last executing test programs: 7m7.648297354s ago: executing program 32 (id=2495): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000f00)={[{@map_off}, {@session={'session', 0x3d, 0x17}, 0x0}, {@sbsector={'sbsector', 0x3d, 0x100000001}}, {@sbsector={'sbsector', 0x3d, 0x5}}, {@session={'session', 0x3d, 0x62}}, {@nojoliet, 0x41}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@session={'session', 0x3d, 0x58}}, {@showassoc}, {@mode={'mode', 0x3d, 0xfffffffffffffffe}}, {}], [{@euid_gt}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '+\"\xf7!'}}]}, 0xfa, 0x6a8, &(0x7f0000001040)="$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") r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002003000026e367a19867f38a00f8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r4}, 0x18) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000020003001d"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), 0x0) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700000000000000", @ANYRES32, @ANYBLOB="00a29600"/22, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10) r8 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r9, 0xc00c6211, &(0x7f0000000300)) fsmount(r8, 0x0, 0x0) 6m22.208365155s ago: executing program 33 (id=2759): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 3m51.393037733s ago: executing program 34 (id=4303): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x9) msgctl$IPC_SET(0x0, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040), 0xc) r4 = getpid() close_range(r3, r3, 0x2) r5 = syz_pidfd_open(r4, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000005580)='./file0\x00', 0x0, &(0x7f0000000880)={[{@quota}, {@acl}]}, 0x1, 0x3d4, &(0x7f00000008c0)="$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") ioctl$BTRFS_IOC_ADD_DEV(r5, 0x891a, 0x0) 38.46434077s ago: executing program 4 (id=6802): mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) (fail_nth: 3) 38.190975467s ago: executing program 4 (id=6805): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f5"], 0x34}, 0x1, 0x0, 0x0, 0x66df5cfbe53006d1}, 0x0) 38.163805779s ago: executing program 4 (id=6807): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$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") r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000400)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000040), 0x800048, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@pcr={'pcr', 0x3d, 0x35}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@obj_role}, {@uid_lt}]}}) r7 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r8}, 0x18) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r9 = openat(0xffffffffffffff9c, 0x0, 0x1c1002, 0x0) sendfile(r9, 0xffffffffffffffff, 0x0, 0x7ffff000) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) 37.244740687s ago: executing program 4 (id=6823): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c000000090603000000000000000000070000000900020073797a31000000000500010007000000340007801800018014000248fe8000000000000000000000000000bb060004400e1f00000500070088000000060005404e2200"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fbdbdf250100000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x4040080) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r3}, 0x10) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE2(r4, 0x0, 0x8) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000600)={'wlan1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000050080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r5 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000005c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) write$binfmt_script(r7, &(0x7f0000000380)={'#! ', './file1', [{0x20, '\x00'}, {0x20, '\x00'}, {0x20, 'kfree\x00'}]}, 0x16) r8 = socket$netlink(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000000) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r7, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38f90000", @ANYRES16=r9, @ANYBLOB="000326bd7000fedbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b0008000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4001) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f00000020c0)={0x67, @empty, 0x4e20, 0x3, 'wlc\x00', 0x29, 0x5d7f, 0x72}, 0x2c) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@nodevmap}, {@access_uid={'access', 0x3d, 0xee01}}, {@debug={'debug', 0x3d, 0x2}}, {@nodevmap}, {@directio}, {@privport}, {@noxattr}, {@version_u}, {@version_u}, {@nodevmap}], [{@uid_lt={'uid<', r11}}, {@appraise}, {@smackfsroot={'smackfsroot', 0x3d, 'ext4\x00'}}, {@smackfshat={'smackfshat', 0x3d, 'ext4\x00'}}, {@appraise}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}}) 36.487592445s ago: executing program 4 (id=6837): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000020000000000002000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r2}, 0x18) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c) socket$l2tp6(0xa, 0x2, 0x73) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 34.177600561s ago: executing program 4 (id=6860): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000020000000000002000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r2}, 0x18) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r3, 0x0, 0xfd, 0x37bc0b736aafec5e, &(0x7f0000000100)={0xa, 0x0, 0xa576, @mcast1, 0x0, 0x2}, 0x20) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000040)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) socket$inet6(0xa, 0x1, 0x64a) 34.177338281s ago: executing program 35 (id=6860): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000020000000000002000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r2}, 0x18) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r3, 0x0, 0xfd, 0x37bc0b736aafec5e, &(0x7f0000000100)={0xa, 0x0, 0xa576, @mcast1, 0x0, 0x2}, 0x20) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000040)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) socket$inet6(0xa, 0x1, 0x64a) 29.75899099s ago: executing program 8 (id=6935): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) 29.713164203s ago: executing program 8 (id=6937): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 29.634950818s ago: executing program 8 (id=6942): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x91, 0x8, 0x8, 0x6, 0x0, 0x6, 0x40, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_bp={0x0}, 0x100100, 0xffffffffffffffff, 0x1, 0x1, 0x3ff, 0x9, 0x7ff, 0x0, 0x7, 0x0, 0x2}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r2}, 0x20) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x13}}, 0x0) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500), 0x4) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001c00)='/sys/kernel/cpu_byteorder', 0x4aa82, 0x104) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r8, 0x20, &(0x7f0000000300)={&(0x7f0000000bc0)=""/4096, 0x1000, 0x0, &(0x7f0000000480)=""/119, 0x77}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xa27}, 0x94) r10 = signalfd(r0, &(0x7f0000000d00)={[0x2]}, 0x8) r11 = openat(0xffffffffffffffff, &(0x7f0000000d40)='./file0\x00', 0x690800, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0x11, &(0x7f0000000440)=@raw=[@cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffd}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, @map_val={0x18, 0xa, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x589}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}], &(0x7f0000000080)='GPL\x00', 0x8001, 0x40, &(0x7f0000000200)=""/64, 0x40f00, 0x44, '\x00', r6, @fallback=0xa, r7, 0x8, &(0x7f0000000540)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000cc0)={0x2, 0x5, 0xf, 0x7f}, 0x10, r9, r10, 0x0, &(0x7f0000000d80)=[r4, r4, r3, r11], 0x0, 0x10, 0x8}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000370400000000fdffffff00000000", @ANYRES32=r6, @ANYBLOB="4b39050000000000240012800b00010069703667726500001400028008000100", @ANYRESOCT=r6], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x24000010) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000005c0)=@nat={'nat\x00', 0x1b, 0x5, 0x698, 0x4b0, 0x4b0, 0xffffffff, 0x118, 0x5c8, 0x5c8, 0x5c8, 0xffffffff, 0x5c8, 0x5c8, 0x5, &(0x7f0000000280), {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28}, {0x10, 'L%'}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x4, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @ipv6=@ipv4={'\x00', '\xff\xff', @local}, @gre_key=0x8, @icmp_id=0x67}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@srh={{0x30}, {0x11, 0x1, 0xff, 0x4, 0x5, 0x4, 0x39b7f8a05aa1dc28}}, @common=@icmp6={{0x28}, {0x4, "fa05", 0x1}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@local, @ipv6=@rand_addr=' \x01\x00', @gre_key=0x9, @gre_key=0x7}}}, {{@uncond, 0x0, 0x208, 0x250, 0x0, {}, [@common=@rt={{0x138}, {0x8, [0x8, 0x1f65], 0xfffffff6, 0x4, 0x4, [@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @local, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'], 0x4}}, @common=@icmp6={{0x28}, {0xc, "8455"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@empty, @ipv4=@loopback, @port=0x4e20, @gre_key=0x8}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x6e, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x5, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4=@remote, @gre_key=0x9, @icmp_id=0x68}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6f8) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x208200, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000580)={r4, &(0x7f0000000540)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x100003c}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001d00)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xb84, 0x3, 0x6, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x0, 0xc74, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x3, 0xfffffffd, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x0, 0x107, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffff002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x0, 0x200, 0x3, 0x0, 0x0, 0x3, 0xfffff370, 0x0, 0x0, 0x20000000, 0x2000, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0xf, 0xf, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x5, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x100000, 0x0, 0x801, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe8d0, 0x101, 0x8, 0x200, 0x3, 0x7f, 0x3, 0xffffffff, 0x3, 0x80000001, 0x8000000b, 0x1, 0xfffff0c2, 0x7, 0xa042, 0xfffffc21, 0xffff7fff, 0x4, 0x4, 0x400, 0x8, 0x7, 0x5d3b2fc3, 0x87f, 0x7ff, 0x5, 0x5, 0x2, 0x1, 0xa0, 0xb, 0xf14, 0x2, 0x5, 0x7, 0x1, 0x1, 0x5, 0x1, 0x9, 0x4, 0x1, 0x8, 0x7, 0x208, 0x40000000, 0x5, 0x0, 0x40, 0x1, 0x5, 0x1, 0x9, 0x1ff, 0x0, 0x9, 0x426, 0x6, 0x7fff, 0xffffffff, 0x8, 0x5, 0x9, 0x3feb, 0x0, 0x5, 0xeb5, 0x201, 0x5, 0x8, 0x0, 0x0, 0x7, 0x4, 0x2597, 0x9, 0x7, 0x4, 0xb8, 0xcb, 0xf, 0x0, 0x2, 0x4, 0x0, 0x27d, 0xc2c, 0x6, 0x1, 0x6, 0x4, 0x0, 0x8, 0x9, 0x10001, 0x3, 0x6, 0x2, 0xc, 0x6, 0x9, 0x3, 0x1c1, 0x3, 0x9, 0x4, 0x3, 0x3, 0x6, 0x4, 0xa21, 0xffff, 0x3ff, 0x0, 0x8, 0x355a, 0xfffffffd, 0x6, 0xffffff60, 0xee, 0x1000, 0x6, 0xfffffffb, 0x2, 0x7, 0x0, 0x2, 0xe0, 0x7f, 0xea50, 0x5, 0x2, 0x1000, 0x8, 0x0, 0x8, 0x1000, 0x7, 0x5, 0xfffffffa, 0x200, 0x7ff, 0xfffffff9, 0xfffffffd, 0x6, 0x1000, 0x8, 0x7ff, 0x81, 0x401, 0xe, 0x0, 0x8, 0x5, 0xfff, 0x1f2, 0x24000, 0x7, 0x100, 0x5, 0x6, 0x7ff, 0x7, 0x1b, 0x3a03, 0xb, 0xffffffff, 0x2, 0x3, 0x5, 0x3, 0x171751e3, 0x5, 0x6, 0x54, 0xfffffffb, 0x20000fa7, 0x7, 0x60, 0x1, 0x10, 0xcc0b, 0xa, 0x62, 0x8, 0x120000, 0x8, 0xfff, 0x1, 0x8001, 0xd, 0x5, 0x5, 0x5c, 0x4, 0x67bd, 0x3866, 0x9, 0xed1, 0x8, 0x5, 0x1, 0x2, 0x2, 0x2, 0x2, 0xb, 0x6, 0xb0c, 0x7, 0x5, 0x5c3b, 0x6, 0xb21, 0x40, 0x9, 0x3, 0x8, 0xfffffff8, 0x40000000, 0x2, 0x8, 0x4, 0xfff, 0x80000000, 0x5, 0x2b, 0x0, 0x3, 0x8, 0x9, 0x6, 0x400, 0x10e, 0x7, 0x101, 0x41a, 0x6, 0x1, 0x6, 0x0, 0x8, 0x6, 0x401, 0xfffffffe, 0xa, 0x0, 0x0, 0x1, 0xfffffff8, 0x9, 0xf87, 0x1, 0x9, 0x5, 0x9]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xffff, 0x0, 0x1, 0x9, 0x100, {0x4, 0x2, 0x7, 0x2, 0x8000, 0x3}, {0x8, 0x0, 0x8, 0x8, 0x1, 0x100}, 0x2, 0x10, 0xe723}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x894}}, 0xc0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x1) 29.610089429s ago: executing program 8 (id=6945): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c000000090603000000000000000000070000000900020073797a31000000000500010007000000340007801800018014000248fe8000000000000000000000000000bb060004400e1f00000500070088000000060005404e2200"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fbdbdf250100000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x4040080) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r3}, 0x10) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE2(r4, 0x0, 0x8) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000600)={'wlan1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000050080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ///+864GIw8IlpAdcIJ0Yrq6u+//pzLASAS5d6/5/vwN5nCzASCn2NQIQGGX/9/3/c6XpQyUEAAAM3HRrSgql7Ou96SgUSqWIm62fBSgmaxvVynxEPBERv50pXmvWF1pbJn2MEQAAAAAAAAAAAAAAAAAAAAAAAAAAovVU7iRSAAAAYKRFFP6U/LL9LP+5meenu78fmEj+1fpJ4ImIeOuHb3z/7nKjsbvQXP63o+WNH2TLXxzGNxgAAABAt851emv+z2FnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCoee/B2yudqY+XTw0q7l++EBGzefHHY7I1n4xiRFz/exLjJ7ZLImJsAPEP70XER/PiJ820jkLmxR/Em3BO/JjN3oW8+DcGEB+usvvN489ref2vEM+25vn9bzzif+ofVO/jXxwd/8Z69P+bfcZ46p2flXvGvxfx1Hj+8acTP+kR/7k+43/9awcHvdalP4qY63z+tI54JyMcl8qNrZ1yff/g9sbW8nplvbK9uLjw8tIrSy8tzZfXNqqV7N/cGN95+ufvn9X+67mff0mWTe/2P5+zv7zPpP+8c/fBhzuVw9Pxbz2XE/9XP85ecTp+IYvzqazcXD/XKR+2yyc989PfPHNW+1eP2198mP//W7122u1UR3m63z8dAOAC1PcPNper1cruyBaaV+mPQBoKj2DhWwPdYZqmabNP5ay6HxH97CeJAbe0kJ/PcaHnEWDYRyYAAGDQjk/6h50JAAAAAAAAAAAAAAAAAAAAXF2X8ZS17pjHj0BOBvEIbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAgfhvAAAA//89e9P5") r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000005c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) write$binfmt_script(r6, &(0x7f0000000380)={'#! ', './file1', [{0x20, '\x00'}, {0x20, '\x00'}, {0x20, 'kfree\x00'}]}, 0x16) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 29.031676306s ago: executing program 6 (id=6962): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 29.001364048s ago: executing program 6 (id=6964): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 28.936749452s ago: executing program 6 (id=6966): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000090000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 28.904518834s ago: executing program 6 (id=6967): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c000000090603000000000000000000070000000900020073797a31000000000500010007000000340007801800018014000248fe8000000000000000000000000000bb060004400e1f00000500070088000000060005404e2200"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fbdbdf250100000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x4040080) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r3}, 0x10) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE2(r4, 0x0, 0x8) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000600)={'wlan1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000050080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") 28.829640379s ago: executing program 6 (id=6969): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) 28.597740944s ago: executing program 6 (id=6972): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073794f310000000008000440080000000900010073797a300000000008000340000000011400000011"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f5"], 0x34}, 0x1, 0x0, 0x0, 0x66df5cfbe53006d1}, 0x0) 28.597651294s ago: executing program 36 (id=6972): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073794f310000000008000440080000000900010073797a300000000008000340000000011400000011"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f5"], 0x34}, 0x1, 0x0, 0x0, 0x66df5cfbe53006d1}, 0x0) 27.490665484s ago: executing program 8 (id=6985): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000020000850000"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r1}, 0x18) socket$packet(0x11, 0x2, 0x300) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 23.329206066s ago: executing program 8 (id=7032): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000090000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 23.294192679s ago: executing program 37 (id=7032): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000090000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 22.348902608s ago: executing program 9 (id=7044): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sync() setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000280)={0x0, 0x4, 0x4, 0xfffffffc, @vifc_lcl_ifindex, @empty}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='mm_collapse_huge_page_swapin\x00', r5, 0x0, 0x7}, 0x18) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f00000006c0)={{0x0, 0x3ff, 0x8, 0x1000, 0x0, 0x4, 0x8, 0x200, 0x0, 0x3, 0x7, 0x400, 0x5, 0x56, 0x5}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r6, 0xd0009411, &(0x7f0000001500)={{r9, 0xffffffffffff2656, 0x1, 0x59, 0x0, 0xfffffffffffffff9, 0x7, 0x2, 0x9, 0x6935b34c, 0x7, 0x7fffffffffffffff, 0xff, 0x7fffffffffffffff, 0x7}}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r6, 0x0, 0x1, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000014c0)=ANY=[@ANYRES32=r7, @ANYRES32=r10, @ANYBLOB="30000000eb4b1e9991d601000000", @ANYRES32=r5, @ANYBLOB, @ANYRES32=r5, @ANYBLOB, @ANYRES64=r11], 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@fallback, 0xffffffffffffffff, 0x1c, 0x5, 0xffffffffffffffff, @void, @value, @void, @void, r11}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@map, 0xffffffffffffffff, 0x26, 0x0, 0xffffffffffffffff, @void, @value, @void, @void, r11}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00'}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0x25, 0x9, @val=@tcx={@void, @value, @void, @void, r11}}, 0x1c) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000480)={@fallback=r3, r4, 0x38, 0x11, r2, @void, @value=r2, @void, @void, r11}, 0x20) connect$bt_sco(r4, &(0x7f0000000340), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x9, &(0x7f00000004c0)=@framed={{}, [@alu={0x4, 0x1, 0xa, 0x0, 0xa, 0x1}, @btf_id={0x18, 0x3, 0x3, 0x0, 0xffffffff}, @generic={0xa, 0x0, 0x8, 0xe618, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000440)='syzkaller\x00', 0x2}, 0x94) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=@delsa={0x1a8, 0x11, 0x800, 0x70bd2c, 0x25dfdbfd, {@in6=@private2, 0x4d4, 0x0, 0xff}, [@migrate={0x180, 0x11, [{@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x44}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@private=0xa010100, 0xff, 0x2, 0x0, 0x3505, 0x8, 0x2}, {@in6=@local, @in6=@mcast1, @in6=@mcast2, @in=@remote, 0x32, 0x3, 0x0, 0x3501, 0x2, 0x2}, {@in=@rand_addr=0x64010102, @in=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast1, 0x2b, 0x2, 0x0, 0x3504, 0xa, 0xa}, {@in=@empty, @in=@private=0xa010100, @in=@multicast2, @in=@private=0xa010102, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, {@in=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@private=0xa010102, @in=@broadcast, 0x3c, 0x2, 0x0, 0x3503, 0x2, 0x2}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x5}, 0x20004090) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) 21.989054091s ago: executing program 9 (id=7050): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x1f5a685a}, 0x4dc8, 0x10000, 0xfffffffc, 0x1, 0x1008, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000240)={0x0, 0x6862, 0x8, 0x1, 0x1c0}, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd=r1, 0x0, 0x0}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) 20.241861532s ago: executing program 9 (id=7076): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xc0001, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_connect(0x2, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2000000) 19.653586798s ago: executing program 9 (id=7087): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000005c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) write$binfmt_script(r1, &(0x7f0000000380)={'#! ', './file1', [{0x20, '\x00'}, {0x20, '\x00'}, {0x20, 'kfree\x00'}]}, 0x16) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38f90000", @ANYRES16=r3, @ANYBLOB="000326bd7000fedbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b0008000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4001) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) 19.254301654s ago: executing program 9 (id=7088): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000700)="0900000000ffaabe0008000086dd", 0xe, 0x0, &(0x7f0000000000)={0x11, 0x1b, r2, 0x1, 0x6, 0x6, @local}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000d1a27d0009e611a4023e6dc2270dbf0900000000000055090100000000009500000000000000bf91e73f71220000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x1, 0x11f4, &(0x7f0000001280)="$eJzs3M+LG2UYB/DHbWvr1v2h1moL0he96GXo7sGLgiyyBWlAaRuhFYSpO9GQMQmZsBARV09e/TvEozdBvOllL/4N3vbisQdxxMTapsRDqXTa8Plc8pD3/cLzkjDwDvPO0ZvffNrrVFknH8fKE2/FyjAi3UqRYiVu+zJee+PnX166ev3G5Z1Wa/dKSpd2rm29nlJav/DjB59/9/JP49Pvf7/+w8k43Pzw6Pft3w7PHp47+vPaJ90qdavUH4xTnm4OBuP8ZlmkvW7Vy1J6ryzyqkjdflWM5sY75WA4nKS8v7e2OhwVVZXy/iT1ikkaD9J4NEn5x3m3n7IsS2urwYNof3urruuIuj4RT0Zd1/VTsRqn4+lYi/XYiM14Jp6N5+JMPB9n44V4Mc5NZzXdNwAAAAAAAAAAAAAAAAAAACyXBzr/f6Hh5gEAAAAAAAAAAAAAAAAAAGBJXL1+4/JOq7V7JaVTEeXX++399uxzNr7TiW6UUcTF2Ig/Ynr6f2ZWX3qntXsxTW3GV+XBP/mD/fax+fzW9HUCC/Nbs3yaz5+M1bvz27ERZxbntxfmT8Wrr9yVz2Ijfv0oBlHGXvydvZP/Yiult99t3ZM/P50HAAAAyyBL/1q4f8+y/xqf5e/j/sA9++vjcf54s2snopp81svLshg1XtzuaPbNQUQ8Io0tcXHi0Wjj/y2Ozf2Rmu/nMS2auybx8Nz50ZvuBAAAAAAAAAAAgPvxMB4nbHqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MUOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//86R81g") r7 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r7, 0x0, 0x0, 0x1000f4) r8 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0xffffffffffffffff, 0x9, 0xd9857660a9d0b478}, 0xc) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r10, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r11, @ANYBLOB="01000000000000000000011500002c000280060002004e2000000800090010000000060002004e210000080007000101000006000f000700000008000400ff7fffff1400028008000600020000000800090008000000080004000200000060000180080009005600000007000600666f00000c00070020000000020000000800080001000000"], 0xc4}}, 0x4008800) sendmsg$IPVS_CMD_SET_DEST(r8, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="080729bdf000fcdbdf250600000008000600ffff00000800050001feffff080005000000000008000500ff7f00001c000180060a00000008000b0073697000080009005d0000000800040000040000000000"], 0x58}, 0x1, 0x0, 0x0, 0xc041}, 0x4000) r13 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r13, 0x112, 0x7, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x1, &(0x7f00000001c0)=@raw=[@ldst={0x0, 0x2, 0x6, 0x2, 0x8, 0xc}], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x4, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x2, 0x2, 0x10001, 0x2}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000440)=[r7, 0x1, r7, r8, r4, r6, r4], &(0x7f0000000480)=[{0x3, 0x5, 0xf, 0x9}, {0x2, 0x4, 0x4, 0x3}, {0x3, 0x4, 0x3, 0x6}, {0x2, 0x2, 0xb, 0xb}], 0x10, 0xc}, 0x94) pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) 17.601396438s ago: executing program 3 (id=7096): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x8, 0x4, 0x0, 0x0, 0x0, 0x100000000a, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b79, 0x2, @perf_config_ext={0x7, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x401, 0x0, 0x3ff}, 0x0, 0x3, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, 0x0) pwrite64(r0, &(0x7f0000000040)="04b97bcb1f4389", 0x7, 0xd61a) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x1a, r2, 0x1, 0x8, 0x6, @broadcast}, 0x14) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESHEX=r3, @ANYRES16=r3], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000bc0)=ANY=[@ANYRES16, @ANYRES32=r1, @ANYRES8=r4, @ANYRES32=r2, @ANYRES64, @ANYRES16=r2], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000540)=ANY=[@ANYBLOB="636865636b3d7374726963742c636865636b3d72656c61786564006d6f64653d3078303030303030303030303030303030312c6d61703d6f66662c73657373696f6e3d3078303030303030303030303030303036322c696f636861727365743d6d6163677265656b416d61703d61636f726e2c696f636861727365743d69736f383835392d322c73657373696f6e3d3078303030303030303030300100000000000000686f776173736f632c6d6f64653d3078666666666666666666666666666666652c636865636b3d7374726963742c6673636f6e746578743d73797374656d5f6e6a7065726d69745f646972656374696f2c00"], 0xfa, 0x69f, &(0x7f0000000f00)="$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") syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01005ee1fadefcdbdf250100000008000100", @ANYRES32=r7, @ANYBLOB="3c00028038000100240001"], 