43EH88oLEfHLFxEnC1vbra6sLpTK5XQpr0/WFq9MVldWT11aLM2n8+nl6ZmZM2/OTL/z9ls9i/W18399+9Hd9898eXztm5/uH7mdxNk4lG9rjuMZ3GiuTMRE/pyMxdkndpzqQWO7STLoA2BHRvJ+PhbZGHA4RvJeD/z3fR4R68CQSvR/GFKNPKBxb9/5Pvj/fcpK+ufBexs3QFvjH914byT21e+NDqwlj90ZZfe74z1oP2vj59/v3M6W6N37EADbunEzIk6Pjm4d/5J8/Nu5061X72uuPNmG8Q/6526W/7zeKv8pbOY/0SL/Odii7+7E9v2/cL8HzbSV5X/vtsx/Nyetxkfy2v/qOd9YcvFSOT2dZ8MnYmxvVu80n3Nm7d56u23N+V+2ZO03csH8OO6P7n38MXOlWulZYm724GbESy3z32Tz/Cctzn/2fJzvso1j6Z1X2m3bPv7na/2HiFdbnv9HM1pJ5/nJyfr1MNm4Krb689axX9u1P+j4s/N/oHP840nzfG316dv4ft/fabttj8Uf3V//e5JP6uU9+bprpVptaSpiT/Lh1vXTjx7bqDf2z+I/cbzz+Nfq+t8fEZ92Gf+toz++3FX8Azr/c091/p++cO+Dz75r1353498b9dKJfE0341+3B/gszx0AAAAAAADsNoWIOBRJobhZLhSKxY3PdxyNA4VypVo7ebGyfHku6t+VHY+xQmOm+3DT5yGm8s/DNurTT9RnIuJIRHw9sr9eL85WynODDh4AAAAAAAAAAAAAAAAAAAB2iYNtvv+f+W1k0EcHPHd+8huG17b9vxe/9ATsSl7/YXjp/zC89H8YXvo/DC/9H4ZXx/5f6N9xAP3n9R+Gl/4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAPXX+3LlsWV97eH02q89dXVleqFw9NZdWF4qLy7PF2crSleJ8pTJfTouzlcXt/l+5UrkyNR3L1yZrabU2WV1ZvbBYWb5cu3BpsTSfXkjH+hIVAAAAAAAAAAAAAAAAAAAA/LtUV1YXSuVyuqSgsKPC6O44DIUeFwY9MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI/8EAAD//8S5N8k=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x5}, 0x18) r5 = socket$inet6(0xa, 0x80001, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x401, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1, 0x80}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'syz_tun\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x58840}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x310) setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x1, 0x1, r8}}, 0x40) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 4m12.463768121s ago: executing program 5 (id=604): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0xf8}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x0, 0x7, 0x9, 0x65d, 0x10, @private0, @private1, 0x10, 0x80, 0x3, 0x1}}) bind$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x2, {0x1}, 0x32d3008d48812296}, 0x18) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file2\x00', 0x8084, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESHEX=0x0, @ANYRESOCT, @ANYRES64], 0x1, 0x172, &(0x7f0000000600)="$eJzs2zGr01AUB/ATW/ve0+XN4hBwcSrq5KjIE8SAonTQSeHp0krBLtHFfApnv6AgnZy80kZaLa2laBOxv9/SA3/ae25JcrmB++Lqm+H5ePJ6/Hgax1kW3TuRx7csTuNCdKJWBQDwP/maUnxJKaWjKk4+RUqp7Y4AgH2z/gPA4dm6/t/+0FJnAMC+2P8DwOF5+uz5w7tFcfYkz48jPlfloBzUn3V+/0FxdiOfO11+a1qWg84iv1nn+a/5xbj0I7+1Nu/F9Wt1PsvuPSpW8stxvv/pAwAAwEHo5wtr9/f9/qa8rn56P7Cyf+/GlW5j0wAAdjB59374cjR69baB4mQ+YtbsoLsVH3/zt2RVRPsdNlh04p9oQ7G1mF2yf/uX23wqAU1Y3vRtdwIAAAAAAAAAAAAAAGzyh0eFehGxJorobTtZcNT4VAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDhewAAAP//Ff5FDA==") bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0xb4, 0x0) mq_open(&(0x7f0000000140)='$@\x00', 0x1, 0x0, 0x0) 4m11.990545858s ago: executing program 5 (id=614): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='mm_lru_activate\x00', r0, 0x0, 0x1ae}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003740000001e0a01020000000000000000010000000900020073797a32000000003400038030000080090006400000000024000b802000018007000100637400001400028008000160ee00000000000040000000000900010073797a30"], 0xe4}}, 0x0) 4m11.990279508s ago: executing program 34 (id=614): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='mm_lru_activate\x00', r0, 0x0, 0x1ae}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003740000001e0a01020000000000000000010000000900020073797a32000000003400038030000080090006400000000024000b802000018007000100637400001400028008000160ee00000000000040000000000900010073797a30"], 0xe4}}, 0x0) 4m11.410993276s ago: executing program 2 (id=626): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x64}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) 4m11.242628223s ago: executing program 2 (id=630): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) socket$netlink(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x64}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) 4m11.088404999s ago: executing program 2 (id=631): syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f00000000c0)='./file0\x00', 0x2003434, &(0x7f0000000ac0)=ANY=[@ANYBLOB="6d6f64653d3078303030303030303030303030303030392c6e6f6a6f6c6965742c6e6f6a6f6c6965742c00035067c79547c1c80974820bbd215ea5a4679fb5f4083e38d4d8824d0e277df185413ba1414ecfbce64af36225d4d4d5d2aa8993fcc99acec8e9a39181eac36f290f9046026009f464bf687d505d6e9228c475a84c81f6392fd1982a11b994b2ae32cce608b317", @ANYRES32=0x0, @ANYBLOB="c772dfd555b065247fd84621f59b25da260175a0"], 0x13, 0x557, &(0x7f0000000540)="$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") r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f0000000000)=0x84) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0xc0081, 0x120) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000004000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x5ea3, 0x8, 0x8000, 0x400250}, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet(0x2, 0x1, 0x100) syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r8 = open(&(0x7f00000003c0)='.\x00', 0x100, 0x97) getdents(r8, 0x0, 0x0) io_setup(0x3, &(0x7f0000000180)) getpeername$l2tp(r6, 0x0, 0x0) mknodat$loop(r7, 0x0, 0x40, 0x1) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x0, @fd=r3, 0x8006, &(0x7f0000000300)=""/210, 0xd2, 0x2, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) 4m10.695936358s ago: executing program 2 (id=640): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file2\x00', 0x300c056, &(0x7f0000000200)={[{@noload}, {@data_err_abort}, {@data_err_abort}, {@dioread_lock}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@nojournal_checksum}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x560, &(0x7f0000000a00)="$eJzs3d9rW+UbAPDnpO1+f7/rYAwVkcIunMyla+uPCV7MS9HhQO9naM/KaLqMJh1rHbhduBtvZAgiDsR7vfdy+A/4Vwx0MGQUvfCmctKTLluTNOuypJrPB05533NO+p4n57xvnpM3IQEMrYnsTyHixYj4Kok4HBFJvm008o0TG/utPbw+my1JrK9//EdS3y+rN/5X43EH88oLEfHLFxEnC1vbra6sLpTK5XQpr0/WFq9MVldWT11aLM2n8+nl6ZmZM2/OTL/z9ls9i/W18399+9Hd9898eXztm5/uH7mdxNk4lG9rjuMZ3GiuTMRE/pyMxdkndpzqQWO7STLoA2BHRvJ+PhbZGHA4RvJeD/z3fR4R68CQSvR/GFKNPKBxb9/5Pvj/fcpK+ufBexs3QFvjH914byT21e+NDqwlj90ZZfe74z1oP2vj59/v3M6W6N37EADbunEzIk6Pjm4d/5J8/Nu5061X72uuPNmG8Q/6526W/7zeKv8pbOY/0SL/Odii7+7E9v2/cL8HzbSV5X/vtsx/Nyetxkfy2v/qOd9YcvFSOT2dZ8MnYmxvVu80n3Nm7d56u23N+V+2ZO03csH8OO6P7n38MXOlWulZYm724GbESy3z32Tz/Cctzn/2fJzvso1j6Z1X2m3bPv7na/2HiFdbnv9HM1pJ5/nJyfr1MNm4Krb689axX9u1P+j4s/N/oHP840nzfG316dv4ft/fabttj8Uf3V//e5JP6uU9+bprpVptaSpiT/Lh1vXTjx7bqDf2z+I/cbzz+Nfq+t8fEZ92Gf+toz++3FX8Azr/c091/p++cO+Dz75r1353498b9dKJfE0341+3B/gszx0AAAAAAADsNoWIOBRJobhZLhSKxY3PdxyNA4VypVo7ebGyfHku6t+VHY+xQmOm+3DT5yGm8s/DNurTT9RnIuJIRHw9sr9eL85WynODDh4AAAAAAAAAAAAAAAAAAAB2iYNtvv+f+W1k0EcHPHd+8huG17b9vxe/9ATsSl7/YXjp/zC89H8YXvo/DC/9H4ZXx/5f6N9xAP3n9R+Gl/4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAPXX+3LlsWV97eH02q89dXVleqFw9NZdWF4qLy7PF2crSleJ8pTJfTouzlcXt/l+5UrkyNR3L1yZrabU2WV1ZvbBYWb5cu3BpsTSfXkjH+hIVAAAAAAAAAAAAAAAAAAAA/LtUV1YXSuVyuqSgsKPC6O44DIUeFwY9MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI/8EAAD//8S5N8k=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x5}, 0x18) r5 = socket$inet6(0xa, 0x80001, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x401, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1, 0x80}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'syz_tun\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x58840}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f36f0c7eb2700d609bcf41076d88144448ebe7994dd1b33d7c8787734cc315672f62261ceeede940774fd94d2767288cfb3a20882449d601ff878eedd3d57c9eb3a723b62102bd534c8a304a975d752e82cc8d5f969771c94a1d69cfd8694e29b9468fca5df65ece31ed7c209325604001fcd06adc3ac391f60a3523d6d0b4a8a"], 0x310) setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 4m10.467750131s ago: executing program 2 (id=642): r0 = io_uring_setup(0x1d58, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x6, 0x196}) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r1, 0x4) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000100, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000000100)=""/168, 0xa8}, {&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000002c0)=""/106, 0x6a}, {&(0x7f00000004c0)=""/176, 0xb0}], 0x5) close_range(r0, r1, 0x0) 4m10.198447069s ago: executing program 2 (id=644): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003480), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000003580)={&(0x7f0000003440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003540)={&(0x7f00000034c0)={0x64, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x48, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffff}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0xfffffffa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004800}, 0x20048000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000003700)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000003800)={&(0x7f00000036c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000037c0)={&(0x7f0000003740)={0x48, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x18, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8d5fd565b9bf7f7251e7cfeaff18d2fd"}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000480}, 0x20008090) 4m10.198253749s ago: executing program 35 (id=644): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003480), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000003580)={&(0x7f0000003440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003540)={&(0x7f00000034c0)={0x64, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x48, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffff}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0xfffffffa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004800}, 0x20048000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000003700)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000003800)={&(0x7f00000036c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000037c0)={&(0x7f0000003740)={0x48, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x18, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8d5fd565b9bf7f7251e7cfeaff18d2fd"}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000480}, 0x20008090) 4m9.701296599s ago: executing program 4 (id=650): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='rpm_return_int\x00', r2, 0x0, 0xffffffff}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r3}, 0x10) syz_open_dev$usbfs(&(0x7f0000000300), 0xf, 0xc340) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000240)={0x1d, r5}, 0x10) close(r4) 4m9.633579455s ago: executing program 4 (id=651): bind$bt_sco(0xffffffffffffffff, &(0x7f0000000380)={0x1f, @none}, 0x8) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) write$UHID_CREATE(r1, &(0x7f00000005c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000001c0)=""/228, 0xe4, 0x7fff, 0x1, 0xd7, 0x4, 0x8}}, 0xfffffffffffffcf4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r0, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000480)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x8, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf8, &(0x7f00000007c0)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0xec, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xb, 0x11, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='syzkaller\x00', 0x81, 0x5f, &(0x7f0000000400)=""/95, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, r0, 0x1, &(0x7f0000000a00)=[0x1, 0xffffffffffffffff], &(0x7f0000000a40)=[{0x0, 0x1, 0xa, 0xc}], 0x10, 0x401}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6}, 0x10) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r4, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x5, 0xffffffffffffff03) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000540)={@link_local, @random="2059249b3790", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "108114", 0x30, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x30, 0x0, @gue={{0x1, 0x1, 0x1, 0xfa, 0x0, @void}, "a6c1eb770c07091cac558f4d1fa71f360cab62ceda00b889319558c1a8673e050011ffbb"}}}}}}}, 0x0) 4m8.718761907s ago: executing program 4 (id=654): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0x8}, 0x1004, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x2, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x6, 0xffffffffffffffff, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r1) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x18) socket$netlink(0x10, 0x3, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b000000000000000000e2000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r8, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5) socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) socket(0x1e, 0x805, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 4m7.768043133s ago: executing program 4 (id=668): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file2\x00', 0x300c056, &(0x7f0000000200)={[{@noload}, {@data_err_abort}, {@data_err_abort}, {@dioread_lock}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@nojournal_checksum}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x560, &(0x7f0000000a00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x5}, 0x18) r5 = socket$inet6(0xa, 0x80001, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x401, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1, 0x80}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'syz_tun\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x58840}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x310) setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 4m7.59986605s ago: executing program 4 (id=672): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = syz_open_dev$vcsa(&(0x7f0000000080), 0x3, 0x40000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000300)={0x0, 0x40, 0x9}, &(0x7f0000000340)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vxcan1\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="10030600e0fc020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 4m7.378384792s ago: executing program 4 (id=675): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x102) syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) getpid() timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r1, 0x400, 0x2) write$sndseq(r1, &(0x7f0000000880)=[{0x6, 0x40, 0x5, 0x0, @tick=0x4, {0x1}, {0x4, 0x3}, @ext={0x88, &(0x7f00000007c0)="5f4642f9c13fc1d6c284dfdb162b5eb291d30228de1dbcd366db6a00d9390970a77eae0d6b9b33a2e6bcdd56197a8b695eb67ed995974787568617170dd0809e59e72baa14082cf7543cbf66e57e5ad6e6632aa2c485cc429168967e39765b7fa950cdff30bae5a2d159971f4f00b845f432f45f5e2bff59b78cfd1cad9d020dc947118402473b45"}}, {0x8, 0x3, 0x4, 0x8, @tick=0x6, {0x0, 0x6}, {0x3, 0x9}, @connect={{0x2, 0x6}, {0x6, 0x6}}}, {0x4, 0x0, 0x3, 0xfa, @time={0x6e5, 0x3}, {0x3}, {0x1, 0xb}, @addr={0xe9, 0x9}}, {0x8, 0x8, 0x4, 0xa1, @tick=0x40, {0x1, 0x6}, {0x8, 0xd7}, @note={0x0, 0x7, 0xf, 0x1, 0x9bf20000}}], 0x70) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @remote}], 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x2b00b100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf25010018"], 0x18}}, 0x4000800) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$TCSETSW2(r4, 0x5453, 0x0) 4m7.377718753s ago: executing program 36 (id=675): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x102) syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) getpid() timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r1, 0x400, 0x2) write$sndseq(r1, &(0x7f0000000880)=[{0x6, 0x40, 0x5, 0x0, @tick=0x4, {0x1}, {0x4, 0x3}, @ext={0x88, &(0x7f00000007c0)="5f4642f9c13fc1d6c284dfdb162b5eb291d30228de1dbcd366db6a00d9390970a77eae0d6b9b33a2e6bcdd56197a8b695eb67ed995974787568617170dd0809e59e72baa14082cf7543cbf66e57e5ad6e6632aa2c485cc429168967e39765b7fa950cdff30bae5a2d159971f4f00b845f432f45f5e2bff59b78cfd1cad9d020dc947118402473b45"}}, {0x8, 0x3, 0x4, 0x8, @tick=0x6, {0x0, 0x6}, {0x3, 0x9}, @connect={{0x2, 0x6}, {0x6, 0x6}}}, {0x4, 0x0, 0x3, 0xfa, @time={0x6e5, 0x3}, {0x3}, {0x1, 0xb}, @addr={0xe9, 0x9}}, {0x8, 0x8, 0x4, 0xa1, @tick=0x40, {0x1, 0x6}, {0x8, 0xd7}, @note={0x0, 0x7, 0xf, 0x1, 0x9bf20000}}], 0x70) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @remote}], 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x2b00b100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf25010018"], 0x18}}, 0x4000800) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$TCSETSW2(r4, 0x5453, 0x0) 3m56.224122145s ago: executing program 6 (id=861): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = syz_open_dev$vcsa(&(0x7f0000000080), 0x3, 0x40000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000300)={0x0, 0x40, 0x9}, &(0x7f0000000340)=0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vxcan1\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="10030600e0fc020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r7}, 0x18) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x1000000000002}, 0x3b) brk(0x400000ffc000) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 3m56.16434281s ago: executing program 6 (id=863): connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0x79, 0x8c, 0x5}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_RREADLINK(r1, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendto$inet(r5, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r5, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r6], 0x28}}, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000001300290a29bd70000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000000c001a80080005800400058037f8f8665a7af3588d3dcde3dd09f89d4a2a5d49938e642ccf5e91c5c34ecf33c3be89268a3bc054f0049f85ebbfa74d9c9b63d33f1c79e109ebab0fcb6196487b3d8a4df2efc39c7dda316b6697cf27ba3e8bac810033db0dd858e3780f75c112279814e658fe0d969e3cdb1b36"], 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', r4, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) 3m56.148862662s ago: executing program 6 (id=864): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) open_by_handle_at(r2, &(0x7f0000000240)=@reiserfs_2={0x4b, 0x2, {0xb}}, 0x36f0516f) 3m56.082345619s ago: executing program 6 (id=866): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x2, 0x80, 0x19, 0x4, 0x2c, 0x2, 0x0, 0x3e, 0x80000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xb9, 0x2, @perf_bp={&(0x7f0000000140)}, 0x105045, 0x5, 0x8, 0x8, 0xdc, 0x400, 0x101, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x8) (async) r0 = perf_event_open$cgroup(&(0x7f0000000180)={0x2, 0x80, 0x19, 0x4, 0x2c, 0x2, 0x0, 0x3e, 0x80000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xb9, 0x2, @perf_bp={&(0x7f0000000140)}, 0x105045, 0x5, 0x8, 0x8, 0xdc, 0x400, 0x101, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xfffffffffffffbff, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x2, r0, 0x2) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xfffffffffffffbff, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x2, r0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x106, 0x8}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) r5 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) kcmp(r5, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) ptrace(0x4207, r5) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r6, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) kexec_load(0x4, 0xa, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3, 0x2000000a}}, 0x10) (async) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3, 0x2000000a}}, 0x10) close_range(r1, r2, 0x0) 3m56.057511631s ago: executing program 6 (id=869): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00'}, 0x18) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000100)='./file1\x00') sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 3m55.853142372s ago: executing program 6 (id=873): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r0}, 0x3d) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='hrtimer_start\x00', r1}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000800fe8000000002000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff0200000000000000000000000000010000000033"], 0x124}}, 0x0) 3m55.838591023s ago: executing program 37 (id=873): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r0}, 0x3d) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='hrtimer_start\x00', r1}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000800fe8000000002000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff0200000000000000000000000000010000000033"], 0x124}}, 0x0) 2m33.740794493s ago: executing program 8 (id=2262): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)=@o_path={&(0x7f0000000040)='./file0\x00', r1, 0x4000, r1}, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) listen(0xffffffffffffffff, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) (async) r3 = socket$inet6(0xa, 0x80002, 0x0) (async, rerun: 64) r4 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r6}, 