last executing test programs: 9m24.885591327s ago: executing program 32 (id=8339): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8a}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) 7m20.99341729s ago: executing program 33 (id=9811): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xf) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0c00000060990000010000008100000000160100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000005000000050000000000000000000000000000000c4f4d3c50828866c2101201bf5d446a895f7fd34df08236efe0c90b4d42605ebe6c5e75074ac8fa0b6475adcced810f5e155331b7a416eabfc2562f630dbe", @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)='%+9llu \x00'}, 0x20) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000240)={0x49de, 0x0, 0x3, 0xbfff, 0x11, "ec28a144f13d7607"}) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000001c0)={0x0, 0xfffffffb, 0x0, 0xb2, 0x10, "1ba30c9382000100000000e6ff00"}) r4 = syz_open_pts(r3, 0x20800) r5 = dup3(r4, r3, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r5, 0x4008550d, &(0x7f0000000040)) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') r6 = add_key(&(0x7f0000000d40)='id_resolver\x00', &(0x7f0000000d80)={'syz', 0x3}, &(0x7f0000000dc0)="2735d72200fd1a6df0e2da4119f3d2c4b8e146f25f0131a711ceb6e195311c637e7c2187aea2de313e0cd80ff3889be2964f1ea23618dd0698b031da560a820871e5062884381089f576e7648db2442204658f5e0ac868d78fe65a81e86ce51977bb9a6ca417527247a439b84fa20753e432c7656bd6a8af1cee567a0de8ed380052f543f770f4f646c1725a56ca86de07ea6066ae0d93ee1b5c0ef94aba560a7ad2fb9152f3f6c54ad5f56e295791e72fe5953a01b7655c6b9dc82cfeaf9ebf252dc98f65b1fb02a11603873d5a17d3d46d61", 0xd3, 0xfffffffffffffffa) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x9) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xe, 0x0, &(0x7f00000004c0)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r9 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0x0, 0x3f}, 0xc) r11 = syz_io_uring_complete(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x7, &(0x7f0000000080)=@raw=[@generic={0x3, 0xb, 0x9, 0x200, 0x4}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x2}, @map_val={0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6}], &(0x7f00000002c0)='GPL\x00', 0x8000, 0xd9, &(0x7f0000000300)=""/217, 0x41000, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x4, 0x37c9}, 0x10, 0x0, 0x0, 0xa, &(0x7f00000005c0)=[r2, r5, r9, r10, 0x1, r11, 0xffffffffffffffff], &(0x7f0000000600)=[{0x5, 0x2, 0xd, 0x2}, {0x0, 0x1, 0x6, 0x4}, {0x1, 0x4, 0xa, 0x2}, {0x3, 0x2, 0x8, 0x6}, {0x1, 0x4, 0x4, 0xc}, {0x5, 0x5, 0x4, 0xa}, {0x0, 0x2, 0x10, 0x2}, {0x1, 0x3, 0xa, 0x3}, {0x3, 0x1, 0x1, 0xa}, {0x4, 0x3, 0x7, 0x1}], 0x10, 0x7fff}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r12 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r12, 0x0, 0x40, &(0x7f0000000940)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x180, 0x348, 0x348, 0x0, 0xe8, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x6, 0x0, {[{{@ip={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'dvmrp0\x00', 'syz_tun\x00', {}, {0xff}, 0x84, 0x1, 0x58}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @empty, 0x0, 0xffffffff, 'ip6erspan0\x00', 'vlan0\x00', {}, {0xff}, 0x6, 0x2, 0x1}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x90, 0x5}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x5}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xffffffff, 'bond0\x00', 'bond_slave_1\x00', {}, {}, 0x0, 0x1, 0x60}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0xff000000, 0xff000000, 'veth0_macvtap\x00', 'pimreg0\x00', {}, {}, 0x5f, 0x0, 0x13}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x6d}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) r13 = signalfd(r0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x8) write$9p(r13, &(0x7f0000000180)="0c6f4565a1b465a103e20cf0564724ac5687975b202db51b9b13092c283108125b7d82bd9a9ef7b3f62f5da65d975b1c1142455ad24de1c0f1fc4e55302c3dcede3e73bf63b0346fc11d62d58755070fc923d47f034e8a4a30fbdb27c96cea5d9524e55ab0256cd2278a06677ad6e30e8c98a1a2fe29b5b30e7d9668374a0e868e7ad0261b69a6f450a003583df63f2fe40dd35ed433", 0x96) 7m18.029076209s ago: executing program 34 (id=9835): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x19, &(0x7f0000000100)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @jmp={0x5, 0x1, 0x4, 0x14, 0x3, 0x1, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0xa5c9837f7b0ab097, 0x3, 0x0, 0x3}], &(0x7f0000000040)='GPL\x00', 0x9, 0xeb, &(0x7f0000000280)=""/235, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x5, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000380)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x5, 0x1, 0x2, 0xb}, {0x5, 0x3, 0x3}, {0x2, 0x1, 0x5, 0x3}, {0x4, 0x2, 0x1, 0x8}, {0x5, 0x2, 0x2, 0xa}, {0x2, 0x1, 0xe, 0x4}, {0x5, 0x2, 0x7, 0x8}, {0x3, 0x1, 0xb, 0x7}], 0x10, 0x3ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000000)='rxrpc_rtt_tx\x00', r0, 0x0, 0xfffffffffffff801}, 0x18) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000a80)='kfree\x00', r3}, 0x18) r4 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r4, &(0x7f00000000c0)='system_u:object_r:gpg_helper_exec_t:s0\x00', 0x27) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000580)='/-\x00', &(0x7f00000005c0)="765b1315a5fae1c63842a84d07e6890a5a25cbae21a534aa400524e8999aa18c22c62b60e0b04781f15074edd17130f354be272f5716bda2aec1bbd2", 0x3c) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="c8010000170001000000000000000000640101020000000000000000000000000000000032000000e0000002000000000000000000000000fc020000000000000000000000000000fe8000000000000000000000000000aa0000004000"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000020000000000000000000000000a010100000000000000000000000000000000000201000302"], 0x1c8}, 0x1, 0x0, 0x0, 0x20048010}, 0x4000) 7m13.865212332s ago: executing program 35 (id=9855): r0 = socket$inet_sctp(0x2, 0xb, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000380)=@assoc_value, &(0x7f00000003c0)=0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x11) ioctl$TCFLSH(r2, 0x8910, 0xbffffffffffffffb) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@gettaction={0xb8, 