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x7c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) open_by_handle_at(r3, &(0x7f0000000100)=ANY=[@ANYRESHEX=r8, @ANYRESDEC], 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r10, 0x0, 0x8}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 17.041819033s ago: executing program 3 (id=7101): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r2, &(0x7f00000017c0)=""/4091, 0xffb) 17.027665414s ago: executing program 3 (id=7102): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xb, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 16.969624978s ago: executing program 3 (id=7103): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000005c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) write$binfmt_script(r1, &(0x7f0000000380)={'#! ', './file1', [{0x20, '\x00'}, {0x20, '\x00'}, {0x20, 'kfree\x00'}]}, 0x16) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38f90000", @ANYRES16=r3, @ANYBLOB="000326bd7000fedbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b0008000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4001) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) 16.664804298s ago: executing program 3 (id=7105): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, 0x0, 0x0) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000540), 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000600)={'erspan0\x00', 0x0, 0x40, 0x20, 0x9, 0x6, {{0x1a, 0x4, 0x1, 0x4, 0x68, 0x64, 0x0, 0x5, 0x4, 0x0, @rand_addr=0x64010101, @multicast2, {[@lsrr={0x83, 0xf, 0x6b, [@private=0xa010101, @private=0xa010101, @broadcast]}, @timestamp={0x44, 0x14, 0xe3, 0x0, 0x0, [0x96b, 0xfff, 0xefda, 0x8]}, @rr={0x7, 0x23, 0xaf, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x11}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101]}, @ssrr={0x89, 0x3, 0x16}, @generic={0xd, 0x9, "fc3407d0de05a4"}, @end]}}}}}) bind$inet6(0xffffffffffffffff, &(0x7f0000000700)={0xa, 0x4e24, 0xe4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) fsetxattr$security_selinux(r5, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) 14.633718095s ago: executing program 9 (id=7124): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00'}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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") 14.633614355s ago: executing program 38 (id=7124): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00'}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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") 11.617528596s ago: executing program 3 (id=7143): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)=r1}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x4c080) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000019c0)={0x20, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x4011}, 0x0) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000004}, 0xc, &(0x7f0000000540)={&(0x7f0000000ac0)={0x2ac, r8, 0x214, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x134, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x20e2b1ca}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8f1542f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d6d24ff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52fa741a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc9c4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3aa5cc96}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xda81}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ecaac5}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61354cf5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x23dd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c6d047d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3673}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x49af57}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x288b5f7d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7758}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8067dfe}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa3fe1cc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x906664}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc575}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7578f302}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f95aa59}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa430}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f9646a4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x456e40d7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65628cb6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b871cf9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2813}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6218f75f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x24ef}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe216}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b924841}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd982}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x12cba627}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1c5e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92c5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x443e}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x154, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x33}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4000008f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x72c3e0fb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b0d7020}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2c}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3300825d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ba14591}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc6fee01}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x62}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc4}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x95}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26dd1a25}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2ec49c7e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41b0d86d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x41}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x33c4e11c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6671c6f5}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3feb4084}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x80055c8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4eae635c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5995c2f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x194cdbc6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d31e00a}]}]}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x8881}, 0x4000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r9) sendmsg$NL80211_CMD_GET_WIPHY(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01030000000000000000010000000800010014000000080003"], 0x30}}, 0x44) r11 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x5e7b9b8dab88127f, 0x0) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r13, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000800)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0b1600000000000000004a0000000800a800360000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001693a768a2191f82e00a00a020108ea7a79761230af3f3ad81ecf3dd82c64a730f2d43dd504317ca6f26f5a7d2530928da7de6c9d74b196c6aa737f655b6f9fe29429431a1d6ebf6b8265c70f9e56cf379350579cc6a0318cbcd0ec4bdb3d6cdbd959948763fb96290c103611caf33801d34eed93a791afecb05ff03858c19f91fc9e9a4e01b7890f4e792c360c50fb7ec154bc67aea7c1319783001"], 0x3c}}, 0x0) ppoll(&(0x7f00000002c0)=[{r9, 0x260}, {r3, 0x8}, {r0, 0x8012}, {r1}, {r3, 0xc000}, {r11, 0x480}, {r2, 0x8}, {r13, 0xa51a}], 0x8, &(0x7f0000000340)={0x77359400}, &(0x7f0000000380)={[0x4]}, 0x8) r14 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r14, 0x5) r15 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r15, 0x1) sendmsg$NL80211_CMD_SET_PMKSA(r15, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="50000000b3c1440e2e18bbfef2e590fbd2440e1136c3a6a60b7f16a35f6abd0e7d702fe87cf0bc0ce11f29cbb00df98e997cfd1b8f66e8ea62461dd3a0d493855f883fbd234debbe31eacf", @ANYRES16=0x0, @ANYBLOB="200025bd7000fedbdf253400000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff070000390000001400550052bfaf8c9117ec6be124f11d93e9b7c014005500d7ec3f5978804fe0b2846511e87e20f2"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x4) flock(r15, 0x2) dup3(r15, r14, 0x0) r16 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r16, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0x2, 0x9, 0xffa4, 0xc00, 0x5}, 0x20) 11.617202166s ago: executing program 39 (id=7143): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)=r1}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x4c080) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000019c0)={0x20, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x4011}, 0x0) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000004}, 0xc, &(0x7f0000000540)={&(0x7f0000000ac0)={0x2ac, r8, 0x214, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x134, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x20e2b1ca}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8f1542f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d6d24ff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52fa741a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc9c4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3aa5cc96}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xda81}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ecaac5}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61354cf5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x23dd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c6d047d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3673}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x49af57}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x288b5f7d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7758}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8067dfe}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa3fe1cc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x906664}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc575}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7578f302}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f95aa59}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa430}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f9646a4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x456e40d7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65628cb6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b871cf9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2813}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6218f75f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x24ef}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe216}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b924841}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd982}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x12cba627}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1c5e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92c5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x443e}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x154, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x33}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4000008f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x72c3e0fb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b0d7020}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2c}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3300825d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ba14591}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc6fee01}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x62}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc4}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x95}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26dd1a25}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2ec49c7e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41b0d86d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x41}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x33c4e11c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6671c6f5}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3feb4084}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x80055c8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4eae635c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5995c2f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x194cdbc6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d31e00a}]}]}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x8881}, 0x4000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r9) sendmsg$NL80211_CMD_GET_WIPHY(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01030000000000000000010000000800010014000000080003"], 0x30}}, 0x44) r11 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x5e7b9b8dab88127f, 0x0) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r13, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000800)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0b1600000000000000004a0000000800a800360000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001693a768a2191f82e00a00a020108ea7a79761230af3f3ad81ecf3dd82c64a730f2d43dd504317ca6f26f5a7d2530928da7de6c9d74b196c6aa737f655b6f9fe29429431a1d6ebf6b8265c70f9e56cf379350579cc6a0318cbcd0ec4bdb3d6cdbd959948763fb96290c103611caf33801d34eed93a791afecb05ff03858c19f91fc9e9a4e01b7890f4e792c360c50fb7ec154bc67aea7c1319783001"], 0x3c}}, 0x0) ppoll(&(0x7f00000002c0)=[{r9, 0x260}, {r3, 0x8}, {r0, 0x8012}, {r1}, {r3, 0xc000}, {r11, 0x480}, {r2, 0x8}, {r13, 0xa51a}], 0x8, &(0x7f0000000340)={0x77359400}, &(0x7f0000000380)={[0x4]}, 0x8) r14 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r14, 0x5) r15 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r15, 0x1) sendmsg$NL80211_CMD_SET_PMKSA(r15, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="50000000b3c1440e2e18bbfef2e590fbd2440e1136c3a6a60b7f16a35f6abd0e7d702fe87cf0bc0ce11f29cbb00df98e997cfd1b8f66e8ea62461dd3a0d493855f883fbd234debbe31eacf", @ANYRES16=0x0, @ANYBLOB="200025bd7000fedbdf253400000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff070000390000001400550052bfaf8c9117ec6be124f11d93e9b7c014005500d7ec3f5978804fe0b2846511e87e20f2"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x4) flock(r15, 0x2) dup3(r15, r14, 0x0) r16 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r16, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0x2, 0x9, 0xffa4, 0xc00, 0x5}, 0x20) 8.55443431s ago: executing program 7 (id=7163): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 8.481142424s ago: executing program 7 (id=7164): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) readv(r1, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x590, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x4c50, 0x3, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000100)={'syzkaller1\x00', {0x2, 0x4e21, @rand_addr=0x64010102}}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)={0x30, r4, 0xc4fc9e906872338b, 0x70bd2e, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4, 0x37}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x30}}, 0x40000) 8.191856463s ago: executing program 7 (id=7165): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_io_uring_setup(0x7025, &(0x7f0000000300)={0x0, 0x2000, 0x10100, 0x1}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000540)=@l2tp6={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xbf6b, 0x2}}) io_uring_enter(r1, 0x5b43, 0x0, 0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$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") r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0xb10000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) renameat2(r4, &(0x7f0000000140)='./file0\x00', r4, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) 7.867968173s ago: executing program 7 (id=7168): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x4) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000005c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) write$binfmt_script(r2, &(0x7f0000000380)={'#! ', './file1', [{0x20, '\x00'}, {0x20, '\x00'}, {0x20, 'kfree\x00'}]}, 0x16) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38f90000", @ANYRES16=r4, @ANYBLOB="000326bd7000fedbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b0008000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4001) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}, {@access_uid={'access', 0x3d, 0xee01}}, {@debug={'debug', 0x3d, 0x2}}, {@nodevmap}, {@directio}, {@privport}, {@noxattr}, {@version_u}, {@version_u}, {@nodevmap}], [{@uid_lt}, {@appraise}, {@smackfsroot={'smackfsroot', 0x3d, 'ext4\x00'}}, {@smackfshat={'smackfshat', 0x3d, 'ext4\x00'}}, {@appraise}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}}) 6.904808054s ago: executing program 7 (id=7181): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x8c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000000080)={[{@dioread_lock}, {@noblock_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@usrquota}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@journal_checksum}, {@barrier_val={'barrier', 0x3d, 0xb}}, {@nobh}, {@grpid}], [], 0x2c}, 0x84, 0x4d8, &(0x7f0000000900)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0xe340, 0x103) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) sendmsg$inet6(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000680)="b32f7260bd6b302e3a85f2f6f842e6ed34427bcf8b75f8d6a9e9d658cbf48833a277bc331969558e63f5fa68e9093b2e949aa93d999346e771421cd7aa38583dedb3405e3720a755713625e91ec4bee72cfd225ea3910de56de35c5ab60382b6988175f873f52f4b841e37063670b189af835dea8b50236e883b91999febbab9196cc1e93dfaf2fa7386126d6b0decc438e66e8813797053ca252424af7b2a29608be1bc03d3bee48528e5427542e3b396b9d69b9796276914b7bd70", 0xbc}, {&(0x7f0000000740)="0ca20e30298a08ccd1a0462d1afb2dd517183df3a62c10bb923423c99e7d43f1163b52db1d667c22972c3b12ac805b0dd744a6c90332a45ee0bd22a0f01ce63dee7cc24383fdb92f81d70b8f9e061e11355e168d51b1", 0x56}, {&(0x7f0000001200)="572105e0cc7fe49adfaf7d4f796de1b6026a8424d5863542b3b42368a90d66fc692fd0aeea7def1d6c41f7bac6bcad984c38b887e18bbf037580a4ac4777bec2e4dcfa421410ebff70e97af2e1bc50d07e055923d49ab49f6bc5bfa8eaea8756731265689ed0be8fdf04ded536c8a8b5a463035502db6b5f4d8687208dcb44d4d273e4108ab066b95525721b27bb421e5cf69fc0e931292a1747db96680c1b229fbf12065a9660253ddf07174f25f60048d53d156b2a1c35749941a6ca46710d19d8f034c1338f7133c836da33d388228469917ab1", 0xd5}, {&(0x7f0000000040)="d0e943411ab9be5d59c804577087244c85e9dd03ecc74ea85735c12b0080731f84256ddcde3e08bcbe4ad04f738f912e18fa4dfd1314", 0x36}, {&(0x7f00000007c0)="68a90a1138bc1b741d390f18f7041fcddf6b7eb4e0703d15f75e0a34e331949644c0c3021ccb0327506d72f055fd94610358f2e052477233e7e0611777a6f847d6d3f385fafd1f42ebb80668da92f9ba555d24185dce571628f9d9123f79ea4b6e7a4e71d9ff532a884177697daf1af8c03bae8d5a1958128de5be413421b60af85d03d4489893b77783", 0x8a}, {&(0x7f00000001c0)="a0af01b85156c46be8c2ac8d3f4f8b9857a041d6c648760b1f0fa99ac9936772947f3cd96fdd0026e335a136837fa0bc41e4942c", 0x34}, {&(0x7f0000001300)="adf7c758a2514a54a3275247a88e40f6db71b4c2b2a54614d89d43853e0a7999543abb055b8575991330635f14a58414578d162db54ff7e5ab0fa803eb", 0x3d}], 0x7, &(0x7f0000000300)=[@dstopts_2292={{0x28, 0x29, 0x4, {0x87, 0x1, '\x00', [@ra={0x5, 0x2, 0xe}, @enc_lim, @jumbo={0xc2, 0x4, 0xdc09}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xfffffffe}}], 0x40}, 0x2881) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x69000}], 0x1, 0x7000, 0x0, 0x3) 2.365693041s ago: executing program 1 (id=7245): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000000)=@chain={'key_or_keyring:', r1}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000800, &(0x7f00000006c0), 0x20, 0x511, &(0x7f0000000700)="$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") 2.365456091s ago: executing program 1 (id=7246): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 2.323096683s ago: executing program 1 (id=7247): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 2.22441089s ago: executing program 7 (id=7249): r0 = gettid() (async) r1 = syz_open_dev$sg(&(0x7f0000000200), 0x7fffffffffffffff, 0x8100) (async) unshare(0x20040600) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, &(0x7f0000000780)}, 0x20) (async) ioctl$SG_IO(r1, 0x2285, &(0x7f0000002700)={0x53, 0xfffffffffffffffb, 0x1000, 0x81, @scatter={0x4, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/80, 0x50}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/240, 0xf0}, {&(0x7f0000001500)=""/148, 0x94}]}, &(0x7f00000015c0)="629b64395b6c8706c367b281fa839cdbead559d9f4ec3ab792b885f12d554c3151f5fa1de7883952e16a1c42848f15c4a9e11a4c85f2ba5fdba9fff053cd096feb007c4b4386db89a2f2f5b0f1dc287c055eded45d3c71bfd8ad2e0b54c3e4e9af84b36015ac0eb11c69e4bf6b52cfaba5bc762b98b0f7e4e490a46f8d0ec9690a8bf361856e8a78427cbbae41fad5d79b1cde459e89ed878d22a5dbd8938d834798dd39472bb118e8db321422afcea087961e68907b5d8dc5cf00d0df91d8f17493b8e3e4e33e7e8b79d6d49507594027083601adfd7a0a13839d0e6073580837b34fd13e4ed9c506d7871acd520c427b6f80202f02156a1a3b6478b805370a4054e93fe320dd0b435d636376b2bb15e42c51452a08d9ce9bd562c41a92f7b856e238679f6b1358a8b237a54d804a2e6f96dbb57a9b6ed369e16506cd820da895f0b6cc729a6eb3382d4aeb9d48e6aba817edc3ad91f2cb57f10d85d233018ff39fe4fb58a2579a070598537a1c96dee91be0fa6f3c570a7af6d3235f7ef153123ba179621cb1f10fefe0f4123e12593f430e7f2b270da1a454707430b4390ba41fcca9aaf8119f87f5f0c17d3e669ab3c83806b673191490406cb95d2d727840eeaaf84d05a2833184ac6e81cb167feee1cdf8a48bf07de5656c8f7fd89246a4dd1271dd1923ccaaf39ba592f7ca06e3d64f09c6e2fefa8e51090c64f4093f8bdd6388d6749ab8c8ec000fff4fbbe8d96bd430b69033e9f8380f8ddfb85c5ca19dd38d6c897fd2b3f92e10bed8f41cddd2de4623be4751fd2ae81ed7549f7aabcc145af95d649ffe011d91bdf3e1ed5d9641955ba9c317a4a894de6667f749460d5148303497b632097307096e0eeb654c78d9e8935aea538df7c6a8c64de8d3e438c783a98e3875973958b275429a352c87276b1c7b8d9a0ee033c21caefe59bc8e520507b1af949a04615058313f6a83f329e61bb8ea4db50144846127161e67284db2c424367d74ffd70c2cd81835b61943a844e98714d5f33a7c4b34200be24353672e0433f9a013ae8a54af2d628322b0fbcaa1b1ef4fcf7438207a119fc110963478fbe7d5c0662bbb329491d6aa45f30434025f88c9bce0a1d840307b914eb814f50fbf62ce0da59439f88465d89f808be793935651088e8416e12bcf2ca31d94fd844d298545b671e4971ae92bec435c0ec77edb637ad697f5fe214246d524b638b50775080b0a91227ddb7598527b510903328b94ce8d99002765ce9db41844fbeb029c8b324546f3f5bd7eaf99b363f27cf71ada9d07dac01ed78becf9fac1d9cfb4bbe4fa7d7ba9c8561547803ce3f8d208a1a120d79452e724de4f7e4ccc3db6c0efe5087b611a401131ff6298890acf9f2d51975f55fd80eb53d62f7b5f5a35f977f4ca06788fa474631a616f7a74d0a9876a144463c35f544d2e2dcda90c6928a7df114cb29fba2ed9d7c7c6094e8c8b27417ac3592eabd57f81a293f8a7b733e334373eabb7582f11498af3440573f424cf5e8c7e277f9d61774a7c9aaeb33d86f1f69b864e1dc5021f366aff93f8129f3291a9aa7a2422f74cb4c3b8f6c78f6bdb72792552ded78d16768cb5ea21ad408595ebc3ee7f1e794925bf05d1dcb62cbaa58c668e1c0437ade3d8d78c4de92d85a90a99e56da089930a9310c8917bf9376c5bfabcad7b6ecc8254a485f0745d4fc361e572f20f646690b0717baf051215a82a45a33e4c71572867df2728094de7abb142af0314f56ac7e5411743443666a94ad49898b618dbfd9b98dbe7d00857278d22268dfe31f26d67762c2464448ccc659c9403cad7415813e861f7b6dea82495aedab5d99602247a8b2e850900271886f03247e08b98c44bd7e22ecb09d76eb489e0d76311559cf12149386c95387ee8e02d55e120842745473c5fa28d56662ebb015fbd8612b56be2fa7acdd2065e4ddb3e0cfacd3d40b9f7ba564f5928bb135265825a69dccf8b81c4a9847b4d2a2924bb73e4f618c9b0a698643208344929a347b9ec31dbca78d65bd9766e723b1aee30ff57cc76d666a2d7476cde740d0351f9def0c144f1388d598d657c69595584624e68a7b7e2e1ba74ae3b99e1a2422a6c080cea266f6d63cb29c495802cf1a4376c81c48f1d2ad8bd0f5d1fd46d840bf27024a211d6bf756890a3b503d4a336eb7da245b12f51604934c605646361b884b9e119568d25519f21e69be72385b0efece6d9f89aae845bcdb25b98876e84701d9ab7bb1424a60ddca5bfd3dde7432e543b7e73c41766f1f2bfd7aa7ce1ab4082a2104e51d052b06506829ea318ce763039944dd9bfba6e86a20f4cc9b77b87148b7b6fd03960afee3984906667cbaa9494a4f3cf1490f4b9ce54dadaa851a358d55b4095645f5ad6eb24fecfd077c10cbb0b6845ca0cce6d79a8ff1be5951253f7a381398f5d6967b24851ee325630d16c0638d0a622af06ceeb12541c430381c7b1cd76e8b2962bdbf53e6d08d0477140bacdfe46f9b0b4564a3e8ac5d712d8f614ce232df26a3909958b2f6841b96edef024667a4566dcedf27864ba1629fae109d561a0cd104e47dbae8fa804f6d12b3842bd6d4c79a96fcd47986534b303e250a0dedcc5c8a0041804e25b071c263676b457adff8edde5fce760000ed02c852eebdb3a438b56364ca3101976af0b59e369623a32496743afa63452f38350c63bb9c764ed3f7886ca28d3b9eac268a02340bba81b8f7bf710f344ef47a30ea6ea41e5f15dc8614f06d2c2bad6a68579598386dca0bffd64418a2d8bd2d77e92cec0d427c4869c407f074cf724a10d2034