0x10) (async, rerun: 64) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) (async, rerun: 64) connect$inet(r4, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) (async) sendmmsg$inet(r4, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) (async) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) (async, rerun: 32) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) (async, rerun: 32) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") (async, rerun: 32) r9 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) (async) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="03000000000000000a004e230000000cff010000000000000000000000000001f8ffffff000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003"], 0x210) (async) setsockopt$inet6_group_source_req(r9, 0x29, 0x2b, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xc2, @mcast1, 0x6}}, {{0xa, 0x4624, 0x9, @mcast2, 0xfffffe01}}}, 0x108) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000001900000000"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xf, &(0x7f0000000e80)=ANY=[@ANYRES16=r7, @ANYRES16=r4, @ANYRES16=r0, @ANYRES64, @ANYRES16=r8, @ANYBLOB="362fa4fd6bb44c2f5ef52b16e5aaad7f54d309d212387f61e94659d15813445565b288effd93f0d762ed1f68ffb75ab6c5980ad3fc9ccae9fc6516492aaf37d3c8ee830cdda738d4fe37d9b9620a55b7257d0831c3efb7aa602255a0d2d40bdde07a1f78802918442a36d96dbefaa89a2e1482d2269979218e915fbd2f5e87fd49d13cc52e6e3146d9c840e8a7dda5fcd90481e178a691ca454592b04f2b66eaa46db7b6a5b62ebff6b342", @ANYRES64=r5, @ANYRES64=r8], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) fdatasync(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m33.694034647s ago: executing program 8 (id=2263): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x200000}, 0x18) r3 = socket$inet(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$PTP_CLOCK_GETCAPS(r4, 0x80503d01, &(0x7f0000000340)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES32=r2], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0x200000000000023d, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="a49d8183503f4909094d49c7f5342149adda773e2f", @ANYBLOB="0000000800000000b7080000000042a200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000009500"/65], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000500)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000180), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, &(0x7f00000008c0)=ANY=[@ANYBLOB="6d616e676c65000000000002000000000000000000000000000000000000000003"], 0x58) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'veth0_macvtap\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40002) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r10, 0xc0105303, &(0x7f0000000040)={0x0, 0x0, 0xc5}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kfree\x00', r11}, 0x18) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000006c00000426bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="10080200640004000f0022008ad4030c0c000008002c00ffff00000000"], 0x40}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0xfffffffffffffccc, 0x0) r14 = socket$vsock_stream(0x28, 0x1, 0x0) fgetxattr(r14, &(0x7f0000000d40)=ANY=[@ANYRES16=r7, @ANYRESHEX=r7, @ANYRES8=r8, @ANYRESOCT=r13, @ANYRES32=r5, @ANYBLOB="b5dab39c32e8b484e77cfee9de0b98f0f117a0fcb5108098eda039664976264cdb7658257831b600459ece1069a3d7a0a6b1e73b9be550b4a2df7c22c73538d107be0803bc0d136cf910811643f8f1eb3a292ff671540ddfdd3548b0bc85044c2438571476c809f6ee1bea32ee9610cfe11696d10c21f6476e758423cb4b0c6b9b084ddd9e634191e40acc915595f5a12c178fea67642a01fdf01f3bc7043541df89513c33042e0c05d56d4dfc75538b92429e2beed38670244557560d609e01f2", @ANYRES64=r14, @ANYRES16=r12, @ANYRESOCT=0x0], 0x0, 0x0) preadv(r11, &(0x7f0000000580)=[{&(0x7f00000036c0)=""/4120, 0x1018}, {&(0x7f00000026c0)=""/4096, 0x1000}, {&(0x7f0000000900)=""/213, 0xd5}, {&(0x7f00000004c0)=""/52, 0x34}], 0x4, 0x4000, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000200)="99aa299288dd900524502215380903b193cea910435866a8ec87382827f8904b269df94d382967a09899c61e2c54cadee236694f1e9beb167164d14142ed02a0e94cbfda9802a1414de9c8e6b7fe41d650b07c87f5359b293a371827cc5d91cfbcb1c4e7582482dd8389e6881184c7cca750dd83cdc5ac8957ef7d60214b7f8dc66abe6ba40705ccaec5ac95e00410abe277302b1d210f4f5aaab4") 2m33.114485786s ago: executing program 8 (id=2273): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) socket$netlink(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x64}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) 2m33.114047986s ago: executing program 8 (id=2274): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$eJzs3U1oM0UYwPEnaZImeXmbHERRkA6+CHpZ2uhZDNKCELC0jdgKwrbdaMialGyoRsS2J4+Kd0+Ch9KbBQ8F7VnoxZteRPDWi6BgBXVlv5LNV9PGpMH2/4OSycw8uzPZSXk27WYv3vj03UrJ0kp6Q6JJJRERkUuRrEQlEPEfo245IfLJd622A3n+wW8/PL22UUx6FWo5v/5CTik1N//Nex+m/G6ns3Kefevi19wv54+fP3nxz/o7ZUuVLVWtNZSutmo/NfQt01A7ZauiKbViGrplqHLVMupe+1f+dsza7m5T6dWdh+ndumFZSq82VcVoqkZNNepNpb+tl6tK0zT1MC0Ypni0uqrnRwzeHvNgMCH1el6fEZFUT0vxaCoDAgAAU9Wd/0edlH5Y/h/Syv83Za5QWFpVTud2/n/8zFnjwesnc37+f5rol/+/+KO3rY783zmdaOf/Ne/8oDQ8//9cbpD/92ZE98vI+X92AoPBaOYTPVWRjmdO/p/237+uwzePF9wC+T8AAAAAAAAAAAAAAAAAAAAAAP8Hl7adsW07EzwGP+1LCPznuJMGHf9ZEUk6R9/m+N9laxubknQv3HOOsfnxXnGv6D36Hc5ExBTjb7ubszaCK4+UIyvfmvt+/P5eccZtyZek7MTLomQk666nULxtL79aWFpUHj++dZlSOhyfk4w8Fo7/2l2dTnyuM97ff0KeexSK1yQj329LTUzZcSPb+/9oUalXXit0xafcfiLy860fFAAAAAAAxkxTLX3P3zVtULv3LSP5kvsxkSELkpG/+p/fL/Q9P49lnopNe/YAAAAAANwPVvODii5Ro+4WTLNfISUDm8ZQiHXUxEWkb+dEV038qi3PhGZ43fEkxLuDyX+d1xfBq3qTqOAfKZyBt5r8O6rIaOMJ5u/WRGLP/u43/XnTeUUOxF0AB+GmqFwjPNY9+HmnQvXt/Gjgdg79ibRqgo+NEgNeZ1np3U70ipUQ76mxI6MtgCc++/KP8b1BXjrxV8D7wzsfmoa9L9c5KF0FZxe9TfGJ/+IBAAAAcOvaSX9Q83K4OXwjkfDNcvjLPQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYzSRr/TrKgze++xtThUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYun8DAAD//7ct9c4=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r4) pwritev(r2, &(0x7f0000000680)=[{&(0x7f0000000040)}], 0x1, 0x9, 0x3) r5 = socket$netlink(0x10, 0x3, 0x0) sendfile(r4, r2, &(0x7f00000001c0)=0x7, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$peek(0x1, r6, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r1], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2521}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) fstat(r8, &(0x7f0000000780)) splice(r2, 0x0, r4, 0x0, 0x4ffe2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000000f00)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 2m32.166286911s ago: executing program 8 (id=2296): bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x0, &(0x7f0000000080)}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r0, 0x0, 0x400000551f587d}, 0x18) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100), 0x10}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r4, 0x80000002) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x94) socket$inet(0x2, 0x3, 0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r8, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) sendmsg$NFT_BATCH(r6, 0x0, 0x4) creat(0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x1f00, 0x0, 0x0, 0x0, 0x0, 0x7fb, 0x0, 0xb1, 0xe, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x50) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x1000440, &(0x7f00000000c0), 0x6, 0x588, &(0x7f00000008c0)="$eJzs3U1sHFcdAPD/TOzsOnGaFHooCGgohYCirmOnjapeWi5IUFUgFU49pNZ6Y0VeZyPvutTGB+fEgSsSlTjBhQsnDpU4IPWEuHKDG5dyQCooAtVICE01491kd7ObbOOPie3fTxrte/P1f2/kfeN5szMvgBPrYkRsR8TpiHgnIs5HUsxPulO8vjvl631yd6u+c3ernkSWvfWvqe4etuq99XvORsRPR8Sq9KXbG5sri81mY62bn+us3p5rb2y+eHN1cbmx3Li1sHBt/tqVV66+vLBvdX1u9Xcff+fmGz/6w++//NGft7/1k7zMr3WX5XXrWzXJsmzvAV/rHZfpmO3OSiMiP3Jv7H3vT4RT3fqcLrsgPJb87/FzEfF8N31PtbwyAQAHK8vOR3a+P39fOpDLsmTEOgDA0ZNf889Gkta61/+zkaa1WtGHV30mzqTNVrtz+UZr/VbS6+KbTm/cbDauFH2FEZWYTvL8fERcKKbd/MJQ/mpEPB0RP6/MFPlavdVcKuU/HgDg7ND5/z+V/PxfmWRTdwgA4ChzJgeAk+fB8/90KeUAAA6P638AOHn6zv8T3fkHAI6+6tCz/yNlyaGUBQA4HCP7/98+dz/9bDL0ii8A4Khz/x8ATpQfvPlmPmU7WVK8/3rp3Y31lda7Ly412iu11fV6rd5au11bbrWWi3f2rI7YxZ3+TLPVuj3/Uqy/N9dptDtz7Y3N66ut9Vud68V7va83PFgAAOV7+rkP/5pExParM8UUvbEcHv2DAOCISyNmyi4DUI5TZRcAKM1U2QUASqM/HnjUj3tH/kRoJiLeH7+NjgV4sl36wpj+/+H/DQbvB/x/H0bHBkrW/VrrBoATaG/9/3oP4Ch7+Infg0FwnGVZYjx/ADhhJriC9xNBOOYe6/4/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnHCzxZSkte5Y4LORprVaxLmIuBDTyY2bzcaViHgqIv5Sma7k+fmyCw0A7FH6j6Q7/tel8y/MDi89nfy3UnxGxI9/+dYv3lvs9IYOvDe/834xv7O2MDJA5eDrAAD0mRqe0TtPF599F/Kf3N2q96bDLODH394dXDSPu3N3q35/POKpbuGrkc878+9koDLJPg1MvH0nIp4drn96b/mF7sinw/Hz2OcOLH4UNZwdiD/4b1RaLNv9zI/F52cmjLcPZYbj4sO8/Xl91PcvjYvFZ/f7NzXYmFbjZw82ro+h1/7tZLvt305f/Hz/3z9XLdqaUe3fxUljvPTH745ddudU9sWpiF7snb72Z1e1SI2K/8KE8f/2pa88P+5gZb+KuBQPi7+bmuus3p5rb2z+9nsf/Gm5sdy4tbBwbf7alVeuvrwwV/RRz/V6qh/0z1cvPzW+/hFnxsSvPqL+X5+w/r/+3ztvf/Uh8b/5tVHx03jmIfHzc+I3Ym2i+ItnPhg7fHcef2lM/acG4p8e2C6fd3l4Z2P+ID/6++bSRAUFAA5Fe2NzZbHZbKxNkkhjc2Wxd6E58VYDiZnH2mrCRBzYnkcnpgcOQvWgYp0ds+g3n3mH03Gox2ffEnc+w8qVcop6Kpq9/qhHrtxdb3svQbNsD2W+OME6JTVIwKG5/6UvuyQAAAAAAAAAAAAAAMA47R92X/m3zw9F9T8MV3YdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOL4+DQAA//+T6cce") 2m32.094803548s ago: executing program 8 (id=2299): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) gettid() r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x6c) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000002200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b1a439, &(0x7f0000000980)=ANY=[@ANYRESOCT, @ANYRES16, @ANYBLOB="41319d36b19da0f92c34d4161aedb4d9c117bb97d9a14da38deb4d799f7396c16e53eea9b38952392679dc9965aff692fc7a1de3490b4e22f3468c98ec62faff6c802527cda5cb48c5bc97b57252bea2f306513526e3e61d4e206934c90150ba2c325365d34a4866416a647a2022e5485163e3fad30730c80a46b63900f5dfdd845440d244a1e889fb14a29c06fcc85f976afbb0ce220bde0da45028db74413dd6a37b7b63c2b7a26169fc2a44d210bd17af7173aa72d2ad45542299334fe9576104e3e3e7d25997fe6c8bb5fa15b761725a39fedaf8d5533570ba136ac826592163351666324320c93c98c4", @ANYRES64], 0xb, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioperm(0x4000004, 0x1, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x7, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) mq_open(0x0, 0x42, 0x1f0, 0x0) mq_unlink(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x4d02dd69, @mcast2}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c000780080012400500"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = socket(0xa, 0x3, 0x3a) r5 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x1c0862) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x200) r6 = socket$kcm(0x10, 0x400000002, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, 0x0, 0x4000054) sendmsg$NL80211_CMD_TESTMODE(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x44) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000004700)=""/4137, 0x1029}, {&(0x7f0000001b40)=""/12, 0xc}], 0x3}, 0x20) 2m32.091204278s ago: executing program 38 (id=2299): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) gettid() r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x6c) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000002200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b1a439, &(0x7f0000000980)=ANY=[@ANYRESOCT, @ANYRES16, @ANYBLOB="41319d36b19da0f92c34d4161aedb4d9c117bb97d9a14da38deb4d799f7396c16e53eea9b38952392679dc9965aff692fc7a1de3490b4e22f3468c98ec62faff6c802527cda5cb48c5bc97b57252bea2f306513526e3e61d4e206934c90150ba2c325365d34a4866416a647a2022e5485163e3fad30730c80a46b63900f5dfdd845440d244a1e889fb14a29c06fcc85f976afbb0ce220bde0da45028db74413dd6a37b7b63c2b7a26169fc2a44d210bd17af7173aa72d2ad45542299334fe9576104e3e3e7d25997fe6c8bb5fa15b761725a39fedaf8d5533570ba136ac826592163351666324320c93c98c4", @ANYRES64], 0xb, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioperm(0x4000004, 0x1, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x7, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) mq_open(0x0, 0x42, 0x1f0, 0x0) mq_unlink(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x4d02dd69, @mcast2}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c000780080012400500"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = socket(0xa, 0x3, 0x3a) r5 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x1c0862) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x200) r6 = socket$kcm(0x10, 0x400000002, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, 0x0, 0x4000054) sendmsg$NL80211_CMD_TESTMODE(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x44) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000004700)=""/4137, 0x1029}, {&(0x7f0000001b40)=""/12, 0xc}], 0x3}, 0x20) 1.540446805s ago: executing program 3 (id=4626): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001980)=@newtaction={0x18, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x1c9441, 0x0) quotactl_fd$Q_QUOTAON(r2, 0x80000601, 0x0, &(0x7f0000000400)='./file0\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r7, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_setup(0x30, &(0x7f0000000600)=0x0) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r8, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r9, &(0x7f00000000c0)="01", 0x24}]) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000240)={@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x50, 0x0, [{@multicast2}, {@initdev}, {@initdev}, {@loopback}, {@private}]}}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, 0x0) ioctl$SIOCX25GCAUSEDIAG(r2, 0x89e6, &(0x7f0000000040)={0x5, 0x2}) 1.183712011s ago: executing program 3 (id=4631): syz_open_dev$tty1(0xc, 0x4, 0x1) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x115) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) setresgid(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1001, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$TIOCL_SETVESABLANK(r2, 0x560e, &(0x7f0000000140)) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000480)=@security={'security\x00', 0x4, 0x4, 0x418, 0xffffffff, 0xd0, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x348, 0x348, 0x348, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xfffa, 0x8}}}, {{@ipv6={@private1, @private2, [], [0xffffff00, 0xffffff00], 'geneve1\x00', 'macvlan0\x00', {0xff}, {}, 0x0, 0x2, 0x3, 0x5}, 0x0, 0x138, 0x1a8, 0x0, {}, [@common=@srh1={{0x90}, {0x16, 0xb7, 0xe, 0x8, 0x7, @local, @private2, @private1={0xfc, 0x1, '\x00', 0xfd}, [0xff000000, 0xff000000, 0xff, 0xff], [0xff, 0xffffffff, 0xff000000, 0xffffff00], [0xffffffff, 0xff000000, 0xffffffff, 0xff], 0x604, 0x208}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x3, 0x8, 0x0, 0x0, "cf3523f6abea0ac59f38e4cee2d4e02b4433ada4369fbb16cedc9b2a2cbc46c2804dc8c41ce7aba48504d24e8bc4e7d304000000db2882bc827158e95f1a87e8"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000680)=[0xff, 0x9]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5b, &(0x7f0000000900)=ANY=[@ANYRESDEC=r4], 0x0, 0xfffffffb, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newtaction={0x924, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x910, 0x1, [@m_police={0x8b0, 0x1, 0x0, 0x0, {{0xb}, {0x884, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x2}}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x3, 0x3, 0xb, 0x101, {0xd, 0x0, 0x6b13, 0x1, 0xabf, 0x3}, {0x4, 0x58b19c2b7d0393df, 0xaf03, 0x6, 0xb2f3, 0x4}, 0x9, 0x4, 0x8}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x8, 0xa, 0xfffffff8, 0x1, 0x60, 0xfffffff8, 0x7, 0xb5, 0x3, 0x7, 0x9, 0x9, 0x3, 0x5, 0x8, 0x8, 0x7ff, 0x9, 0x4, 0x7ff, 0x2, 0x3, 0xc, 0x98f, 0x9, 0x10001, 0x3, 0x4, 0x1000, 0x2, 0x6, 0x4cfe, 0x80, 0x7, 0xd82, 0x9, 0x86, 0x5, 0x2, 0x8001, 0x4, 0x7fff, 0xffffffff, 0x2, 0x6, 0x0, 0x9, 0x3, 0x8, 0x3, 0xfff, 0x36ea4349, 0x80000001, 0x4, 0x6, 0x3, 0x10010, 0x4, 0x2, 0x2, 0x9, 0x9, 0xfffffffc, 0xffffffff, 0x6, 0x0, 0x9, 0xffff, 0x2, 0x1000, 0x94bb, 0xfff, 0x7, 0x9, 0x2, 0x0, 0x2, 0x6, 0x4, 0x0, 0x9, 0x3, 0x4128fef1, 0x5, 0x7fffffff, 0x9, 0xf6, 0xdb, 0x2, 0x3, 0x5, 0x8, 0xfffffff8, 0x5, 0x1, 0xfffffff9, 0x5, 0xd5, 0x8, 0x80000001, 0x6, 0x3, 0x3, 0x1ff, 0x5, 0x6, 0x6, 0x5, 0xa7bf, 0x4, 0x3, 0x70, 0x5, 0x7, 0x3c000000, 0xd, 0x6, 0x9, 0x2, 0x5, 0x6, 0x7b, 0x5, 0x4, 0x5, 0xff, 0x3, 0x680, 0x0, 0xd0, 0x8001, 0x2, 0x5, 0x80, 0x100, 0x4bc0, 0x1, 0x9, 0x800, 0xfffffffd, 0x0, 0xff, 0x17, 0x6, 0x0, 0x7, 0x4, 0x9, 0x6, 0x6, 0x101, 0x0, 0x10000, 0x8, 0x43f, 0xb, 0x0, 0x2, 0x8, 0x2, 0xffff, 0xffff, 0x5, 0xd, 0x8, 0xab, 0xb, 0xff, 0xf, 0xa, 0x0, 0x1, 0x4c, 0x8, 0x5, 0x7, 0xffffff7f, 0x4, 0xfffffff9, 0x9, 0x81, 0xc, 0x61e, 0x66, 0x9, 0xf68, 0xfffff001, 0xb, 0x8, 0x3, 0xc, 0xefd, 0x6, 0xf12, 0xfffffff8, 0x0, 0x6, 0x4, 0x3, 0x2, 0xfe4, 0x6, 0x4, 0x8, 0x7, 0x7, 0x9, 0x2, 0x453, 0xffffffff, 0x101, 0x2, 0x8, 0xffff, 0x0, 0x5, 0x200, 0x1, 0x1, 0x1c000000, 0x7, 0x6, 0x1, 0x1, 0x591, 0xb51, 0x1c, 0x4, 0x0, 0x55a5, 0x8, 0x9, 0x9, 0x5, 0x3, 0x3, 0x400, 0x8, 0x7, 0xc3, 0xa, 0x8, 0x2, 0x5, 0x80000001, 0x9, 0x5, 0x1, 0x78f7, 0x1, 0x4, 0x4d, 0x7, 0x2384]}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffff7, 0x4, 0xddd, 0xfffffe00, 0x1, 0xb8, 0x9, 0xb, 0x3, 0x462, 0x200, 0x7fff, 0x65b3, 0x7, 0x8, 0x4, 0x7fff, 0x3, 0x800, 0x5131, 0x2, 0x39d, 0x5, 0x7, 0xabc, 0x18b5, 0x10000, 0x40, 0x4, 0x8001, 0x506d, 0x1000, 0x3, 0x1, 0xc, 0x0, 0xf, 0xffffffff, 0xffff, 0x8, 0xffffffff, 0x155a, 0x1, 0x3ff, 0x8000, 0xfffffffa, 0x0, 0x0, 0x3322, 0x8, 0x0, 0x6, 0x1, 0x8a66, 0x200, 0x90000000, 0x297, 0x1, 0x2, 0x6, 0x7fffffff, 0x401, 0x5, 0x18d, 0x4dd, 0xffff, 0x7f, 0xffffffdb, 0x2, 0x1, 0x1d, 0x3, 0x7, 0x5, 0x3, 0x9, 0x0, 0x5, 0xae, 0x3, 0x4, 0x9, 0x1, 0x6, 0xae8, 0x9, 0x5, 0xffffffff, 0xffffffff, 0x0, 0x7, 0x7f, 0x535, 0x4, 0x7, 0x5, 0x0, 0x40, 0xe3f1, 0x3, 0x6, 0x0, 0x5, 0x0, 0xa, 0x7, 0x3, 0x80000000, 0x2, 0x8, 0x1800, 0xfa, 0x401, 0x1, 0x7, 0x800, 0x1ff, 0x6, 0x5, 0x10001, 0x2, 0x9, 0x2, 0xffffffff, 0x0, 0xe6b, 0x1, 0x6, 0x10000, 0x1, 0x6, 0x3, 0xc, 0x2, 0x7, 0x9, 0x7, 0x80000000, 0x8000, 0x3, 0x3ff, 0x8, 0x1ff, 0xe, 0x6032, 0x8, 0x766, 0x10001, 0x6, 0x3119, 0x1, 0x9, 0x3, 0x4, 0x6, 0x963, 0x7, 0x7, 0x8, 0xb, 0x5, 0x7fff, 0x7fff, 0x1, 0xd, 0x8001, 0x2, 0x7, 0xa, 0x2, 0x2, 0x5, 0x5, 0x100, 0x40, 0x80000001, 0x9, 0x5, 0x3, 0xb, 0xff, 0x5, 0x7, 0x2, 0x80000000, 0x80000000, 0x4, 0x7, 0x1219, 0x5, 0x4, 0x6, 0x3, 0x0, 0x2, 0xd70, 0x8, 0xfffffe01, 0x200, 0x1, 0x8, 0x5, 0x8001, 0x9a79, 0x5, 0x1, 0x0, 0x4, 0xffff, 0xfe9c, 0x1d9d, 0xc4a, 0x2, 0x7, 0x80000001, 0x3, 0x1, 0x2f, 0x200, 0x5, 0x4, 0x4, 0x3, 0x3dd, 0x65, 0xffff30c6, 0xd57, 0x3ff, 0x5, 0xf, 0xfffffffb, 0x3, 0xab, 0xe, 0x9, 0xa3, 0x100, 0x0, 0xffffffff, 0x3, 0x3, 0x5, 0x5, 0x2, 0x3, 0x5, 0xc7, 0x800, 0x7929, 0x9, 0x9, 0xf1, 0x6, 0x10001, 0x1, 0x8]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x924}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r8}, 0x10) syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) 1.121259677s ago: executing program 0 (id=4635): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x4, 0x127d, &(0x7f00000011c0)="$eJzs3U1rJMUfB/DfJJPH/SeTv66ruyAWelGEcZODJy9BdkEMKNEsqKdeM9EhkwcyQyAi7njyJPgyRD16E8Q3kIsXz4IgkovHPYgtyUw085BsYjIJyOdz6aK6vlXV6U5DD1303itfrK2u1MsrWSOGCoUobo5E8WGKFEMxHC3NeOHeTz8//dY7774+v7BwZzGlu/Nvz76cUpp+5vv3Pv7m2R8a1+59O/3dWOzODO39PvfL7o3dm3t/fh3VeqrW0/pGI2Xp/sZGI7tfq6Tlan21nNKbtUpWr6Tqer2y1bF/pbaxubmTsvXlqcnNrUq9nrL1nbRa2UmNQmps7aTsg6y6nsrlcpqaDM5j6auHeZ5H5PlIjEae5/lETMa1+F9MxXSUYib+H4/F43E9nogb8WQ8FTcPWl31vAEAAAAAAAAAAAAAAAAAAOC/5RHr/wvW/wMAAAAAAAAAAAAAAAAAAMDgda//L0b4/j8AAAAAAAAAAAAAAAAAAABcskd8/79r/f+L1v8DAAAAAAAAAAAAAAAAAADAIIy3NospjUesfba9tL3U2rbq51eiGrWoxO0oxR9xsPq/pVW++9rCndvpwEy8tPagnX+wvTTcmZ8dKcVMoW9+diIiUkqd+bGYPJqfi1Jc7z/+XGv8rvx4PP/cfv7TVr4cpfjx/diIWixHFNpHf5D/ZDalV99YmOjM39pvd6zhAZ8WAAAAuEjl9Lfe5/dmu1Hf/a1d7efz1G5ZOOH3ga7n82LcKl7VUXOovvPRalarVbb+ZWH0+H5Gz9dzT6EQEVkcrZme/HVxf/BT9nN4uV3QfI4Uhi+6wxMLIye3Occ5jeKp/5gDKkSzuyYvRZy1n9++PFIzfub4+QpD7cssqzVPfbFFM88HOrG+/4xjJ6WOv2cUBnxP4vL8c9KveiYAAAAAAAAAAACcRd+3/yYioud9wA97ag5fD++M9/Z8/OifX8IRAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/sQPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK8CAAD//w+Ty90=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$tmpfs(0x0, 0x0, 0x0, 0x420, &(0x7f00000001c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_audit(0x10, 0x3, 0x9) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0x7000000) socket$inet6_tcp(0xa, 0x1, 0x0) 1.014610528s ago: executing program 3 (id=4637): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x8000000000000000}, 0x18) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 969.197992ms ago: executing program 3 (id=4638): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r1, 0x2f, 0x0, @val=@netkit}, 0x1c) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x20044080}, 0x8000) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a70000000060a0b0400000000000000000200000044000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c61737400000000100001800a00010072656469720000000900010073797a30000000000900020073797a320000000014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7, 0x0, 0x2}, 0x18) close(r4) r8 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r8, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2, 0x0) setsockopt$inet_int(r8, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(r8, 