0x32, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xed}, @action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff8}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x34, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}]}, 0xb8}}, 0x20040054) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8f) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000080)="240000001a007f0214f9f407000904080a000000000000050002000008000f40fe00000e", 0x24) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x2, 0x7fff8000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 7m8.043549143s ago: executing program 36 (id=9884): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="8fbf313a663bd91e", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x80000000006}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0xfffffffe, 0x1, 0x9, 0x4, 0x7}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x4320, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x10000004}, {0x6, 0x40, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x9ef, 0x1, 0x3, 0x9, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xe6, 0xa000, 0x8, 0x5, 0xa17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x5, 0xfff, 0xe4af, 0x5, 0x8, 0x7}, {0x6, 0xd, 0x22e, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x83, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0xffffffff, 0xfffffffb, 0x7fffffff}, {0x0, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x7}, {0xffffffff, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xad52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0x8001, 0xfffffff8, 0x2}, {0x3, 0x8, 0xc, 0x83, 0x9, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x6, 0x40}, {0x268e, 0xd, 0x9, 0x8, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0x800ec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x5, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x200006}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0xc}, {0x6, 0x200004, 0x5, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x80000001, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x10000, 0xa4, 0x0, 0x7}, {0x8, 0xde, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0x7, 0x9}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x4, 0x10001, 0x5, 0x7e, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x80000001, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0x1, 0x4, 0x800, 0x0, 0x8}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0xb, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0x2000000a}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0xfffffffc, 0x4, 0x2, 0xc0, 0xfffff44c}, {0x4, 0x2, 0xfffffff3, 0x9, 0xbe, 0x5}, {0x6, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x200, 0x9, 0xbc, 0xf}, {0x1ff, 0xfffffffc, 0x1, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x5, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x2, 0x8}, {0xb8000000, 0x100, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x2, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0x10, 0x6, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x383, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x47, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x1, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x215ac34e, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc, 0x2}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x4, 0xd, 0x7769}, {0x2, 0x20000000, 0x3, 0x6, 0x81, 0x5}, {0x6, 0x0, 0x1, 0x40, 0x9, 0x7}, {0x8, 0x8, 0xd, 0x6, 0x5}, {0x3, 0x9, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0xfffffffd}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0x4, 0x54, 0x8, 0x9, 0x0, 0x6}, {0x401, 0x6, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x81, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x6}, {0x7011, 0xfff, 0x9, 0x1, 0x9, 0x2}, {0x1, 0xff, 0x8, 0x3, 0x2, 0xfffffffc}, {0x1, 0x9, 0xc402, 0x1, 0x100, 0xc72}, {0xfffffff9, 0xa, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x6, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0xb, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x81, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0xf, 0x6}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x4, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x1, 0x2, 0x3, 0x4, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0x10, 0x1}, {0xffffffc0, 0x1000, 0x9, 0x4, 0x24e, 0x4}, {0x7, 0x7, 0x7, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0xaacd, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x100000, 0xb}, {0x2, 0x5, 0x5, 0x5, 0x0, 0x7}, {0xa, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x1}, {0x1}, {}, {0x2, 0x1}, {0x4}, {0x6928c4470e1bbbda, 0x1}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x5}, {0x5, 0x1}, {}, {0x3}, {}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x2}, {0x2}, {0x3}, {0x2}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x2000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0700000004000800080000659a000000000b0400", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000400"/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x1, @remote}, 0xa}}, 0x26) r6 = syz_io_uring_setup(0x49b, &(0x7f0000000380)={0x0, 0xd6f0, 0x8, 0x82, 0x20e}, &(0x7f0000000200)=0x0, &(0x7f0000000680)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r9}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000100)=0xfffffffe, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x400, 0x1}) io_uring_enter(r6, 0x5fdd, 0x217, 0xa5, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000007000000050013000000000014000800000000000000000000000000000000000500140000000000"], 0x38}}, 0x0) lseek(0xffffffffffffffff, 0x3, 0x3) unshare(0x22020400) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000400)={0x2, &(0x7f0000000340)=[{0x8, 0x2, 0xfd, 0x7f}, {0x100, 0x2, 0x4, 0x8}]}) 6m56.757768328s ago: executing program 37 (id=9931): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0xc, 0x0, 0x8}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x82, &(0x7f0000000180)={r1, 0x2}, 0x8) 6m33.731755373s ago: executing program 38 (id=10206): dup(0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='kfree\x00', r0, 0x0, 