e43a3149b3b9c0da04654098d98a3a48d6c4526bcc33821c153b79d8b7e878e07b7d1c8117c933103f6811508a33a31c8446d4a1d32722c9855879f6d669a46ceb35c50539d7177da38e81621fa93023e15cf3d3d2cc59574ccee81d6492a198ecb71c147b4be8287ef1b9150d03bb51a8af2139763e3eeff9383d9da135c7726ecbb69ad525bfd88689ee4e7741c8474c74cc15903192e8d18a97eb8b7272375d3c3b8478515b9baf04c89d309024b0718fb3da5430032ad22be441e06929bfd6674cc0bbf1d31e5197572a075d1f5b386461b5f8353acbeeda881d9cde8c19ae584be34f8838f983b46efb584895c8aa53d88d06c67f02e4a3fb02021013e0a7808e964b29ab8d49bec77e382c8990051d9be037ed3d51406b30ea2d6d2e2e18eb5446259a885cf6be8d1c318c43b875e0dd765702ee31e00fdfd25c453f0b614e52a20f4cd022e46bed8c49ce0d25a67a922f6dec1f686bd5e4b1338bb068f3887fa2daa1b76bac6912ec9e2c436e0ed46ab23f5741279687c101864dbd884feea9d1eecd887c7abf0f4f75974a96959cbe21d3debb4a08eecaa7bc5631edaec7b932f27e230b4d8ca0c1e56d7c4899fd094bd2bf2d0a2a5809be6e5bc9666edfdb2c83c3fe4ac338609845c2bac99db22d1460bf0ad801ad9e74503ed4d4b3e664ef92de31222cefe8584a220d77f4e99cd63986d5dc099c2b1d06b22cff2ae58622f44975263736977f52c94ccca80c6ecd0fd1f4d46002a88ae6d950c94cad392a5b2ffe309630b3d3f8d358701409481ca874a15b1eb19533a2abe5c63f52819d73bb43795f6be1b751ef14ffdf8913d93f50ccd76edc908e996a02f160d7c446e82ec624cdac6ebd3c6ed4872c45f34bd65cbdcca72542c9d4160cbfec2b55817c7367808fa7d74b352a6941cf24907cf910960ed5f4b5e6b81a0336cb5ba2f8f8ea5b5ed98a50ea51ec79134aa29b8cfe4cd570d935a90553870668ffb5128597bae8abfbe46e16c129ac71168f18526bc2b3f78200d501cd0d352995544c023a20989062effc16b5198521487ffbf42025c603acc3da74cbbc596ab3306d1528952185e1d1395bae2b639e8eddbfda52f77448511b7877e97b882234f4cc29bfe3f0456bb82db0e80634892ead62315f96faed0b1e4d4fb285ed06c85fec98a5e06d24108caded7b3873901a17df8763f3be281c5b6ee4c764cfbb806e205e02ebde1596365ac9bb23fb070efbb8fc33267f078ffe979b2b6b9ced72818c18e65fb9b48b3442735518cf82a0caa2ac836aa447906f7a34917436cb8f21c7a0c9c9327b79c280ffb4c63faab15e8b0fe41853c734be3b837601556d9bc945752db5b781d9eb21483297f5143c696751dcd8e17e32bde5f4637eb2fc60c061061ff33e2eb7924f4b9918a3cac553751fe0f56aa17e2c97b96ce70634e801b2ee72443013904d84c0e14704f267bd7c3fd4559f4bddea90a7b77792d17e6a0a429d50413780b2b4bd3aa34526d461092de9c9bcf2f30a2d7deebcdae86f929df50f91b826dcf4769772bffce2ef6536251e7abd77c13baab3a0a8379e76a039d3d0d819f55eb3dac0ad143177c8ee3b2f30f6bf3e183fc141a20bed47b54726132c3257153743d2906f84dbb0f6ba9d348c87bad7652067e41e3bdf0ed521671568c7e304b37126cb23a6741554a3fa06f196a0a15709511a6ab7b7a08175a4743daa3c2173a27c77f24a8982b38e151cd2eb825ea71bb5f65f3f57e24091eae3c44459712609091b1fcdc08121f13d5a17b60114226d7908659c4e6f26674b6e0a3c54442bcf17e8a6e6fa50d6838db13a47b40a493953d848e7b004a7794213fabd009b304b0051d163e9a96097bc76055148c43756b481ca6fcdda7a2163444d82591ee2ef20e29674dd22676b86be1ad69565eab7684254cb2ab0125c7a5fbb40ff9e49fb9758df0347c57b357b8ccb44206b11d72bc33c3636656c9418fa13213c2bf745f0a948d7951bf4177986aa261f6234849385155d8aa410e3534315faacca64120ee31c92ccf926b4a8ca0927ef005f2155ee30f361f4847501fcf1cfab37d8b2d30d3d65bfc69c3a72d89abdb2cc1f0a3ea8e38f37fb0340a7fb7b8b9f0e93e98f0a0e2fc1f7ace23e6e4e698ce9e0a03e9b8f559950a2e89107234a317bd7a26c2dcea546ffcdb1772f865d03880267538deafb54961a1cf9bb67f2c98ef66b81856f3dfcec6d0fcb1febdc3b3359154064d083604969c29edc69437fff5687a14d996d3a922ef0404439b823d84b7aa98dca9da9c5241a59f8024be925b36f784a8a58be916d8e9c4fb45a8bdd88d9a34ecf71d5c530867818dc0c7ca11dc5946567825c0bc675c202c4cf132f3624c3de6522bf04ad910c8917634dfb57ab1c0544113f7a09470971bed2726e060fc6ae8c5330429a608879a3221c4eb439e20302616b29e3bfa531f3b10ec47699f475192aac740dc24d9e0bf2d3e90ff19aad2cbe402eb6a17434833663052efacead45ed3d971813f8a735316d405b076c6241036bedf39cef829dc4ec888529bcd6e48645c8757225b4dac37e772a7fdf45d8737e07242f38cba6e95070aaab61e1c4c6203d7e58f39064454d623d633060329005823aa61cb5926b58a16ccf8f06eae8dc60fa795e4b818dfd4fa762634f74c5ee8049b2cb9440b755335f0647c0323a5c650bb0a2970cb5f6bc29892b74b2b91a365cedfc7d6a24d0b3f7d2475ed5345dd72c2ab910841dedf51f56075a534245276f334f275fadc938b3bfed71d06ec152d784a6c4b1bd71bb699d67a6b2d319ac7815ec53bec38d2e25dffc1f3939c6d7befcbab8532fdd050a66423c4cae46a18b8748f8c52a55076ea376af0ab662501109e58a2e2f00c7183cdeea4012e7644bc1dd01ce2432cc62b0f59c55a3f8ef63f499e15149fcc43b5836fa3ca44c", &(0x7f00000025c0)=""/231, 0x6, 0x10028, 0xffffffffffffffff, &(0x7f00000026c0)}) tkill(r0, 0x11) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) (async, rerun: 32) r7 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb40000000000004, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x7, 0x5}, 0x0, 0x0, r7, 0x0) close(r7) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4020000000000006111480000000000850000008c0000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) (async, rerun: 64) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYBLOB="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", @ANYRES8, @ANYRESDEC, @ANYRESOCT, @ANYRES16, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x1, 0x0, &(0x7f0000000480)) (async, rerun: 64) r8 = open(&(0x7f0000000180)='./bus\x00', 0xa37e, 0x100) (async) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000002780)=""/173) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400001}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r9, 0x300, 0x70bd28, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x4000081) 2.224058349s ago: executing program 40 (id=7249): r0 = gettid() (async) r1 = syz_open_dev$sg(&(0x7f0000000200), 0x7fffffffffffffff, 0x8100) (async) unshare(0x20040600) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, &(0x7f0000000780)}, 0x20) (async) ioctl$SG_IO(r1, 0x2285, &(0x7f0000002700)={0x53, 0xfffffffffffffffb, 0x1000, 0x81, @scatter={0x4, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/80, 0x50}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/240, 0xf0}, {&(0x7f0000001500)=""/148, 0x94}]}, &(0x7f00000015c0)="629b64395b6c8706c367b281fa839cdbead559d9f4ec3ab792b885f12d554c3151f5fa1de7883952e16a1c42848f15c4a9e11a4c85f2ba5fdba9fff053cd096feb007c4b4386db89a2f2f5b0f1dc287c055eded45d3c71bfd8ad2e0b54c3e4e9af84b36015ac0eb11c69e4bf6b52cfaba5bc762b98b0f7e4e490a46f8d0ec9690a8bf361856e8a78427cbbae41fad5d79b1cde459e89ed878d22a5dbd8938d834798dd39472bb118e8db321422afcea087961e68907b5d8dc5cf00d0df91d8f17493b8e3e4e33e7e8b79d6d49507594027083601adfd7a0a13839d0e6073580837b34fd13e4ed9c506d7871acd520c427b6f80202f02156a1a3b6478b805370a4054e93fe320dd0b435d636376b2bb15e42c51452a08d9ce9bd562c41a92f7b856e238679f6b1358a8b237a54d804a2e6f96dbb57a9b6ed369e16506cd820da895f0b6cc729a6eb3382d4aeb9d48e6aba817edc3ad91f2cb57f10d85d233018ff39fe4fb58a2579a070598537a1c96dee91be0fa6f3c570a7af6d3235f7ef153123ba179621cb1f10fefe0f4123e12593f430e7f2b270da1a454707430b4390ba41fcca9aaf8119f87f5f0c17d3e669ab3c83806b673191490406cb95d2d727840eeaaf84d05a2833184ac6e81cb167feee1cdf8a48bf07de5656c8f7fd89246a4dd1271dd1923ccaaf39ba592f7ca06e3d64f09c6e2fefa8e51090c64f4093f8bdd6388d6749ab8c8ec000fff4fbbe8d96bd430b69033e9f8380f8ddfb85c5ca19dd38d6c897fd2b3f92e10bed8f41cddd2de4623be4751fd2ae81ed7549f7aabcc145af95d649ffe011d91bdf3e1ed5d9641955ba9c317a4a894de6667f749460d5148303497b632097307096e0eeb654c78d9e8935aea538df7c6a8c64de8d3e438c783a98e3875973958b275429a352c87276b1c7b8d9a0ee033c21caefe59bc8e520507b1af949a04615058313f6a83f329e61bb8ea4db50144846127161e67284db2c424367d74ffd70c2cd81835b61943a844e98714d5f33a7c4b34200be24353672e0433f9a013ae8a54af2d628322b0fbcaa1b1ef4fcf7438207a119fc110963478fbe7d5c0662bbb329491d6aa45f30434025f88c9bce0a1d840307b914eb814f50fbf62ce0da59439f88465d89f808be793935651088e8416e12bcf2ca31d94fd844d298545b671e4971ae92bec435c0ec77edb637ad697f5fe214246d524b638b50775080b0a91227ddb7598527b510903328b94ce8d99002765ce9db41844fbeb029c8b324546f3f5bd7eaf99b363f27cf71ada9d07dac01ed78becf9fac1d9cfb4bbe4fa7d7ba9c8561547803ce3f8d208a1a120d79452e724de4f7e4ccc3db6c0efe5087b611a401131ff6298890acf9f2d51975f55fd80eb53d62f7b5f5a35f977f4ca06788fa474631a616f7a74d0a9876a144463c35f544d2e2dcda90c6928a7df114cb29fba2ed9d7c7c6094e8c8b27417ac3592eabd57f81a293f8a7b733e334373eabb7582f11498af3440573f424cf5e8c7e277f9d61774a7c9aaeb33d86f1f69b864e1dc5021f366aff93f8129f3291a9aa7a2422f74cb4c3b8f6c78f6bdb72792552ded78d16768cb5ea21ad408595ebc3ee7f1e794925bf05d1dcb62cbaa58c668e1c0437ade3d8d78c4de92d85a90a99e56da089930a9310c8917bf9376c5bfabcad7b6ecc8254a485f0745d4fc361e572f20f646690b0717baf051215a82a45a33e4c71572867df2728094de7abb142af0314f56ac7e5411743443666a94ad49898b618dbfd9b98dbe7d00857278d22268dfe31f26d67762c2464448ccc659c9403cad7415813e861f7b6dea82495aedab5d99602247a8b2e850900271886f03247e08b98c44bd7e22ecb09d76eb489e0d76311559cf12149386c95387ee8e02d55e120842745473c5fa28d56662ebb015fbd8612b56be2fa7acdd2065e4ddb3e0cfacd3d40b9f7ba564f5928bb135265825a69dccf8b81c4a9847b4d2a2924bb73e4f618c9b0a698643208344929a347b9ec31dbca78d65bd9766e723b1aee30ff57cc76d666a2d7476cde740d0351f9def0c144f1388d598d657c69595584624e68a7b7e2e1ba74ae3b99e1a2422a6c080cea266f6d63cb29c495802cf1a4376c81c48f1d2ad8bd0f5d1fd46d840bf27024a211d6bf756890a3b503d4a336eb7da245b12f51604934c605646361b884b9e119568d25519f21e69be72385b0efece6d9f89aae845bcdb25b98876e84701d9ab7bb1424a60ddca5bfd3dde7432e543b7e73c41766f1f2bfd7aa7ce1ab4082a2104e51d052b06506829ea318ce763039944dd9bfba6e86a20f4cc9b77b87148b7b6fd03960afee3984906667cbaa9494a4f3cf1490f4b9ce54dadaa851a358d55b4095645f5ad6eb24fecfd077c10cbb0b6845ca0cce6d79a8ff1be5951253f7a381398f5d6967b24851ee325630d16c0638d0a622af06ceeb12541c430381c7b1cd76e8b2962bdbf53e6d08d0477140bacdfe46f9b0b4564a3e8ac5d712d8f614ce232df26a3909958b2f6841b96edef024667a4566dcedf27864ba1629fae109d561a0cd104e47dbae8fa804f6d12b3842bd6d4c79a96fcd47986534b303e250a0dedcc5c8a0041804e25b071c263676b457adff8edde5fce760000ed02c852eebdb3a438b56364ca3101976af0b59e369623a32496743afa63452f38350c63bb9c764ed3f7886ca28d3b9eac268a02340bba81b8f7bf710f344ef47a30ea6ea41e5f15dc8614f06d2c2bad6a68579598386dca0bffd64418a2d8bd2d77e92cec0d427c4869c407f074cf724a10d2034e43a3149b3b9c0da04654098d98a3a48d6c4526bcc33821c153b79d8b7e878e07b7d1c8117c933103f6811508a33a31c8446d4a1d32722c9855879f6d669a46ceb35c50539d7177da38e81621fa93023e15cf3d3d2cc59574ccee81d6492a198ecb71c147b4be8287ef1b9150d03bb51a8af2139763e3eeff9383d9da135c7726ecbb69ad525bfd88689ee4e7741c8474c74cc15903192e8d18a97eb8b7272375d3c3b8478515b9baf04c89d309024b0718fb3da5430032ad22be441e06929bfd6674cc0bbf1d31e5197572a075d1f5b386461b5f8353acbeeda881d9cde8c19ae584be34f8838f983b46efb584895c8aa53d88d06c67f02e4a3fb02021013e0a7808e964b29ab8d49bec77e382c8990051d9be037ed3d51406b30ea2d6d2e2e18eb5446259a885cf6be8d1c318c43b875e0dd765702ee31e00fdfd25c453f0b614e52a20f4cd022e46bed8c49ce0d25a67a922f6dec1f686bd5e4b1338bb068f3887fa2daa1b76bac6912ec9e2c436e0ed46ab23f5741279687c101864dbd884feea9d1eecd887c7abf0f4f75974a96959cbe21d3debb4a08eecaa7bc5631edaec7b932f27e230b4d8ca0c1e56d7c4899fd094bd2bf2d0a2a5809be6e5bc9666edfdb2c83c3fe4ac338609845c2bac99db22d1460bf0ad801ad9e74503ed4d4b3e664ef92de31222cefe8584a220d77f4e99cd63986d5dc099c2b1d06b22cff2ae58622f44975263736977f52c94ccca80c6ecd0fd1f4d46002a88ae6d950c94cad392a5b2ffe309630b3d3f8d358701409481ca874a15b1eb19533a2abe5c63f52819d73bb43795f6be1b751ef14ffdf8913d93f50ccd76edc908e996a02f160d7c446e82ec624cdac6ebd3c6ed4872c45f34bd65cbdcca72542c9d4160cbfec2b55817c7367808fa7d74b352a6941cf24907cf910960ed5f4b5e6b81a0336cb5ba2f8f8ea5b5ed98a50ea51ec79134aa29b8cfe4cd570d935a90553870668ffb5128597bae8abfbe46e16c129ac71168f18526bc2b3f78200d501cd0d352995544c023a20989062effc16b5198521487ffbf42025c603acc3da74cbbc596ab3306d1528952185e1d1395bae2b639e8eddbfda52f77448511b7877e97b882234f4cc29bfe3f0456bb82db0e80634892ead62315f96faed0b1e4d4fb285ed06c85fec98a5e06d24108caded7b3873901a17df8763f3be281c5b6ee4c764cfbb806e205e02ebde1596365ac9bb23fb070efbb8fc33267f078ffe979b2b6b9ced72818c18e65fb9b48b3442735518cf82a0caa2ac836aa447906f7a34917436cb8f21c7a0c9c9327b79c280ffb4c63faab15e8b0fe41853c734be3b837601556d9bc945752db5b781d9eb21483297f5143c696751dcd8e17e32bde5f4637eb2fc60c061061ff33e2eb7924f4b9918a3cac553751fe0f56aa17e2c97b96ce70634e801b2ee72443013904d84c0e14704f267bd7c3fd4559f4bddea90a7b77792d17e6a0a429d50413780b2b4bd3aa34526d461092de9c9bcf2f30a2d7deebcdae86f929df50f91b826dcf4769772bffce2ef6536251e7abd77c13baab3a0a8379e76a039d3d0d819f55eb3dac0ad143177c8ee3b2f30f6bf3e183fc141a20bed47b54726132c3257153743d2906f84dbb0f6ba9d348c87bad7652067e41e3bdf0ed521671568c7e304b37126cb23a6741554a3fa06f196a0a15709511a6ab7b7a08175a4743daa3c2173a27c77f24a8982b38e151cd2eb825ea71bb5f65f3f57e24091eae3c44459712609091b1fcdc08121f13d5a17b60114226d7908659c4e6f26674b6e0a3c54442bcf17e8a6e6fa50d6838db13a47b40a493953d848e7b004a7794213fabd009b304b0051d163e9a96097bc76055148c43756b481ca6fcdda7a2163444d82591ee2ef20e29674dd22676b86be1ad69565eab7684254cb2ab0125c7a5fbb40ff9e49fb9758df0347c57b357b8ccb44206b11d72bc33c3636656c9418fa13213c2bf745f0a948d7951bf4177986aa261f6234849385155d8aa410e3534315faacca64120ee31c92ccf926b4a8ca0927ef005f2155ee30f361f4847501fcf1cfab37d8b2d30d3d65bfc69c3a72d89abdb2cc1f0a3ea8e38f37fb0340a7fb7b8b9f0e93e98f0a0e2fc1f7ace23e6e4e698ce9e0a03e9b8f559950a2e89107234a317bd7a26c2dcea546ffcdb1772f865d03880267538deafb54961a1cf9bb67f2c98ef66b81856f3dfcec6d0fcb1febdc3b3359154064d083604969c29edc69437fff5687a14d996d3a922ef0404439b823d84b7aa98dca9da9c5241a59f8024be925b36f784a8a58be916d8e9c4fb45a8bdd88d9a34ecf71d5c530867818dc0c7ca11dc5946567825c0bc675c202c4cf132f3624c3de6522bf04ad910c8917634dfb57ab1c0544113f7a09470971bed2726e060fc6ae8c5330429a608879a3221c4eb439e20302616b29e3bfa531f3b10ec47699f475192aac740dc24d9e0bf2d3e90ff19aad2cbe402eb6a17434833663052efacead45ed3d971813f8a735316d405b076c6241036bedf39cef829dc4ec888529bcd6e48645c8757225b4dac37e772a7fdf45d8737e07242f38cba6e95070aaab61e1c4c6203d7e58f39064454d623d633060329005823aa61cb5926b58a16ccf8f06eae8dc60fa795e4b818dfd4fa762634f74c5ee8049b2cb9440b755335f0647c0323a5c650bb0a2970cb5f6bc29892b74b2b91a365cedfc7d6a24d0b3f7d2475ed5345dd72c2ab910841dedf51f56075a534245276f334f275fadc938b3bfed71d06ec152d784a6c4b1bd71bb699d67a6b2d319ac7815ec53bec38d2e25dffc1f3939c6d7befcbab8532fdd050a66423c4cae46a18b8748f8c52a55076ea376af0ab662501109e58a2e2f00c7183cdeea4012e7644bc1dd01ce2432cc62b0f59c55a3f8ef63f499e15149fcc43b5836fa3ca44c", &(0x7f00000025c0)=""/231, 0x6, 0x10028, 0xffffffffffffffff, &(0x7f00000026c0)}) tkill(r0, 0x11) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) (async, rerun: 32) r7 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb40000000000004, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x7, 0x5}, 0x0, 0x0, r7, 0x0) close(r7) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4020000000000006111480000000000850000008c0000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) (async, rerun: 64) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYBLOB="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", @ANYRES8, @ANYRESDEC, @ANYRESOCT, @ANYRES16, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x1, 0x0, &(0x7f0000000480)) (async, rerun: 64) r8 = open(&(0x7f0000000180)='./bus\x00', 0xa37e, 0x100) (async) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000002780)=""/173) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400001}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r9, 0x300, 0x70bd28, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x4000081) 2.223604829s ago: executing program 1 (id=7251): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) ptrace$getregset(0x4204, r1, 0x3, &(0x7f00000000c0)={&(0x7f0000000080)}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e20, 0x2, @mcast2, 0x4}, 0x1c) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) recvmsg$can_j1939(r8, &(0x7f0000001a00)={&(0x7f0000000600)=@ax25={{0x3, @netrom}, [@rose, @netrom, @null, @rose, @null, @netrom, @bcast]}, 0x80, &(0x7f00000019c0)=[{&(0x7f00000007c0)=""/246, 0xf6}, {&(0x7f0000000580)}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/245, 0xf5}], 0x4}, 0x2040) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) r10 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r11 = fcntl$dupfd(r10, 0x0, r10) ioctl$SG_IO(r11, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x4e, &(0x7f0000000280)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x18, 0x11, 0x0, @dev={0xfe, 0x80, '\x00', 0x3c}, @dev={0xfe, 0x80, '\x00', 0x15}, {[], {0xffff, 0xe22, 0x18, 0x0, @wg=@data={0x4, 0xfffffffe, 0x2}}}}}}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010329bd7000fcdbdf25240000001800018014"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.138237805s ago: executing program 1 (id=7252): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x4) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ///+864GIw8IlpAdcIJ0Yrq6u+//pzLASAS5d6/5/vwN5nCzASCn2NQIQGGX/9/3/c6XpQyUEAAAM3HRrSgql7Ou96SgUSqWIm62fBSgmaxvVynxEPBERv50pXmvWF1pbJn2MEQAAAAAAAAAAAAAAAAAAAAAAAAAAovVU7iRSAAAAYKRFFP6U/LL9LP+5meenu78fmEj+1fpJ4ImIeOuHb3z/7nKjsbvQXP63o+WNH2TLXxzGNxgAAABAt851emv+z2FnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCoee/B2yudqY+XTw0q7l++EBGzefHHY7I1n4xiRFz/exLjJ7ZLImJsAPEP70XER/PiJ820jkLmxR/Em3BO/JjN3oW8+DcGEB+usvvN489ref2vEM+25vn9bzzif+ofVO/jXxwd/8Z69P+bfcZ46p2flXvGvxfx1Hj+8acTP+kR/7k+43/9awcHvdalP4qY63z+tI54JyMcl8qNrZ1yff/g9sbW8nplvbK9uLjw8tIrSy8tzZfXNqqV7N/cGN95+ufvn9X+67mff0mWTe/2P5+zv7zPpP+8c/fBhzuVw9Pxbz2XE/9XP85ecTp+IYvzqazcXD/XKR+2yyc989PfPHNW+1eP2198mP//W7122u1UR3m63z8dAOAC1PcPNper1cruyBaaV+mPQBoKj2DhWwPdYZqmabNP5ay6HxH97CeJAbe0kJ/PcaHnEWDYRyYAAGDQjk/6h50JAAAAAAAAAAAAAAAAAAAAXF2X8ZS17pjHj0BOBvEIbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAgfhvAAAA//89e9P5") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000005c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) write$binfmt_script(r2, &(0x7f0000000380)={'#! ', './file1', [{0x20, '\x00'}, {0x20, '\x00'}, {0x20, 'kfree\x00'}]}, 0x16) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}, {@access_uid={'access', 0x3d, 0xee01}}, {@debug={'debug', 0x3d, 0x2}}, {@nodevmap}, {@directio}, {@privport}, {@noxattr}, {@version_u}, {@version_u}, {@nodevmap}], [{@uid_lt={'uid<', r5}}, {@appraise}, {@smackfsroot={'smackfsroot', 0x3d, 'ext4\x00'}}, {@smackfshat={'smackfshat', 0x3d, 'ext4\x00'}}, {@appraise}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}}) 1.404990542s ago: executing program 2 (id=7261): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000700)="0900000000ffaabe0008000086dd", 0xe, 0x0, &(0x7f0000000000)={0x11, 0x1b, r2, 0x1, 0x6, 0x6, @local}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000d1a27d0009e611a4023e6dc2270dbf0900000000000055090100000000009500000000000000bf91e73f71220000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x1, 0x11f4, &(0x7f0000001280)="$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") r7 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r7, 0x0, 0x0, 0x1000f4) r8 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0xffffffffffffffff, 0x9, 0xd9857660a9d0b478}, 0xc) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r10, 0x0, 0x4008800) sendmsg$IPVS_CMD_SET_DEST(r8, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="080729bdf000fcdbdf250600000008000600ffff00000800050001feffff080005000000000008000500ff7f00001c000180060a00000008000b0073697000080009005d0000000800040000040000000000"], 0x58}, 0x1, 0x0, 0x0, 0xc041}, 0x4000) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r11, 0x112, 0x7, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x1, &(0x7f00000001c0)=@raw=[@ldst={0x0, 0x2, 0x6, 0x2, 0x8, 0xc}], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x2, 0x2, 0x10001, 0x2}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000440)=[r7, 0x1, r7, r8, r4, r6, r4], &(0x7f0000000480)=[{0x3, 0x5, 0xf, 0x9}, {0x2, 0x4, 0x4, 0x3}, {0x3, 0x4, 0x3, 0x6}, {0x2, 0x2, 0xb, 0xb}], 0x10, 0xc}, 0x94) pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) 1.187776775s ago: executing program 1 (id=7265): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x10201, 0x0) 1.115923999s ago: executing program 2 (id=7267): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 1.071837872s ago: executing program 5 (id=7268): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) 954.44798ms ago: executing program 5 (id=7270): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x8c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000000080)={[{@dioread_lock}, {@noblock_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@usrquota}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@journal_checksum}, {@barrier_val={'barrier', 0x3d, 0xb}}, {@nobh}, {@grpid}], [], 0x2c}, 0x84, 0x4d8, &(0x7f0000000900)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0xe340, 0x103) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) sendmsg$inet6(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000680)="b32f7260bd6b302e3a85f2f6f842e6ed34427bcf8b75f8d6a9e9d658cbf48833a277bc331969558e63f5fa68e9093b2e949aa93d999346e771421cd7aa38583dedb3405e3720a755713625e91ec4bee72cfd225ea3910de56de35c5ab60382b6988175f873f52f4b841e37063670b189af835dea8b50236e883b91999febbab9196cc1e93dfaf2fa7386126d6b0decc438e66e8813797053ca252424af7b2a29608be1bc03d3bee48528e5427542e3b396b9d69b9796276914b7bd70", 0xbc}, {&(0x7f0000000740)="0ca20e30298a08ccd1a0462d1afb2dd517183df3a62c10bb923423c99e7d43f1163b52db1d667c22972c3b12ac805b0dd744a6c90332a45ee0bd22a0f01ce63dee7cc24383fdb92f81d70b8f9e061e11355e168d51b1", 0x56}, {&(0x7f0000001200)="572105e0cc7fe49adfaf7d4f796de1b6026a8424d5863542b3b42368a90d66fc692fd0aeea7def1d6c41f7bac6bcad984c38b887e18bbf037580a4ac4777bec2e4dcfa421410ebff70e97af2e1bc50d07e055923d49ab49f6bc5bfa8eaea8756731265689ed0be8fdf04ded536c8a8b5a463035502db6b5f4d8687208dcb44d4d273e4108ab066b95525721b27bb421e5cf69fc0e931292a1747db96680c1b229fbf12065a9660253ddf07174f25f60048d53d156b2a1c35749941a6ca46710d19d8f034c1338f7133c836da33d388228469917ab1", 0xd5}, {&(0x7f0000000040)="d0e943411ab9be5d59c804577087244c85e9dd03ecc74ea85735c12b0080731f84256ddcde3e08bcbe4ad04f738f912e18fa4dfd1314", 0x36}, {&(0x7f00000007c0)="68a90a1138bc1b741d390f18f7041fcddf6b7eb4e0703d15f75e0a34e331949644c0c3021ccb0327506d72f055fd94610358f2e052477233e7e0611777a6f847d6d3f385fafd1f42ebb80668da92f9ba555d24185dce571628f9d9123f79ea4b6e7a4e71d9ff532a884177697daf1af8c03bae8d5a1958128de5be413421b60af85d03d4489893b77783", 0x8a}, {&(0x7f00000001c0)="a0af01b85156c46be8c2ac8d3f4f8b9857a041d6c648760b1f0fa99ac9936772947f3cd96fdd0026e335a136837fa0bc41e4942c", 0x34}, {&(0x7f0000001300)="adf7c758a2514a54a3275247a88e40f6db71b4c2b2a54614d89d43853e0a7999543abb055b8575991330635f14a58414578d162db54ff7e5ab0fa803eb", 0x3d}], 0x7, &(0x7f0000000300)=[@dstopts_2292={{0x28, 0x29, 0x4, {0x87, 0x1, '\x00', [@ra={0x5, 0x2, 0xe}, @enc_lim, @jumbo={0xc2, 0x4, 0xdc09}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xfffffffe}}], 0x40}, 0x2881) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x69000}], 0x1, 0x7000, 0x0, 0x3) 916.435263ms ago: executing program 2 (id=7272): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sync() setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000280)={0x0, 0x4, 0x4, 0xfffffffc, @vifc_lcl_ifindex, @empty}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='mm_collapse_huge_page_swapin\x00', r5, 0x0, 0x7}, 0x18) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f00000006c0)={{0x0, 0x3ff, 0x8, 0x1000, 0x0, 0x4, 0x8, 0x200, 0x0, 0x3, 0x7, 0x400, 0x5, 0x56, 0x5}, 0x20, [0x0, 0x0, 0x0, 0x0]}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000014c0)=ANY=[@ANYRES32=r7, @ANYRES32=r9, @ANYBLOB="30000000eb4b1e9991d601000000", @ANYRES32=r5, @ANYBLOB, @ANYRES32=r5, @ANYBLOB, @ANYRES64], 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@fallback, 0xffffffffffffffff, 0x1c, 0x5}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@map, 0xffffffffffffffff, 0x26}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r10}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0x25, 0x9, @val=@tcx={@void, @value=r10}}, 0x1c) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000480)={@fallback=r3, r4, 0x38, 0x11, r2, @void, @value=r2}, 0x20) connect$bt_sco(r4, &(0x7f0000000340), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x9, &(0x7f00000004c0)=@framed={{}, [@alu={0x4, 0x1, 0xa, 0x0, 0xa, 0x1}, @btf_id={0x18, 0x3, 0x3, 0x0, 0xffffffff}, @generic={0xa, 0x0, 0x8, 0xe618, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000440)='syzkaller\x00', 0x2}, 0x94) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=@delsa={0x1a8, 0x11, 0x800, 0x70bd2c, 0x25dfdbfd, {@in6=@private2, 0x4d4, 0x0, 0xff}, [@migrate={0x180, 0x11, [{@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x44}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@private=0xa010100, 0xff, 0x2, 0x0, 0x3505, 0x8, 0x2}, {@in6=@local, @in6=@mcast1, @in6=@mcast2, @in=@remote, 0x32, 0x3, 0x0, 0x3501, 0x2, 0x2}, {@in=@rand_addr=0x64010102, @in=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast1, 0x2b, 0x2, 0x0, 0x3504, 0xa, 0xa}, {@in=@empty, @in=@private=0xa010100, @in=@multicast2, @in=@private=0xa010102, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, {@in=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@private=0xa010102, @in=@broadcast, 