0x0, 0x19, &(0x7f0000000140)=0x400030, 0x4) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x10) syz_emit_ethernet(0x6f, &(0x7f0000001640)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000610000000000119078000000000000000000b55a20004d9078f7a0c983fe57ca37a98da9f7135765d4151281b231732e79960e3f0bac82e25213e160a06003d9d1d32b70a3678bb135f6806298543e0f320e78e8482c38396f246f189969"], 0x0) r9 = dup(r3) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000580)='kmem_cache_free\x00', r11}, 0x18) syz_clone3(&(0x7f0000001040)={0x20400, 0x0, 0x0, 0x0, {0x18}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0], 0x1}, 0x58) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000700)={0x0, "78839f72bb0e4f0150349b4974dc2575"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}, 0x1, 0x0, 0x0, 0x8004}, 0x81) 813.045258ms ago: executing program 9 (id=4641): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001980)=@newtaction={0x18, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x1c9441, 0x0) quotactl_fd$Q_QUOTAON(r2, 0x80000601, 0x0, &(0x7f0000000400)='./file0\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r7, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_setup(0x30, &(0x7f0000000600)=0x0) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r8, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r9, &(0x7f00000000c0)="01", 0x24}]) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000240)={@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x50, 0x0, [{@multicast2}, {@initdev}, {@initdev}, {@loopback}, {@private}]}}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, 0x0) ioctl$SIOCX25GCAUSEDIAG(r2, 0x89e6, &(0x7f0000000040)={0x5, 0x2}) 631.856117ms ago: executing program 9 (id=4645): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x7f, 0xb) write(r0, 0x0, 0x0) 626.428807ms ago: executing program 1 (id=4646): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)=@newqdisc={0x234, 0x24, 0x2, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb578cf60565d7f48, 0xa}, {0xfff3, 0xf}, {0xffff, 0xfff3}}, [@TCA_STAB={0x4}, @TCA_STAB={0x4}, @TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x8, 0x1, 0x2, 0x1, 0x7, 0x1, 0x5}}, {0xe, 0x2, [0x2, 0x7, 0x2, 0x6d7, 0x29e4]}}, {{0x1c, 0x1, {0x9, 0x3a, 0x2, 0x1, 0x1, 0x4, 0xfffffff6, 0x4}}, {0xc, 0x2, [0x6, 0x3ff, 0x0, 0x40]}}, {{0x1c, 0x1, {0x9, 0x4, 0x4, 0x966, 0x1, 0x1, 0x2, 0x5}}, {0xe, 0x2, [0x4, 0x7, 0xa, 0x1, 0x7ff]}}, {{0x1c, 0x1, {0x1, 0x20, 0x800, 0x7, 0x2, 0x2, 0xf, 0x3}}, {0xa, 0x2, [0x8774, 0xfc0e, 0x9]}}]}, @TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x27, 0x9, 0x100, 0x400, 0x0, 0x10000, 0x3, 0x6}}, {0x10, 0x2, [0x7c9, 0xb1a0, 0xc1b, 0x4, 0x1000, 0x7]}}, {{0x1c, 0x1, {0x7, 0x2, 0xde, 0x4, 0x0, 0x6, 0x2, 0x4}}, {0xc, 0x2, [0x3, 0x0, 0x78fe, 0x1]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_STAB={0xfc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0xf8, 0x95, 0x6, 0x1, 0xe834, 0x0, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x9, 0x8, 0x1, 0xa, 0x2, 0x1, 0x6}}, {0x4}}, {{0x1c, 0x1, {0x6, 0x0, 0xb68d, 0x7, 0x1, 0x9, 0x6, 0x8}}, {0x14, 0x2, [0x7, 0x1, 0xb, 0x7, 0xfff7, 0x882, 0x3, 0x6]}}, {{0x1c, 0x1, {0x3, 0x5, 0x8, 0xd, 0x0, 0x4, 0x908, 0x9}}, {0x16, 0x2, [0x26, 0x200, 0x3, 0x8, 0x3, 0x71b5, 0x9, 0x3, 0x4]}}, {{0x1c, 0x1, {0xd, 0xaf, 0x4, 0x3, 0x2, 0x2, 0xa, 0x1}}, {0x6, 0x2, [0x81]}}, {{0x1c, 0x1, {0x6, 0x8, 0x5, 0x2, 0x0, 0x6, 0x4, 0x6}}, {0x10, 0x2, [0x3, 0x2, 0x9, 0x6, 0x4, 0x0]}}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x24044890}, 0x1bce3b39846264aa) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840), 0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x8) r5 = getpid() setgid(0x0) keyctl$session_to_parent(0x12) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x6, 0x5635}]}) setreuid(0xee00, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r6, &(0x7f0000000ac0)='ns/mnt\x00') sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000c, 0x1010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x4000000) 601.063639ms ago: executing program 7 (id=4647): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x20, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 588.856641ms ago: executing program 9 (id=4648): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) open(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x41100}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00'}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 587.861151ms ago: executing program 1 (id=4649): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000c00)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x8000000000000000}, 0x18) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 536.773186ms ago: executing program 1 (id=4650): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 533.199926ms ago: executing program 9 (id=4651): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x3ea}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) 519.488108ms ago: executing program 9 (id=4652): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@jqfmt_vfsv1}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000e3ffffffffffffff00"/28], 0x50) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000002380)) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x1000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000010c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00100000bfa200000000000007020000f8ffffffb70300000800000084000000030000009500000000000000c74b44b22687577078fc3617f51c7504fd7af093f6f90f4555ca2d23155353193441145cf9844a3d9d3c365ca37d1018adb8cb979adab9a0c9b0a698ba9cbe"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x3c8, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000300000000000000000300008500000087000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="070000000400000008020000d900000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="00000004181200"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3a0000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000054000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000"], 0xf0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) stat(&(0x7f00000007c0)='./file1\x00', &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) pselect6(0x40, &(0x7f0000000100)={0x0, 0x8f5b}, &(0x7f0000000000)={0x1e}, 0x0, 0x0, 0x0) 462.593934ms ago: executing program 1 (id=4653): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1, 0x0, 0x200000}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000500)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f00000008c0)=ANY=[@ANYBLOB="6d616e676c65000000000002000000000000000000000000000000000000000003"], 0x58) 436.172576ms ago: executing program 7 (id=4654): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0xfffffffffffffeb9, &(0x7f0000000000)="259a53f27188a800000000000000", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) 349.645005ms ago: executing program 7 (id=4655): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x3, 0x0, 0x0, 0xf, 0x4000000}]}, {0x0, [0x30, 0x2e]}}, &(0x7f0000003240)=""/4114, 0x28, 0x1012, 0x1}, 0x28) 340.324016ms ago: executing program 9 (id=4656): bind$bt_sco(0xffffffffffffffff, &(0x7f0000000380)={0x1f, @none}, 0x8) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) write$UHID_CREATE(r1, &(0x7f00000005c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000001c0)=""/228, 0xe4, 0x7fff, 0x1, 0xd7, 0x4, 0x8}}, 0xfffffffffffffcf4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r0, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000480)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x8, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf8, &(0x7f00000007c0)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0xec, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xb, 0x11, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='syzkaller\x00', 0x81, 0x5f, &(0x7f0000000400)=""/95, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, r0, 0x1, &(0x7f0000000a00)=[0x1, 0xffffffffffffffff], &(0x7f0000000a40)=[{0x0, 0x1, 0xa, 0xc}], 0x10, 0x401}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6}, 0x10) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r4, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x5, 0xffffffffffffff03) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000540)={@link_local, @random="2059249b3790", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "108114", 0x30, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x30, 0x0, @gue={{0x1, 0x1, 0x1, 0xfa, 0x0, @void}, "a6c1eb770c07091cac558f4d1fa71f360cab62ceda00b889319558c1a8673e050011ffbb"}}}}}}}, 0x0) 327.117457ms ago: executing program 7 (id=4657): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xf2) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0x20) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x40) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f0000000000)={[{@errors_remount}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@grpquota}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x45a, &(0x7f0000000d80)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f0000000300)={0xc, 0xcf}) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r6, 0x0, 0x1}, 0x18) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "e3ffffffffffffff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "3da2d199", "72392a24199b5903"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 239.196856ms ago: executing program 0 (id=4658): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x7f, 0xb) write(r0, 0x0, 0x0) 149.161745ms ago: executing program 0 (id=4659): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtaction={0x12e8, 0x30, 0x9, 0x0, 0x0, {}, [{0x12d4, 0x1, [@m_skbmod={0x104, 0x1a, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x401, 0x4, 0x1, 0x2, 0x5}, 0x5}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}]}, {0xa0, 0x6, "fe28725b9e72260bb16361c80b61d8cc8ca5eeb3a5adfa124d3556df0ca0a7291601f7368c295b77082962d301d36673d315ccd79adf4b0019d47124228eb814e4da4fa0168d1222712ac75d15c8c2ea31808258d29d98cf2c0813187a25401a41ba1425f460f22c2a637435c05737fbcf7156d196f1554171a48dd59c599100aec130dc36b1723980cd9bc2ddb2b5bde673ffbe6fd1518d2621e451"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0x1080, 0x14, 0x0, 0x0, {{0xc}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0xf}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x1ff, 0x10000000, 0x9, 0x4}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xe, 0x1, 0x5, 0x1, 0x133}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x14c, 0x8, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x7, 0x1, 0x2}}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_DMAC={0xa}]}, {0xee, 0x6, "4463de934c6d2d1754d0dc129210cddf01bcc3c09e0615ff9dd27c5445ea8ee4a32d23c347115da4da2ba2ded5945e681539ea9e94a36e3857974bb32c780eb5aa2e42d71c8d5b5b91e8437fc579bb6a0ff3fbb9e94966962192971d753df9cd2ab7ca095128963e37b489d4d000d300242ebe39db0fc4846c4760dcaaf0d8b409e14130a0d266a0f481b41f325ac69602222e95eab38203e2f93a67f398b3326ef50921c5e221c736d870eb80163fbf3e1c3e7cc01814e7fbb88c7e9175e7ec9e75d3b4220572cc8e6825fe7f46ee2f5b5640441431bd73f45b0d5409e5a44fbada7f0d2237213f1c20"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x12e8}}, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000040)={0xd446, 0x6}) 147.714905ms ago: executing program 7 (id=4660): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008040000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) unlink(&(0x7f0000000340)='./cgroup.cpu/cpuset.cpus\x00') r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setitimer(0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd701004000000050000000600010023000000080009000200000008000b000000000008000c"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f0000000440)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xc0, r7, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffc01}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1a}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40000d1}, 0x20000000) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYRES32=r0, @ANYRES32=r8], &(0x7f0000000000)='GPL\x00', 0x0, 0x274c52feb80f9f79, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) quotactl$Q_SETINFO(0xffffffff80000602, 0x0, 0x0, 0x0) 146.197595ms ago: executing program 0 (id=4661): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000c00)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x8000000000000000}, 0x18) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 120.630968ms ago: executing program 1 (id=4662): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x3ea}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) 89.604981ms ago: executing program 3 (id=4663): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) open(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x41100}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00'}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 74.199533ms ago: executing program 1 (id=4664): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) socket$netlink(0x10, 0x3, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0x45, 0x1488, 0xffffffffffffffff, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000280)=0x3) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) 53.413175ms ago: executing program 0 (id=4665): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum={0x3, 0x0, 0x0, 0xf, 0x4000000}]}, {0x0, [0x0, 0x30, 0x2e]}}, &(0x7f0000003240)=""/4114, 0x29, 0x1012, 0x1}, 0x28) 38.585086ms ago: executing program 3 (id=4666): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0xfffffffffffffeb9, &(0x7f0000000000)="259a53f27188a800000000000000", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) 312.47µs ago: executing program 7 (id=4667): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) r0 = open(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x4, 0x0, 0x0, 0x41100}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00'}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) fsync(r0) 0s ago: executing program 0 (id=4668): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x50}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988ca", 0xe}, {0x0}], 0x2) kernel console output (not intermixed with test programs): 3][T13903] EXT4-fs: Ignoring removed nomblk_io_submit option [ 242.105371][T13903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.140415][T13906] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3595'. [ 242.162528][T13858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.169776][T13858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.196173][T13858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.218563][ T29] audit: type=1326 audit(242.210:14879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13910 comm="syz.0.3597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc578c8f6c9 code=0x7ffc0000 [ 242.241981][ T29] audit: type=1326 audit(242.210:14880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13910 comm="syz.0.3597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc578c8f6c9 code=0x7ffc0000 [ 242.265074][ T29] audit: type=1326 audit(242.210:14881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13910 comm="syz.0.3597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fc578c8f6c9 code=0x7ffc0000 [ 242.288941][ T29] audit: type=1326 audit(242.210:14882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13910 comm="syz.0.3597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc578c8f6c9 code=0x7ffc0000 [ 242.313279][ T29] audit: type=1326 audit(242.210:14883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13910 comm="syz.0.3597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc578c8f6c9 code=0x7ffc0000 [ 242.336765][T13913] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3598'. [ 242.336825][ T29] audit: type=1326 audit(242.210:14884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13910 comm="syz.0.3597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc578c8df10 code=0x7ffc0000 [ 242.370842][ T29] audit: type=1326 audit(242.210:14885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13910 comm="syz.0.3597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fc578c90ef7 code=0x7ffc0000 [ 242.394785][ T29] audit: type=1326 audit(242.210:14886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13910 comm="syz.0.3597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc578c8f6c9 code=0x7ffc0000 [ 242.419247][ T29] audit: type=1326 audit(242.210:14887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13910 comm="syz.0.3597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fc578c90ef7 code=0x7ffc0000 [ 242.567065][T11903] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.607922][T13858] hsr_slave_0: entered promiscuous mode [ 242.628740][T13858] hsr_slave_1: entered promiscuous mode [ 242.688965][T13921] lo speed is unknown, defaulting to 1000 [ 242.745585][T13921] ip6_vti0 speed is unknown, defaulting to 1000 [ 242.923198][T13921] wg1 speed is unknown, defaulting to 1000 [ 242.946775][T13921] lo speed is unknown, defaulting to 1000 [ 243.148913][T13858] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 243.178542][T13935] loop9: detected capacity change from 0 to 1024 [ 243.179775][T13858] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 243.207170][T13935] EXT4-fs: Ignoring removed mblk_io_submit option [ 243.219806][T13858] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 243.236845][T13935] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 243.267571][T13858] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 243.276826][T13935] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.446490][T13947] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3605'. [ 243.536263][T13858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.555893][T13858] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.571349][ T5557] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.595686][ T9788] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.602907][ T9788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.637839][ T9788] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.645241][ T9788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.667072][T13956] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3609'. [ 243.674585][T13957] loop3: detected capacity change from 0 to 1024 [ 243.695143][T13953] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3608'. [ 243.709970][T13957] EXT4-fs: Ignoring removed orlov option [ 243.762587][T13953] veth27: entered promiscuous mode [ 243.772992][T13953] veth27: entered allmulticast mode [ 243.785801][T13957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.833300][T13957] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3610'. [ 243.843629][T13969] loop9: detected capacity change from 0 to 512 [ 243.852426][T13969] EXT4-fs warning (device loop9): ext4_multi_mount_protect:318: fsck is running on the filesystem [ 243.854454][T13858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.864705][T13969] EXT4-fs warning (device loop9): ext4_multi_mount_protect:318: MMP failure info: last update time: 1669132791, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop14 [ 244.030539][T11903] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.272148][T13969] netlink: 'syz.9.3612': attribute type 12 has an invalid length. [ 244.433476][T13858] veth0_vlan: entered promiscuous mode [ 244.515139][T13858] veth1_vlan: entered promiscuous mode [ 244.526998][T13994] loop3: detected capacity change from 0 to 1024 [ 244.597760][T13994] EXT4-fs: Ignoring removed mblk_io_submit option [ 244.614407][T13858] veth0_macvtap: entered promiscuous mode [ 244.627011][T13994] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 244.640884][T13858] veth1_macvtap: entered promiscuous mode [ 244.660743][T13858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.671288][T13858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.682806][T13999] tipc: Enabling of bearer rejected, already enabled [ 244.695716][ T9789] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.707543][ T9789] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.719710][T13994] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.747926][ T9789] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.777874][ T9789] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.817202][T14002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3616'. [ 244.910071][T11903] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.992677][T14014] loop7: detected capacity change from 0 to 1024 [ 245.013874][T14014] EXT4-fs: Ignoring removed orlov option [ 245.036752][T14012] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3621'. [ 245.057821][T14014] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.106893][T14014] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3622'. [ 245.149186][T14012] veth7: entered promiscuous mode [ 245.154952][T14012] veth7: entered allmulticast mode [ 245.196986][T14019] tc_dump_action: action bad kind [ 245.208566][T13858] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.262454][T14019] loop3: detected capacity change from 0 to 4096 [ 245.295044][T14019] EXT4-fs: Ignoring removed nomblk_io_submit option [ 245.322521][T14019] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.462165][T14038] loop7: detected capacity change from 0 to 1024 [ 245.478963][T11903] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.489804][T14038] EXT4-fs: Ignoring removed mblk_io_submit option [ 245.499239][T14043] tc_dump_action: action bad kind [ 245.506061][T14038] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 245.536094][T14038] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.621141][T14038] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3631'. [ 245.651010][T13858] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.672882][T14049] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3634'. [ 245.719372][T14049] veth9: entered promiscuous mode [ 245.725699][T14049] veth9: entered allmulticast mode [ 245.757562][T14059] tc_dump_action: action bad kind [ 245.781057][T14059] loop3: detected capacity change from 0 to 4096 [ 245.788624][T14059] EXT4-fs: Ignoring removed nomblk_io_submit option [ 245.797389][T14059] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.819356][T14066] geneve2: entered promiscuous mode [ 245.825836][T14066] geneve2: entered allmulticast mode [ 245.884767][T14069] tipc: Enabling of bearer rejected, already enabled [ 245.925446][T11903] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.817777][T14089] tc_dump_action: action bad kind [ 246.896117][T14089] loop9: detected capacity change from 0 to 4096 [ 246.911332][T14089] EXT4-fs: Ignoring removed nomblk_io_submit option [ 247.018676][T14089] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.189450][ T5557] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.337992][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 247.338008][ T29] audit: type=1326 audit(247.333:14978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14094 comm="syz.7.