0x80}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=ANY=[@ANYBLOB="84010000100001002bbd700000000000fc010000000000000000000000000000000000000000000000000000000000000000ecdf00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x184}}, 0x4050) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="8b33000000000000000005"], 0x38}}, 0x0) 6m32.840942362s ago: executing program 39 (id=10220): r0 = socket$igmp6(0xa, 0x3, 0x3a) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) sendmsg$tipc(r1, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @loopback, 0x1}, {0xa, 0xfffe, 0xffdffffd, @dev={0xfe, 0x80, '\x00', 0x2}, 0x4}, 0x1, {[0xba, 0x2, 0x1, 0x10b, 0x0, 0x40001, 0x8, 0x5]}}, 0x5c) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0x30, 0xffffffffffffffff, 0x22f31000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000808500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000009c0)={&(0x7f0000000a00)='sys_enter\x00', r4}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') 6m30.532453561s ago: executing program 40 (id=10236): socket$packet(0x11, 0x3, 0x300) setresuid(0xee01, 0xee01, 0x0) setfsuid(0x0) 4m57.068074425s ago: executing program 9 (id=11919): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x10, 0x803, 0x0) symlink(&(0x7f0000000380)='./file0/../file0/file0\x00', &(0x7f00000017c0)='./file0\x00') r1 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xadz\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg$inet(r1, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000040)) accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x2711}, 0x10, 0x80000) socket$kcm(0x10, 0x2, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) 4m56.536134776s ago: executing program 9 (id=11933): socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x227) socket$inet_tcp(0x2, 0x1, 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x227) (async) 4m56.511885888s ago: executing program 9 (id=11935): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1300, 0xe, 0x0, &(0x7f0000000100)="e0274239ed0d85df9774992f0800", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m55.741367798s ago: executing program 9 (id=11950): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="18100000020000000000000000000000000036000000000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@file={0x1, './file2\x00'}, 0x90) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)={0x50, 0x7, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040004}, 0x20000000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x13, &(0x7f0000000780)=ANY=[@ANYBLOB="180800000040000000000000000100008510000006", @ANYRES32=r2, @ANYRES32=r2], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x0, &(0x7f0000000440)={[{@init_itable_val={'init_itable', 0x3d, 0x7}}]}, 0x1, 0x523, &(0x7f0000000a80)="$eJzs3c1vHGcZAPBnNrtJnDi1+ThAJUKhRU4F2bVr2locSpEQnCohyj0Ye21ZXnst77qNVxV1/gIkhACJE1y4IPEHIKFIXDgipEpwBqkIhCCFAwfooJ2d9Vd27W262XXs30+azPvO1/O8m8zszOybmQAurGci4tWIeD9N0+cjYiqSbHohH2KvM7SXe+/BW0vtIYk0ff0fSbZku97dVpKPr+erXY2Ib3494jvJw3Ebu631xVqtup3XK82NrUpjt3V7bWNxtbpa3Zyfn3tp4eWFFxdmh9LOGxHxylf/8sPv/fxrr/z6C2/++c7fbn23ndZkPv9wOz6g4kkzO00vZZ/F4RW2HzHYWVTMWpibGGyde48xHwAA+muf4380Ij4bEc/HVFw6+XQWAAAAeAKlX56M/yYRaW+X+0wHAAAAniCFrA9sUijnfQEmo1Aolzt9eD8e1wq1eqP5+ZX6zuZyp6/sdJQKK2u16mzWVzirJ+36XFY+qL9wrD5/pXO/4QdTE1m9vFSvLY/75gcAAABcENePXf//e6pz/Q8AAACcM9PjTgAAAAB47Fz/AwAAwPnn+h8AAADOtW+89tpERKTd918vv7G7s15/4/ZytbFe3thZKi/Vt7fKq/X6avbMvo3Ttler17e+GJs7dyvNaqNZaey27mzUdzabd9aOvAIbAAAAGKGPfPr+H5OI2PvSRDa0XR53UsBIFPdLST7usff/6anO+N0RJQWMxKUBlnn3yggSAUauOO4EgLEpjTsBYOySU+b37bzzu3z8meHmAwAADN/MJ/v//l84cc29k2cDZ56dGC6uY/t/2jauXIDRyn7/H7TDr5MFOFdKA/UABM6zD/37/6lcVwAAwLhNZkNSKOe39yajUCiXI25krwUoJStrtepsRDwVEX+YKl1p1+diwP84CAAAAAAAAAAAAAAAAAAAAAAAAABk0jTpvPQHAAAAOLciCn9NfpNk7/+amXpu8vj9gcvJf6Yif0Xomz95/Ud3F5vN7bn29H/uT2/+OJ/+wjjuYAAAAADHda/Tu9fxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBM7z14a6k7jDLu378SEdO94hfjaja+GqWIuPavJIqH1ksi4tIQ4u/di4hP9IqftNPaD9kr/sTjjx/T+afQK/71IcSHi+x++/jzaq/9rxDPZOPe+18x4kj9UR05/rVuHjn+do9/l/rs/zcGjPH0O7+s9I1/L+LpYu/jTzd+0if+swPG//a3Wq1+89KfRsz0/P5JjsSqNDe2Ko3d1u21jcXV6mp1c35+7qWFlxdeXJitrKzVqvmfPWN8/1O/ev+k9l/rE3/6lPY/N2D7//fO3Qcf6xRLB1Mn9uPferZH/N/+LF/u4fiF/Lvvc3m5PX+mW97rlA+7+Yvf3zyp/csH7S99kL//WwO2fyg7CgAwNI3d1vpirVbdfsIKb+f5n75w+zzrbOT8CIXkbKRxXgtvD3WDaZqm7X+TPWbdj4hBtpPEWfhYssJ4j0sAAMDwHZz0jzsTAAAAAAAAAAAAAAAAAAAAuLgefvpXmsaQH0J2PObefinxZGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Mz4fwAAAP//j6PX8g==") sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="f1d79a8d970152a20e7a7a922d3882872611e4062a227392872e554332da21eef927ffd2f5c7333b987746f6332319a6a0cc22ddae6d46f405f322ba0c484543baf3"], 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) 4m55.689424842s ago: executing program 41 (id=11950): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="18100000020000000000000000000000000036000000000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@file={0x1, './file2\x00'}, 0x90) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)={0x50, 0x7, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040004}, 0x20000000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x13, &(0x7f0000000780)=ANY=[@ANYBLOB="180800000040000000000000000100008510000006", @ANYRES32=r2, @ANYRES32=r2], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x0, &(0x7f0000000440)={[{@init_itable_val={'init_itable', 0x3d, 0x7}}]}, 0x1, 0x523, &(0x7f0000000a80)="$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") sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="f1d79a8d970152a20e7a7a922d3882872611e4062a227392872e554332da21eef927ffd2f5c7333b987746f6332319a6a0cc22ddae6d46f405f322ba0c484543baf3"], 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) 4m34.148124171s ago: executing program 1 (id=12380): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) unshare(0x2c040000) 4m34.104226425s ago: executing program 1 (id=12383): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0) 4m34.064338648s ago: executing program 1 (id=12384): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000002300)={0x7, {"a2e3ad214fc752f91b4809094bf70e0dd038e7ff7fc6e5539b326d078b089b3b083872090890e0878f0e1ac6e7049b3d68959b4c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b08320d075d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb1d17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f0000000c558cdc0a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000e0a37ce0d0d4aa202e928f28381aab144a5d429a04a6a2b83c7076600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e988037b2ed050000000000000046684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2e7faa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5399e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a74cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df2928924486cfff799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d3a6df40babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e74322f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2a9702b4230f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f39a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60559516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df11fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fffffff7f00000000758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x10af}}, 0x1006) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32, @ANYBLOB="000000fa3d000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) statx(r4, 0x0, 0x1000, 0x800, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='cachefiles_coherency\x00', r4, 0x0, 0xffff}, 0x18) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) socket$inet6(0xa, 0x3, 0x3a) syz_emit_ethernet(0x3e, &(0x7f00000004c0)=ANY=[@ANYBLOB="4be88fa3027baaaaaaaaaabb86dd60122d9200083afffe8000000000000000000000000000aa00000000000000000000000000000001800090780071000765dcd40bb056f4355260c01159cd95d75ef55de7ba42fa21792144"], 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x5}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) eventfd(0x67) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r9 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100", @ANYRES32=r9, @ANYBLOB="2a997dee7022a69a668b5d91e4fc5efe77bcb02013af3a43884aa6fd8b38b1bc00000101000000db1971"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000c34200", @ANYRES16, @ANYBLOB="040026bd7000ffdbdf252500000006000400445500000c0005000201aaaaaaaaaaaa06000600ffff00000c002d000202aaaaaaaaaaaa08002f0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x4001) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000900)=@newtaction={0x898, 0x30, 0x937, 0xfffffffc, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x396bad78, 0x5, 0x1ff, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xd96f, 0xfffffffe, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x84, 0x5, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffc, 0x9, 0x4, 0x4, 0x0, 0x1a, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x20000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3ffffbfc, 0x820d, 0x0, 0x1, 0x3, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffefffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffff, 0x80000000, 0x0, 0x100000, 0x0, 0xff, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa, 0x7, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x6, 0x2, 0x0, 0x2, 0x80000000, 0x7fffffff, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x5, 0x2, 0x9, 0x2, 0xb14f, 0x40, 0x1, 0x3, 0xff, 0x0, 0xfa, 0x4, 0x4, 0xf, 0x80200001, 0x7, 0xfffffffb, 0x1, 0x20, 0x3, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x5, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x6, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x0, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0x0, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff5, 0x4, 0x9, 0x2, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x7, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x7, 0x74e4, 0x7fff, 0x17, 0x7ff, 0x1, 0x80000d70, 0x1, 0x8, 0xa, 0x800003, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x9, 0x81, 0x7, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x8003, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x400000, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0x1, 0x7, 0x2, 0x21eb, 0x4, 0x6, 0x4, 0x7, 0x0, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x4, 0x4, 0x7fff, 0x4a5, 0x27, 0x6, 0x9, 0x8, 0x4000000, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0x6, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x7ffffffd, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0xd, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x13c5, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x1, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x14c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x4008050}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) write$cgroup_devices(r0, &(0x7f00000005c0)=ANY=[], 0xfffffeff) kexec_load(0x7ff, 0x4, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x4010000}, {0x0, 0x0, 0x3e0000, 0xfffffffffffffffc}, {&(0x7f00000001c0)="af20667977d432122b662d162f52ccd632e86ac43706f2b69b8ce362c098453f0ad2aa136d23ba924d157a4824818a93e66ee42ec5cfd15f9e6f21ca202c992ab3d56abeb456ae9b4b5c8b5d78dfc1000000003764", 0x55, 0x80000001, 0x1}, {&(0x7f0000000040)="12c0533941118377012a5e6e2921dd855fecd00fac35eff95e607111af1feabacef8f183be15ed95549c9271f3856975a8c871104d60fb76eb4ffab722a23b644d59ae612cd0dcdba3e942b78e7210fd97f8b86bffde7ad2d063ab82a1778055eff8484d99bea5c0814fdf60c717a9660b1ccab7179ae2a558081d926f3f07eb10b69dace8ee7e91817421379d4aa12ced525c5395397959502b07bb58831768655362ef32a6181a06eb7e69db0ca61c79e1d7379dfd29a58eae1f4ce31042193b4cf8d0e2c5c2dc2557c760b2e3005ea1a5b0", 0xd3, 0x200, 0x101}], 0x30000) 4m33.031351318s ago: executing program 1 (id=12401): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x22020600) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x800000, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r10, 0xc0189436, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000000000000b30000000000000000000091"]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) io_setup(0x20fe, &(0x7f00000001c0)) socket$packet(0x11, 0x2, 0x300) 4m32.279691456s ago: executing program 1 (id=12410): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f42607", 0x29}], 0x1) read(r2, &(0x7f0000001400)=""/4076, 0xfffffeea) 4m31.732131329s ago: executing program 1 (id=12417): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100a700", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) inotify_init1(0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000008c0)='rxrpc_peer\x00', r1, 0x0, 0xe000000000000000}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, &(0x7f0000000180), 0x0, 0x0, 0x0, 0xa6820000}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000006c0)=ANY=[@ANYBLOB="ffff0900000017043a589ada7305000800019078ac1e0001ac1414aa0500904607ae37d8b8fddc00fff9000000110000ac1414bb64010102"], 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32=r4], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000bc0)=@newtaction={0x518, 0x30, 0x12f, 0x0, 0x0, {}, [{0x190, 0x1, [@m_csum={0x18c, 0x15, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x0, 0x2, 0x3, 0x9}, 0x14}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x7, 0x4, 0xe, 0x7}, 0x2c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x5, 0x8, 0x6, 0x2}, 0x54}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x101, 0x5c, 0x1, 0xe5, 0x6}, 0x5a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xe, 0x10000000, 0xf9, 0x100}, 0x7b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x400, 0x7, 0x10000000, 0x1, 0x5}, 0x5e}}]}, {0xb7, 0x6, "41875315c0edf3bd2991cae773efe26c446fcedcaddd5d1bbf8ad114d4e19385df5bca11370b4abcc541b338a8444556e3dff81120b09f52e36d9c3647287647d85809259728f489c900ded78ebeb4f60cc4a779537d32afaebda5cd3b997a084ebe65941b9dd2ddb555f0a215ee2add4b9058abee5e30204f5e80a38d5c4fa0ad57f827505c95238dc08e826d215140973863f6a07cc1ccafa162890c3909e7af5c6a0260ee2dd89fde38e8d2aa5487d2d94f"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, {0x374, 0x1, [@m_connmark={0x1c4, 0x6, 0x0, 0x0, {{0xd}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd, 0x5, 0x0, 0x0, 0x2c21fd68}, 0xfe00}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x10, 0x1, 0x0, 0x1c}, 0xd71}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80000000, 0x6, 0x4, 0x8, 0x8}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x3, 0x8, 0x4, 0xad9}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x3ff, 0x20000000, 0x100, 0x9d1}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x80000000, 0x4, 0x100, 0x800}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0xaa, 0x20000000, 0x3, 0x2}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x8, 0x5, 0x4, 0x7}, 0xffff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0xaf0, 0xffffffffffffffff, 0x6, 0x10001}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x6, 0x0, 0x0, 0x1fa}, 0x5}}]}, {0x7a, 0x6, "5474c734641f5c6e05d14e9474fe2067ae133cc2020c6aadacb4a92d3fead37521a85dc88658d5e1dd39d2dd85f974d36262a298b45181f2d4821653243d38e86dc677d705295b2d709c830b9792ad7ea2b80dc9ce0cec7eeabcd5d150b0415092f8785283bdc9d758cd1e6b0ca41a1e20c839bf8804"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0x80, 0xd, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x14, 0x4, [{0x5, 0xe0, 0x0, 0x7e55}, {0xe, 0xc, 0x4, 0x80000001}]}]}, {0x41, 0x6, "00b59ff02504b60c8e4ae1bfedcc8bdd356ccea99fd1d35d6f466cd4d185c508452f51fca0610d6fd1cc63007231991dfdbedd6e46931c8a2bc982bd22"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0x68, 0x20, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x7}]}, {0x31, 0x6, "37358f7b35f7f53cd1fc63119c94872ec7a2ce398415f546b56ec0c5fec7a0c3aa5d0af73330ab8b7af18aa775"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_bpf={0xc4, 0x14, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r5}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x8, 0x2, 0x8, 0x9}}]}, {0x6e, 0x6, "e074efbd0374c36e88bfaf55a4b733fed57d46e4a9aa81c1cda48234637e154b002fb2fa093fd0e1be95dab6074f06d78fc71bae0fb72669241b8ffb5ae1c01f9104483e2ba2fd3c93ef6c8db99cdbf2a2ac813b79b04341914f6ba3be34d5d1406fba1330aec19763f8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x518}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) 4m31.650167315s ago: executing program 42 (id=12417): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100a700", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) inotify_init1(0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000008c0)='rxrpc_peer\x00', r1, 0x0, 0xe000000000000000}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, &(0x7f0000000180), 0x0, 0x0, 0x0, 0xa6820000}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000006c0)=ANY=[@ANYBLOB="ffff0900000017043a589ada7305000800019078ac1e0001ac1414aa0500904607ae37d8b8fddc00fff9000000110000ac1414bb64010102"], 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32=r4], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000bc0)=@newtaction={0x518, 0x30, 0x12f, 0x0, 0x0, {}, [{0x190, 0x1, [@m_csum={0x18c, 0x15, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x0, 0x2, 0x3, 0x9}, 0x14}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x7, 0x4, 0xe, 0x7}, 0x2c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x5, 0x8, 0x6, 0x2}, 0x54}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x101, 0x5c, 0x1, 0xe5, 0x6}, 0x5a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xe, 0x10000000, 0xf9, 0x100}, 0x7b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x400, 0x7, 0x10000000, 0x1, 0x5}, 0x5e}}]}, {0xb7, 0x6, "41875315c0edf3bd2991cae773efe26c446fcedcaddd5d1bbf8ad114d4e19385df5bca11370b4abcc541b338a8444556e3dff81120b09f52e36d9c3647287647d85809259728f489c900ded78ebeb4f60cc4a779537d32afaebda5cd3b997a084ebe65941b9dd2ddb555f0a215ee2add4b9058abee5e30204f5e80a38d5c4fa0ad57f827505c95238dc08e826d215140973863f6a07cc1ccafa162890c3909e7af5c6a0260ee2dd89fde38e8d2aa5487d2d94f"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, {0x374, 0x1, [@m_connmark={0x1c4, 0x6, 0x0, 0x0, {{0xd}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd, 0x5, 0x0, 0x0, 0x2c21fd68}, 0xfe00}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x10, 0x1, 0x0, 0x1c}, 0xd71}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80000000, 0x6, 0x4, 0x8, 0x8}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x3, 0x8, 0x4, 0xad9}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x3ff, 0x20000000, 0x100, 0x9d1}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x80000000, 0x4, 0x100, 0x800}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0xaa, 