0x3c, 0x2, 0x0, 0x3503, 0x2, 0x2}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x5}, 0x20004090) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) 737.327344ms ago: executing program 5 (id=7274): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, 0x0, 0x52, 0x5412, 0x7, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@version_u}]}}) (fail_nth: 3) 597.438432ms ago: executing program 5 (id=7276): mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000570000/0x4000)=nil, 0x4000, 0x3) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x28020480) 448.177952ms ago: executing program 0 (id=7277): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000700)="0900000000ffaabe0008000086dd", 0xe, 0x0, &(0x7f0000000000)={0x11, 0x1b, r2, 0x1, 0x6, 0x6, @local}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000d1a27d0009e611a4023e6dc2270dbf0900000000000055090100000000009500000000000000bf91e73f71220000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x1, 0x11f4, &(0x7f0000001280)="$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") r7 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r7, 0x0, 0x0, 0x1000f4) r8 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0xffffffffffffffff, 0x9, 0xd9857660a9d0b478}, 0xc) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r10, 0x0, 0x4008800) sendmsg$IPVS_CMD_SET_DEST(r8, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="080729bdf000fcdbdf250600000008000600ffff00000800050001feffff080005000000000008000500ff7f00001c000180060a00000008000b0073697000080009005d0000000800040000040000000000"], 0x58}, 0x1, 0x0, 0x0, 0xc041}, 0x4000) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r11, 0x112, 0x7, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x1, &(0x7f00000001c0)=@raw=[@ldst={0x0, 0x2, 0x6, 0x2, 0x8, 0xc}], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x2, 0x2, 0x10001, 0x2}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000440)=[r7, 0x1, r7, r8, r4, r6, r4], &(0x7f0000000480)=[{0x3, 0x5, 0xf, 0x9}, {0x2, 0x4, 0x4, 0x3}, {0x3, 0x4, 0x3, 0x6}, {0x2, 0x2, 0xb, 0xb}], 0x10, 0xc}, 0x94) pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) 292.189662ms ago: executing program 0 (id=7278): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x98, 0x478, 0x138, 0x138, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x5c}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x9a1e2d28, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) 271.104393ms ago: executing program 0 (id=7279): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) mount$bind(0x0, &(0x7f0000000400)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0x181001c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1008}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000004000000000100000a70000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000d2c00128014000180090001006c6173740000000004000280140001800c000100636f756e746572000400028008000340000001"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}]}, 0x28}}, 0x0) 185.219418ms ago: executing program 2 (id=7280): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000072000000"], &(0x7f0000000500)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0, 0x0, 0x5}, 0x18) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x80) unshare(0x2a020400) r1 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xdcb8, 0x10, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000004040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x77, 0x29c780}) io_uring_enter(r1, 0x3518, 0xaddf, 0x2, 0x0, 0x0) 165.59666ms ago: executing program 5 (id=7281): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x9, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000046d8ab41c5b2652dd1b64cdd06ba577e103100000000000000000000000000850000007b00000018010100202064257b1af8ff00000000bfa14a556459c9a8c40da38b171ba5ded900000007010000f8ffffffb7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) truncate(&(0x7f00000000c0)='./file1\x00', 0x3) 127.876402ms ago: executing program 0 (id=7282): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00']) 109.847364ms ago: executing program 2 (id=7283): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 88.989385ms ago: executing program 5 (id=7284): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000680)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x1f5a685a}, 0x4dc8, 0x10000, 0xfffffffc, 0x1, 0x1008, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000240)={0x0, 0x6862, 0x8, 0x1, 0x1c0}, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd=r1, 0x0, 0x0}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) 88.544855ms ago: executing program 0 (id=7285): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000700)="0900000000ffaabe0008000086dd", 0xe, 0x0, &(0x7f0000000000)={0x11, 0x1b, r2, 0x1, 0x6, 0x6, @local}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000d1a27d0009e611a4023e6dc2270dbf0900000000000055090100000000009500000000000000bf91e73f71220000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x1, 0x11f4, &(0x7f0000001280)="$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") r7 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r7, 0x0, 0x0, 0x1000f4) r8 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0xffffffffffffffff, 0x9, 0xd9857660a9d0b478}, 0xc) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r10, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r12, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x4008800) sendmsg$IPVS_CMD_SET_DEST(r8, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="080729bdf000fcdbdf250600000008000600ffff00000800050001feffff080005000000000008000500ff7f00001c000180060a00000008000b0073697000080009005d0000000800040000040000000000"], 0x58}, 0x1, 0x0, 0x0, 0xc041}, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x1, &(0x7f00000001c0)=@raw=[@ldst={0x0, 0x2, 0x6, 0x2, 0x8, 0xc}], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x4, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x2, 0x2, 0x10001, 0x2}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000440)=[r7, 0x1, r7, r8, r4, r6, r4], &(0x7f0000000480)=[{0x3, 0x5, 0xf, 0x9}, {0x2, 0x4, 0x4, 0x3}, {0x3, 0x4, 0x3, 0x6}, {0x2, 0x2, 0xb, 0xb}], 0x10, 0xc}, 0x94) pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) 32.248328ms ago: executing program 2 (id=7286): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1ff, 0x1}, 0x4352, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f0000000080)=r0}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c0000001200010227bd7000fedbdf2507000000", @ANYRES32, @ANYBLOB="189c000001100400140014007665746830000000000000000000000008001f00f9ffffff0a0001"], 0x6c}, 0x1, 0x0, 0x0, 0x3000c054}, 0x20000000) read(r2, &(0x7f00000001c0)=""/253, 0xfd) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r3}, 0x10) fremovexattr(0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0xfffffffd}}, 0x10) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r7, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8800}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='xprtrdma_dma_maperr\x00', r8, 0x0, 0x7}, 0x18) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$kcm(0x10, 0x2, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r9}, 0x10) io_setup(0x3, &(0x7f0000000340)) 0s ago: executing program 0 (id=7287): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="18000008ff03000000000000ff0000009500000000000000185300000300000000000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0xb3, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x4, 0xb, 0x34, 0xe08c}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x18}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0xbe, &(0x7f0000000380), &(0x7f00000005c0)=""/190, 0x9, 0x0, 0xa5, 0x94, &(0x7f0000000680)="bccc32b02b9b8c5f40cb2f106e4a48f67d7e18bc40d06d50e26e3eb1b25cf8dfd63162026fbc4e8961b39a7c2ef4be264e8ae7d73d8f9a24bbbb1b3dbd41deaa305631b74dc8945fade94b805292d1d519e1b5fa33b2922c0a904224fafa030e1a33f8b85ca7d31731282fef1673933e973c17bc934c1da1842df3df39dce744077038c785565cde6345b8a490f4b0e501ee331c564c097dba91fdf495acf27e78d3aec44c", &(0x7f0000000780)="91146a9208b63416b8ffe76e2565bca1975ded6ffbaeb23a9d0d9eb54f63e2158131072d78629310fc3cd176c3c88166ff31ebe6c243616c1057e3c4a8e4e07ec7dbb755c5f17896a8e2ff8fc043ab7925b07322b54e14609717460a455a91f6a61b2670d13319b3ccd79df91550269d60f67e9dbc97c2ecd3b557cbc0854d00f4e431aa21629e90261995e0739b0aa3f036c22e", 0x2, 0x0, 0x3}, 0x50) unshare(0x66000080) epoll_create(0x6) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0xa04c, 0x35e8b531, 0x1, 0x8, 0x13, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000000), 0x560c89bb) r8 = creat(&(0x7f0000000200)='./file0\x00', 0x20) splice(r6, 0x0, r8, 0x0, 0x8000, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r10 = gettid() sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r9, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r10], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x38}], 0x3, 0x40000120, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe8e, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) kernel console output (not intermixed with test programs): batadv_slave_0 [ 649.392151][T25235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 649.418243][T25235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 649.429867][ T12] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.439308][T25235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.446398][T25235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 649.472399][T25235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.511618][ T12] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.533835][T25235] hsr_slave_0: entered promiscuous mode [ 649.536279][T25300] loop7: detected capacity change from 0 to 1024 [ 649.550439][T25300] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.6878: Failed to acquire dquot type 0 [ 649.550800][T25235] hsr_slave_1: entered promiscuous mode [ 649.568092][T25300] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 649.588565][T25235] debugfs: 'hsr0' already exists in 'hsr' [ 649.594390][T25235] Cannot create hsr debugfs directory [ 649.605874][T25300] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #13: comm syz.7.6878: corrupted inode contents [ 649.623190][T25300] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #13: comm syz.7.6878: mark_inode_dirty error [ 649.635027][T25300] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #13: comm syz.7.6878: corrupted inode contents [ 649.654152][T25300] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #13: comm syz.7.6878: mark_inode_dirty error [ 649.668114][T25307] SELinux: policydb string does not match my string SE Linux [ 649.676134][T25307] SELinux: failed to load policy [ 649.689774][T25307] loop6: detected capacity change from 0 to 164 [ 649.696672][T25300] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #13: comm syz.7.6878: corrupted inode contents [ 649.715115][T25307] syz.6.6882: attempt to access beyond end of device [ 649.715115][T25307] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 649.729841][T25307] syz.6.6882: attempt to access beyond end of device [ 649.729841][T25307] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 649.744850][T25300] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 649.764238][T25300] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #13: comm syz.7.6878: corrupted inode contents [ 649.774543][T25235] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 649.779742][T25300] EXT4-fs error (device loop7): ext4_truncate:4637: inode #13: comm syz.7.6878: mark_inode_dirty error [ 649.796773][T25300] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 649.806134][T25300] EXT4-fs (loop7): 1 truncate cleaned up [ 649.812276][T25300] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 649.814404][T25235] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 649.838402][T25235] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 649.866845][T25235] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 649.899736][T17940] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.924518][T25326] netlink: 'syz.7.6886': attribute type 10 has an invalid length. [ 649.936249][T25328] netlink: 'syz.1.6887': attribute type 10 has an invalid length. [ 649.936498][T25326] bond0: (slave dummy0): Releasing backup interface [ 649.953995][T25326] netlink: 'syz.7.6886': attribute type 10 has an invalid length. [ 649.962304][T25328] bond0: (slave dummy0): Releasing backup interface [ 649.971697][T25328] team0: Port device dummy0 added [ 649.983951][T25326] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 649.986416][T25328] netlink: 'syz.1.6887': attribute type 10 has an invalid length. [ 650.004312][T25235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 650.016697][T25235] 8021q: adding VLAN 0 to HW filter on device team0 [ 650.031275][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.038425][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.054192][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.061301][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.071717][T25331] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 650.088998][T25333] loop7: detected capacity change from 0 to 512 [ 650.096952][T25328] team0: Port device dummy0 removed [ 650.097262][T25333] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 650.105209][T25328] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 650.122729][T25334] __nla_validate_parse: 2 callbacks suppressed [ 650.122783][T25334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6887'. [ 650.139320][T25333] EXT4-fs (loop7): 1 truncate cleaned up [ 650.145991][T25333] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 650.160726][T25334] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6887'. [ 650.211676][T25328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6887'. [ 650.298405][T25349] loop6: detected capacity change from 0 to 1024 [ 650.315913][T25349] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.6892: Failed to acquire dquot type 0 [ 650.337551][T25349] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 650.352651][T25349] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #13: comm syz.6.6892: corrupted inode contents [ 650.361313][T25235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 650.372608][T25349] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #13: comm syz.6.6892: mark_inode_dirty error [ 650.390221][T25349] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #13: comm syz.6.6892: corrupted inode contents [ 650.403624][T25349] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #13: comm syz.6.6892: mark_inode_dirty error [ 650.416499][T25349] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #13: comm syz.6.6892: corrupted inode contents [ 650.418634][T17940] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.439476][T25349] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem [ 650.451827][T25360] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6895'. [ 650.460909][T25360] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6895'. [ 650.462566][T25349] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #13: comm syz.6.6892: corrupted inode contents [ 650.469987][T25360] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6895'. [ 650.487651][T25349] EXT4-fs error (device loop6): ext4_truncate:4637: inode #13: comm syz.6.6892: mark_inode_dirty error [ 650.506644][T25349] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem [ 650.522430][T25349] EXT4-fs (loop6): 1 truncate cleaned up [ 650.531697][T25349] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 650.547610][T25367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6895'. [ 650.556849][T25367] bridge_slave_1: left allmulticast mode [ 650.562586][T25367] bridge_slave_1: left promiscuous mode [ 650.566883][T25360] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6895'. [ 650.568336][T25367] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.578215][T25360] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6895'. [ 650.596471][T25360] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6895'. [ 650.606683][T25367] bridge_slave_0: left allmulticast mode [ 650.612412][T25367] bridge_slave_0: left promiscuous mode [ 650.618262][T25367] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.637441][T22108] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.659348][T25374] netlink: 'syz.6.6898': attribute type 10 has an invalid length. [ 650.709974][T25375] netlink: 'syz.6.6898': attribute type 10 has an invalid length. [ 650.807756][T25378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.816661][T25378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.876985][T25383] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 650.940555][T25235] veth0_vlan: entered promiscuous mode [ 650.951466][T25235] veth1_vlan: entered promiscuous mode [ 650.960200][T25397] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.985317][T25235] veth0_macvtap: entered promiscuous mode [ 650.994455][T25397] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.005880][T25235] veth1_macvtap: entered promiscuous mode [ 651.018900][T25235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 651.031713][T25235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 651.044995][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.055303][T25397] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.066879][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.075714][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.085302][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.104169][T25397] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.164902][ T175] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.176442][ T175] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.188856][ T31] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.206730][ T31] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.224528][T25406] loop8: detected capacity change from 0 to 8192 [ 651.309195][ T29] kauditd_printk_skb: 295 callbacks suppressed [ 651.309214][ T29] audit: type=1326 audit(651.271:29578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25414 comm="syz.7.6908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630d6eefc9 code=0x7ffc0000 [ 651.338872][ T29] audit: type=1326 audit(651.281:29579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25414 comm="syz.7.6908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f630d6eefc9 code=0x7ffc0000 [ 651.361977][ T29] audit: type=1326 audit(651.281:29580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25414 comm="syz.7.6908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630d6eefc9 code=0x7ffc0000 [ 651.386212][ T29] audit: type=1326 audit(651.281:29581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25414 comm="syz.7.6908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f630d6eefc9 code=0x7ffc0000 [ 651.409326][ T29] audit: type=1326 audit(651.291:29582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25414 comm="syz.7.6908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630d6eefc9 code=0x7ffc0000 [ 651.432878][ T29] audit: type=1326 audit(651.291:29583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25414 comm="syz.7.6908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630d6eefc9 code=0x7ffc0000 [ 651.456178][ T29] audit: type=1326 audit(651.291:29584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25414 comm="syz.7.6908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f630d6eefc9 code=0x7ffc0000 [ 651.479355][ T29] audit: type=1326 audit(651.291:29585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25414 comm="syz.7.6908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630d6eefc9 code=0x7ffc0000 [ 651.502437][ T29] audit: type=1326 audit(651.291:29586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25414 comm="syz.7.6908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630d6eefc9 code=0x7ffc0000 [ 651.525570][ T29] audit: type=1326 audit(651.291:29587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25414 comm="syz.7.6908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f630d6eefc9 code=0x7ffc0000 [ 651.614873][T25423] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 651.647841][T25427] loop7: detected capacity change from 0 to 1024 [ 651.654799][T25427] EXT4-fs: Ignoring removed bh option [ 651.660505][T25427] EXT4-fs: inline encryption not supported [ 651.667047][T25427] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 651.678653][T25427] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 651.688206][T25427] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm syz.7.6914: lblock 2 mapped to illegal pblock 2 (length 1) [ 651.702479][T25427] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.6914: lblock 0 mapped to illegal pblock 48 (length 1) [ 651.717160][T25427] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.6914: Failed to acquire dquot type 0 [ 651.728829][T25427] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 651.738462][T25427] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.6914: mark_inode_dirty error [ 651.750514][T25427] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 651.776320][T25427] EXT4-fs (loop7): 1 orphan inode deleted [ 651.782798][T25427] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 651.795605][ T2597] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 651.809983][ T2597] EXT4-fs error (device loop7): ext4_release_dquot:6981: comm kworker/u8:7: Failed to release dquot type 0 [ 651.873299][T25446] loop6: detected capacity change from 0 to 8192 [ 651.927056][T17940] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.945185][T17940] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 651.979802][T17940] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 652.002212][T17940] EXT4-fs error (device loop7): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 652.005046][T25459] SELinux: policydb string does not match my string SE Linux [ 652.021639][T25459] SELinux: failed to load policy [ 652.063196][T25471] netlink: 'syz.7.6924': attribute type 10 has an invalid length. [ 652.071336][T25459] loop8: detected capacity change from 0 to 164 [ 652.089554][T25471] bond0: (slave dummy0): Releasing backup interface [ 652.105051][T25471] netlink: 'syz.7.6924': attribute type 10 has an invalid length. [ 652.114799][T25459] syz.8.6927: attempt to access beyond end of device [ 652.114799][T25459] loop8: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 652.114986][T25471] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 652.149686][T25477] 9pnet_fd: Insufficient options for proto=fd [ 652.163273][T25459] syz.8.6927: attempt to access beyond end of device [ 652.163273][T25459] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 652.186029][T25479] 9pnet_fd: Insufficient options for proto=fd [ 652.201862][T25482] loop6: detected capacity change from 0 to 512 [ 652.208803][T25482] EXT4-fs: Ignoring removed nobh option [ 652.215675][T25482] EXT4-fs: old and new quota format mixing [ 652.235054][T25482] loop6: detected capacity change from 0 to 1024 [ 652.243283][T25482] EXT4-fs: Ignoring removed orlov option [ 652.283656][T25482] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 652.303295][T25482] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.439314][T25521] 9pnet_fd: Insufficient options for proto=fd [ 652.470472][T25522] loop8: detected capacity change from 0 to 512 [ 652.486407][T25522] EXT4-fs warning (device loop8): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 652.503814][T25522] EXT4-fs (loop8): mount failed [ 652.525996][T25522] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.529941][T25534] loop6: detected capacity change from 0 to 512 [ 652.543901][T25534] EXT4-fs: Ignoring removed nobh option [ 652.549929][T25534] EXT4-fs: old and new quota format mixing [ 652.566289][T25534] loop6: detected capacity change from 0 to 1024 [ 652.573023][T25534] EXT4-fs: Ignoring removed orlov option [ 652.582352][T25534] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 652.597962][T25534] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.715121][T25558] FAULT_INJECTION: forcing a failure. [ 652.715121][T25558] name failslab, interval 1, probability 0, space 0, times 0 [ 652.727942][T25558] CPU: 1 UID: 0 PID: 25558 Comm: syz.1.6956 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 652.727997][T25558] Tainted: [W]=WARN [ 652.728007][T25558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 652.728023][T25558] Call Trace: [ 