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd893ecf6c9 code=0x7ffc0000 [ 247.379040][T14099] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3649'. [ 247.464522][ T29] audit: type=1326 audit(247.363:14979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14094 comm="syz.7.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd893ecf6c9 code=0x7ffc0000 [ 247.488048][ T29] audit: type=1326 audit(247.373:14980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14094 comm="syz.7.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd893ecf6c9 code=0x7ffc0000 [ 247.512367][ T29] audit: type=1326 audit(247.373:14981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14094 comm="syz.7.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd893ecf6c9 code=0x7ffc0000 [ 247.536618][ T29] audit: type=1326 audit(247.373:14982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14094 comm="syz.7.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd893ecf6c9 code=0x7ffc0000 [ 247.560039][ T29] audit: type=1326 audit(247.383:14983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14094 comm="syz.7.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd893ecf6c9 code=0x7ffc0000 [ 247.583364][ T29] audit: type=1326 audit(247.393:14984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14094 comm="syz.7.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd893ecf6c9 code=0x7ffc0000 [ 247.607556][ T29] audit: type=1326 audit(247.393:14985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14094 comm="syz.7.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd893ecf6c9 code=0x7ffc0000 [ 247.630955][ T29] audit: type=1326 audit(247.393:14986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14094 comm="syz.7.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd893ecf6c9 code=0x7ffc0000 [ 247.654052][ T29] audit: type=1326 audit(247.393:14987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14094 comm="syz.7.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd893ecf6c9 code=0x7ffc0000 [ 247.818550][T14099] veth29: entered promiscuous mode [ 247.824490][T14099] veth29: entered allmulticast mode [ 248.023938][T14109] lo speed is unknown, defaulting to 1000 [ 248.042952][T14109] ip6_vti0 speed is unknown, defaulting to 1000 [ 248.187858][T14109] wg1 speed is unknown, defaulting to 1000 [ 248.224543][T14109] lo speed is unknown, defaulting to 1000 [ 248.263835][T14116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3653'. [ 248.449633][T14122] loop7: detected capacity change from 0 to 8192 [ 248.456203][T14127] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3658'. [ 248.498995][T14130] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 248.702910][T14147] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14147 comm=syz.9.3664 [ 248.706788][T14149] tipc: Enabling of bearer rejected, already enabled [ 248.789709][T14150] lo speed is unknown, defaulting to 1000 [ 248.796380][T14150] ip6_vti0 speed is unknown, defaulting to 1000 [ 248.856232][T14150] wg1 speed is unknown, defaulting to 1000 [ 248.863066][T14150] lo speed is unknown, defaulting to 1000 [ 249.394768][T14154] loop9: detected capacity change from 0 to 1024 [ 249.402964][T14154] EXT4-fs: Ignoring removed mblk_io_submit option [ 249.412686][T14154] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 249.437507][T14158] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3667'. [ 249.453851][T14154] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.494806][T14154] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3666'. [ 249.546316][ T5557] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.556931][T14162] loop3: detected capacity change from 0 to 512 [ 249.585273][T14162] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 249.596321][T14166] lo speed is unknown, defaulting to 1000 [ 249.602727][T14166] ip6_vti0 speed is unknown, defaulting to 1000 [ 249.683767][T14171] syzkaller0: entered promiscuous mode [ 249.689372][T14171] syzkaller0: entered allmulticast mode [ 249.725588][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.730915][T14166] wg1 speed is unknown, defaulting to 1000 [ 249.739943][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.753346][T14166] lo speed is unknown, defaulting to 1000 [ 249.865394][T14174] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.875730][T14174] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 249.897305][T14179] loop7: detected capacity change from 0 to 1024 [ 249.904341][T14179] EXT4-fs: Ignoring removed orlov option [ 249.925098][T14179] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.955787][T14174] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.966212][T14174] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 249.979875][T14186] Invalid logical block size (513) [ 250.020725][T14179] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3675'. [ 250.037347][T14174] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.047780][T14174] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 250.094894][T13858] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.147808][T14174] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.158177][T14174] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 250.193881][T14197] loop7: detected capacity change from 0 to 8192 [ 250.241537][ T9788] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 250.249894][ T9788] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 250.279080][ T9788] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 250.287583][ T9788] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 250.314183][ T9788] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 250.322512][ T9788] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 250.330930][ T9788] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 250.339306][ T9788] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 250.425475][T14211] lo speed is unknown, defaulting to 1000 [ 250.431578][T14211] ip6_vti0 speed is unknown, defaulting to 1000 [ 250.487755][T14211] wg1 speed is unknown, defaulting to 1000 [ 250.494517][T14211] lo speed is unknown, defaulting to 1000 [ 250.919424][T14251] loop9: detected capacity change from 0 to 1024 [ 250.942148][T14251] EXT4-fs: Ignoring removed mblk_io_submit option [ 250.949267][T14251] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 250.968058][T14251] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.021587][T14253] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3681'. [ 251.026993][T14255] loop3: detected capacity change from 0 to 512 [ 251.039208][T14251] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3680'. [ 251.055943][T14255] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 251.075880][ T5557] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.111329][T14263] loop3: detected capacity change from 0 to 512 [ 251.113459][T14265] tc_dump_action: action bad kind [ 251.124241][T14263] EXT4-fs warning (device loop3): ext4_multi_mount_protect:318: fsck is running on the filesystem [ 251.135094][T14263] EXT4-fs warning (device loop3): ext4_multi_mount_protect:318: MMP failure info: last update time: 1669132791, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop14 [ 251.203111][T14259] netlink: 'syz.7.3683': attribute type 1 has an invalid length. [ 251.300229][T14259] bond1 (unregistering): Released all slaves [ 251.422354][T14275] lo speed is unknown, defaulting to 1000 [ 251.428952][T14275] ip6_vti0 speed is unknown, defaulting to 1000 [ 251.480293][T14275] wg1 speed is unknown, defaulting to 1000 [ 251.487051][T14275] lo speed is unknown, defaulting to 1000 [ 251.620305][T14275] netlink: 'syz.3.3687': attribute type 13 has an invalid length. [ 251.669817][T14275] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.677172][T14275] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.727718][T14275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.737899][T14275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.770442][ T9768] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 251.779342][ T9768] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 251.798303][ T9768] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 251.807050][ T9768] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 251.819799][ T9768] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 251.828561][ T9768] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 251.862425][ T9768] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 251.870994][ T9768] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 252.035322][T14296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3695'. [ 252.090108][T14302] tc_dump_action: action bad kind [ 252.129093][T14302] loop7: detected capacity change from 0 to 4096 [ 252.129499][T14306] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3700'. [ 252.178126][T14302] EXT4-fs: Ignoring removed nomblk_io_submit option [ 252.197963][T14302] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.198672][T14306] veth31: entered promiscuous mode [ 252.216231][T14306] veth31: entered allmulticast mode [ 252.224751][T14310] netlink: 'syz.1.3701': attribute type 12 has an invalid length. [ 252.312684][T13858] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.432702][T14321] netdevsim netdevsim7: Direct firmware load for ./file0 failed with error -2 [ 252.505980][T14325] lo speed is unknown, defaulting to 1000 [ 252.512214][T14325] ip6_vti0 speed is unknown, defaulting to 1000 [ 252.545701][T14325] wg1 speed is unknown, defaulting to 1000 [ 252.552005][T14325] lo speed is unknown, defaulting to 1000 [ 252.552115][T14327] netlink: 'syz.7.3703': attribute type 13 has an invalid length. [ 252.611199][T14327] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.618644][T14327] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.676440][T14327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.687491][T14327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.800240][ T9743] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.809613][ T9743] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.827186][ T9743] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.858355][ T9743] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.066260][T14333] loop3: detected capacity change from 0 to 1024 [ 253.081784][T14333] EXT4-fs: Ignoring removed mblk_io_submit option [ 253.088875][T14333] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 253.115736][T14333] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.230264][T14342] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3706'. [ 253.271280][T14346] FAULT_INJECTION: forcing a failure. [ 253.271280][T14346] name failslab, interval 1, probability 0, space 0, times 0 [ 253.284076][T14346] CPU: 0 UID: 0 PID: 14346 Comm: syz.0.3710 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 253.284153][T14346] Tainted: [W]=WARN [ 253.284161][T14346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 253.284173][T14346] Call Trace: [ 253.284181][T14346] [ 253.284290][T14346] __dump_stack+0x1d/0x30 [ 253.284321][T14346] dump_stack_lvl+0xe8/0x140 [ 253.284388][T14346] dump_stack+0x15/0x1b [ 253.284456][T14346] should_fail_ex+0x265/0x280 [ 253.284486][T14346] should_failslab+0x8c/0xb0 [ 253.284513][T14346] __kmalloc_noprof+0xa5/0x570 [ 253.284603][T14346] ? security_sk_alloc+0x52/0x120 [ 253.284628][T14346] security_sk_alloc+0x52/0x120 [ 253.284727][T14346] sk_prot_alloc+0xc2/0x190 [ 253.284756][T14346] sk_alloc+0x34/0x360 [ 253.284781][T14346] unix_create1+0xa5/0x430 [ 253.284828][T14346] unix_stream_connect+0x196/0xa00 [ 253.284857][T14346] ? selinux_netlbl_socket_connect+0x115/0x130 [ 253.284911][T14346] ? selinux_socket_connect+0x57/0x70 [ 253.284939][T14346] ? __pfx_unix_stream_connect+0x10/0x10 [ 253.284971][T14346] __sys_connect+0x1f2/0x2b0 [ 253.285048][T14346] __x64_sys_connect+0x3f/0x50 [ 253.285074][T14346] x64_sys_call+0x2c0c/0x3000 [ 253.285094][T14346] do_syscall_64+0xd2/0x200 [ 253.285128][T14346] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 253.285155][T14346] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 253.285185][T14346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.285242][T14346] RIP: 0033:0x7fc578c8f6c9 [ 253.285260][T14346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.285277][T14346] RSP: 002b:00007fc5776ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 253.285295][T14346] RAX: ffffffffffffffda RBX: 00007fc578ee5fa0 RCX: 00007fc578c8f6c9 [ 253.285307][T14346] RDX: 000000000000006e RSI: 0000200000000280 RDI: 0000000000000004 [ 253.285321][T14346] RBP: 00007fc5776ef090 R08: 0000000000000000 R09: 0000000000000000 [ 253.285335][T14346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.285360][T14346] R13: 00007fc578ee6038 R14: 00007fc578ee5fa0 R15: 00007ffc41fc4bb8 [ 253.285378][T14346] [ 253.286936][T11903] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.522913][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 253.523003][ T29] audit: type=1326 audit(253.526:15213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14353 comm="syz.3.3711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101a25f6c9 code=0x7ffc0000 [ 253.552515][ T29] audit: type=1326 audit(253.526:15214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14353 comm="syz.3.3711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101a25f6c9 code=0x7ffc0000 [ 253.576976][ T29] audit: type=1326 audit(253.526:15215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14353 comm="syz.3.3711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f101a25f6c9 code=0x7ffc0000 [ 253.599992][ T29] audit: type=1326 audit(253.526:15216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14353 comm="syz.3.3711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101a25f6c9 code=0x7ffc0000 [ 253.609610][T14356] tc_dump_action: action bad kind [ 253.681644][T14358] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3713'. [ 253.690929][T14356] loop3: detected capacity change from 0 to 4096 [ 253.695163][T14358] IPVS: Error connecting to the multicast addr [ 253.698020][T14356] EXT4-fs: Ignoring removed nomblk_io_submit option [ 253.713286][T14356] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.818809][T11903] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.985982][T14389] netlink: 'syz.3.3718': attribute type 12 has an invalid length. [ 254.091352][T14392] lo speed is unknown, defaulting to 1000 [ 254.097976][T14392] ip6_vti0 speed is unknown, defaulting to 1000 [ 254.154619][T14392] wg1 speed is unknown, defaulting to 1000 [ 254.161518][T14392] lo speed is unknown, defaulting to 1000 [ 254.486534][T14399] loop7: detected capacity change from 0 to 1024 [ 254.501496][T14399] EXT4-fs: Ignoring removed orlov option [ 254.533859][T14399] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.669990][T14399] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3720'. [ 254.742988][T13858] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.803498][T14406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3722'. [ 254.884328][ T29] audit: type=1400 audit(254.887:15217): avc: denied { create } for pid=14412 comm="syz.1.3724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 254.915159][T14415] loop3: detected capacity change from 0 to 512 [ 254.935697][T14415] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 254.950437][ T29] audit: type=1326 audit(254.927:15218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14416 comm="syz.0.3726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc578c8f6c9 code=0x7ffc0000 [ 254.973979][ T29] audit: type=1326 audit(254.927:15219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14416 comm="syz.0.3726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fc578c8f6c9 code=0x7ffc0000 [ 254.998042][ T29] audit: type=1326 audit(254.927:15220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14416 comm="syz.0.3726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc578c8f6c9 code=0x7ffc0000 [ 255.327420][T14443] loop3: detected capacity change from 0 to 1024 [ 255.350650][T14443] EXT4-fs: Ignoring removed mblk_io_submit option [ 255.357453][T14443] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 255.378387][T14443] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.446272][T14443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3736'. [ 255.474564][T11903] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.491386][ T29] audit: type=1326 audit(255.487:15221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14452 comm="syz.7.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd893ecf6c9 code=0x7ffc0000 [ 255.515178][ T29] audit: type=1326 audit(255.487:15222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14452 comm="syz.7.