0x20000000, 0x3, 0x2}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x8, 0x5, 0x4, 0x7}, 0xffff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0xaf0, 0xffffffffffffffff, 0x6, 0x10001}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x6, 0x0, 0x0, 0x1fa}, 0x5}}]}, {0x7a, 0x6, "5474c734641f5c6e05d14e9474fe2067ae133cc2020c6aadacb4a92d3fead37521a85dc88658d5e1dd39d2dd85f974d36262a298b45181f2d4821653243d38e86dc677d705295b2d709c830b9792ad7ea2b80dc9ce0cec7eeabcd5d150b0415092f8785283bdc9d758cd1e6b0ca41a1e20c839bf8804"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0x80, 0xd, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x14, 0x4, [{0x5, 0xe0, 0x0, 0x7e55}, {0xe, 0xc, 0x4, 0x80000001}]}]}, {0x41, 0x6, "00b59ff02504b60c8e4ae1bfedcc8bdd356ccea99fd1d35d6f466cd4d185c508452f51fca0610d6fd1cc63007231991dfdbedd6e46931c8a2bc982bd22"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0x68, 0x20, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x7}]}, {0x31, 0x6, "37358f7b35f7f53cd1fc63119c94872ec7a2ce398415f546b56ec0c5fec7a0c3aa5d0af73330ab8b7af18aa775"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_bpf={0xc4, 0x14, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r5}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x8, 0x2, 0x8, 0x9}}]}, {0x6e, 0x6, "e074efbd0374c36e88bfaf55a4b733fed57d46e4a9aa81c1cda48234637e154b002fb2fa093fd0e1be95dab6074f06d78fc71bae0fb72669241b8ffb5ae1c01f9104483e2ba2fd3c93ef6c8db99cdbf2a2ac813b79b04341914f6ba3be34d5d1406fba1330aec19763f8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x518}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) 4m17.174343137s ago: executing program 7 (id=12632): socket$nl_netfilter(0x10, 0x3, 0xc) modify_ldt$write2(0x11, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_create(r1, &(0x7f00000001c0)=@access={'system_u:object_r:bsdpty_device_t:s0', 0x20, 'unconfined', 0x20, 0x1ff}, 0x45) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x6, 0x8000000000000001}, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000002000090002000000ffdbdf25020000000800080008"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 4m16.988384421s ago: executing program 0 (id=12634): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010025bd5600fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="100804001800000008000d"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4040040) 4m16.923592916s ago: executing program 7 (id=12635): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x60, 0x1406, 0x200, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4011) unshare(0x22020600) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') epoll_pwait2(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={[0x6]}, 0x8) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) 4m16.88533279s ago: executing program 0 (id=12636): r0 = socket(0xa, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a9a4850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendto$inet6(r4, &(0x7f0000000000)="aa", 0xffe0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth0_macvtap\x00', 0x10) sendmmsg$inet6(r2, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000480)="177f", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000000040)="8837", 0x2}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xff}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000280)="e62f1b963c9fa140aa1673d7fd7d5b1d13cbebe5c88c045841840a0179fe258a08881b807ee1a021e2f812ff3307ee75d70a23eb9661d89458adba5e565e349cad6d19aab8d3563dadb27f58a447cfcd366cadfd912cfe6febd24145f99ba119d3634b2f153e4803643adc7267282345", 0x70}], 0x1, &(0x7f0000000380)=[@rthdr_2292={{0x48, 0x29, 0x39, {0x2, 0x6, 0x2, 0x68, 0x0, [@dev={0xfe, 0x80, '\x00', 0x2c}, @mcast1, @empty]}}}], 0x48}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x9, @empty, 0x10000}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000400)="7731e1e207f0276a6de5d8443c7d4c06a9009f16b8a7a206ad8a52f5e56978de3fbea0a387b106fa6e98a8efa3fda4cc6565a7bba3bb5b656a3b1a7aca1b18dae29001dd897b322cdb130a82fd78867ba7", 0x51}, {&(0x7f0000000500)="4ebc073766b566ee1f984ce2df6ff35e0f6b89a1560884f90a2db056f2bc2228e9b8f0730bdf8ab89d5cd2e1a6c5", 0x2e}, {&(0x7f0000000540)}, {&(0x7f0000000580)="edfecb72a2b0918600c0433ed9d7e48b31fa3816e12b61d2d23d3566b5c8bde607d527e87344dd67d86cb66de476cdcc99b5f6f87bfd7bd63b442ad0b72e9df343a34ec392d47af7b8917afda497bb5f9a6ad796b7e5e055538beae8592e84fa416ae8ece6ec40a770941ac8facb6e2581071b4e6c4758947beb85b49ba662b143c662dd805129024ef395295873f60fc9df8f8f59cc4c4c5edd491632efe58f59b276145b90f44cb0dbddeb", 0xac}, {&(0x7f00000006c0)="59a7dd4cdfcbc7567f26014f27f422a1cf82bdface3e83b59d1cdff8fb9e04004652e4651d3a48877e663f98f225a3f14769bb6250a1923d2f6184aba162e2b5355b418bcfb3ead22b41e147178f982a0cd0f1ad33b85dcb46bc8a84213220646b8a8d421e2f01754e6366fbe2569c1bc8fc182a54ad1eca02127d54a83eb24618031aa113ce3bd0", 0x88}, {&(0x7f0000000640)="f0c16e5e75f256a13e1178fadf1bf71d3c3dd0ea368c681bae", 0x19}], 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000005870ab2800000034000000faffffff000000002000000000000000290000003700000073eaff00000000000c00000000000000"], 0x38}}], 0x4, 0x4001015) r5 = fcntl$dupfd(r2, 0x0, r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0003}]}) socket$nl_rdma(0x10, 0x3, 0x14) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000151000/0x2000)=nil, 0x2000, 0x0, 0x0) mbind(&(0x7f0000265000/0x2000)=nil, 0x2000, 0x8000, 0x0, 0x9, 0x7) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000040000ee07000400e000e700140006"], 0x38}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="0b032200eb1025120212475400f6a13bb1000000080086dd4803", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000004c0)=[@in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e24, @loopback}], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="1c00"/12, @ANYRES32=0x0, @ANYBLOB='h'], 0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000680)=[@in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e24, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}], 0x2c) 4m16.829063974s ago: executing program 7 (id=12637): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r0, 0x0, 0x0) 4m16.772126658s