652.728030][T25558] [ 652.728039][T25558] __dump_stack+0x1d/0x30 [ 652.728067][T25558] dump_stack_lvl+0xe8/0x140 [ 652.728151][T25558] dump_stack+0x15/0x1b [ 652.728173][T25558] should_fail_ex+0x265/0x280 [ 652.728205][T25558] should_failslab+0x8c/0xb0 [ 652.728240][T25558] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 652.728299][T25558] ? __alloc_skb+0x101/0x320 [ 652.728332][T25558] ? selinux_capable+0x31/0x40 [ 652.728358][T25558] __alloc_skb+0x101/0x320 [ 652.728387][T25558] netlink_alloc_large_skb+0xbf/0xf0 [ 652.728432][T25558] netlink_sendmsg+0x3cf/0x6b0 [ 652.728458][T25558] ? __pfx_netlink_sendmsg+0x10/0x10 [ 652.728482][T25558] __sock_sendmsg+0x145/0x180 [ 652.728544][T25558] ____sys_sendmsg+0x31e/0x4e0 [ 652.728581][T25558] ___sys_sendmsg+0x17b/0x1d0 [ 652.728660][T25558] __x64_sys_sendmsg+0xd4/0x160 [ 652.728700][T25558] x64_sys_call+0x191e/0x3000 [ 652.728729][T25558] do_syscall_64+0xd2/0x200 [ 652.728754][T25558] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 652.728789][T25558] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 652.728893][T25558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.728920][T25558] RIP: 0033:0x7fe60098efc9 [ 652.728937][T25558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 652.728957][T25558] RSP: 002b:00007fe5ff3f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 652.729010][T25558] RAX: ffffffffffffffda RBX: 00007fe600be5fa0 RCX: 00007fe60098efc9 [ 652.729026][T25558] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 652.729040][T25558] RBP: 00007fe5ff3f7090 R08: 0000000000000000 R09: 0000000000000000 [ 652.729053][T25558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 652.729069][T25558] R13: 00007fe600be6038 R14: 00007fe600be5fa0 R15: 00007ffe05171b48 [ 652.729105][T25558] [ 652.736432][T25560] 9pnet_fd: Insufficient options for proto=fd [ 652.849587][T25564] SELinux: policydb string does not match my string SE Linux [ 652.943866][T25567] 9pnet_fd: Insufficient options for proto=fd [ 652.949736][T25564] SELinux: failed to load policy [ 652.984341][T25570] loop7: detected capacity change from 0 to 128 [ 652.993185][T25570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.011761][T25570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.150572][T25592] loop6: detected capacity change from 0 to 512 [ 653.164251][T25592] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 653.179763][T25592] EXT4-fs (loop6): mount failed [ 653.240890][T25598] 9pnet_fd: Insufficient options for proto=fd [ 653.262044][T25600] netlink: 'syz.0.6971': attribute type 10 has an invalid length. [ 653.271889][T25600] bond0: (slave dummy0): Releasing backup interface [ 653.282194][T25600] team0: Port device dummy0 added [ 653.289003][T25600] netlink: 'syz.0.6971': attribute type 10 has an invalid length. [ 653.300857][T25600] team0: Port device dummy0 removed [ 653.308608][T25600] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 653.377026][T25522] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.399547][ T2597] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.464461][ T2597] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.527475][T25603] lo speed is unknown, defaulting to 1000 [ 653.542841][ T2597] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.599443][T25603] chnl_net:caif_netlink_parms(): no params data found [ 653.621375][ T2597] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.653137][T25603] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.660467][T25603] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.668662][T25603] bridge_slave_0: entered allmulticast mode [ 653.675535][T25603] bridge_slave_0: entered promiscuous mode [ 653.682621][T25603] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.689740][T25603] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.697572][T25603] bridge_slave_1: entered allmulticast mode [ 653.705033][T25603] bridge_slave_1: entered promiscuous mode [ 653.723756][T25603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 653.734571][T25603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 653.766854][T25603] team0: Port device team_slave_0 added [ 653.774741][T25603] team0: Port device team_slave_1 added [ 653.796510][T25522] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.808507][T25603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 653.815571][T25603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 653.841902][T25603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 653.853821][T25603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 653.861289][T25603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 653.887307][T25603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 653.900326][ T2597] bridge_slave_1: left allmulticast mode [ 653.906156][ T2597] bridge_slave_1: left promiscuous mode [ 653.911931][ T2597] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.923238][T25618] SELinux: policydb string does not match my string SE Linux [ 653.930950][T25618] SELinux: failed to load policy [ 653.937078][ T2597] bridge_slave_0: left allmulticast mode [ 653.942982][ T2597] bridge_slave_0: left promiscuous mode [ 653.948769][ T2597] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.959104][T25618] loop7: detected capacity change from 0 to 164 [ 653.967859][T25618] syz.7.6974: attempt to access beyond end of device [ 653.967859][T25618] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 653.982184][T25618] syz.7.6974: attempt to access beyond end of device [ 653.982184][T25618] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 654.002263][T25618] 9pnet_fd: Insufficient options for proto=fd [ 654.055730][ T2597] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 654.071400][ T2597] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 654.084915][ T2597] bond0 (unregistering): Released all slaves [ 654.096381][T25522] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.128087][T25631] netlink: 'syz.1.6979': attribute type 10 has an invalid length. [ 654.163845][T25603] hsr_slave_0: entered promiscuous mode [ 654.170304][T25603] hsr_slave_1: entered promiscuous mode [ 654.177433][T25603] debugfs: 'hsr0' already exists in 'hsr' [ 654.182011][T25635] 9pnet_fd: Insufficient options for proto=fd [ 654.183251][T25603] Cannot create hsr debugfs directory [ 654.190130][T25637] netlink: 'syz.1.6979': attribute type 10 has an invalid length. [ 654.203588][T25631] bond0: (slave dummy0): Releasing backup interface [ 654.213333][T25631] team0: Port device dummy0 added [ 654.222239][ T2597] hsr_slave_0: left promiscuous mode [ 654.229251][ T2597] hsr_slave_1: left promiscuous mode [ 654.233871][T25640] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 654.236048][ T2597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 654.251668][ T2597] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 654.266092][ T2597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 654.273585][ T2597] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 654.283512][ T2597] veth1_macvtap: left promiscuous mode [ 654.289078][ T2597] veth0_macvtap: left promiscuous mode [ 654.294739][ T2597] veth1_vlan: left promiscuous mode [ 654.300035][ T2597] veth0_vlan: left promiscuous mode [ 654.371829][ T2597] team0 (unregistering): Port device team_slave_1 removed [ 654.381992][ T2597] team0 (unregistering): Port device team_slave_0 removed [ 654.416691][T25637] team0: Port device dummy0 removed [ 654.424664][T25637] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 654.459929][ T12] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.480204][ T12] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.495977][ T12] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.513007][ T12] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.569503][T25603] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 654.579126][T25603] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 654.588117][T25603] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 654.596990][T25603] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 654.642247][ T2597] IPVS: stop unused estimator thread 0... [ 654.645276][T25603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.664183][T25603] 8021q: adding VLAN 0 to HW filter on device team0 [ 654.674825][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.681930][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.694025][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.701228][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.775882][T25603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 654.889308][T25603] veth0_vlan: entered promiscuous mode [ 654.898342][T25603] veth1_vlan: entered promiscuous mode [ 654.917294][T25603] veth0_macvtap: entered promiscuous mode [ 654.925390][T25603] veth1_macvtap: entered promiscuous mode [ 654.939020][T25603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 654.951832][T25603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 654.965340][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.974321][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.993387][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.012078][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.055003][T25673] loop9: detected capacity change from 0 to 164 [ 655.064756][T25673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.073496][T25673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.080764][T25674] pimreg: entered allmulticast mode [ 655.089093][T25674] siw: device registration error -23 [ 655.089279][T25673] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 655.098185][T25674] pimreg: left allmulticast mode [ 655.227710][T25679] netlink: 'syz.0.6988': attribute type 1 has an invalid length. [ 655.242883][T25679] bond1: entered promiscuous mode [ 655.248520][T25679] 8021q: adding VLAN 0 to HW filter on device bond1 [ 655.259841][T25687] netlink: 'syz.1.6991': attribute type 10 has an invalid length. [ 655.315806][T25687] bond0: (slave dummy0): Releasing backup interface [ 655.325490][T25687] team0: Port device dummy0 added [ 655.333757][T25688] team0: Port device dummy0 removed [ 655.341356][T25688] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 655.409611][T25688] __nla_validate_parse: 26 callbacks suppressed [ 655.409695][T25688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6991'. [ 655.426861][T25688] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6991'. [ 655.440591][T25688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6991'. [ 655.475774][T25697] bond0: (slave dummy0): Releasing backup interface [ 655.485493][T25697] team0: Port device dummy0 added [ 655.500976][T25697] team0: Port device dummy0 removed [ 655.509059][T25697] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 655.576736][T25699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6994'. [ 655.586873][T25699] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6994'. [ 655.599839][T25699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6994'. [ 655.630965][T25701] FAULT_INJECTION: forcing a failure. [ 655.630965][T25701] name failslab, interval 1, probability 0, space 0, times 0 [ 655.643707][T25701] CPU: 0 UID: 0 PID: 25701 Comm: syz.9.6995 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 655.643821][T25701] Tainted: [W]=WARN [ 655.643830][T25701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 655.643847][T25701] Call Trace: [ 655.643857][T25701] [ 655.643867][T25701] __dump_stack+0x1d/0x30 [ 655.643893][T25701] dump_stack_lvl+0xe8/0x140 [ 655.643919][T25701] dump_stack+0x15/0x1b [ 655.643939][T25701] should_fail_ex+0x265/0x280 [ 655.643996][T25701] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 655.644024][T25701] should_failslab+0x8c/0xb0 [ 655.644141][T25701] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 655.644185][T25701] ? shmem_alloc_inode+0x34/0x50 [ 655.644241][T25701] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 655.644266][T25701] shmem_alloc_inode+0x34/0x50 [ 655.644286][T25701] alloc_inode+0x40/0x170 [ 655.644383][T25701] new_inode+0x1d/0xe0 [ 655.644417][T25701] shmem_get_inode+0x244/0x750 [ 655.644442][T25701] ? __se_sys_memfd_create+0x1cc/0x590 [ 655.644476][T25701] __shmem_file_setup+0x113/0x210 [ 655.644524][T25701] shmem_file_setup+0x3b/0x50 [ 655.644608][T25701] __se_sys_memfd_create+0x2c3/0x590 [ 655.644637][T25701] __x64_sys_memfd_create+0x31/0x40 [ 655.644667][T25701] x64_sys_call+0x2ac2/0x3000 [ 655.644694][T25701] do_syscall_64+0xd2/0x200 [ 655.644767][T25701] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 655.644800][T25701] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 655.644927][T25701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.644957][T25701] RIP: 0033:0x7f95a553efc9 [ 655.644975][T25701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 655.644996][T25701] RSP: 002b:00007f95a3f9ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 655.645040][T25701] RAX: ffffffffffffffda RBX: 00000000000005fc RCX: 00007f95a553efc9 [ 655.645057][T25701] RDX: 00007f95a3f9eef0 RSI: 0000000000000000 RDI: 00007f95a55c2960 [ 655.645152][T25701] RBP: 0000200000000c00 R08: 00007f95a3f9ebb7 R09: 00007f95a3f9ee40 [ 655.645168][T25701] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040 [ 655.645184][T25701] R13: 00007f95a3f9eef0 R14: 00007f95a3f9eeb0 R15: 0000200000000080 [ 655.645208][T25701] [ 656.242779][T19244] Bluetooth: hci0: command 0x1003 tx timeout [ 656.242922][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 656.315040][ T29] kauditd_printk_skb: 392 callbacks suppressed [ 656.315055][ T29] audit: type=1326 audit(656.281:29975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25715 comm="syz.7.7001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f630d6eefc9 code=0x7ffc0000 [ 656.344336][ T29] audit: type=1326 audit(656.281:29976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25715 comm="syz.7.7001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630d6eefc9 code=0x7ffc0000 [ 656.411220][T25720] loop7: detected capacity change from 0 to 512 [ 656.419222][T25720] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 656.431975][T25720] EXT4-fs (loop7): 1 truncate cleaned up [ 656.438492][T25720] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 656.645824][T17940] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.775019][T25730] loop7: detected capacity change from 0 to 512 [ 656.786986][T25730] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 656.821213][T25730] EXT4-fs (loop7): 1 truncate cleaned up [ 656.827652][T25730] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 656.842453][T25732] lo speed is unknown, defaulting to 1000 [ 657.031282][T25739] loop9: detected capacity change from 0 to 8192 [ 657.091936][T17940] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.235277][T25743] loop7: detected capacity change from 0 to 8192 [ 657.264145][T25749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.273292][T25749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 657.301829][ T29] audit: type=1326 audit(657.261:29977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25750 comm="syz.9.7013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a553efc9 code=0x7ffc0000 [ 657.325040][ T29] audit: type=1326 audit(657.261:29978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25750 comm="syz.9.7013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a553efc9 code=0x7ffc0000 [ 657.348496][ T29] audit: type=1326 audit(657.261:29979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25750 comm="syz.9.7013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f95a553efc9 code=0x7ffc0000 [ 657.361780][T25756] netlink: 104 bytes leftover after parsing attributes in process `syz.7.7009'. [ 657.372183][ T29] audit: type=1326 audit(657.261:29980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25750 comm="syz.9.7013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a553efc9 code=0x7ffc0000 [ 657.404656][T25754] loop9: detected capacity change from 0 to 8192 [ 657.513064][T25761] loop7: detected capacity change from 0 to 512 [ 657.520809][T25761] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 657.532392][T25761] EXT4-fs (loop7): 1 truncate cleaned up [ 657.538640][T25761] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 657.561878][T25765] loop9: detected capacity change from 0 to 512 [ 657.568921][T25765] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 657.580616][T25765] EXT4-fs (loop9): 1 truncate cleaned up [ 657.586958][T25765] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 657.699706][T17940] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.732133][T25603] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.755116][ T29] audit: type=1326 audit(657.721:29981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25774 comm="syz.9.7019" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f95a553efc9 code=0x0 [ 657.787263][T25777] loop7: detected capacity change from 0 to 1024 [ 657.796205][T25777] Quota error (device loop7): do_check_range: Getting block 64 out of range 1-5 [ 657.805326][T25777] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 657.814756][T25777] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.7020: Failed to acquire dquot type 0 [ 657.826648][T25777] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 657.842644][T25777] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #13: comm syz.7.7020: corrupted inode contents [ 657.857774][T25777] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #13: comm syz.7.7020: mark_inode_dirty error [ 657.869607][T25777] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #13: comm syz.7.7020: corrupted inode contents [ 657.881869][T25777] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #13: comm syz.7.7020: mark_inode_dirty error [ 657.894698][T25777] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #13: comm syz.7.7020: corrupted inode contents [ 657.907466][T25777] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 657.916275][T25777] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #13: comm syz.7.7020: corrupted inode contents [ 657.928536][T25777] EXT4-fs error (device loop7): ext4_truncate:4637: inode #13: comm syz.7.7020: mark_inode_dirty error [ 657.940091][T25777] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 657.949670][T25777] EXT4-fs (loop7): 1 truncate cleaned up [ 657.956031][T25777] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 657.985152][T17940] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.024706][ T29] audit: type=1326 audit(657.991:29982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25783 comm="syz.7.7022" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f630d6eefc9 code=0x0 [ 658.563253][T25804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.602283][T25804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.631884][T25804] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7029'. [ 658.686244][ T31] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.734382][ T31] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.804641][ T31] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.886994][ T31] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.909210][T25820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.940590][T25820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.982907][ T31] bridge_slave_1: left allmulticast mode [ 658.988703][ T31] bridge_slave_1: left promiscuous mode [ 658.994419][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.023390][ T31] bridge_slave_0: left allmulticast mode [ 659.029085][ T31] bridge_slave_0: left promiscuous mode [ 659.034951][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.145104][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 659.156450][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 659.166778][ T31] bond0 (unregistering): Released all slaves [ 659.185564][T25810] lo speed is unknown, defaulting to 1000 [ 659.196120][T25830] pimreg: entered allmulticast mode [ 659.212033][T25830] siw: device registration error -23 [ 659.248967][ T31] hsr_slave_0: left promiscuous mode [ 659.258131][ T31] hsr_slave_1: left promiscuous mode [ 659.268069][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 659.275606][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 659.292577][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 659.300049][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 659.326965][ T31] veth1_macvtap: left promiscuous mode [ 659.332594][ T31] veth0_macvtap: left promiscuous mode [ 659.338312][ T31] veth1_vlan: left promiscuous mode [ 659.345383][ T31] veth0_vlan: left promiscuous mode [ 659.427495][ T31] team0 (unregistering): Port device team_slave_1 removed [ 659.437722][ T31] team0 (unregistering): Port device team_slave_0 removed [ 659.472380][T25830] pimreg: left allmulticast mode [ 659.541823][T25844] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7041'. [ 659.550844][T25844] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7041'. [ 659.553405][T25810] chnl_net:caif_netlink_parms(): no params data found [ 659.615847][T25810] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.623083][T25810] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.630504][T25810] bridge_slave_0: entered allmulticast mode [ 659.637351][T25810] bridge_slave_0: entered promiscuous mode [ 659.644938][T25810] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.652047][T25810] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.659593][T25810] bridge_slave_1: entered allmulticast mode [ 659.666298][T25810] bridge_slave_1: entered promiscuous mode [ 659.699031][T25810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.710367][T25851] loop7: detected capacity change from 0 to 8192 [ 659.711699][T25810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 659.751725][T25810] team0: Port device team_slave_0 added [ 659.769880][T25854] pimreg: entered allmulticast mode [ 659.777804][T25810] team0: Port device team_slave_1 added [ 659.800150][T25853] siw: device registration error -23 [ 659.832205][T25810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.839467][T25810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.865545][T25810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.874759][T25861] 9pnet_fd: Insufficient options for proto=fd [ 659.877882][T25810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.889476][T25810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.915432][T25810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 659.948401][T25853] pimreg: left allmulticast mode [ 659.988031][T25863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.997174][T25863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.008658][T25810] hsr_slave_0: entered promiscuous mode [ 660.028065][T25810] hsr_slave_1: entered promiscuous mode [ 660.040752][T25867] loop7: detected capacity change from 0 to 8192 [ 660.048062][T25810] debugfs: 'hsr0' already exists in 'hsr' [ 660.053915][T25810] Cannot create hsr debugfs directory [ 660.263178][T25883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.271829][T25883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.288359][T25881] pimreg: entered allmulticast mode [ 660.297305][T25881] pimreg: left allmulticast mode [ 660.421038][T25889] 9pnet_fd: Insufficient options for proto=fd [ 660.447117][T25891] validate_nla: 3 callbacks suppressed [ 660.447136][T25891] netlink: 'syz.7.7057': attribute type 10 has an invalid length. [ 660.467825][T25891] bond0: (slave dummy0): Releasing backup interface [ 660.493436][T25891] netlink: 'syz.7.7057': attribute type 10 has an invalid length. [ 660.506409][T25810] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 660.518495][T25891] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 660.527571][T25810] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 660.537525][T25810] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 660.550130][T25810] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 660.613922][T25810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 660.625042][T25900] __nla_validate_parse: 2 callbacks suppressed [ 660.625076][T25900] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7057'. [ 660.628113][T25810] 8021q: adding VLAN 0 to HW filter on device team0 [ 660.653937][T25900] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7057'. [ 660.668749][T25900] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7057'. [ 660.670314][T17963] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.684898][T17963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 