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd893ecf6c9 code=0x7ffc0000 [ 255.616027][T14466] tipc: Started in network mode [ 255.621018][T14466] tipc: Node identity ac14140f, cluster identity 4711 [ 255.628051][T14466] tipc: New replicast peer: 255.255.255.255 [ 255.635361][T14466] tipc: Enabled bearer , priority 10 [ 255.646405][T14467] geneve0: entered promiscuous mode [ 255.651788][T14467] geneve0: entered allmulticast mode [ 255.820582][T14473] tipc: Enabling of bearer rejected, already enabled [ 256.168796][T14478] loop9: detected capacity change from 0 to 1024 [ 256.175920][T14478] EXT4-fs: Ignoring removed orlov option [ 256.211600][T14478] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.245414][T14478] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3747'. [ 256.292351][ T5557] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.431788][T14484] lo speed is unknown, defaulting to 1000 [ 256.438481][T14484] ip6_vti0 speed is unknown, defaulting to 1000 [ 256.459756][T14486] loop7: detected capacity change from 0 to 1024 [ 256.466610][T14486] EXT4-fs: Ignoring removed mblk_io_submit option [ 256.493203][T14486] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 256.508217][T14484] wg1 speed is unknown, defaulting to 1000 [ 256.521100][T14486] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.534378][T14484] lo speed is unknown, defaulting to 1000 [ 256.624716][T14486] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3750'. [ 256.641449][ T1036] tipc: Node number set to 2886997007 [ 256.667331][T13858] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.752109][T14501] loop7: detected capacity change from 0 to 8192 [ 256.986700][T14508] lo speed is unknown, defaulting to 1000 [ 256.993064][T14508] ip6_vti0 speed is unknown, defaulting to 1000 [ 257.048864][T14508] wg1 speed is unknown, defaulting to 1000 [ 257.055920][T14508] lo speed is unknown, defaulting to 1000 [ 257.359381][T14488] FAULT_INJECTION: forcing a failure. [ 257.359381][T14488] name fail_futex, interval 1, probability 0, space 0, times 1 [ 257.372232][T14488] CPU: 0 UID: 0 PID: 14488 Comm: syz.0.3751 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 257.372297][T14488] Tainted: [W]=WARN [ 257.372304][T14488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 257.372315][T14488] Call Trace: [ 257.372321][T14488] [ 257.372328][T14488] __dump_stack+0x1d/0x30 [ 257.372382][T14488] dump_stack_lvl+0xe8/0x140 [ 257.372400][T14488] dump_stack+0x15/0x1b [ 257.372418][T14488] should_fail_ex+0x265/0x280 [ 257.372481][T14488] should_fail+0xb/0x20 [ 257.372581][T14488] get_futex_key+0x130/0xbd0 [ 257.372666][T14488] ? probe_sched_wakeup+0x85/0xa0 [ 257.372760][T14488] futex_wake+0x7d/0x360 [ 257.372778][T14488] ? __rcu_read_unlock+0x4f/0x70 [ 257.372920][T14488] do_futex+0x323/0x380 [ 257.372952][T14488] mm_release+0xb2/0x1e0 [ 257.373021][T14488] exit_mm_release+0x25/0x30 [ 257.373049][T14488] exit_mm+0x38/0x180 [ 257.373113][T14488] do_exit+0x417/0x15c0 [ 257.373140][T14488] ? cgroup_update_frozen_flag+0x52/0x190 [ 257.373189][T14488] do_group_exit+0xff/0x140 [ 257.373208][T14488] ? get_signal+0xe50/0xf70 [ 257.373228][T14488] get_signal+0xe58/0xf70 [ 257.373251][T14488] arch_do_signal_or_restart+0x96/0x440 [ 257.373275][T14488] exit_to_user_mode_loop+0x77/0x110 [ 257.373325][T14488] do_syscall_64+0x1d6/0x200 [ 257.373351][T14488] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 257.373375][T14488] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 257.373458][T14488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.373487][T14488] RIP: 0033:0x7fc578c8f6c9 [ 257.373508][T14488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.373528][T14488] RSP: 002b:00007fc5776ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 257.373548][T14488] RAX: fffffffffffffe00 RBX: 00007fc578ee5fa0 RCX: 00007fc578c8f6c9 [ 257.373562][T14488] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000007 [ 257.373576][T14488] RBP: 00007fc5776ef090 R08: 0000000000000001 R09: 0000000000000005 [ 257.373587][T14488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.373661][T14488] R13: 00007fc578ee6038 R14: 00007fc578ee5fa0 R15: 00007ffc41fc4bb8 [ 257.373681][T14488] [ 257.749775][T14517] netlink: 'syz.0.3760': attribute type 12 has an invalid length. [ 257.831621][T14520] tc_dump_action: action bad kind [ 257.852880][T14520] loop9: detected capacity change from 0 to 4096 [ 257.930555][T14521] lo speed is unknown, defaulting to 1000 [ 257.937102][T14521] ip6_vti0 speed is unknown, defaulting to 1000 [ 257.995235][T14521] wg1 speed is unknown, defaulting to 1000 [ 258.001943][T14521] lo speed is unknown, defaulting to 1000 [ 258.211534][T14520] EXT4-fs: Ignoring removed nomblk_io_submit option [ 258.224498][T14520] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.386572][ T5557] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.435317][T14527] loop9: detected capacity change from 0 to 128 [ 258.509315][T14531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3764'. [ 258.529419][T14531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3764'. [ 258.549282][T14531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3764'. [ 258.573224][T14538] loop9: detected capacity change from 0 to 1024 [ 258.580217][T14538] EXT4-fs: Ignoring removed mblk_io_submit option [ 258.586949][T14538] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 258.601694][T14538] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.629753][T14541] xt_TCPMSS: Only works on TCP SYN packets [ 258.669553][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 258.669569][ T29] audit: type=1400 audit(258.679:15236): avc: denied { write } for pid=14540 comm="syz.0.3768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 258.719794][T14538] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3767'. [ 258.759514][ T5557] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.783467][T14549] loop9: detected capacity change from 0 to 512 [ 258.798892][T14549] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities [ 258.853529][T14556] loop9: detected capacity change from 0 to 1024 [ 258.861206][T14556] EXT4-fs: Ignoring removed orlov option [ 258.874222][T14556] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.043189][T14559] loop3: detected capacity change from 0 to 8192 [ 259.053581][T14564] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3776'. [ 259.159894][T14564] veth29: entered promiscuous mode [ 259.165442][T14564] veth29: entered allmulticast mode [ 259.223145][ T29] audit: type=1326 audit(259.229:15237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14566 comm="syz.1.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378b0bf6c9 code=0x7ffc0000 [ 259.265594][ T29] audit: type=1326 audit(259.249:15238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14566 comm="syz.1.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f378b0bf6c9 code=0x7ffc0000 [ 259.288776][ T29] audit: type=1326 audit(259.249:15239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14566 comm="syz.1.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378b0bf6c9 code=0x7ffc0000 [ 259.312330][ T29] audit: type=1326 audit(259.249:15240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14566 comm="syz.1.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378b0bf6c9 code=0x7ffc0000 [ 259.356773][T14568] lo speed is unknown, defaulting to 1000 [ 259.363252][T14568] ip6_vti0 speed is unknown, defaulting to 1000 [ 259.420160][T14568] wg1 speed is unknown, defaulting to 1000 [ 259.426611][T14568] lo speed is unknown, defaulting to 1000 [ 259.767660][T14574] netlink: 'syz.0.3779': attribute type 12 has an invalid length. [ 259.802028][ T5557] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.814843][T14578] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3780'. [ 259.873360][T14587] loop3: detected capacity change from 0 to 512 [ 259.882253][T14585] lo speed is unknown, defaulting to 1000 [ 259.888803][T14587] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 259.900009][T14585] ip6_vti0 speed is unknown, defaulting to 1000 [ 259.916605][T14583] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3784'. [ 259.948602][T14576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3782'. [ 260.023794][T14583] veth3: entered promiscuous mode [ 260.029241][T14583] veth3: entered allmulticast mode [ 260.046556][T14585] wg1 speed is unknown, defaulting to 1000 [ 260.059380][T14585] lo speed is unknown, defaulting to 1000 [ 260.103361][T14598] netlink: 'syz.7.3789': attribute type 12 has an invalid length. [ 260.253398][T14604] loop9: detected capacity change from 0 to 8192 [ 260.541021][T14608] lo speed is unknown, defaulting to 1000 [ 260.547237][T14608] ip6_vti0 speed is unknown, defaulting to 1000 [ 260.580729][T14608] wg1 speed is unknown, defaulting to 1000 [ 260.587081][T14608] lo speed is unknown, defaulting to 1000 [ 260.683450][T14612] lo speed is unknown, defaulting to 1000 [ 260.689678][T14612] ip6_vti0 speed is unknown, defaulting to 1000 [ 260.723324][T14612] wg1 speed is unknown, defaulting to 1000 [ 260.729621][T14612] lo speed is unknown, defaulting to 1000 [ 261.231102][ T29] audit: type=1400 audit(261.230:15241): avc: denied { create } for pid=14619 comm="syz.7.3793" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 261.260227][ T29] audit: type=1400 audit(261.260:15242): avc: denied { write } for pid=14619 comm="syz.7.3793" name="file0" dev="tmpfs" ino=211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 261.282847][ T29] audit: type=1400 audit(261.260:15243): avc: denied { open } for pid=14619 comm="syz.7.3793" path="/36/file0" dev="tmpfs" ino=211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 261.312320][T14622] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3794'. [ 261.322491][ T29] audit: type=1400 audit(261.310:15244): avc: denied { ioctl } for pid=14619 comm="syz.7.3793" path="/36/file0" dev="tmpfs" ino=211 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 261.414455][ T29] audit: type=1400 audit(261.410:15245): avc: denied { unlink } for pid=13858 comm="syz-executor" name="file0" dev="tmpfs" ino=211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 261.452464][T14625] loop7: detected capacity change from 0 to 512 [ 261.496336][T14629] loop7: detected capacity change from 0 to 512 [ 261.510998][T14629] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 261.611729][T14633] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3799'. [ 261.732239][T14633] veth5: entered promiscuous mode [ 261.737672][T14633] veth5: entered allmulticast mode [ 262.170317][T14648] lo speed is unknown, defaulting to 1000 [ 262.176857][T14648] ip6_vti0 speed is unknown, defaulting to 1000 [ 262.237830][T14648] wg1 speed is unknown, defaulting to 1000 [ 262.244234][T14648] lo speed is unknown, defaulting to 1000 [ 262.543360][T14654] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3805'. [ 262.606452][T14658] loop7: detected capacity change from 0 to 512 [ 262.629108][T14658] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.646046][T14658] 9pnet_fd: Insufficient options for proto=fd [ 262.669171][T13858] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.086196][T14682] geneve2: entered promiscuous mode [ 263.091580][T14682] geneve2: entered allmulticast mode [ 263.125064][T14687] netlink: 'syz.3.3817': attribute type 12 has an invalid length. [ 263.314264][T14690] lo speed is unknown, defaulting to 1000 [ 263.320455][T14690] ip6_vti0 speed is unknown, defaulting to 1000 [ 263.346885][T14690] wg1 speed is unknown, defaulting to 1000 [ 263.353238][T14690] lo speed is unknown, defaulting to 1000 [ 263.422998][T14690] chnl_net:caif_netlink_parms(): no params data found [ 263.459369][T14690] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.466510][T14690] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.473789][T14690] bridge_slave_0: entered allmulticast mode [ 263.480387][T14690] bridge_slave_0: entered promiscuous mode [ 263.487466][T14690] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.494518][T14690] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.501849][T14690] bridge_slave_1: entered allmulticast mode [ 263.508283][T14690] bridge_slave_1: entered promiscuous mode [ 263.526216][T14690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.537013][T14690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.556874][T14690] team0: Port device team_slave_0 added [ 263.563361][T14690] team0: Port device team_slave_1 added [ 263.579748][T14690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.586906][T14690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.612937][T14690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.624241][T14690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.631233][T14690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.657315][T14690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.699462][T14690] hsr_slave_0: entered promiscuous mode [ 263.705819][T14690] hsr_slave_1: entered promiscuous mode [ 263.712311][T14690] debugfs: 'hsr0' already exists in 'hsr' [ 263.718162][T14690] Cannot create hsr debugfs directory [ 263.724510][ T9793] bridge_slave_1: left allmulticast mode [ 263.730235][ T9793] bridge_slave_1: left promiscuous mode [ 263.735878][ T9793] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.743558][ T9793] bridge_slave_0: left promiscuous mode [ 263.749265][ T9793] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.773094][T14708] netlink: 'syz.1.3819': attribute type 13 has an invalid length. [ 263.781120][T14708] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3819'. [ 263.858201][ T9793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.874264][ T9793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.884037][ T9793] bond0 (unregistering): Released all slaves [ 263.928250][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 263.928266][ T29] audit: type=1326 audit(270.922:15266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14714 comm="syz.7.3821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd893ecf6c9 code=0x7ffc0000 [ 263.957393][ T29] audit: type=1326 audit(270.922:15267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14714 comm="syz.7.3821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd893ecf6c9 code=0x7ffc0000 [ 263.980601][ T29] audit: type=1326 audit(270.922:15268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14714 comm="syz.7.3821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fd893ecf6c9 code=0x7ffc0000 [ 264.003769][ T29] audit: type=1326 audit(270.922:15269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14714 comm="syz.7.3821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd893ecf6c9 code=0x7ffc0000 [ 264.027058][ T29] audit: type=1326 audit(270.922:15270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14714 comm="syz.7.3821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd893ecf6c9 code=0x7ffc0000 [ 264.059427][T14717] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3822'. [ 264.071923][T14719] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3823'. [ 264.081066][ T9793] tipc: Disabling bearer [ 264.086374][ T9793] tipc: Left network mode [ 264.173778][T14717] veth31: entered promiscuous mode [ 264.181926][T14717] veth31: entered allmulticast mode [ 264.381470][ T9793] hsr_slave_0: left promiscuous mode [ 264.551680][ T29] audit: type=1400 audit(271.552:15271): avc: denied { bind } for pid=14758 comm="syz.3.3837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 264.574060][ T29] audit: type=1400 audit(271.572:15272): avc: denied { setopt } for pid=14758 comm="syz.3.3837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 264.593597][ T29] audit: type=1400 audit(271.572:15273): avc: denied { write } for pid=14758 comm="syz.3.3837" path="socket:[48481]" dev="sockfs" ino=48481 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 264.696348][T14750] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3834'. [ 264.746880][T14751] geneve2: entered promiscuous mode [ 264.752179][T14751] geneve2: entered allmulticast mode [ 264.783718][T14760] lo speed is unknown, defaulting to 1000 [ 264.790050][T14760] ip6_vti0 speed is unknown, defaulting to 1000 [ 264.824248][T14760] wg1 speed is unknown, defaulting to 1000 [ 264.831040][T14760] lo speed is unknown, defaulting to 1000 [ 264.832366][T14766] netlink: 'syz.3.3839': attribute type 12 has an invalid length. [ 264.877246][T14764] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3838'. [ 264.947435][T14764] veth33: entered promiscuous mode [ 264.952685][T14764] veth33: entered allmulticast mode [ 265.061447][ T29] audit: type=1400 audit(272.062:15274): avc: denied { ioctl } for pid=14780 comm="syz.0.3845" path="/dev/mISDNtimer" dev="devtmpfs" ino=249 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 265.098013][ T29] audit: type=1400 audit(272.092:15275): avc: denied { create } for pid=14784 comm="syz.1.3846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 265.121184][T14788] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3847'. [ 265.168192][T14795] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3850'. [ 265.178407][T14795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3850'. [ 265.189746][T14793] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3849'. [ 265.200485][T14795] team0 (unregistering): Port device team_slave_0 removed [ 265.209512][T14795] team0 (unregistering): Port device team_slave_1 removed [ 265.260357][T14793] veth7: entered promiscuous mode [ 265.265571][T14793] veth7: entered allmulticast mode [ 265.280205][ T9793] IPVS: stop unused estimator thread 0... [ 265.317069][T14803] loop7: detected capacity change from 0 to 512 [ 265.325025][T14803] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 265.326506][T14690] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 265.367970][T14690] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 265.385142][T14690] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 265.397302][T14690] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 265.435146][T14690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.448387][T14690] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.458255][ T9790] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.465374][ T9790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.477526][T14823] geneve2: entered promiscuous mode [ 265.482830][T14823] geneve2: entered allmulticast mode [ 265.494477][T14825] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3859'. [ 265.507610][ T9768] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.514719][ T9768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.552726][T14830] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3861'. [ 265.672439][T14830] veth13: entered promiscuous mode [ 265.678369][T14830] veth13: entered allmulticast mode [ 265.714167][T14690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.816158][T14853] lo speed is unknown, defaulting to 1000 [ 265.822695][T14853] ip6_vti0 speed is unknown, defaulting to 1000 [ 265.876898][T14853] wg1 speed is unknown, defaulting to 1000 [ 265.883474][T14853] lo speed is unknown, defaulting to 1000 [ 266.196164][T14870] lo speed is unknown, defaulting to 1000 [ 266.203072][T14870] ip6_vti0 speed is unknown, defaulting to 1000 [ 266.215389][T14690] veth0_vlan: entered promiscuous mode [ 266.225169][T14690] veth1_vlan: entered promiscuous mode [ 266.253818][T14875] tipc: Enabling of bearer rejected, already enabled [ 266.264172][T14870] wg1 speed is unknown, defaulting to 1000 [ 266.270495][T14870] lo speed is unknown, defaulting to 1000 [ 266.273248][T14690] veth0_macvtap: entered promiscuous mode [ 266.284013][T14878] loop7: detected capacity change from 0 to 1024 [ 266.293412][T14690] veth1_macvtap: entered promiscuous mode [ 266.296744][T14878] EXT4-fs: Ignoring removed orlov option [ 266.310963][T14878] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.320991][T14690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.369125][T14690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.377720][T14880] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3874'. [ 266.390392][ T9793] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.487685][T14880] veth11: entered promiscuous mode [ 266.493265][T14880] veth11: entered allmulticast mode [ 266.507094][ T9793] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.517619][T14888] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3875'. [ 266.530453][T14886] tipc: Enabling of bearer rejected, already enabled [ 266.550921][ T9793] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.567852][ T9793] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.578524][T14891] netlink: 'syz.3.3877': attribute type 12 has an invalid length. [ 266.721745][T14900] loop9: detected capacity change from 0 to 8192 [ 266.777096][T14903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3881'. [ 267.292056][T14912] lo speed is unknown, defaulting to 1000 [ 267.298311][T14912] ip6_vti0 speed is unknown, defaulting to 1000 [ 267.332705][T14912] wg1 speed is unknown, defaulting to 1000 [ 267.338970][T14912] lo speed is unknown, defaulting to 1000 [ 267.404847][T13858] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.636725][T14932] tipc: Enabling of bearer rejected, already enabled [ 267.645480][T14927] loop9: detected capacity change from 0 to 8192 [ 267.791344][T14924] veth13: entered promiscuous mode [ 267.797341][T14924] veth13: entered allmulticast mode [ 267.894752][T14946] lo speed is unknown, defaulting to 1000 [ 267.901817][T14946] ip6_vti0 speed is unknown, defaulting to 1000 [ 267.963220][T14946] wg1 speed is unknown, defaulting to 1000 [ 267.969738][T14946] lo speed is unknown, defaulting to 1000 [ 268.535999][T14967] loop7: detected capacity change from 0 to 8192 [ 268.645838][T14974] lo speed is unknown, defaulting to 1000 [ 268.652174][T14974] ip6_vti0 speed is unknown, defaulting to 1000 [ 268.706067][T14974] wg1 speed is unknown, defaulting to 1000 [ 268.712495][T14974] lo speed is unknown, defaulting to 1000 [ 268.969236][T14955] lo speed is unknown, defaulting to 1000 [ 268.975567][T14955] ip6_vti0 speed is unknown, defaulting to 1000 [ 269.013655][T14955] wg1 speed is unknown, defaulting to 1000 [ 269.248037][T14981] lo speed is unknown, defaulting to 1000 [ 269.254506][T14981] ip6_vti0 speed is unknown, defaulting to 1000 [ 269.373762][T14986] tipc: Enabling of bearer rejected, already enabled [ 269.382507][T14955] lo speed is unknown, defaulting to 1000 [ 269.382675][T14981] wg1 speed is unknown, defaulting to 1000 [ 269.394415][T14981] lo speed is unknown, defaulting to 1000 [ 269.459414][T14999] loop9: detected capacity change from 0 to 512 [ 269.466921][T14999] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities [ 269.595463][T14992] veth15: entered promiscuous mode [ 269.602236][T14992] veth15: entered allmulticast mode [ 