ago: executing program 7 (id=12638): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x22020600) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 4m16.539971316s ago: executing program 7 (id=12639): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x6021}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 4m15.891018676s ago: executing program 0 (id=12642): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2a080, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) unshare(0x2040400) inotify_rm_watch(0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0xff, 0x600, 0x0, 0x5022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r5) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000030400000000fdffffff00000400", @ANYRES32=0x0, @ANYBLOB="60bc010004a702002400128009000100626f6e640000000014000280080007000e00000008000300e42e000031b002565e7b9e759e1dd4f615556aef454e3a9dae8aa61e57322e9d92747a5150404095e3146010ec940fc8c35dc82af597"], 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1, 0x1, 0x4}}) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000240)={0x0, 0x4000000}, 0x10}, 0x94) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000100)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg1\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) 4m15.706335901s ago: executing program 7 (id=12645): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010025bd5600fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="100804001800000008000d"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4040040) 4m15.669317774s ago: executing program 43 (id=12645): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010025bd5600fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="100804001800000008000d"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4040040) 4m14.907557553s ago: executing program 0 (id=12652): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x22020600) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 4m14.590434077s ago: executing program 0 (id=12657): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000002300)={0x7, {"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", 0x10af}}, 0x1006) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32, @ANYBLOB="000000fa3d000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) statx(r4, 0x0, 0x1000, 0x800, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='cachefiles_coherency\x00', r4, 0x0, 0xffff}, 0x18) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) socket$inet6(0xa, 0x3, 0x3a) syz_emit_ethernet(0x3e, &(0x7f00000004c0)=ANY=[@ANYBLOB="4be88fa3027baaaaaaaaaabb86dd60122d9200083afffe8000000000000000000000000000aa00000000000000000000000000000001800090780071000765dcd40bb056f4355260c01159cd95d75ef55de7ba42fa21792144"], 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x5}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) eventfd(0x67) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r8 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r8, @ANYBLOB="2a997dee7022a69a668b5d91e4fc5efe77bcb02013af3a43884aa6fd8b38b1bc00000101000000db1971"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000c34200", @ANYRES16, @ANYBLOB="040026bd7000ffdbdf252500000006000400445500000c0005000201aaaaaaaaaaaa06000600ffff00000c002d000202aaaaaaaaaaaa08002f0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x4001) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000900)=@newtaction={0x898, 0x30, 0x937, 0xfffffffc, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x396bad78, 0x5, 0x1ff, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xd96f, 0xfffffffe, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x84, 0x5, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffc, 0x9, 0x4, 0x4, 0x0, 0x1a, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x20000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3ffffbfc, 0x820d, 0x0, 0x1, 0x3, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffefffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffff, 0x80000000, 0x0, 0x100000, 0x0, 0xff, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa, 0x7, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x6, 0x2, 0x0, 0x2, 0x80000000, 0x7fffffff, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x5, 0x2, 0x9, 0x2, 0xb14f, 0x40, 0x1, 0x3, 0xff, 0x0, 0xfa, 0x4, 0x4, 0xf, 0x80200001, 0x7, 0xfffffffb, 0x1, 0x20, 0x3, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x5, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x6, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x0, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0x0, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff5, 0x4, 0x9, 0x2, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x7, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x7, 0x74e4, 0x7fff, 0x17, 0x7ff, 0x1, 0x80000d70, 0x1, 0x8, 0xa, 0x800003, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x9, 0x81, 0x7, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x8003, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x400000, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0x1, 0x7, 0x2, 0x21eb, 0x4, 0x6, 0x4, 0x7, 0x0, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x4, 0x4, 0x7fff, 0x4a5, 0x27, 0x6, 0x9, 0x8, 0x4000000, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0x6, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x7ffffffd, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0xd, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x13c5, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x1, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x14c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x4008050}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) write$cgroup_devices(r0, &(0x7f00000005c0)=ANY=[], 0xfffffeff) kexec_load(0x7ff, 0x4, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x4010000}, {0x0, 0x0, 0x3e0000, 0xfffffffffffffffc}, {&(0x7f00000001c0)="af20667977d432122b662d162f52ccd632e86ac43706f2b69b8ce362c098453f0ad2aa136d23ba924d157a4824818a93e66ee42ec5cfd15f9e6f21ca202c992ab3d56abeb456ae9b4b5c8b5d78dfc1000000003764", 0x55, 0x80000001, 