660.710307][T17963] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.717487][T17963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.865198][T25810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 660.959375][T25810] veth0_vlan: entered promiscuous mode [ 660.976225][T25810] veth1_vlan: entered promiscuous mode [ 661.006113][T25810] veth0_macvtap: entered promiscuous mode [ 661.022016][T25810] veth1_macvtap: entered promiscuous mode [ 661.040960][T25810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 661.055284][T25919] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7062'. [ 661.094235][T25810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 661.113899][T25923] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 661.115962][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.150783][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.160006][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.191519][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.258535][T25932] 9pnet_fd: Insufficient options for proto=fd [ 661.382125][T25943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.392017][T25943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.414543][T25937] loop3: detected capacity change from 0 to 8192 [ 661.439918][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 661.439936][ T29] audit: type=1326 audit(661.401:30113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25933 comm="syz.1.7067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fe60098efc9 code=0x7ffc0000 [ 661.528376][ T29] audit: type=1326 audit(661.471:30114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25949 comm="syz.7.7074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630d6eefc9 code=0x7ffc0000 [ 661.551511][ T29] audit: type=1326 audit(661.471:30115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25949 comm="syz.7.7074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f630d6eefc9 code=0x7ffc0000 [ 661.574576][ T29] audit: type=1326 audit(661.471:30116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25949 comm="syz.7.7074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630d6eefc9 code=0x7ffc0000 [ 661.597776][ T29] audit: type=1326 audit(661.471:30117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25949 comm="syz.7.7074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f630d6eefc9 code=0x7ffc0000 [ 661.605833][T25950] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 661.620948][ T29] audit: type=1326 audit(661.471:30118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25949 comm="syz.7.7074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630d6eefc9 code=0x7ffc0000 [ 661.654320][ T29] audit: type=1326 audit(661.471:30119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25949 comm="syz.7.7074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f630d6eefc9 code=0x7ffc0000 [ 661.677330][ T29] audit: type=1326 audit(661.471:30120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25949 comm="syz.7.7074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630d6eefc9 code=0x7ffc0000 [ 661.700351][ T29] audit: type=1326 audit(661.471:30121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25949 comm="syz.7.7074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630d6eefc9 code=0x7ffc0000 [ 661.723487][ T29] audit: type=1326 audit(661.481:30122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25949 comm="syz.7.7074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f630d6eefc9 code=0x7ffc0000 [ 661.801917][T25945] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7073'. [ 661.895302][T25968] lo speed is unknown, defaulting to 1000 [ 661.906001][T25972] 9pnet_fd: Insufficient options for proto=fd [ 661.945051][T25974] loop7: detected capacity change from 0 to 164 [ 661.952549][T17963] Bluetooth: hci0: Frame reassembly failed (-84) [ 661.961386][T25974] iso9660: Unknown parameter '~ap' [ 661.976506][T25974] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7081'. [ 661.985638][T25974] bridge_slave_1: left allmulticast mode [ 661.991303][T25974] bridge_slave_1: left promiscuous mode [ 661.997164][T25974] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.006638][T25974] bridge_slave_0: left allmulticast mode [ 662.012314][T25974] bridge_slave_0: left promiscuous mode [ 662.018266][T25974] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.069769][T25977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7079'. [ 662.078855][T25977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7079'. [ 662.141176][ T37] Bluetooth: hci1: Frame reassembly failed (-84) [ 662.262382][T25982] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 662.379792][T25989] loop9: detected capacity change from 0 to 512 [ 662.401723][T25989] EXT4-fs warning (device loop9): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 662.417497][T25989] EXT4-fs (loop9): mount failed [ 662.439547][T25989] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.476481][T25989] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.562241][T25989] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.615410][T25989] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.681318][ T37] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.694678][ T12] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.708559][ T12] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.748772][ T12] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.326498][T26005] siw: device registration error -23 [ 663.334756][T26005] pimreg: left allmulticast mode [ 663.399438][T17963] Bluetooth: hci2: Frame reassembly failed (-84) [ 663.992583][T26008] Bluetooth: hci0: command 0x1003 tx timeout [ 663.998838][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 664.034717][T26010] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7093'. [ 664.043783][T26010] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7093'. [ 664.053635][T26010] netlink: 'syz.1.7093': attribute type 6 has an invalid length. [ 664.074711][T26010] lo speed is unknown, defaulting to 1000 [ 664.128906][T26012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.137554][T26012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.152781][T19244] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 664.152822][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 664.435629][T26017] loop3: detected capacity change from 0 to 164 [ 664.444135][T26017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.452679][T26017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.465034][T26017] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 664.692627][T26019] loop7: detected capacity change from 0 to 2048 [ 664.718966][T26023] loop7: detected capacity change from 0 to 128 [ 664.727446][T26023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.736032][T26023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.919883][T26027] 9pnet_fd: Insufficient options for proto=fd [ 665.021415][T26035] loop3: detected capacity change from 0 to 512 [ 665.034000][T26035] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 665.049076][T26035] EXT4-fs (loop3): mount failed [ 665.067669][T26035] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.085742][T26040] netlink: 'syz.1.7104': attribute type 10 has an invalid length. [ 665.095494][T26040] bond0: (slave dummy0): Releasing backup interface [ 665.104944][T26040] team0: Port device dummy0 added [ 665.112348][T26040] netlink: 'syz.1.7104': attribute type 10 has an invalid length. [ 665.121985][T26035] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.136856][T26040] team0: Port device dummy0 removed [ 665.144573][T26040] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 665.182208][T26035] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.236837][T26035] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.289382][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.300980][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.312668][ T175] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.324050][ T175] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.432690][T19244] Bluetooth: hci2: command 0x1003 tx timeout [ 665.432896][ T3657] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 665.482259][T26046] FAULT_INJECTION: forcing a failure. [ 665.482259][T26046] name failslab, interval 1, probability 0, space 0, times 0 [ 665.495279][T26046] CPU: 0 UID: 0 PID: 26046 Comm: syz.0.7107 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 665.495321][T26046] Tainted: [W]=WARN [ 665.495329][T26046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 665.495354][T26046] Call Trace: [ 665.495362][T26046] [ 665.495447][T26046] __dump_stack+0x1d/0x30 [ 665.495475][T26046] dump_stack_lvl+0xe8/0x140 [ 665.495538][T26046] dump_stack+0x15/0x1b [ 665.495561][T26046] should_fail_ex+0x265/0x280 [ 665.495587][T26046] should_failslab+0x8c/0xb0 [ 665.495692][T26046] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 665.495720][T26046] ? __alloc_skb+0x101/0x320 [ 665.495815][T26046] __alloc_skb+0x101/0x320 [ 665.495877][T26046] netlink_alloc_large_skb+0xbf/0xf0 [ 665.495905][T26046] netlink_sendmsg+0x3cf/0x6b0 [ 665.496009][T26046] ? __pfx_netlink_sendmsg+0x10/0x10 [ 665.496027][T26046] __sock_sendmsg+0x145/0x180 [ 665.496050][T26046] ____sys_sendmsg+0x31e/0x4e0 [ 665.496090][T26046] ___sys_sendmsg+0x17b/0x1d0 [ 665.496214][T26046] __x64_sys_sendmsg+0xd4/0x160 [ 665.496248][T26046] x64_sys_call+0x191e/0x3000 [ 665.496329][T26046] do_syscall_64+0xd2/0x200 [ 665.496346][T26046] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 665.496370][T26046] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 665.496424][T26046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.496444][T26046] RIP: 0033:0x7f5aa376efc9 [ 665.496458][T26046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 665.496482][T26046] RSP: 002b:00007f5aa21d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 665.496499][T26046] RAX: ffffffffffffffda RBX: 00007f5aa39c5fa0 RCX: 00007f5aa376efc9 [ 665.496549][T26046] RDX: 0000000004000080 RSI: 0000200000001200 RDI: 0000000000000007 [ 665.496560][T26046] RBP: 00007f5aa21d7090 R08: 0000000000000000 R09: 0000000000000000 [ 665.496571][T26046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 665.496582][T26046] R13: 00007f5aa39c6038 R14: 00007f5aa39c5fa0 R15: 00007fff43e51c98 [ 665.496599][T26046] [ 665.719748][T26048] FAULT_INJECTION: forcing a failure. [ 665.719748][T26048] name failslab, interval 1, probability 0, space 0, times 0 [ 665.732565][T26048] CPU: 0 UID: 0 PID: 26048 Comm: syz.0.7108 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 665.732662][T26048] Tainted: [W]=WARN [ 665.732672][T26048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 665.732688][T26048] Call Trace: [ 665.732696][T26048] [ 665.732705][T26048] __dump_stack+0x1d/0x30 [ 665.732728][T26048] dump_stack_lvl+0xe8/0x140 [ 665.732810][T26048] dump_stack+0x15/0x1b [ 665.732863][T26048] should_fail_ex+0x265/0x280 [ 665.732881][T26048] should_failslab+0x8c/0xb0 [ 665.732907][T26048] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 665.733000][T26048] ? __alloc_skb+0x101/0x320 [ 665.733093][T26048] __alloc_skb+0x101/0x320 [ 665.733119][T26048] alloc_skb_with_frags+0x7d/0x470 [ 665.733162][T26048] ? ref_tracker_alloc+0x1f2/0x2f0 [ 665.733204][T26048] sock_alloc_send_pskb+0x430/0x4e0 [ 665.733225][T26048] ? __rcu_read_unlock+0x4f/0x70 [ 665.733250][T26048] packet_sendmsg+0x222b/0x31f0 [ 665.733339][T26048] ? spurious_kernel_fault+0xf4/0x4a0 [ 665.733434][T26048] ? avc_has_perm+0xf7/0x180 [ 665.733453][T26048] ? selinux_socket_sendmsg+0x175/0x1b0 [ 665.733478][T26048] ? __pfx_packet_sendmsg+0x10/0x10 [ 665.733513][T26048] __sock_sendmsg+0x145/0x180 [ 665.733535][T26048] __sys_sendto+0x268/0x330 [ 665.733590][T26048] __x64_sys_sendto+0x76/0x90 [ 665.733668][T26048] x64_sys_call+0x2d14/0x3000 [ 665.733697][T26048] do_syscall_64+0xd2/0x200 [ 665.733721][T26048] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 665.733753][T26048] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 665.733796][T26048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.733899][T26048] RIP: 0033:0x7f5aa376efc9 [ 665.733913][T26048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 665.733929][T26048] RSP: 002b:00007f5aa21d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 665.733946][T26048] RAX: ffffffffffffffda RBX: 00007f5aa39c5fa0 RCX: 00007f5aa376efc9 [ 665.733957][T26048] RDX: 000000000000000e RSI: 0000200000000240 RDI: 0000000000000005 [ 665.734044][T26048] RBP: 00007f5aa21d7090 R08: 0000200000000200 R09: 0000000000000014 [ 665.734098][T26048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 665.734109][T26048] R13: 00007f5aa39c6038 R14: 00007f5aa39c5fa0 R15: 00007fff43e51c98 [ 665.734126][T26048] [ 665.979320][T26050] loop7: detected capacity change from 0 to 128 [ 665.988308][T26050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.997053][T26050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.001432][T26052] 9pnet_fd: Insufficient options for proto=fd [ 666.071174][T26063] netlink: 'syz.0.7115': attribute type 10 has an invalid length. [ 666.082203][T26063] bond0: (slave dummy0): Releasing backup interface [ 666.092084][T26063] team0: Port device dummy0 added [ 666.104408][T26063] netlink: 'syz.0.7115': attribute type 10 has an invalid length. [ 666.115964][T26063] team0: Port device dummy0 removed [ 666.124195][T26063] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 666.163519][T26069] lo speed is unknown, defaulting to 1000 [ 666.194977][T26070] __nla_validate_parse: 5 callbacks suppressed [ 666.195001][T26070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7115'. [ 666.211031][T26070] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7115'. [ 666.224012][T26070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7115'. [ 666.244762][T26071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.253550][T26071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.779065][T26075] FAULT_INJECTION: forcing a failure. [ 666.779065][T26075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 666.792230][T26075] CPU: 0 UID: 0 PID: 26075 Comm: syz.7.7119 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 666.792269][T26075] Tainted: [W]=WARN [ 666.792279][T26075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 666.792291][T26075] Call Trace: [ 666.792370][T26075] [ 666.792378][T26075] __dump_stack+0x1d/0x30 [ 666.792399][T26075] dump_stack_lvl+0xe8/0x140 [ 666.792433][T26075] dump_stack+0x15/0x1b [ 666.792449][T26075] should_fail_ex+0x265/0x280 [ 666.792526][T26075] should_fail+0xb/0x20 [ 666.792547][T26075] should_fail_usercopy+0x1a/0x20 [ 666.792574][T26075] strncpy_from_user+0x25/0x230 [ 666.792643][T26075] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 666.792673][T26075] __se_sys_memfd_create+0x1ff/0x590 [ 666.792704][T26075] __x64_sys_memfd_create+0x31/0x40 [ 666.792767][T26075] x64_sys_call+0x2ac2/0x3000 [ 666.792787][T26075] do_syscall_64+0xd2/0x200 [ 666.792804][T26075] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 666.792843][T26075] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 666.792871][T26075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.792958][T26075] RIP: 0033:0x7f630d6eefc9 [ 666.792972][T26075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 666.792988][T26075] RSP: 002b:00007f630c156e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 666.793005][T26075] RAX: ffffffffffffffda RBX: 00000000000005ad RCX: 00007f630d6eefc9 [ 666.793016][T26075] RDX: 00007f630c156ef0 RSI: 0000000000000000 RDI: 00007f630d772960 [ 666.793028][T26075] RBP: 0000200000000180 R08: 00007f630c156bb7 R09: 00007f630c156e40 [ 666.793039][T26075] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040 [ 666.793107][T26075] R13: 00007f630c156ef0 R14: 00007f630c156eb0 R15: 0000200000000940 [ 666.793187][T26075] [ 667.084170][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 667.084326][ T29] audit: type=1400 audit(667.051:30254): avc: denied { cpu } for pid=26087 comm="syz.7.7122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 667.136019][T26083] lo speed is unknown, defaulting to 1000 [ 667.190399][T26097] netlink: 'syz.7.7123': attribute type 10 has an invalid length. [ 667.201796][T26097] bond0: (slave dummy0): Releasing backup interface [ 667.211511][T26097] netlink: 'syz.7.7123': attribute type 10 has an invalid length. [ 667.220144][T26083] chnl_net:caif_netlink_parms(): no params data found [ 667.230865][T26097] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 667.242284][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.284341][T26083] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.291414][T26083] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.298773][T26083] bridge_slave_0: entered allmulticast mode [ 667.305645][T26083] bridge_slave_0: entered promiscuous mode [ 667.314423][T26101] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7123'. [ 667.324136][T26101] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7123'. [ 667.324691][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.345751][T26083] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.352910][T26083] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.361029][T26083] bridge_slave_1: entered allmulticast mode [ 667.367905][T26083] bridge_slave_1: entered promiscuous mode [ 667.388469][T26083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 667.400881][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.414499][T26083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 667.439267][T26083] team0: Port device team_slave_0 added [ 667.446286][T26083] team0: Port device team_slave_1 added [ 667.462488][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.485030][T26083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 667.492040][T26083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.519056][T26083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 667.531297][T26083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 667.538303][T26083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.564312][T26083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 667.599246][T26103] lo speed is unknown, defaulting to 1000 [ 667.607922][T26083] hsr_slave_0: entered promiscuous mode [ 667.614288][T26083] hsr_slave_1: entered promiscuous mode [ 667.620321][T26083] debugfs: 'hsr0' already exists in 'hsr' [ 667.626101][T26083] Cannot create hsr debugfs directory [ 667.764686][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 667.774728][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 667.784868][ T12] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 667.794209][ T12] bond0 (unregistering): Released all slaves [ 667.802849][ T12] bond1 (unregistering): Released all slaves [ 667.840766][ T12] hsr_slave_0: left promiscuous mode [ 667.846600][ T12] hsr_slave_1: left promiscuous mode [ 667.852238][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 667.859784][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 667.867630][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 667.875136][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 667.884946][ T12] veth0_macvtap: left promiscuous mode [ 667.890494][ T12] veth1_vlan: left promiscuous mode [ 667.896287][ T12] veth0_vlan: left promiscuous mode [ 667.957226][ T12] team0 (unregistering): Port device team_slave_1 removed [ 667.969584][ T12] team0 (unregistering): Port device team_slave_0 removed [ 668.050987][T26103] chnl_net:caif_netlink_parms(): no params data found [ 668.097672][T26103] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.104858][T26103] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.112127][T26103] bridge_slave_0: entered allmulticast mode [ 668.118894][T26103] bridge_slave_0: entered promiscuous mode [ 668.127488][T26103] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.134616][T26103] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.141856][T26103] bridge_slave_1: entered allmulticast mode [ 668.148435][T26103] bridge_slave_1: entered promiscuous mode [ 668.167202][T26103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 668.178985][T26103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 668.203801][T26103] team0: Port device team_slave_0 added [ 668.211004][T26103] team0: Port device team_slave_1 added [ 668.228517][T26103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 668.235583][T26103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.261590][T26103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 668.273144][T26103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 668.280584][T26103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.306922][T26103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 668.332593][ T12] IPVS: stop unused estimator thread 0... [ 668.351164][T26103] hsr_slave_0: entered promiscuous mode [ 668.357547][T26103] hsr_slave_1: entered promiscuous mode [ 668.363758][T26103] debugfs: 'hsr0' already exists in 'hsr' [ 668.369537][T26103] Cannot create hsr debugfs directory [ 668.381793][ T29] audit: type=1400 audit(668.341:30255): avc: denied { create } for pid=26126 comm="syz.7.7130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 668.402379][ T29] audit: type=1400 audit(668.371:30256): avc: denied { write } for pid=26126 comm="syz.7.7130" path="socket:[97571]" dev="sockfs" ino=97571 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 668.468852][T26132] netlink: 'syz.7.7132': attribute type 10 has an invalid length. [ 668.469756][T26083] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 668.487267][T26132] bond0: (slave dummy0): Releasing backup interface [ 668.496031][T26132] netlink: 'syz.7.7132': attribute type 10 has an invalid length. [ 668.506226][ T12] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.517086][T26083] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 668.527830][T26132] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 668.536960][T26083] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 668.546536][T26083] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 668.589651][T26083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.598720][ T12] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.614705][T26139] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7132'. [ 668.624978][T26139] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7132'. [ 668.628049][T26083] 8021q: adding VLAN 0 to HW filter on device team0 [ 668.646174][ T175] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.653312][ T175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 668.665203][T17963] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.672376][T17963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.681755][ T12] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.754209][ T12] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.770333][T26083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 668.822107][T26103] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 668.831683][T26103] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 668.842065][T26103] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 668.854011][T26103] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 668.880149][T26083] veth0_vlan: entered promiscuous mode [ 668.916482][T26083] veth1_vlan: entered promiscuous mode [ 668.924859][ T12] bridge_slave_1: left allmulticast mode [ 668.930720][ T12] bridge_slave_1: left promiscuous mode [ 668.936834][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.945906][ T12] bridge_slave_0: left allmulticast mode [ 668.951704][ T12] bridge_slave_0: left promiscuous mode [ 668.958057][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.085218][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 669.096500][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 669.106418][ T12] bond0 (unregistering): Released all slaves [ 669.139787][T26083] veth0_macvtap: entered promiscuous mode [ 669.153997][T26083] veth1_macvtap: entered promiscuous mode [ 669.167203][T26103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.184986][ T2597] Bluetooth: hci0: Frame reassembly failed (-84) [ 669.194322][ T12] hsr_slave_0: left promiscuous mode [ 669.200180][ T12] hsr_slave_1: left promiscuous mode [ 669.206054][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 669.213486][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 669.221481][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 669.229011][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 669.240214][ T12] veth1_macvtap: left promiscuous mode [ 669.245860][ T12] veth0_macvtap: left promiscuous mode [ 669.251615][ T12] veth1_vlan: left promiscuous mode [ 669.257140][ T12] veth0_vlan: left promiscuous mode [ 