269.602872][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 269.602886][ T29] audit: type=1400 audit(276.602:15369): avc: denied { read write } for pid=15004 comm="syz.7.3909" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 269.637472][ T29] audit: type=1400 audit(276.602:15370): avc: denied { open } for pid=15004 comm="syz.7.3909" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 269.747456][T14955] chnl_net:caif_netlink_parms(): no params data found [ 269.761622][ T29] audit: type=1400 audit(276.762:15371): avc: denied { ioctl } for pid=15014 comm="syz.0.3913" path="socket:[49559]" dev="sockfs" ino=49559 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 269.787108][ T29] audit: type=1400 audit(276.762:15372): avc: denied { ioctl } for pid=15006 comm="syz.9.3910" path="socket:[49560]" dev="sockfs" ino=49560 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 269.851176][ T29] audit: type=1400 audit(276.852:15373): avc: denied { unmount } for pid=14690 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 269.902209][T15022] tipc: Enabling of bearer rejected, already enabled [ 269.939229][T15036] netlink: 'syz.0.3919': attribute type 12 has an invalid length. [ 269.949318][T15035] loop9: detected capacity change from 0 to 512 [ 269.957845][T14955] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.964927][T14955] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.972784][T15035] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities [ 269.974292][T14955] bridge_slave_0: entered allmulticast mode [ 269.988283][T14955] bridge_slave_0: entered promiscuous mode [ 270.001752][T14955] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.009284][T14955] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.016840][T14955] bridge_slave_1: entered allmulticast mode [ 270.023573][T14955] bridge_slave_1: entered promiscuous mode [ 270.046922][T14955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.060477][T14955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.083591][T14955] team0: Port device team_slave_0 added [ 270.090331][T14955] team0: Port device team_slave_1 added [ 270.114738][T14955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.121751][T14955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.147784][T14955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.163815][T15044] __nla_validate_parse: 6 callbacks suppressed [ 270.163897][T15044] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3923'. [ 270.171829][T14955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.186820][T14955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.213087][T14955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.225783][T15048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=15048 comm=syz.0.3924 [ 270.291573][T15044] veth3: entered promiscuous mode [ 270.296831][T15044] veth3: entered allmulticast mode [ 270.334595][ T29] audit: type=1400 audit(277.332:15374): avc: denied { mount } for pid=15056 comm="syz.9.3928" name="/" dev="ramfs" ino=50354 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 270.363798][T14955] hsr_slave_0: entered promiscuous mode [ 270.372277][T14955] hsr_slave_1: entered promiscuous mode [ 270.381156][T14955] debugfs: 'hsr0' already exists in 'hsr' [ 270.387004][T14955] Cannot create hsr debugfs directory [ 270.392804][T15060] tipc: Enabling of bearer rejected, already enabled [ 270.403670][T15064] loop9: detected capacity change from 0 to 512 [ 270.410903][T15064] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities [ 270.456745][ T9790] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 270.465144][ T9790] wireguard0: left promiscuous mode [ 270.471033][ T9790] bond1 (unregistering): Released all slaves [ 270.479249][ T9790] bond0 (unregistering): (slave bond2): Releasing backup interface [ 270.487471][ T9790] bond2 (unregistering): left promiscuous mode [ 270.494178][ T9790] bond0 (unregistering): Released all slaves [ 270.502389][ T9790] bond2 (unregistering): Released all slaves [ 270.512505][T15070] geneve0: entered promiscuous mode [ 270.517784][T15070] geneve0: entered allmulticast mode [ 270.552904][ T9790] tipc: Disabling bearer [ 270.558270][ T9790] tipc: Left network mode [ 270.568647][T15077] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3936'. [ 270.577908][T15077] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3936'. [ 270.634529][T15080] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3938'. [ 270.708058][T15089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=15089 comm=syz.9.3940 [ 270.729993][T15080] veth9: entered promiscuous mode [ 270.735289][T15080] veth9: entered allmulticast mode [ 270.751277][ T9790] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.770973][T15092] loop7: detected capacity change from 0 to 512 [ 270.786735][T15092] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 270.835398][ T9790] team0 (unregistering): Port device team_slave_1 removed [ 270.845788][ T9790] team0 (unregistering): Port device team_slave_0 removed [ 270.880649][T15094] tipc: Enabling of bearer rejected, already enabled [ 270.964873][ T29] audit: type=1326 audit(277.962:15375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15099 comm="syz.7.3946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd893ecf6c9 code=0x7ffc0000 [ 270.988023][ T29] audit: type=1326 audit(277.962:15376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15099 comm="syz.7.3946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd893ecf6c9 code=0x7ffc0000 [ 271.011866][ T29] audit: type=1326 audit(278.022:15377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15099 comm="syz.7.3946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd893ecf6c9 code=0x7ffc0000 [ 271.034913][ T29] audit: type=1326 audit(278.022:15378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15099 comm="syz.7.3946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd893ecf6c9 code=0x7ffc0000 [ 271.319572][T15120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3950'. [ 271.319589][T15120] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3950'. [ 271.365295][T14955] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 271.376757][T14955] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 271.385605][T14955] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 271.401646][T14955] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 271.405092][T15122] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3951'. [ 271.503853][T15122] veth17: entered promiscuous mode [ 271.509375][T15122] veth17: entered allmulticast mode [ 271.589355][T14955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.601917][T14955] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.613823][ T9790] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.613858][ T9790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.615262][ T9790] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.615366][ T9790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.888246][T15142] lo speed is unknown, defaulting to 1000 [ 271.894756][T15142] ip6_vti0 speed is unknown, defaulting to 1000 [ 272.152818][T15145] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=15145 comm=syz.9.3954 [ 272.180620][T14955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.321331][T15153] lo speed is unknown, defaulting to 1000 [ 272.334941][T15153] ip6_vti0 speed is unknown, defaulting to 1000 [ 272.364523][T14955] veth0_vlan: entered promiscuous mode [ 272.392391][T14955] veth1_vlan: entered promiscuous mode [ 272.481244][T14955] veth0_macvtap: entered promiscuous mode [ 272.502709][T14955] veth1_macvtap: entered promiscuous mode [ 272.507417][T15158] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3957'. [ 272.542138][T14955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.556333][T15167] geneve0: entered promiscuous mode [ 272.561603][T15167] geneve0: entered allmulticast mode [ 272.583682][T14955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.640407][ T9768] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.669423][ T9771] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.685131][ T9790] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.715829][ T9768] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.789121][T15180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3963'. [ 272.808752][T15176] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3961'. [ 272.871390][T15176] veth11: entered promiscuous mode [ 272.877078][T15176] veth11: entered allmulticast mode [ 272.921132][T15189] loop7: detected capacity change from 0 to 512 [ 272.928627][T15189] EXT4-fs warning (device loop7): ext4_multi_mount_protect:318: fsck is running on the filesystem [ 272.939353][T15189] EXT4-fs warning (device loop7): ext4_multi_mount_protect:318: MMP failure info: last update time: 1669132791, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop14 [ 272.984360][T15189] netlink: 'syz.7.3968': attribute type 12 has an invalid length. [ 273.009395][T15193] loop7: detected capacity change from 0 to 512 [ 273.016674][T15193] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 273.340352][T15202] loop7: detected capacity change from 0 to 1024 [ 273.394608][T15202] EXT4-fs: Ignoring removed mblk_io_submit option [ 273.402328][T15202] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 273.418701][T15206] lo speed is unknown, defaulting to 1000 [ 273.423069][T15205] tipc: Started in network mode [ 273.429376][T15205] tipc: Node identity ac14140f, cluster identity 4711 [ 273.437002][T15205] tipc: New replicast peer: 255.255.255.255 [ 273.443151][T15205] tipc: Enabled bearer , priority 10 [ 273.449685][T15206] ip6_vti0 speed is unknown, defaulting to 1000 [ 273.450323][T15202] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.603322][T13858] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.709309][T15215] veth5: entered promiscuous mode [ 273.714749][T15215] veth5: entered allmulticast mode [ 273.793184][T15228] tc_dump_action: action bad kind [ 273.992653][T15275] lo speed is unknown, defaulting to 1000 [ 274.006968][T15275] ip6_vti0 speed is unknown, defaulting to 1000 [ 274.107860][T15291] tc_dump_action: action bad kind [ 274.163640][T15274] veth7: entered promiscuous mode [ 274.170610][T15274] veth7: entered allmulticast mode [ 274.800706][ T3400] tipc: Node number set to 2886997007 [ 274.947395][T15343] veth5: entered promiscuous mode [ 274.956046][T15343] veth5: entered allmulticast mode [ 274.959703][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 274.959782][ T29] audit: type=1326 audit(281.962:15451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15346 comm="syz.0.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc578c8f6c9 code=0x7ffc0000 [ 274.999369][ T29] audit: type=1326 audit(281.982:15452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15346 comm="syz.0.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc578c8f6c9 code=0x7ffc0000 [ 275.022506][ T29] audit: type=1326 audit(281.982:15453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15346 comm="syz.0.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fc578c8f6c9 code=0x7ffc0000 [ 275.045724][ T29] audit: type=1326 audit(281.982:15454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15346 comm="syz.0.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc578c8f6c9 code=0x7ffc0000 [ 275.068821][ T29] audit: type=1326 audit(282.002:15455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15346 comm="syz.0.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc578c8f6c9 code=0x7ffc0000 [ 275.150542][T15349] tc_dump_action: action bad kind [ 275.329955][T15365] loop7: detected capacity change from 0 to 1024 [ 275.351495][T15365] EXT4-fs: Ignoring removed mblk_io_submit option [ 275.374220][T15365] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 275.419765][T15365] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.571619][T13858] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.587095][T15371] tipc: Enabling of bearer rejected, already enabled [ 275.626790][ T29] audit: type=1326 audit(282.622:15456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15372 comm="syz.7.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd893ecf6c9 code=0x7ffc0000 [ 275.649821][ T29] audit: type=1326 audit(282.622:15457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15372 comm="syz.7.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd893ecf6c9 code=0x7ffc0000 [ 275.701607][ T29] audit: type=1326 audit(282.632:15458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15372 comm="syz.7.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fd893ecf6c9 code=0x7ffc0000 [ 275.726662][ T29] audit: type=1326 audit(282.632:15459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15372 comm="syz.7.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd893ecf6c9 code=0x7ffc0000 [ 275.749806][ T29] audit: type=1326 audit(282.632:15460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15372 comm="syz.7.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd893ecf6c9 code=0x7ffc0000 [ 275.823612][T15379] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=15379 comm=syz.3.4029 [ 276.115744][T15390] lo speed is unknown, defaulting to 1000 [ 276.122571][T15390] ip6_vti0 speed is unknown, defaulting to 1000 [ 276.355276][T15395] tc_dump_action: action bad kind [ 276.577472][T15405] tipc: Enabling of bearer rejected, already enabled [ 276.724660][T15414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=15414 comm=syz.0.4040 [ 276.929006][T15428] __nla_validate_parse: 12 callbacks suppressed [ 276.929021][T15428] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4047'. [ 276.968534][T15428] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4047'. [ 277.111365][T15430] lo speed is unknown, defaulting to 1000 [ 277.118096][T15430] ip6_vti0 speed is unknown, defaulting to 1000 [ 277.499107][T15434] loop7: detected capacity change from 0 to 8192 [ 277.687498][T15437] tc_dump_action: action bad kind [ 277.762490][T15440] lo speed is unknown, defaulting to 1000 [ 277.768832][T15440] ip6_vti0 speed is unknown, defaulting to 1000 [ 278.097981][T15445] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 278.129363][T15447] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4052'. [ 278.281827][T15460] lo speed is unknown, defaulting to 1000 [ 278.288403][T15460] ip6_vti0 speed is unknown, defaulting to 1000 [ 278.490760][T15466] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4058'. [ 278.999911][T15488] loop7: detected capacity change from 0 to 512 [ 279.018037][T15488] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 279.217022][T15500] bond_slave_1: mtu less than device minimum [ 279.470865][T15524] lo speed is unknown, defaulting to 1000 [ 279.480469][T15524] ip6_vti0 speed is unknown, defaulting to 1000 [ 279.692634][T15538] lo speed is unknown, defaulting to 1000 [ 279.704271][T15538] ip6_vti0 speed is unknown, defaulting to 1000 [ 279.856301][T15560] lo speed is unknown, defaulting to 1000 [ 279.875155][T15560] ip6_vti0 speed is unknown, defaulting to 1000 [ 279.892471][T15566] bond_slave_1: mtu less than device minimum [ 280.031543][T15579] syzkaller0: refused to change device tx_queue_len [ 280.096133][T15583] syzkaller0: entered promiscuous mode [ 280.101881][T15583] syzkaller0: entered allmulticast mode [ 280.115034][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 280.115048][ T29] audit: type=1400 audit(287.112:15466): avc: denied { relabelfrom } for pid=15582 comm="syz.1.4106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 280.140613][ T29] audit: type=1400 audit(287.112:15467): avc: denied { relabelto } for pid=15582 comm="syz.1.4106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 280.223308][T15592] bond_slave_1: mtu less than device minimum [ 280.254580][T15596] netlink: 'syz.9.4112': attribute type 12 has an invalid length. [ 280.348158][T15598] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4113'. [ 280.363792][ T29] audit: type=1400 audit(287.362:15468): avc: denied { ioctl } for pid=15599 comm="syz.3.4114" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x5460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 280.472121][T15598] veth7: entered promiscuous mode [ 280.477551][T15598] veth7: entered allmulticast mode [ 280.535709][T15616] lo speed is unknown, defaulting to 1000 [ 280.542039][T15616] ip6_vti0 speed is unknown, defaulting to 1000 [ 280.832695][T15648] tc_dump_action: action bad kind [ 281.006212][T15652] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4135'. [ 281.042632][T15656] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4136'. [ 281.112339][ T29] audit: type=1326 audit(288.112:15469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15660 comm="syz.3.4139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101a25f6c9 code=0x7ffc0000 [ 281.135401][ T29] audit: type=1326 audit(288.112:15470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15660 comm="syz.3.4139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101a25f6c9 code=0x7ffc0000 [ 281.239278][ T29] audit: type=1326 audit(288.162:15471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15660 comm="syz.3.4139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f101a25f6c9 code=0x7ffc0000 [ 281.262587][ T29] audit: type=1326 audit(288.162:15472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15660 comm="syz.3.4139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101a25f6c9 code=0x7ffc0000 [ 281.285816][ T29] audit: type=1326 audit(288.162:15473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15660 comm="syz.3.4139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101a25f6c9 code=0x7ffc0000 [ 281.381604][T15670] loop9: detected capacity change from 0 to 1024 [ 281.388615][T15670] EXT4-fs: Ignoring removed mblk_io_submit option [ 281.406421][T15670] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 281.419092][ T29] audit: type=1326 audit(288.412:15474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15657 comm="syz.0.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc578c8f6c9 code=0x7ffc0000 [ 281.442186][ T29] audit: type=1326 audit(288.412:15475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15657 comm="syz.0.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc578c8f6c9 code=0x7ffc0000 [ 281.481094][T15670] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.598160][T14690] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.609693][T15678] lo speed is unknown, defaulting to 1000 [ 281.618447][T15678] ip6_vti0 speed is unknown, defaulting to 1000 [ 281.671811][T15683] pim6reg1: entered promiscuous mode [ 281.677238][T15683] pim6reg1: entered allmulticast mode [ 281.721603][T15688] tc_dump_action: action bad kind [ 281.723852][T15689] loop9: detected capacity change from 0 to 512 [ 281.747455][T15689] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities [ 281.767740][T15689] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4149'. [ 281.830073][T15691] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4151'. [ 281.947080][T15691] veth15: entered promiscuous mode [ 281.952660][T15691] veth15: entered allmulticast mode [ 281.966112][T15700] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4154'. [ 282.111910][T15708] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4165'. [ 282.213393][T15708] veth17: entered promiscuous mode [ 282.219191][T15708] veth17: entered allmulticast mode [ 282.287083][T15720] geneve2: entered promiscuous mode [ 282.292314][T15720] geneve2: entered allmulticast mode [ 282.597636][T15729] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4162'. [ 282.647006][T15733] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4163'. [ 282.689311][T15735] tipc: Started in network mode [ 282.694211][T15735] tipc: Node identity ac14140f, cluster identity 4711 [ 282.713979][T15735] tipc: New replicast peer: 255.255.255.255 [ 282.720138][T15735] tipc: Enabled bearer , priority 10 [ 282.811962][T15737] syzkaller0: entered promiscuous mode [ 282.817488][T15737] syzkaller0: entered allmulticast mode [ 282.927960][T15740] tc_dump_action: action bad kind [ 283.070549][T15742] loop9: detected capacity change from 0 to 1024 [ 283.090727][T15742] EXT4-fs: Ignoring removed orlov option [ 283.147978][T15742] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.258005][T14690] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.289421][T15752] netlink: 'syz.9.4173': attribute type 12 has an invalid length. [ 283.386465][T15759] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4176'. [ 283.407154][T15761] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4177'. [ 283.467688][T15761] veth19: entered promiscuous mode [ 283.473047][T15761] veth19: entered allmulticast mode [ 283.727511][T15780] tc_dump_action: action bad kind [ 283.836529][T10693] tipc: Node number set to 2886997007 [ 283.945397][T15792] loop7: detected capacity change from 0 to 1024 [ 283.952076][T15792] EXT4-fs: Ignoring removed orlov option [ 283.959605][T15792] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.033961][T15797] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4189'. [ 284.119579][T15805] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4193'. [ 284.439602][T15814] tc_dump_action: action bad kind [ 284.529477][T15818] tipc: Enabling of bearer rejected, already enabled [ 284.753249][T15831] tipc: Enabling of bearer rejected, already enabled [ 284.805477][T15835] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4205'. [ 284.835848][T13858] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.041287][T15845] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4210'. [ 285.152974][T15845] veth9: entered promiscuous mode [ 285.158889][T15845] veth9: entered allmulticast mode [ 285.296807][T15855] xt_TCPMSS: Only works on TCP SYN packets [ 285.354686][T15858] tc_dump_action: action bad kind [ 285.673951][T15881] tipc: Enabling of bearer rejected, already enabled [ 285.815148][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 285.815164][ T29] audit: type=1326 audit(292.812:15653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15883 comm="syz.7.4224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd893ecf6c9 code=0x7ffc0000 [ 285.844342][ T29] audit: type=1326 audit(292.812:15654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15883 comm="syz.7.4224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd893ecf6c9 code=0x7ffc0000 [ 285.867601][ T29] audit: type=1326 audit(292.812:15655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15883 comm="syz.7.4224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fd893ecf6c9 code=0x7ffc0000 [ 285.890718][ T29] audit: type=1326 audit(292.812:15656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15883 comm="syz.7.4224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd893ecf6c9 code=0x7ffc0000 [ 285.907841][T15887] tc_dump_action: action bad kind [ 285.914025][ T29] audit: type=1326 audit(292.812:15657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15883 comm="syz.7.4224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd893ecf6c9 code=0x7ffc0000 [ 286.068117][T15888] loop7: detected capacity change from 0 to 8192 [ 286.299903][T15894] lo speed is unknown, defaulting to 1000 [ 286.306561][T15894] ip6_vti0 speed is unknown, defaulting to 1000 [ 286.911195][T15906] lo speed is unknown, defaulting to 1000 [ 286.917584][T15906] ip6_vti0 speed is unknown, defaulting to 1000 [ 287.318586][T15916] loop7: detected capacity change from 0 to 1024 [ 287.330611][T15910] __nla_validate_parse: 1 callbacks suppressed [ 287.330627][T15910] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4235'. [ 287.333459][T15916] EXT4-fs: Ignoring removed orlov option [ 287.376510][T15922] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4239'. [ 287.404054][T15916] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.421289][T15924] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4240'. [ 287.475257][T15916] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4236'. [ 287.573164][T13858] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.679866][T15924] veth19: entered promiscuous mode [ 287.685425][T15924] veth19: entered allmulticast mode [ 287.685539][T15935] loop7: detected capacity change from 0 to 1024 [ 287.685829][T15935] EXT4-fs: Ignoring removed orlov option [ 287.705750][T15935] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.087227][T15938] lo speed is unknown, defaulting to 1000 [ 288.093412][T15938] ip6_vti0 speed is unknown, defaulting to 1000 [ 288.531049][T15956] lo speed is unknown, defaulting to 1000 [ 288.537563][T15956] ip6_vti0 speed is unknown, defaulting to 1000 [ 288.877248][T13858] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.439605][T15976] lo speed is unknown, defaulting to 1000 [ 289.445757][T15976] ip6_vti0 speed is unknown, defaulting to 1000 [ 289.668733][T15985] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4259'. [ 289.787479][ T29] audit: type=1326 audit(296.782:15658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15980 comm="syz.1.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e398f6c9 code=0x7ffc0000 [ 289.810842][ T29] audit: type=1326 audit(296.782:15659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15980 comm="syz.1.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e398f6c9 code=0x7ffc0000 [ 289.833864][ T29] audit: type=1326 audit(296.782:15660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15980 comm="syz.1.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f76e398f6c9 code=0x7ffc0000 [ 289.856870][ T29] audit: type=1326 audit(296.782:15661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15980 comm="syz.1.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e398f6c9 code=0x7ffc0000 [ 289.879969][ T29] audit: type=1326 audit(296.782:15662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15980 comm="syz.1.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e398f6c9 code=0x7ffc0000 [ 289.911701][T15990] loop9: detected capacity change from 0 to 8192 [ 290.052807][T15998] ÿ: renamed from bond_slave_0 [ 290.080096][T16001] tipc: Enabling of bearer rejected, already enabled [ 290.135912][T15993] lo speed is unknown, defaulting to 1000 [ 290.142846][T15993] ip6_vti0 speed is unknown, defaulting to 1000 [ 290.389386][T16004] lo speed is unknown, defaulting to 1000 [ 290.395862][T16004] ip6_vti0 speed is unknown, defaulting to 1000 [ 290.543064][T16003] loop7: detected capacity change from 0 to 1024 [ 290.559809][T16003] EXT4-fs: Ignoring removed orlov option [ 290.584846][T16010] lo speed is unknown, defaulting to 1000 [ 290.606831][T16010] ip6_vti0 speed is unknown, defaulting to 1000 [ 290.649167][T16003] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.676912][T16003] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4266'. [ 290.746614][T13858] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.810381][T16020] loop7: detected capacity change from 0 to 512 [ 290.817723][T16020] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 290.840590][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 290.840608][ T29] audit: type=1326 audit(304.848:15751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16015 comm="syz.3.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101a25f6c9 code=0x7ffc0000 [ 290.871508][ T29] audit: type=1326 audit(304.878:15752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16015 comm="syz.3.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101a25f6c9 code=0x7ffc0000 [ 290.894822][ T29] audit: type=1326 audit(304.878:15754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16015 comm="syz.3.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f101a25f6c9 code=0x7ffc0000 [ 290.913093][T16022] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4270'. [ 290.917937][ T29] audit: type=1326 audit(304.878:15753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16015 comm="syz.3.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101a25f6c9 code=0x7ffc0000 [ 290.950152][ T29] audit: type=1326 audit(304.878:15755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16015 comm="syz.3.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101a25f6c9 code=0x7ffc0000 [ 290.974069][ T29] audit: type=1326 audit(304.878:15756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16015 comm="syz.3.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101a25f6c9 code=0x7ffc0000 [ 291.021234][ T29] audit: type=1326 audit(304.878:15757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16015 comm="syz.3.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101a25f6c9 code=0x7ffc0000 [ 291.044146][T16026] loop7: detected capacity change from 0 to 1024 [ 291.044389][ T29] audit: type=1326 audit(304.878:15758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16015 comm="syz.3.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101a25f6c9 code=0x7ffc0000 [ 291.060670][T16026] EXT4-fs: Ignoring removed orlov option [ 291.073840][ T29] audit: type=1326 audit(304.878:15759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16015 comm="syz.3.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101a25f6c9 code=0x7ffc0000 [ 291.102788][ T29] audit: type=1326 audit(304.878:15760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16015 comm="syz.3.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101a25f6c9 code=0x7ffc0000 [ 291.129662][T16026] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.141712][T16028] netlink: 'syz.1.4273': attribute type 12 has an invalid length. [ 291.204174][T13858] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.249928][T16037] tipc: Enabling of bearer rejected, already enabled [ 291.528339][T16054] loop7: detected capacity change from 0 to 512 [ 291.535508][T16054] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 291.592964][T16062] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4282'. [ 291.623039][T16064] lo speed is unknown, defaulting to 1000 [ 291.623297][T16064] ip6_vti0 speed is unknown, defaulting to 1000 [ 291.963459][T16074] tipc: Enabling of bearer rejected, already enabled [ 292.230521][T16088] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4294'. [ 292.273860][T16090] lo speed is unknown, defaulting to 1000 [ 292.280277][T16090] ip6_vti0 speed is unknown, defaulting to 1000 [ 292.314119][T16094] pim6reg1: entered promiscuous mode [ 292.319484][T16094] pim6reg1: entered allmulticast mode [ 292.624145][T16101] lo speed is unknown, defaulting to 1000 [ 292.630615][T16101] ip6_vti0 speed is unknown, defaulting to 1000 [ 292.877256][T16109] loop9: detected capacity change from 0 to 8192 [ 292.949671][T16112] tipc: Enabling of bearer rejected, already enabled [ 293.017595][T16117] netlink: 'syz.0.4304': attribute type 12 has an invalid length. [ 293.037741][T16119] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4305'. [ 293.047354][T16114] loop7: detected capacity change from 0 to 8192 [ 293.603532][T16127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4307'. [ 294.040551][T16138] lo speed is unknown, defaulting to 1000 [ 294.063251][T16138] ip6_vti0 speed is unknown, defaulting to 1000 [ 294.124919][T16143] lo speed is unknown, defaulting to 1000 [ 294.400379][T16143] ip6_vti0 speed is unknown, defaulting to 1000 [ 294.606361][T16147] lo speed is unknown, defaulting to 1000 [ 294.612861][T16147] ip6_vti0 speed is unknown, defaulting to 1000 [ 294.978178][T16153] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4314'. [ 295.057713][T16153] veth11: entered promiscuous mode [ 295.063324][T16153] veth11: entered allmulticast mode [ 295.080169][T16157] tipc: Enabling of bearer rejected, already enabled [ 295.353131][T16174] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4322'. [ 295.410889][T16177] tc_dump_action: action bad kind [ 295.502693][T16180] tc_dump_action: action bad kind [ 295.558012][T16182] loop9: detected capacity change from 0 to 8192 [ 295.897416][T16185] lo speed is unknown, defaulting to 1000 [ 295.903794][T16185] ip6_vti0 speed is unknown, defaulting to 1000 [ 296.475833][T16194] loop7: detected capacity change from 0 to 1024 [ 296.490586][T16194] EXT4-fs: Ignoring removed orlov option [ 296.526851][T16194] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.545661][T16196] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4328'. [ 296.580643][T13858] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.625498][T16196] veth9: entered promiscuous mode [ 296.648541][T16196] veth9: entered allmulticast mode [ 296.693766][T16202] lo speed is unknown, defaulting to 1000 [ 296.700587][T16202] ip6_vti0 speed is unknown, defaulting to 1000 [ 296.945780][T16206] tipc: Enabling of bearer rejected, already enabled [ 297.083357][T16212] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4333'. [ 297.222378][T16224] xt_TCPMSS: Only works on TCP SYN packets [ 297.322283][ T29] kauditd_printk_skb: 376 callbacks suppressed [ 297.322300][ T29] audit: type=1326 audit(318.317:16137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16215 comm="syz.1.4336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e398f6c9 code=0x7ffc0000 [ 297.351684][ T29] audit: type=1326 audit(318.317:16138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16215 comm="syz.1.4336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e398f6c9 code=0x7ffc0000 [ 297.374804][ T29] audit: type=1326 audit(318.317:16139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16215 comm="syz.1.4336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f76e398f6c9 code=0x7ffc0000 [ 297.397906][ T29] audit: type=1326 audit(318.327:16140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16215 comm="syz.1.4336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e398f6c9 code=0x7ffc0000 [ 297.421210][ T29] audit: type=1326 audit(318.327:16141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16215 comm="syz.1.4336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e398f6c9 code=0x7ffc0000 [ 297.444384][ T29] audit: type=1326 audit(318.327:16142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16215 comm="syz.1.4336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f76e398f6c9 code=0x7ffc0000 [ 297.490475][ T29] audit: type=1326 audit(318.337:16143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16215 comm="syz.1.4336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e398f6c9 code=0x7ffc0000 [ 297.513576][ T29] audit: type=1326 audit(318.337:16144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16215 comm="syz.1.4336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e398f6c9 code=0x7ffc0000 [ 297.536583][ T29] audit: type=1326 audit(318.337:16145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16215 comm="syz.1.4336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f76e398f6c9 code=0x7ffc0000 [ 297.559514][ T29] audit: type=1326 audit(318.337:16146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16215 comm="syz.1.4336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e398f6c9 code=0x7ffc0000 [ 297.588039][T16229] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4341'. [ 297.663392][T16229] veth21: entered promiscuous mode [ 297.679584][T16229] veth21: entered allmulticast mode [ 297.738843][T16241] tipc: Enabling of bearer rejected, already enabled [ 297.782756][T16247] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4346'. [ 297.968441][T16253] lo speed is unknown, defaulting to 1000 [ 297.975161][T16253] ip6_vti0 speed is unknown, defaulting to 1000 [ 298.251630][T16257] lo speed is unknown, defaulting to 1000 [ 298.257720][T16257] ip6_vti0 speed is unknown, defaulting to 1000 [ 298.735267][T16270] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4353'. [ 298.813455][T16276] tipc: Enabling of bearer rejected, already enabled [ 298.843490][T16278] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4357'. [ 299.612919][T16301] loop9: detected capacity change from 0 to 512 [ 299.621186][T16301] EXT4-fs error (device loop9): ext4_get_journal_inode:5808: comm syz.9.4366: inode #1792: comm syz.9.4366: iget: illegal inode # [ 299.636002][T16301] EXT4-fs (loop9): Remounting filesystem read-only [ 299.642655][T16301] EXT4-fs (loop9): no journal found [ 299.647988][T16301] EXT4-fs (loop9): can't get journal size [ 299.660806][T16301] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 299.670600][T16301] EXT4-fs (loop9): Errors on filesystem, clearing orphan list. [ 299.678537][T16301] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.691378][T16301] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.736117][T16307] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4368'. [ 299.831470][T16316] geneve2: entered promiscuous mode [ 299.836741][T16316] geneve2: entered allmulticast mode [ 300.131907][T16330] geneve0: entered promiscuous mode [ 300.137260][T16330] geneve0: entered allmulticast mode [ 300.184791][T16329] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4378'. [ 300.383563][T16337] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4380'. [ 300.446014][T16337] veth13: entered promiscuous mode [ 300.457861][T16337] veth13: entered allmulticast mode [ 300.495482][T16342] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4382'. [ 300.516045][T16344] tc_dump_action: action bad kind [ 300.532743][T16344] loop7: detected capacity change from 0 to 4096 [ 300.539476][T16344] EXT4-fs: Ignoring removed nomblk_io_submit option [ 300.548211][T16344] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.643914][T13858] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.685015][T16350] loop7: detected capacity change from 0 to 8192 [ 300.991546][T16359] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4388'. [ 301.199649][T16361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4389'. [ 301.234013][T16366] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4391'. [ 301.294241][T16366] veth21: entered promiscuous mode [ 301.301152][T16366] veth21: entered allmulticast mode [ 301.369035][T16378] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4395'. [ 301.605218][T16393] tipc: Enabling of bearer rejected, already enabled [ 301.671794][T16395] xt_TCPMSS: Only works on TCP SYN packets [ 301.814730][T16402] lo speed is unknown, defaulting to 1000 [ 301.821168][T16402] ip6_vti0 speed is unknown, defaulting to 1000 [ 302.039189][T16405] geneve2: entered promiscuous mode [ 302.044431][T16405] geneve2: entered allmulticast mode [ 302.284862][T16417] lo speed is unknown, defaulting to 1000 [ 302.295903][T16417] ip6_vti0 speed is unknown, defaulting to 1000 [ 302.298216][T16419] loop9: detected capacity change from 0 to 8192 [ 302.425771][T16421] pim6reg1: entered promiscuous mode [ 302.431312][T16421] pim6reg1: entered allmulticast mode [ 302.473089][T16425] lo speed is unknown, defaulting to 1000 [ 302.483902][T16425] ip6_vti0 speed is unknown, defaulting to 1000 [ 302.619060][T16440] xt_TCPMSS: Only works on TCP SYN packets [ 302.646830][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 302.646913][ T29] audit: type=1326 audit(323.657:16202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16443 comm="syz.1.4417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e398f6c9 code=0x7ffc0000 [ 302.690804][ T29] audit: type=1326 audit(323.687:16203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16443 comm="syz.1.4417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f76e398f6c9 code=0x7ffc0000 [ 302.713977][ T29] audit: type=1326 audit(323.687:16204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16443 comm="syz.1.4417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e398f6c9 code=0x7ffc0000 [ 302.737673][ T29] audit: type=1326 audit(323.687:16205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16443 comm="syz.1.4417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e398f6c9 code=0x7ffc0000 [ 302.772195][T16452] geneve0: entered promiscuous mode [ 302.777551][T16452] geneve0: entered allmulticast mode [ 302.875924][T16457] geneve2: entered promiscuous mode [ 302.881385][T16457] geneve2: entered allmulticast mode [ 303.183225][T16465] tipc: Enabling of bearer rejected, already enabled [ 303.206925][T16467] loop9: detected capacity change from 0 to 512 [ 303.214009][T16467] EXT4-fs error (device loop9): ext4_get_journal_inode:5808: comm syz.9.4426: inode #1792: comm syz.9.4426: iget: illegal inode # [ 303.228332][T16467] EXT4-fs (loop9): Remounting filesystem read-only [ 303.234854][T16467] EXT4-fs (loop9): no journal found [ 303.240158][T16467] EXT4-fs (loop9): can't get journal size [ 303.246493][T16467] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 303.256107][T16467] EXT4-fs (loop9): Errors on filesystem, clearing orphan list. [ 303.264138][T16467] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.277045][T16467] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.349003][ T29] audit: type=1326 audit(324.357:16206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16471 comm="syz.9.4428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4b3a3f6c9 code=0x7ffc0000 [ 303.372257][ T29] audit: type=1326 audit(324.357:16207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16471 comm="syz.9.4428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4b3a3f6c9 code=0x7ffc0000 [ 303.395304][ T29] audit: type=1326 audit(324.357:16208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16471 comm="syz.9.4428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fc4b3a3f6c9 code=0x7ffc0000 [ 303.401579][T16476] xt_TCPMSS: Only works on TCP SYN packets [ 303.418536][ T29] audit: type=1326 audit(324.357:16209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16471 comm="syz.9.4428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4b3a3f6c9 code=0x7ffc0000 [ 303.447681][ T29] audit: type=1107 audit(324.377:16210): pid=16473 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 