669.326023][ T12] team0 (unregistering): Port device team_slave_1 removed [ 669.336887][ T12] team0 (unregistering): Port device team_slave_0 removed [ 669.394270][T26083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 669.406753][T26083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 669.415955][T26103] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.430097][ T2597] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.437395][ T2597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.449599][ T2597] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.464420][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.471744][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.480667][ T175] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.491918][T26167] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7137'. [ 669.501020][T26167] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7137'. [ 669.510023][T26167] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7137'. [ 669.519897][T26167] netlink: 'syz.7.7137': attribute type 6 has an invalid length. [ 669.541453][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.550653][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.600898][T26172] netlink: 'syz.7.7139': attribute type 10 has an invalid length. [ 669.620341][T26172] bond0: (slave dummy0): Releasing backup interface [ 669.623071][T26176] 9pnet_fd: Insufficient options for proto=fd [ 669.638371][T26172] netlink: 'syz.7.7139': attribute type 10 has an invalid length. [ 669.649114][T26172] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 669.680656][T26103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.697173][ T29] audit: type=1400 audit(669.661:30257): avc: denied { create } for pid=26179 comm="syz.0.7140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 669.718557][T26180] xt_connbytes: Forcing CT accounting to be enabled [ 669.751728][ T29] audit: type=1400 audit(669.691:30258): avc: denied { setopt } for pid=26179 comm="syz.0.7140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 669.836867][T26103] veth0_vlan: entered promiscuous mode [ 669.845257][T26103] veth1_vlan: entered promiscuous mode [ 669.863775][T26103] veth0_macvtap: entered promiscuous mode [ 669.871611][T26103] veth1_macvtap: entered promiscuous mode [ 669.891431][T26103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 669.907254][T26103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 669.923715][ T31] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.934353][ T31] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.946898][T17963] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.960473][T17963] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.022272][T26209] netlink: 'syz.5.7142': attribute type 10 has an invalid length. [ 670.033063][T26209] team0: Port device dummy0 added [ 670.043619][T26209] team0: Port device dummy0 removed [ 670.051891][T26209] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 670.366265][T17963] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.404568][T17963] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.451635][T26216] loop7: detected capacity change from 0 to 512 [ 670.458842][T26216] EXT4-fs: Ignoring removed nobh option [ 670.465004][T26216] EXT4-fs: old and new quota format mixing [ 670.465661][T17963] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.480338][T26216] loop7: detected capacity change from 0 to 1024 [ 670.488442][T26216] EXT4-fs: Ignoring removed orlov option [ 670.496994][T26216] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 670.510925][T26216] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.558247][T17963] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.572918][T26212] lo speed is unknown, defaulting to 1000 [ 670.591751][T26226] loop7: detected capacity change from 0 to 8192 [ 670.655255][T17963] bridge_slave_1: left allmulticast mode [ 670.660999][T17963] bridge_slave_1: left promiscuous mode [ 670.666868][T17963] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.684503][T17963] bridge_slave_0: left allmulticast mode [ 670.690207][T17963] bridge_slave_0: left promiscuous mode [ 670.695920][T17963] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.886930][T17963] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 670.897996][T17963] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 670.900553][T26238] 9pnet_fd: Insufficient options for proto=fd [ 670.914196][T17963] bond0 (unregistering): Released all slaves [ 670.934194][T26212] chnl_net:caif_netlink_parms(): no params data found [ 670.966250][ T29] audit: type=1326 audit(670.931:30259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26239 comm="syz.5.7150" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f26f874efc9 code=0x0 [ 671.025191][T17963] hsr_slave_0: left promiscuous mode [ 671.038207][T17963] hsr_slave_1: left promiscuous mode [ 671.044325][T17963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 671.051989][T17963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 671.060019][T17963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 671.067548][T17963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 671.080600][T17963] veth1_macvtap: left promiscuous mode [ 671.086461][T17963] veth0_macvtap: left promiscuous mode [ 671.092043][T17963] veth1_vlan: left promiscuous mode [ 671.097924][T17963] veth0_vlan: left promiscuous mode [ 671.203369][T19244] Bluetooth: hci0: command 0x1003 tx timeout [ 671.209709][ T3657] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 671.241009][T17963] team0 (unregistering): Port device team_slave_1 removed [ 671.252962][T17963] team0 (unregistering): Port device team_slave_0 removed [ 671.407049][T26212] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.414217][T26212] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.438436][T26212] bridge_slave_0: entered allmulticast mode [ 671.463356][T26212] bridge_slave_0: entered promiscuous mode [ 671.492423][T26212] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.500771][T26212] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.607331][T26212] bridge_slave_1: entered allmulticast mode [ 671.627791][T26212] bridge_slave_1: entered promiscuous mode [ 671.674004][T26212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 671.694402][T26212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 671.732166][T26212] team0: Port device team_slave_0 added [ 671.747179][T26212] team0: Port device team_slave_1 added [ 671.784272][T26212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 671.791261][T26212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 671.817241][T26212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 671.873485][T26212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 671.880759][T26212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 671.906800][T26212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 671.994327][ T29] audit: type=1326 audit(671.951:30260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26251 comm="syz.1.7153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60098efc9 code=0x7ffc0000 [ 672.017477][ T29] audit: type=1326 audit(671.951:30261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26251 comm="syz.1.7153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60098efc9 code=0x7ffc0000 [ 672.041021][ T29] audit: type=1326 audit(671.951:30262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26251 comm="syz.1.7153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe60098efc9 code=0x7ffc0000 [ 672.064046][ T29] audit: type=1326 audit(671.951:30263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26251 comm="syz.1.7153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60098efc9 code=0x7ffc0000 [ 672.088675][T26212] hsr_slave_0: entered promiscuous mode [ 672.089003][T26254] validate_nla: 1 callbacks suppressed [ 672.089021][T26254] netlink: 'syz.1.7154': attribute type 10 has an invalid length. [ 672.095131][T26212] hsr_slave_1: entered promiscuous mode [ 672.114112][T26212] debugfs: 'hsr0' already exists in 'hsr' [ 672.119892][T26212] Cannot create hsr debugfs directory [ 672.131806][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 672.131885][ T29] audit: type=1326 audit(671.961:30266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26251 comm="syz.1.7153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60098efc9 code=0x7ffc0000 [ 672.161305][ T29] audit: type=1326 audit(671.961:30267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26251 comm="syz.1.7153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe60098efc9 code=0x7ffc0000 [ 672.184383][ T29] audit: type=1326 audit(671.961:30268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26251 comm="syz.1.7153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60098efc9 code=0x7ffc0000 [ 672.207533][ T29] audit: type=1326 audit(671.961:30269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26251 comm="syz.1.7153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60098efc9 code=0x7ffc0000 [ 672.230832][ T29] audit: type=1326 audit(671.961:30270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26251 comm="syz.1.7153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fe60098efc9 code=0x7ffc0000 [ 672.231273][T26255] netlink: 'syz.1.7154': attribute type 10 has an invalid length. [ 672.253984][ T29] audit: type=1326 audit(671.961:30271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26251 comm="syz.1.7153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60098efc9 code=0x7ffc0000 [ 672.322973][T26254] bond0: (slave dummy0): Releasing backup interface [ 672.322975][T26258] netlink: 'syz.0.7155': attribute type 10 has an invalid length. [ 672.340315][T26254] team0: Port device dummy0 added [ 672.351632][T26255] team0: Port device dummy0 removed [ 672.369677][T26254] __nla_validate_parse: 7 callbacks suppressed [ 672.369707][T26254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7154'. [ 672.382755][T26255] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 672.388342][T26254] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7154'. [ 672.412464][T26260] netlink: 'syz.0.7155': attribute type 10 has an invalid length. [ 672.424878][T26258] team0: Port device dummy0 added [ 672.442815][T26260] team0: Port device dummy0 removed [ 672.450401][T26260] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 672.529156][T26260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7155'. [ 672.539009][T26260] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7155'. [ 672.776897][T26212] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 672.795387][T26212] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 672.814788][T26212] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 672.834504][T26212] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 672.968646][T26212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 673.006444][T26212] 8021q: adding VLAN 0 to HW filter on device team0 [ 673.030996][ T2597] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.038214][ T2597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 673.054417][T26274] loop5: detected capacity change from 0 to 164 [ 673.063902][T26274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.075312][T26274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.075633][ T175] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.084937][T26274] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7158'. [ 673.090189][ T175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 673.117985][T26274] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 673.192455][T26279] 9pnet_fd: Insufficient options for proto=fd [ 673.208964][T26212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 673.274721][ T29] audit: type=1400 audit(673.241:30272): avc: denied { lock } for pid=26284 comm="syz.0.7161" path="socket:[97196]" dev="sockfs" ino=97196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 673.298437][ T29] audit: type=1400 audit(673.241:30273): avc: denied { read } for pid=26284 comm="syz.0.7161" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 673.321695][ T29] audit: type=1400 audit(673.241:30274): avc: denied { ioctl } for pid=26284 comm="syz.0.7161" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 673.533072][T26283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7160'. [ 673.588219][T26212] veth0_vlan: entered promiscuous mode [ 673.598244][T26212] veth1_vlan: entered promiscuous mode [ 673.648147][T26303] lo speed is unknown, defaulting to 1000 [ 673.708096][T26305] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 673.995924][T26212] veth0_macvtap: entered promiscuous mode [ 674.004830][T26307] loop7: detected capacity change from 0 to 512 [ 674.005852][T26307] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 674.025845][T26212] veth1_macvtap: entered promiscuous mode [ 674.027462][T26307] EXT4-fs (loop7): 1 truncate cleaned up [ 674.037818][ T29] audit: type=1326 audit(673.991:30275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26308 comm="syz.1.7167" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe60098efc9 code=0x0 [ 674.041145][T26212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 674.071064][T26307] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 674.087031][T26212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 674.099823][ T2597] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.124632][ T2597] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.146459][ T2597] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.156890][T17940] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.173533][ T2597] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.210116][T26320] loop7: detected capacity change from 0 to 512 [ 674.221268][T26318] loop5: detected capacity change from 0 to 1024 [ 674.228331][T26318] EXT4-fs: Ignoring removed bh option [ 674.240403][T26318] EXT4-fs: inline encryption not supported [ 674.247193][T26318] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 674.316505][T26326] 9pnet_fd: Insufficient options for proto=fd [ 674.324446][T26318] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 674.325157][T26320] EXT4-fs warning (device loop7): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 674.344132][T26318] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.7169: lblock 2 mapped to illegal pblock 2 (length 1) [ 674.370532][T26318] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.7169: lblock 0 mapped to illegal pblock 48 (length 1) [ 674.385078][T26320] EXT4-fs (loop7): mount failed [ 674.395362][T26318] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.7169: Failed to acquire dquot type 0 [ 674.416406][T26320] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.426841][T26318] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 674.440287][T26318] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.7169: mark_inode_dirty error [ 674.452328][T26318] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 674.465129][T26318] EXT4-fs (loop5): 1 orphan inode deleted [ 674.472231][T26318] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 674.473867][T26345] 9pnet_fd: Insufficient options for proto=fd [ 674.491149][ T2597] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 674.507608][T26320] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.521922][ T2597] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:7: Failed to release dquot type 0 [ 674.583900][T26344] loop2: detected capacity change from 0 to 8192 [ 674.584745][T26320] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.609657][T26348] pimreg: entered allmulticast mode [ 674.629344][T26347] siw: device registration error -23 [ 674.639367][T26347] pimreg: left allmulticast mode [ 674.658259][T26103] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.667806][T26103] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 674.681242][T26103] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 674.688237][T26320] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.699872][T26103] EXT4-fs error (device loop5): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 674.708922][T26349] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7175'. [ 674.762733][T26355] FAULT_INJECTION: forcing a failure. [ 674.762733][T26355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 674.776001][T26355] CPU: 1 UID: 0 PID: 26355 Comm: syz.5.7177 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 674.776042][T26355] Tainted: [W]=WARN [ 674.776050][T26355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 674.776066][T26355] Call Trace: [ 674.776130][T26355] [ 674.776140][T26355] __dump_stack+0x1d/0x30 [ 674.776168][T26355] dump_stack_lvl+0xe8/0x140 [ 674.776338][T26355] dump_stack+0x15/0x1b [ 674.776355][T26355] should_fail_ex+0x265/0x280 [ 674.776378][T26355] should_fail+0xb/0x20 [ 674.776394][T26355] should_fail_usercopy+0x1a/0x20 [ 674.776418][T26355] _copy_to_user+0x20/0xa0 [ 674.776448][T26355] simple_read_from_buffer+0xb5/0x130 [ 674.776480][T26355] proc_fail_nth_read+0x10e/0x150 [ 674.776574][T26355] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 674.776676][T26355] vfs_read+0x1a8/0x770 [ 674.776705][T26355] ? __rcu_read_unlock+0x4f/0x70 [ 674.776738][T26355] ? __fget_files+0x184/0x1c0 [ 674.776798][T26355] ksys_read+0xda/0x1a0 [ 674.776826][T26355] __x64_sys_read+0x40/0x50 [ 674.776854][T26355] x64_sys_call+0x27c0/0x3000 [ 674.776882][T26355] do_syscall_64+0xd2/0x200 [ 674.776903][T26355] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 674.776979][T26355] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 674.777016][T26355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.777042][T26355] RIP: 0033:0x7f26f874d9dc [ 674.777110][T26355] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 674.777132][T26355] RSP: 002b:00007f26f71af030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 674.777154][T26355] RAX: ffffffffffffffda RBX: 00007f26f89a5fa0 RCX: 00007f26f874d9dc [ 674.777177][T26355] RDX: 000000000000000f RSI: 00007f26f71af0a0 RDI: 0000000000000004 [ 674.777192][T26355] RBP: 00007f26f71af090 R08: 0000000000000000 R09: 0000000000000000 [ 674.777206][T26355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 674.777221][T26355] R13: 00007f26f89a6038 R14: 00007f26f89a5fa0 R15: 00007ffccd740098 [ 674.777291][T26355] [ 675.007935][T26353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.022081][T26353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.030968][T26353] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7178'. [ 675.058734][T26357] loop5: detected capacity change from 0 to 128 [ 675.058777][ T37] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.093319][ T37] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.096243][T26357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.110224][T26357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.113931][ T37] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.144384][ T2597] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.164975][ T2597] Bluetooth: hci0: Frame reassembly failed (-84) [ 675.601771][T26366] 9pnet_fd: Insufficient options for proto=fd [ 675.755872][T26380] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7190'. [ 675.777365][T26380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26380 comm=syz.1.7190 [ 675.867446][T26388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.876329][T26388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.889041][T26388] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7194'. [ 676.843287][T26422] netlink: 'syz.1.7206': attribute type 10 has an invalid length. [ 676.854296][T26422] bond0: (slave dummy0): Releasing backup interface [ 676.864580][T26422] team0: Port device dummy0 added [ 676.876409][T26422] netlink: 'syz.1.7206': attribute type 10 has an invalid length. [ 676.894792][T26422] team0: Port device dummy0 removed [ 676.908877][T26422] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 676.968293][T26436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 676.975944][T26436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 676.984087][T26436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 676.991722][T26436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 677.035655][ T1037] IPVS: starting estimator thread 0... [ 677.075760][T26445] netlink: 'syz.0.7213': attribute type 1 has an invalid length. [ 677.087333][T26445] SELinux: Context system_u:object_r:urandom_device_t:s0 is not valid (left unmapped). [ 677.105077][T26445] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 677.122768][T26442] IPVS: using max 1968 ests per chain, 98400 per kthread [ 677.136399][T26447] loop5: detected capacity change from 0 to 512 [ 677.150127][T26447] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #13: comm syz.5.7214: iget: bad i_size value: 12154757448730 [ 677.163729][T26447] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.7214: couldn't read orphan inode 13 (err -117) [ 677.176733][T26447] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 677.192008][T26447] EXT4-fs warning (device loop5): ext4_lookup:1799: Inconsistent encryption contexts: 2/12 [ 677.192658][ T3657] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 677.202654][T19244] Bluetooth: hci0: command 0x1003 tx timeout [ 677.227202][T26103] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.366254][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 677.366272][ T29] audit: type=1326 audit(677.331:30373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26458 comm="syz.0.7218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2863bdefc9 code=0x7ffc0000 [ 677.395838][ T29] audit: type=1326 audit(677.331:30374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26458 comm="syz.0.7218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2863bdefc9 code=0x7ffc0000 [ 677.437031][ T29] audit: type=1326 audit(677.391:30375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26458 comm="syz.0.7218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f2863bdefc9 code=0x7ffc0000 [ 677.460274][ T29] audit: type=1326 audit(677.391:30376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26458 comm="syz.0.7218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2863bdefc9 code=0x7ffc0000 [ 677.483490][ T29] audit: type=1326 audit(677.391:30377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26458 comm="syz.0.7218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2863bdefc9 code=0x7ffc0000 [ 677.506676][ T29] audit: type=1326 audit(677.391:30378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26458 comm="syz.0.7218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2863bdefc9 code=0x7ffc0000 [ 677.529885][ T29] audit: type=1326 audit(677.391:30379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26458 comm="syz.0.7218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2863bdefc9 code=0x7ffc0000 [ 677.554362][ T29] audit: type=1326 audit(677.391:30380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26458 comm="syz.0.7218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2863bdefc9 code=0x7ffc0000 [ 677.577612][ T29] audit: type=1326 audit(677.391:30381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26458 comm="syz.0.7218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2863bdefc9 code=0x7ffc0000 [ 677.600682][ T29] audit: type=1326 audit(677.391:30382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26458 comm="syz.0.7218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2863bdefc9 code=0x7ffc0000 [ 677.685708][T26465] loop5: detected capacity change from 0 to 1024 [ 677.692767][T26465] EXT4-fs: Ignoring removed nomblk_io_submit option [ 677.704277][T26465] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 677.814045][T26482] FAULT_INJECTION: forcing a failure. [ 677.814045][T26482] name failslab, interval 1, probability 0, space 0, times 0 [ 677.826849][T26482] CPU: 0 UID: 0 PID: 26482 Comm: syz.0.7226 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 677.826892][T26482] Tainted: [W]=WARN [ 677.826915][T26482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 677.826928][T26482] Call Trace: [ 677.826936][T26482] [ 677.826948][T26482] __dump_stack+0x1d/0x30 [ 677.826979][T26482] dump_stack_lvl+0xe8/0x140 [ 677.827007][T26482] dump_stack+0x15/0x1b [ 677.827029][T26482] should_fail_ex+0x265/0x280 [ 677.827054][T26482] should_failslab+0x8c/0xb0 [ 677.827215][T26482] kmem_cache_alloc_noprof+0x50/0x480 [ 677.827322][T26482] ? __inet_hash_connect+0x7a0/0x1370 [ 677.827347][T26482] ? inet_sk_get_local_port_range+0x89/0x100 [ 677.827377][T26482] __inet_hash_connect+0x7a0/0x1370 [ 