303.476681][T16478] loop7: detected capacity change from 0 to 1024 [ 303.483470][T16478] EXT4-fs: Ignoring removed orlov option [ 303.494412][T16480] loop9: detected capacity change from 0 to 512 [ 303.501765][T16480] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities [ 303.513085][T16478] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.583435][T13858] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.594899][T16491] tipc: Enabling of bearer rejected, already enabled [ 303.629521][ T29] audit: type=1326 audit(324.627:16211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16494 comm="syz.0.4439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc578c8f6c9 code=0x7ffc0000 [ 303.737484][T16506] loop7: detected capacity change from 0 to 8192 [ 303.982758][T16510] lo speed is unknown, defaulting to 1000 [ 303.989308][T16510] ip6_vti0 speed is unknown, defaulting to 1000 [ 304.449393][T16514] loop9: detected capacity change from 0 to 512 [ 304.456660][T16514] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities [ 304.625877][T16529] loop9: detected capacity change from 0 to 1024 [ 304.633944][T16529] EXT4-fs: Ignoring removed orlov option [ 304.659986][T16529] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.695308][T16524] __nla_validate_parse: 4 callbacks suppressed [ 304.695324][T16524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4449'. [ 304.701563][T16529] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4451'. [ 304.831402][T14690] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.865395][T16555] loop9: detected capacity change from 0 to 512 [ 304.873313][T16555] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities [ 304.924237][T16553] loop7: detected capacity change from 0 to 8192 [ 305.139283][T16560] lo speed is unknown, defaulting to 1000 [ 305.145756][T16560] ip6_vti0 speed is unknown, defaulting to 1000 [ 305.596925][T16568] lo speed is unknown, defaulting to 1000 [ 305.603967][T16568] ip6_vti0 speed is unknown, defaulting to 1000 [ 305.651316][T16575] pim6reg1: entered promiscuous mode [ 305.656731][T16575] pim6reg1: entered allmulticast mode [ 305.860961][T16589] tipc: Enabling of bearer rejected, already enabled [ 305.952613][T16593] lo speed is unknown, defaulting to 1000 [ 305.959159][T16593] ip6_vti0 speed is unknown, defaulting to 1000 [ 306.146635][T16590] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4469'. [ 306.278998][T16603] xt_TCPMSS: Only works on TCP SYN packets [ 306.574076][T16624] lo speed is unknown, defaulting to 1000 [ 306.580525][T16624] ip6_vti0 speed is unknown, defaulting to 1000 [ 306.882865][T16627] tipc: Enabling of bearer rejected, already enabled [ 307.037082][T16629] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4484'. [ 307.051279][T16640] xt_TCPMSS: Only works on TCP SYN packets [ 307.168862][T16657] tipc: Enabling of bearer rejected, already enabled [ 307.274180][T16670] geneve2: entered promiscuous mode [ 307.279451][T16670] geneve2: entered allmulticast mode [ 307.323666][T16667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4502'. [ 307.360192][T16675] xt_TCPMSS: Only works on TCP SYN packets [ 307.670538][T16692] tipc: Enabling of bearer rejected, already enabled [ 307.709439][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 307.709455][ T29] audit: type=1326 audit(328.717:16364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16695 comm="syz.3.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101a25f6c9 code=0x7ffc0000 [ 307.739017][ T29] audit: type=1326 audit(328.717:16365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16695 comm="syz.3.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101a25f6c9 code=0x7ffc0000 [ 307.762079][ T29] audit: type=1326 audit(328.717:16366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16695 comm="syz.3.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f101a25f6c9 code=0x7ffc0000 [ 307.785214][ T29] audit: type=1326 audit(328.717:16367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16695 comm="syz.3.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101a25f6c9 code=0x7ffc0000 [ 307.808359][ T29] audit: type=1326 audit(328.717:16368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16695 comm="syz.3.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101a25f6c9 code=0x7ffc0000 [ 307.884378][T16699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4514'. [ 308.088667][ T29] audit: type=1326 audit(329.097:16369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16713 comm="syz.1.4519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e398f6c9 code=0x7ffc0000 [ 308.112129][ T29] audit: type=1326 audit(329.097:16370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16713 comm="syz.1.4519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76e398f6c9 code=0x7ffc0000 [ 308.135356][ T29] audit: type=1326 audit(329.097:16371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16713 comm="syz.1.4519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e398f6c9 code=0x7ffc0000 [ 308.163113][T16721] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4521'. [ 308.284975][ T29] audit: type=1326 audit(329.097:16372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16713 comm="syz.1.4519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76e398f6c9 code=0x7ffc0000 [ 308.308319][ T29] audit: type=1326 audit(329.097:16373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16713 comm="syz.1.4519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e398f6c9 code=0x7ffc0000 [ 308.342718][T16721] veth11: entered promiscuous mode [ 308.348278][T16721] veth11: entered allmulticast mode [ 308.380284][T16728] tipc: Enabling of bearer rejected, already enabled [ 308.543449][T16735] pim6reg1: entered promiscuous mode [ 308.549016][T16735] pim6reg1: entered allmulticast mode [ 308.580242][T16732] lo speed is unknown, defaulting to 1000 [ 308.591396][T16732] ip6_vti0 speed is unknown, defaulting to 1000 [ 308.598101][T16737] loop7: detected capacity change from 0 to 1024 [ 308.605157][T16737] EXT4-fs: Ignoring removed orlov option [ 308.621787][T16737] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.720379][T16737] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4525'. [ 308.828376][T13858] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.909422][T16747] lo speed is unknown, defaulting to 1000 [ 308.916293][T16747] ip6_vti0 speed is unknown, defaulting to 1000 [ 309.236273][T16746] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4527'. [ 309.299453][T16761] lo speed is unknown, defaulting to 1000 [ 309.310737][T16761] ip6_vti0 speed is unknown, defaulting to 1000 [ 309.510441][T16783] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4538'. [ 309.641609][T16783] veth15: entered promiscuous mode [ 309.647475][T16783] veth15: entered allmulticast mode [ 309.805864][T16797] __nla_validate_parse: 1 callbacks suppressed [ 309.805878][T16797] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4543'. [ 309.833680][T16806] lo speed is unknown, defaulting to 1000 [ 309.840383][T16806] ip6_vti0 speed is unknown, defaulting to 1000 [ 310.210192][T16813] loop9: detected capacity change from 0 to 512 [ 310.231167][T16813] EXT4-fs error (device loop9): ext4_get_journal_inode:5808: comm syz.9.4546: inode #1792: comm syz.9.4546: iget: illegal inode # [ 310.256581][T16813] EXT4-fs (loop9): Remounting filesystem read-only [ 310.263170][T16813] EXT4-fs (loop9): no journal found [ 310.268415][T16813] EXT4-fs (loop9): can't get journal size [ 310.280911][T16813] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 310.291024][T16813] EXT4-fs (loop9): Errors on filesystem, clearing orphan list. [ 310.299301][T16813] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.312458][T16813] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.391032][T16822] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4551'. [ 310.456852][T16822] veth17: entered promiscuous mode [ 310.462432][T16822] veth17: entered allmulticast mode [ 310.517317][T16827] lo speed is unknown, defaulting to 1000 [ 310.532223][T16827] ip6_vti0 speed is unknown, defaulting to 1000 [ 310.599194][T16840] loop7: detected capacity change from 0 to 512 [ 310.615254][T16840] EXT4-fs error (device loop7): ext4_get_journal_inode:5808: comm syz.7.4557: inode #1792: comm syz.7.4557: iget: illegal inode # [ 310.629484][T16840] EXT4-fs (loop7): Remounting filesystem read-only [ 310.636040][T16840] EXT4-fs (loop7): no journal found [ 310.641341][T16840] EXT4-fs (loop7): can't get journal size [ 310.674205][T16840] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 310.690228][T16840] EXT4-fs (loop7): Errors on filesystem, clearing orphan list. [ 310.698881][T16840] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.711942][T16840] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.786452][T16851] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4561'. [ 310.834195][T16857] loop7: detected capacity change from 0 to 512 [ 310.841427][T16857] EXT4-fs error (device loop7): ext4_get_journal_inode:5808: comm syz.7.4564: inode #1792: comm syz.7.4564: iget: illegal inode # [ 310.841516][T16853] lo speed is unknown, defaulting to 1000 [ 310.841818][T16853] ip6_vti0 speed is unknown, defaulting to 1000 [ 310.855606][T16857] EXT4-fs (loop7): Remounting filesystem read-only [ 310.874034][T16857] EXT4-fs (loop7): no journal found [ 310.879278][T16857] EXT4-fs (loop7): can't get journal size [ 310.888529][T16858] pim6reg1: entered promiscuous mode [ 310.894200][T16858] pim6reg1: entered allmulticast mode [ 310.898213][T16857] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 310.909636][T16857] EXT4-fs (loop7): Errors on filesystem, clearing orphan list. [ 310.917666][T16857] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.930902][T16857] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.068912][T16877] lo speed is unknown, defaulting to 1000 [ 311.086661][T16877] ip6_vti0 speed is unknown, defaulting to 1000 [ 311.092209][T16879] lo speed is unknown, defaulting to 1000 [ 311.140528][T16880] pim6reg1: entered promiscuous mode [ 311.145885][T16880] pim6reg1: entered allmulticast mode [ 311.167211][T16879] ip6_vti0 speed is unknown, defaulting to 1000 [ 311.247227][T16885] tipc: Enabling of bearer rejected, already enabled [ 311.506450][T16921] tipc: Enabling of bearer rejected, already enabled [ 311.537667][T16916] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4584'. [ 311.614105][T16916] veth13: entered promiscuous mode [ 311.619613][T16916] veth13: entered allmulticast mode [ 311.682566][T16942] tc_dump_action: action bad kind [ 311.719177][T16941] lo speed is unknown, defaulting to 1000 [ 311.725362][T16941] ip6_vti0 speed is unknown, defaulting to 1000 [ 311.806634][T16954] lo speed is unknown, defaulting to 1000 [ 311.822384][T16954] ip6_vti0 speed is unknown, defaulting to 1000 [ 311.846574][T16959] pim6reg1: entered promiscuous mode [ 311.851949][T16959] pim6reg1: entered allmulticast mode [ 311.877843][T16963] tipc: Enabling of bearer rejected, already enabled [ 312.058359][T16976] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4604'. [ 312.165397][T16979] loop9: detected capacity change from 0 to 8192 [ 312.271421][T16983] lo speed is unknown, defaulting to 1000 [ 312.299200][T16983] ip6_vti0 speed is unknown, defaulting to 1000 [ 312.398682][T16997] lo speed is unknown, defaulting to 1000 [ 312.404726][T16997] ip6_vti0 speed is unknown, defaulting to 1000 [ 312.540907][T17000] tc_dump_action: action bad kind [ 312.591094][T17002] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4611'. [ 312.622691][T17004] tipc: Enabling of bearer rejected, already enabled [ 312.693647][T17006] lo speed is unknown, defaulting to 1000 [ 312.701570][T17006] ip6_vti0 speed is unknown, defaulting to 1000 [ 312.770698][ T29] kauditd_printk_skb: 443 callbacks suppressed [ 312.770712][ T29] audit: type=1326 audit(361.770:16817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17011 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd893ecf6c9 code=0x7ffc0000 [ 312.812277][T17018] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4617'. [ 312.822293][ T29] audit: type=1326 audit(361.810:16818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17011 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd893ecf6c9 code=0x7ffc0000 [ 312.844746][ T29] audit: type=1326 audit(361.810:16819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17011 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd893ecf6c9 code=0x7ffc0000 [ 312.867219][ T29] audit: type=1326 audit(361.810:16820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17011 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd893ecf6c9 code=0x7ffc0000 [ 312.891550][ T29] audit: type=1326 audit(361.810:16821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17011 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd893ecf6c9 code=0x7ffc0000 [ 312.913918][ T29] audit: type=1326 audit(361.810:16822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17011 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fd893ecf6c9 code=0x7ffc0000 [ 312.936662][ T29] audit: type=1326 audit(361.810:16823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17011 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd893ecf6c9 code=0x7ffc0000 [ 312.959010][ T29] audit: type=1326 audit(361.810:16824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17011 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd893ecf6c9 code=0x7ffc0000 [ 313.057539][ T29] audit: type=1326 audit(362.050:16825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17021 comm="syz.0.4619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc578c8f6c9 code=0x7ffc0000 [ 313.080685][ T29] audit: type=1326 audit(362.050:16826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17021 comm="syz.0.4619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc578c8f6c9 code=0x7ffc0000 [ 313.118977][T17029] loop7: detected capacity change from 0 to 1024 [ 313.125860][T17029] EXT4-fs: Ignoring removed mblk_io_submit option [ 313.132681][T17029] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 313.159788][T17035] loop9: detected capacity change from 0 to 1024 [ 313.168319][T17035] EXT4-fs: Ignoring removed orlov option [ 313.177945][T17028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4618'. [ 313.216138][T17029] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.246535][T17043] tipc: Enabling of bearer rejected, already enabled [ 313.258513][T17035] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.316571][T17052] tc_dump_action: action bad kind [ 313.341791][T17029] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4620'. [ 313.365362][T14690] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.386834][T13858] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.429494][T17058] loop7: detected capacity change from 0 to 512 [ 313.446799][T17058] EXT4-fs error (device loop7): ext4_get_journal_inode:5808: comm syz.7.4630: inode #1792: comm syz.7.4630: iget: illegal inode # [ 313.470595][T17058] EXT4-fs (loop7): Remounting filesystem read-only [ 313.477220][T17058] EXT4-fs (loop7): no journal found [ 313.482462][T17058] EXT4-fs (loop7): can't get journal size [ 313.511810][T17058] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 313.530079][T17058] EXT4-fs (loop7): Errors on filesystem, clearing orphan list. [ 313.565224][T17058] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.625424][T17058] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.732144][T17080] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 313.735505][T17074] lo speed is unknown, defaulting to 1000 [ 313.753695][T17074] ip6_vti0 speed is unknown, defaulting to 1000 [ 313.790933][T17085] tipc: Enabling of bearer rejected, already enabled [ 313.921890][T17092] loop9: detected capacity change from 0 to 1024 [ 313.929598][T17092] EXT4-fs: Ignoring removed orlov option [ 313.938086][T17092] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.999834][T14690] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.019180][T17099] tc_dump_action: action bad kind [ 314.042405][T17099] loop9: detected capacity change from 0 to 4096 [ 314.050264][T17099] EXT4-fs: Ignoring removed nomblk_io_submit option [ 314.061832][T17099] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.118511][T17106] loop7: detected capacity change from 0 to 512 [ 314.125300][T17106] EXT4-fs error (device loop7): ext4_get_journal_inode:5808: comm syz.7.4644: inode #1792: comm syz.7.4644: iget: illegal inode # [ 314.139438][T17106] EXT4-fs (loop7): Remounting filesystem read-only [ 314.146035][T17106] EXT4-fs (loop7): no journal found [ 314.151287][T17106] EXT4-fs (loop7): can't get journal size [ 314.157444][T17106] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 314.167209][T17106] EXT4-fs (loop7): Errors on filesystem, clearing orphan list. [ 314.175260][T17106] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.188352][T17106] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.199396][T14690] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.258460][T17115] pim6reg1: entered promiscuous mode [ 314.263877][T17115] pim6reg1: entered allmulticast mode [ 314.270479][T17119] tipc: Enabling of bearer rejected, already enabled [ 314.282779][T17117] netlink: 96 bytes leftover after parsing attributes in process `syz.9.4648'. [ 314.338666][T17125] loop9: detected capacity change from 0 to 1024 [ 314.345781][T17125] EXT4-fs: Ignoring removed orlov option [ 314.363417][T17127] lo speed is unknown, defaulting to 1000 [ 314.370427][T17127] ip6_vti0 speed is unknown, defaulting to 1000 [ 314.382081][T17125] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.501264][T14690] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.515938][T17137] loop7: detected capacity change from 0 to 512 [ 314.523142][T17137] EXT4-fs error (device loop7): ext4_get_journal_inode:5808: comm syz.7.4657: inode #1792: comm syz.7.4657: iget: illegal inode # [ 314.537291][T17137] EXT4-fs (loop7): Remounting filesystem read-only [ 314.543820][T17137] EXT4-fs (loop7): no journal found [ 314.549158][T17137] EXT4-fs (loop7): can't get journal size [ 314.597996][T17137] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 314.607590][T17137] EXT4-fs (loop7): Errors on filesystem, clearing orphan list. [ 314.616592][T17137] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.637549][T17137] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.694473][T17149] tipc: Enabling of bearer rejected, already enabled [ 314.872294][T17163] __nla_validate_parse: 2 callbacks suppressed [ 314.872386][T17163] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4667'. [ 314.905557][T17146] ================================================================== [ 314.913836][T17146] BUG: KCSAN: data-race in page_pool_put_unrefed_netmem / page_pool_release [ 314.922497][T17146] [ 314.924806][T17146] write to 0xffff8881515e3900 of 8 bytes by task 17140 on cpu 1: [ 314.932516][T17146] page_pool_release+0x28a/0x780 [ 314.937454][T17146] page_pool_destroy+0x202/0x370 [ 314.942405][T17146] bpf_test_run_xdp_live+0x112f/0x11c0 [ 314.947848][T17146] bpf_prog_test_run_xdp+0x525/0x970 [ 314.953118][T17146] bpf_prog_test_run+0x22a/0x390 [ 314.958032][T17146] __sys_bpf+0x4c0/0x7c0 [ 314.962249][T17146] __x64_sys_bpf+0x41/0x50 [ 314.966650][T17146] x64_sys_call+0x2aee/0x3000 [ 314.971347][T17146] do_syscall_64+0xd2/0x200 [ 314.975832][T17146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.981734][T17146] [ 314.984041][T17146] read to 0xffff8881515e3900 of 8 bytes by task 17146 on cpu 0: [ 314.991646][T17146] page_pool_put_unrefed_netmem+0x38b/0x4b0 [ 314.997551][T17146] napi_pp_put_page+0xe9/0x200 [ 315.002420][T17146] skb_free_head+0x12c/0x150 [ 315.007097][T17146] skb_release_data+0x33b/0x370 [ 315.011953][T17146] __kfree_skb+0x44/0x150 [ 315.016272][T17146] sk_skb_reason_drop+0xbd/0x270 [ 315.021211][T17146] udpv6_recvmsg+0x1f7/0xca0 [ 315.025781][T17146] inet6_recvmsg+0x143/0x290 [ 315.030364][T17146] sock_recvmsg_nosec+0x5f/0x130 [ 315.035278][T17146] ____sys_recvmsg+0x26f/0x280 [ 315.040019][T17146] ___sys_recvmsg+0x11f/0x370 [ 315.044873][T17146] do_recvmmsg+0x1ef/0x540 [ 315.049280][T17146] __x64_sys_recvmmsg+0xe5/0x170 [ 315.054288][T17146] x64_sys_call+0x27aa/0x3000 [ 315.058946][T17146] do_syscall_64+0xd2/0x200 [ 315.063426][T17146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.069294][T17146] [ 315.071628][T17146] value changed: 0xffffea00056e4d40 -> 0x0000000000000000 [ 315.078711][T17146] [ 315.081024][T17146] Reported by Kernel Concurrency Sanitizer on: [ 315.087253][T17146] CPU: 0 UID: 0 PID: 17146 Comm: syz.9.4656 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 315.098634][T17146] Tainted: [W]=WARN [ 315.102415][T17146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 315.112450][T17146] ==================================================================