677.827397][T26482] ? __pfx___inet6_check_established+0x10/0x10 [ 677.827457][T26482] inet6_hash_connect+0xaf/0xc0 [ 677.827486][T26482] tcp_v6_connect+0x99f/0xc40 [ 677.827541][T26482] __inet_stream_connect+0x169/0x7d0 [ 677.827565][T26482] ? tcp_sendmsg_fastopen+0x172/0x520 [ 677.827592][T26482] ? should_failslab+0x8c/0xb0 [ 677.827624][T26482] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 677.827738][T26482] tcp_sendmsg_fastopen+0x43a/0x520 [ 677.827777][T26482] tcp_sendmsg_locked+0x26e1/0x2c00 [ 677.827870][T26482] ? mntput_no_expire+0x6f/0x440 [ 677.827937][T26482] ? __rcu_read_unlock+0x4f/0x70 [ 677.827971][T26482] ? avc_has_perm_noaudit+0x1b1/0x200 [ 677.827997][T26482] ? avc_has_perm+0xf7/0x180 [ 677.828017][T26482] ? _raw_spin_unlock_bh+0x36/0x40 [ 677.828110][T26482] ? __pfx_tcp_sendmsg+0x10/0x10 [ 677.828137][T26482] tcp_sendmsg+0x2f/0x50 [ 677.828167][T26482] inet6_sendmsg+0x76/0xd0 [ 677.828195][T26482] __sock_sendmsg+0x8b/0x180 [ 677.828226][T26482] __sys_sendto+0x268/0x330 [ 677.828294][T26482] __x64_sys_sendto+0x76/0x90 [ 677.828327][T26482] x64_sys_call+0x2d14/0x3000 [ 677.828352][T26482] do_syscall_64+0xd2/0x200 [ 677.828443][T26482] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 677.828479][T26482] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 677.828573][T26482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.828650][T26482] RIP: 0033:0x7f2863bdefc9 [ 677.828711][T26482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 677.828780][T26482] RSP: 002b:00007f2862647038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 677.828870][T26482] RAX: ffffffffffffffda RBX: 00007f2863e35fa0 RCX: 00007f2863bdefc9 [ 677.828883][T26482] RDX: 0000000000000001 RSI: 0000200000000580 RDI: 0000000000000003 [ 677.828896][T26482] RBP: 00007f2862647090 R08: 0000200000b63fe4 R09: 000000000000001c [ 677.828985][T26482] R10: 0000000020000845 R11: 0000000000000246 R12: 0000000000000001 [ 677.829002][T26482] R13: 00007f2863e36038 R14: 00007f2863e35fa0 R15: 00007ffcb6d05bf8 [ 677.829087][T26482] [ 678.124013][T26483] __nla_validate_parse: 4 callbacks suppressed [ 678.124027][T26483] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7225'. [ 678.315443][T26500] pimreg: entered allmulticast mode [ 678.329729][T26500] siw: device registration error -23 [ 678.340899][T26499] pimreg: left allmulticast mode [ 678.588315][T26103] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.652951][T26506] random: crng reseeded on system resumption [ 678.746124][T26508] FAULT_INJECTION: forcing a failure. [ 678.746124][T26508] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 678.760441][T26508] CPU: 1 UID: 0 PID: 26508 Comm: syz.5.7235 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 678.760476][T26508] Tainted: [W]=WARN [ 678.760483][T26508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 678.760498][T26508] Call Trace: [ 678.760563][T26508] [ 678.760572][T26508] __dump_stack+0x1d/0x30 [ 678.760601][T26508] dump_stack_lvl+0xe8/0x140 [ 678.760634][T26508] dump_stack+0x15/0x1b [ 678.760657][T26508] should_fail_ex+0x265/0x280 [ 678.760726][T26508] should_fail_alloc_page+0xf2/0x100 [ 678.760766][T26508] __alloc_frozen_pages_noprof+0xff/0x360 [ 678.760804][T26508] alloc_pages_mpol+0xb3/0x260 [ 678.760841][T26508] alloc_pages_noprof+0x90/0x130 [ 678.760864][T26508] __pmd_alloc+0x47/0x420 [ 678.760890][T26508] handle_mm_fault+0x19d4/0x2be0 [ 678.760919][T26508] ? __rcu_read_unlock+0x4f/0x70 [ 678.760954][T26508] ? mt_find+0x208/0x320 [ 678.761028][T26508] do_user_addr_fault+0x3fe/0x1080 [ 678.761061][T26508] exc_page_fault+0x62/0xa0 [ 678.761117][T26508] asm_exc_page_fault+0x26/0x30 [ 678.761140][T26508] RIP: 0010:rep_movs_alternative+0x11/0x90 [ 678.761167][T26508] Code: c3 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 3d f9 01 00 66 2e 0f 1f [ 678.761258][T26508] RSP: 0018:ffffc90001f9fea0 EFLAGS: 00050202 [ 678.761274][T26508] RAX: ffff8881033e9b00 RBX: 0000000000000004 RCX: 0000000000000004 [ 678.761287][T26508] RDX: 0000000000000000 RSI: ffffc90001f9fedc RDI: 0000200000000380 [ 678.761299][T26508] RBP: ffffc90001f9ff48 R08: 0000000000000327 R09: 0000000000000000 [ 678.761311][T26508] R10: 0001c90001f9fedc R11: 0001c90001f9fedf R12: 0000200000000384 [ 678.761442][T26508] R13: 00007ffffffff000 R14: 0000200000000380 R15: ffffc90001f9fedc [ 678.761466][T26508] _copy_to_user+0x7c/0xa0 [ 678.761522][T26508] __se_sys_sched_getparam+0xb7/0xf0 [ 678.761553][T26508] x64_sys_call+0x2a33/0x3000 [ 678.761581][T26508] do_syscall_64+0xd2/0x200 [ 678.761605][T26508] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 678.761641][T26508] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 678.761745][T26508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.761768][T26508] RIP: 0033:0x7f26f874efc9 [ 678.761782][T26508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 678.761801][T26508] RSP: 002b:00007f26f71af038 EFLAGS: 00000246 ORIG_RAX: 000000000000008f [ 678.761852][T26508] RAX: ffffffffffffffda RBX: 00007f26f89a5fa0 RCX: 00007f26f874efc9 [ 678.761864][T26508] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000000 [ 678.761876][T26508] RBP: 00007f26f71af090 R08: 0000000000000000 R09: 0000000000000000 [ 678.762052][T26508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 678.762068][T26508] R13: 00007f26f89a6038 R14: 00007f26f89a5fa0 R15: 00007ffccd740098 [ 678.762090][T26508] [ 679.090735][T26512] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7237'. [ 679.099807][T26512] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7237'. [ 679.109761][T26512] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7237'. [ 679.123953][T26518] netlink: 'syz.5.7240': attribute type 10 has an invalid length. [ 679.133661][T26512] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7237'. [ 679.142770][T26512] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7237'. [ 679.151943][T26512] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7237'. [ 679.161534][T26518] bond0: (slave dummy0): Releasing backup interface [ 679.171425][T26520] FAULT_INJECTION: forcing a failure. [ 679.171425][T26520] name failslab, interval 1, probability 0, space 0, times 0 [ 679.184362][T26520] CPU: 0 UID: 0 PID: 26520 Comm: syz.0.7237 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 679.184401][T26520] Tainted: [W]=WARN [ 679.184483][T26520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 679.184497][T26520] Call Trace: [ 679.184503][T26520] [ 679.184515][T26520] __dump_stack+0x1d/0x30 [ 679.184539][T26520] dump_stack_lvl+0xe8/0x140 [ 679.184561][T26520] dump_stack+0x15/0x1b [ 679.184659][T26520] should_fail_ex+0x265/0x280 [ 679.184700][T26520] should_failslab+0x8c/0xb0 [ 679.184731][T26520] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 679.184790][T26520] ? __alloc_skb+0x101/0x320 [ 679.184822][T26520] __alloc_skb+0x101/0x320 [ 679.184854][T26520] netlink_alloc_large_skb+0xbf/0xf0 [ 679.184952][T26520] netlink_sendmsg+0x3cf/0x6b0 [ 679.184997][T26520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 679.185017][T26520] __sock_sendmsg+0x145/0x180 [ 679.185043][T26520] sock_write_iter+0x1a7/0x1f0 [ 679.185133][T26520] ? __pfx_sock_write_iter+0x10/0x10 [ 679.185155][T26520] vfs_write+0x52a/0x960 [ 679.185188][T26520] ksys_write+0xda/0x1a0 [ 679.185222][T26520] __x64_sys_write+0x40/0x50 [ 679.185249][T26520] x64_sys_call+0x2802/0x3000 [ 679.185282][T26520] do_syscall_64+0xd2/0x200 [ 679.185301][T26520] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 679.185330][T26520] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 679.185362][T26520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.185383][T26520] RIP: 0033:0x7f2863bdefc9 [ 679.185478][T26520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 679.185496][T26520] RSP: 002b:00007f2862626038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 679.185515][T26520] RAX: ffffffffffffffda RBX: 00007f2863e36090 RCX: 00007f2863bdefc9 [ 679.185528][T26520] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 000000000000000a [ 679.185541][T26520] RBP: 00007f2862626090 R08: 0000000000000000 R09: 0000000000000000 [ 679.185553][T26520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 679.185565][T26520] R13: 00007f2863e36128 R14: 00007f2863e36090 R15: 00007ffcb6d05bf8 [ 679.185597][T26520] [ 679.186778][T26522] netlink: 'syz.5.7240': attribute type 10 has an invalid length. [ 679.199123][T26518] team0: Port device dummy0 added [ 679.228146][T26512] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7237'. [ 679.234606][T26514] tap0: tun_chr_ioctl cmd 1074025677 [ 679.238055][T26512] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7237'. [ 679.244015][T26514] tap0: linktype set to 773 [ 679.248489][T26512] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7237'. [ 679.462573][T26522] team0: Port device dummy0 removed [ 679.470577][T26522] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 679.491516][T26530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.500724][T26530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.651436][T26540] pimreg: entered allmulticast mode [ 679.659069][T26540] siw: device registration error -23 [ 679.667813][T26540] pimreg: left allmulticast mode [ 679.737745][T26554] loop2: detected capacity change from 0 to 512 [ 679.766120][ T12] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.780226][T26554] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 679.800201][T26554] EXT4-fs (loop2): orphan cleanup on readonly fs [ 679.811814][T26554] EXT4-fs (loop2): 1 orphan inode deleted [ 679.820461][ T12] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.831516][ T37] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:2: Failed to release dquot type 1 [ 679.845727][T26559] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 679.857047][T26554] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 679.894585][ T12] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.909567][T26566] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.921456][T26212] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 679.945031][ T12] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.955734][T26573] 9pnet_fd: Insufficient options for proto=fd [ 679.983673][T26560] lo speed is unknown, defaulting to 1000 [ 680.008856][T26566] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.091865][T26577] loop2: detected capacity change from 0 to 8192 [ 680.111082][T26566] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.258986][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 680.276566][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 680.297277][ T12] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 680.313833][ T12] bond0 (unregistering): Released all slaves [ 680.359650][T26566] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.385048][ T12] hsr_slave_0: left promiscuous mode [ 680.395963][ T12] hsr_slave_1: left promiscuous mode [ 680.402309][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 680.410495][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 680.423062][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 680.430730][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 680.443823][T26596] loop2: detected capacity change from 0 to 512 [ 680.450433][ T12] veth1_macvtap: left promiscuous mode [ 680.450790][T26596] EXT4-fs: Ignoring removed nobh option [ 680.455973][ T12] veth0_macvtap: left promiscuous mode [ 680.456032][ T12] veth1_vlan: left promiscuous mode [ 680.462120][T26596] EXT4-fs: old and new quota format mixing [ 680.468053][ T12] veth0_vlan: left promiscuous mode [ 680.529860][T26596] loop2: detected capacity change from 0 to 1024 [ 680.543547][T26596] EXT4-fs: Ignoring removed orlov option [ 680.564134][T26596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 680.583222][T26596] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 680.629925][T26157] lo speed is unknown, defaulting to 1000 [ 680.630904][T26560] chnl_net:caif_netlink_parms(): no params data found [ 680.636697][T26157] infiniband syz2: ib_query_port failed (-19) [ 680.652307][T26602] pimreg: entered allmulticast mode [ 680.660447][T26599] siw: device registration error -23 [ 680.678153][T26599] pimreg: left allmulticast mode [ 680.686096][ T31] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.697428][T26601] loop2: detected capacity change from 0 to 8192 [ 680.708821][ T31] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.732041][ T31] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.800686][ T31] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.863647][T26560] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.870822][T26560] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.909040][T26560] bridge_slave_0: entered allmulticast mode [ 680.917905][T26560] bridge_slave_0: entered promiscuous mode [ 680.937408][T26560] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.944654][T26560] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.955719][T26560] bridge_slave_1: entered allmulticast mode [ 680.965401][T26560] bridge_slave_1: entered promiscuous mode [ 681.000372][T26619] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 681.014967][T26619] 0ªî{X¹¦: entered allmulticast mode [ 681.021090][T26619] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 681.039067][T26560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 681.053061][ T12] IPVS: stop unused estimator thread 0... [ 681.061510][T26560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 681.085319][T26630] loop5: detected capacity change from 0 to 512 [ 681.092155][T26630] EXT4-fs: Ignoring removed nobh option [ 681.098971][T26630] EXT4-fs: old and new quota format mixing [ 681.117783][T26630] loop5: detected capacity change from 0 to 1024 [ 681.124699][T26630] EXT4-fs: Ignoring removed orlov option [ 681.132331][T26560] team0: Port device team_slave_0 added [ 681.145115][T26630] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 681.158614][T26560] team0: Port device team_slave_1 added [ 681.176842][T26630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.189125][T26560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.196133][T26560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.222942][T26560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 681.234801][T26560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 681.241770][T26560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.268376][T26560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 681.291397][T26637] pimreg: entered allmulticast mode [ 681.297669][T26634] lo speed is unknown, defaulting to 1000 [ 681.311534][T26642] FAULT_INJECTION: forcing a failure. [ 681.311534][T26642] name failslab, interval 1, probability 0, space 0, times 0 [ 681.315929][T26560] hsr_slave_0: entered promiscuous mode [ 681.324290][T26642] CPU: 0 UID: 0 PID: 26642 Comm: syz.5.7274 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 681.324347][T26642] Tainted: [W]=WARN [ 681.324355][T26642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 681.324371][T26642] Call Trace: [ 681.324380][T26642] [ 681.324390][T26642] __dump_stack+0x1d/0x30 [ 681.324455][T26642] dump_stack_lvl+0xe8/0x140 [ 681.324496][T26642] dump_stack+0x15/0x1b [ 681.324519][T26642] should_fail_ex+0x265/0x280 [ 681.324539][T26642] ? __se_sys_mount+0xef/0x2e0 [ 681.324570][T26642] should_failslab+0x8c/0xb0 [ 681.324616][T26642] __kmalloc_cache_noprof+0x4c/0x4a0 [ 681.324654][T26642] ? memdup_user+0x99/0xd0 [ 681.324686][T26642] __se_sys_mount+0xef/0x2e0 [ 681.324733][T26642] ? fput+0x8f/0xc0 [ 681.324754][T26642] ? ksys_write+0x192/0x1a0 [ 681.324786][T26642] __x64_sys_mount+0x67/0x80 [ 681.324815][T26642] x64_sys_call+0x2b51/0x3000 [ 681.324847][T26642] do_syscall_64+0xd2/0x200 [ 681.324869][T26642] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 681.324899][T26642] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 681.324937][T26642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.324994][T26642] RIP: 0033:0x7f26f874efc9 [ 681.325016][T26642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 681.325043][T26642] RSP: 002b:00007f26f71af038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 681.325072][T26642] RAX: ffffffffffffffda RBX: 00007f26f89a5fa0 RCX: 00007f26f874efc9 [ 681.325125][T26642] RDX: 0000200000000b80 RSI: 0000200000000040 RDI: 0000000000000000 [ 681.325145][T26642] RBP: 00007f26f71af090 R08: 00002000000004c0 R09: 0000000000000000 [ 681.325163][T26642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 681.325180][T26642] R13: 00007f26f89a6038 R14: 00007f26f89a5fa0 R15: 00007ffccd740098 [ 681.325207][T26642] [ 681.556359][T26560] hsr_slave_1: entered promiscuous mode [ 681.573441][T26560] debugfs: 'hsr0' already exists in 'hsr' [ 681.579933][T26560] Cannot create hsr debugfs directory [ 681.587205][T26634] lo speed is unknown, defaulting to 1000 [ 681.597343][T26637] pimreg: left allmulticast mode [ 681.622729][T26634] lo speed is unknown, defaulting to 1000 [ 681.629417][T26634] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 681.663395][T26634] lo speed is unknown, defaulting to 1000 [ 681.701978][T26634] lo speed is unknown, defaulting to 1000 [ 681.711509][T26645] lo speed is unknown, defaulting to 1000 [ 681.725506][T26634] lo speed is unknown, defaulting to 1000 [ 681.744532][T26634] lo speed is unknown, defaulting to 1000 [ 681.761531][T26634] lo speed is unknown, defaulting to 1000 [ 681.768819][T26634] lo speed is unknown, defaulting to 1000 [ 681.776533][T26634] lo speed is unknown, defaulting to 1000 [ 681.787242][T26634] lo speed is unknown, defaulting to 1000 [ 681.793548][T26634] lo speed is unknown, defaulting to 1000 [ 681.810688][T26634] lo speed is unknown, defaulting to 1000 [ 681.816918][T26634] lo speed is unknown, defaulting to 1000 [ 681.864662][T26660] loop5: detected capacity change from 0 to 512 [ 681.876386][T26660] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 681.903781][T26664] 9pnet_fd: Insufficient options for proto=fd [ 681.924693][T26103] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.057390][T26560] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 682.070188][T26679] lo speed is unknown, defaulting to 1000 [ 682.070994][T26560] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 682.089827][T26560] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 682.104057][T26560] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 682.153060][ C0] ================================================================== [ 682.161193][ C0] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 682.168260][ C0] [ 682.170590][ C0] read-write to 0xffff888237d29de4 of 4 bytes by task 26157 on cpu 1: [ 682.180048][ C0] wq_worker_running+0x95/0x120 [ 682.185541][ C0] schedule_timeout+0xb7/0x170 [ 682.190361][ C0] msleep+0x50/0x90 [ 682.194273][ C0] nsim_fib_event_work+0x42e6/0x4790 [ 682.199569][ C0] process_scheduled_works+0x4ce/0x9d0 [ 682.205071][ C0] worker_thread+0x582/0x770 [ 682.209690][ C0] kthread+0x489/0x510 [ 682.213772][ C0] ret_from_fork+0x122/0x1b0 [ 682.218362][ C0] ret_from_fork_asm+0x1a/0x30 [ 682.223125][ C0] [ 682.225445][ C0] read to 0xffff888237d29de4 of 4 bytes by interrupt on cpu 0: [ 682.232995][ C0] kick_pool+0x49/0x2d0 [ 682.237154][ C0] __queue_work+0x8cb/0xb50 [ 682.241675][ C0] queue_work_on+0xd1/0x160 [ 682.246183][ C0] wg_packet_send_staged_packets+0xa3c/0xce0 [ 682.252185][ C0] wg_xmit+0x5c7/0x6b0 [ 682.256265][ C0] dev_hard_start_xmit+0x125/0x3e0 [ 682.261395][ C0] __dev_queue_xmit+0x10f9/0x2000 [ 682.266439][ C0] neigh_connected_output+0x253/0x2c0 [ 682.272498][ C0] ip6_finish_output2+0xa5f/0xd10 [ 682.279451][ C0] ip6_finish_output+0x3a4/0x540 [ 682.285243][ C0] ip6_output+0x10a/0x250 [ 682.289645][ C0] ndisc_send_skb+0x50f/0x760 [ 682.294333][ C0] ndisc_send_rs+0x2e7/0x360 [ 682.298926][ C0] addrconf_rs_timer+0x1e5/0x310 [ 682.303883][ C0] call_timer_fn+0x3b/0x2c0 [ 682.308397][ C0] __run_timer_base+0x415/0x610 [ 682.313336][ C0] run_timer_softirq+0x31/0x70 [ 682.318105][ C0] handle_softirqs+0xba/0x290 [ 682.322784][ C0] __irq_exit_rcu+0x3a/0xc0 [ 682.327295][ C0] sysvec_apic_timer_interrupt+0x74/0x80 [ 682.332946][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 682.338939][ C0] memset_orig+0x3a/0xb0 [ 682.343368][ C0] __kmalloc_noprof+0x2a2/0x570 [ 682.348236][ C0] __register_sysctl_table+0x54/0xc00 [ 682.353811][ C0] register_net_sysctl_sz+0x19e/0x1c0 [ 682.359198][ C0] __devinet_sysctl_register+0x1cd/0x260 [ 682.364861][ C0] devinet_sysctl_register+0x101/0x150 [ 682.370339][ C0] inetdev_init+0x1fb/0x370 [ 682.379971][ C0] inetdev_event+0x423/0xc10 [ 682.385013][ C0] raw_notifier_call_chain+0x6f/0x1b0 [ 682.390571][ C0] call_netdevice_notifiers_info+0xae/0x100 [ 682.396527][ C0] register_netdevice+0xd48/0xf00 [ 682.401564][ C0] register_netdev+0x3b/0x50 [ 682.406167][ C0] ip6gre_init_net+0x233/0x2e0 [ 682.410929][ C0] ops_init+0x22a/0x2e0 [ 682.415264][ C0] setup_net+0x83/0x210 [ 682.419557][ C0] copy_net_ns+0x28c/0x3b0 [ 682.424252][ C0] create_new_namespaces+0x20e/0x3d0 [ 682.429539][ C0] unshare_nsproxy_namespaces+0xe8/0x120 [ 682.435348][ C0] ksys_unshare+0x3d0/0x6d0 [ 682.439867][ C0] __x64_sys_unshare+0x1f/0x30 [ 682.444656][ C0] x64_sys_call+0x2915/0x3000 [ 682.449342][ C0] do_syscall_64+0xd2/0x200 [ 682.453847][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.459762][ C0] [ 682.462633][ C0] value changed: 0x00000000 -> 0x00000001 [ 682.474569][ C0] [ 682.477260][ C0] Reported by Kernel Concurrency Sanitizer on: [ 682.483972][ C0] CPU: 0 UID: 0 PID: 26679 Comm: syz.0.7287 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 682.498549][ C0] Tainted: [W]=WARN [ 682.502630][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 682.513021][ C0] ================================================================== [ 682.524125][T26688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.532953][T26688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.561819][T26560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 682.581025][T26560] 8021q: adding VLAN 0 to HW filter on device team0 [ 682.597698][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.606238][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 682.623010][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.630143][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 682.728509][T26560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 682.884595][T26560] veth0_vlan: entered promiscuous mode [ 682.904102][T26560] veth1_vlan: entered promiscuous mode [ 682.926178][T26560] veth0_macvtap: entered promiscuous mode [ 682.935558][T26560] veth1_macvtap: entered promiscuous mode [ 682.948598][T26560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 682.962715][T26560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 682.981235][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.996893][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.009333][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.024674][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.976706][ T31] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.025149][ T31] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.074518][ T31] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.134297][ T31] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.211998][ T31] bridge_slave_1: left allmulticast mode [ 685.217795][ T31] bridge_slave_1: left promiscuous mode [ 685.223574][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.232166][ T31] bridge_slave_0: left allmulticast mode [ 685.238628][ T31] bridge_slave_0: left promiscuous mode [ 685.244552][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.335491][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 685.345824][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 685.358672][ T31] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 685.367942][ T31] bond0 (unregistering): Released all slaves [ 685.408629][ T31] hsr_slave_0: left promiscuous mode [ 685.414965][ T31] hsr_slave_1: left promiscuous mode [ 685.420713][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 685.428249][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 685.436814][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 685.444301][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 685.455426][ T31] veth1_macvtap: left promiscuous mode [ 685.460924][ T31] veth0_macvtap: left promiscuous mode [ 685.466934][ T31] veth1_vlan: left promiscuous mode [ 685.472440][ T31] veth0_vlan: left promiscuous mode [ 685.550389][ T31] team0 (unregistering): Port device team_slave_1 removed [ 685.564059][ T31] team0 (unregistering): Port device team_slave_0 removed [ 685.816109][ T31] IPVS: stop unused estimator thread 0...