0x1}, {&(0x7f0000000040)="12c0533941118377012a5e6e2921dd855fecd00fac35eff95e607111af1feabacef8f183be15ed95549c9271f3856975a8c871104d60fb76eb4ffab722a23b644d59ae612cd0dcdba3e942b78e7210fd97f8b86bffde7ad2d063ab82a1778055eff8484d99bea5c0814fdf60c717a9660b1ccab7179ae2a558081d926f3f07eb10b69dace8ee7e91817421379d4aa12ced525c5395397959502b07bb58831768655362ef32a6181a06eb7e69db0ca61c79e1d7379dfd29a58eae1f4ce31042193b4cf8d0e2c5c2dc2557c760b2e3005ea1a5b0", 0xd3, 0x200, 0x101}], 0x30000) 4m9.881884662s ago: executing program 0 (id=12711): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000004200010a00000000000000f2e6c3"], 0x14}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x3, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x90}, 0x50) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000011c0)={r4, &(0x7f00000001c0), &(0x7f0000000000)=@udp=r5}, 0x20) recvmmsg(r5, &(0x7f000000ab40), 0x22c, 0x2201, 0x0) futex(&(0x7f0000000340)=0xfff, 0x9, 0x2, 0x0, &(0x7f00000000c0)=0x55, 0x80000002) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t'], 0x24}, 0x1, 0x5502000000000000}, 0x4000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) r8 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @empty}, {0xa, 0x4e22, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x899, 0x1]}}, 0x5c) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000180)=0x81, 0x4) r9 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r9, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @random="6c7621d7cc94", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "98a350", 0x2, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @private1}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) 4m9.820602117s ago: executing program 44 (id=12711): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000004200010a00000000000000f2e6c3"], 0x14}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x3, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x90}, 0x50) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000011c0)={r4, &(0x7f00000001c0), &(0x7f0000000000)=@udp=r5}, 0x20) recvmmsg(r5, &(0x7f000000ab40), 0x22c, 0x2201, 0x0) futex(&(0x7f0000000340)=0xfff, 0x9, 0x2, 0x0, &(0x7f00000000c0)=0x55, 0x80000002) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t'], 0x24}, 0x1, 0x5502000000000000}, 0x4000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) r8 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @empty}, {0xa, 0x4e22, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x899, 0x1]}}, 0x5c) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000180)=0x81, 0x4) r9 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r9, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @random="6c7621d7cc94", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "98a350", 0x2, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @private1}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) 8.751080351s ago: executing program 4 (id=16746): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000730000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getitimer(0x1, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file2\x00', 0xa0835c, &(0x7f00000001c0)={[{@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@dioread_nolock}, {@usrjquota}, {@nodelalloc}, {@sysvgroups}]}, 0x2, 0x44a, &(0x7f0000000880)="$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") openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511001, 0x488) link(&(0x7f0000000080)='./file1\x00', &(0x7f0000000300)='./bus\x00') io_submit(0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x111, &(0x7f00000000c0)={0x0, 0x10, 0x2000, 0x3, 0x80}, &(0x7f0000000280)=0x0, &(0x7f0000000240)=0x0) r5 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r6 = dup(r5) write$bt_hci(r6, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x28) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) io_uring_enter(r2, 0x47f6, 0x0, 0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000351000/0x2000)=nil) r7 = semget$private(0x0, 0x6, 0x3b1) semtimedop(r7, 0x0, 0x0, 0x0) set_mempolicy(0x1, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 8.64264523s ago: executing program 4 (id=16749): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xdf) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@flat=@binder={0x73622a85, 0x100b, 0x1}, @fda={0x66646185, 0x6, 0x2, 0xa}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000040)={0x0, 0x18, 0x38}}}, @decrefs={0x40046307, 0x2}], 0xa4, 0x0, &(0x7f0000000340)="029068728ca58afd3b554aeadc40ca8c05160469279801a3f6137f42450be3e74030d4fbcffff50dbb8a3b430738f1742ddfde881cc0434aa116d5eaf29e3e2e97a00adf84325eb413e0877f61a192d80a2b4178e9dc83126dc732f595f1ec9addad07db4e276c64932e3f9cbbb169afd41b5cb890069daab46c660edb71979de20cef994b3e7fcc6f0659a291fd40d876b2d4f9ffe10bd25744750c26c11012d373dcea"}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000004000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f000001"], 0x44}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4) 8.600549083s ago: executing program 4 (id=16750): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x16, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r0, 0x0, 0x4}, 0x18) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='sched\x00') writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="fe4d", 0x2}], 0x1) 8.51199592s ago: executing program 4 (id=16751): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'vlan0\x00', 0x10}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregset(0x4205, r4, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef5837f29c1f7c93d183044aedbe283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e1d35d2aa4dca47a76704e578fdb41c47b476f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec", 0x90}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x20000, 0x6, 0x2, 0x6, 0x9, 0xbca, 0x2, 0x1, 0x1000, 0x8, 0xb9f, 0x6, 0x4, 0x1, 0x8001, 0xc, 0x7, 0xc0000000, 0x2, 0x9, 0xe98, 0xe4000, 0x8, 0x8000, 0x8000, 0xc, 0x0, 0xffff, 0x9, 0x2, 0x101, 0x7, 0x6, 0x5, 0x2, 0x7, 0x5, 0x4, 0x8, 0x6, 0x2, 0x9, 0x231e524d, 0x0, 0x97, 0xa358, 0x0, 0x11860, 0x7, 0x2, 0x8, 0xbe46, 0x800, 0x1, 0x2, 0x2e, 0x0, 0x46, 0xfff, 0xf5d, 0x7, 0xfffffffa, 0x10000, 0xfffffa8c, 0x4, 0x93, 0x7, 0x2, 0x8001, 0x8, 0x8, 0xd, 0x1ff, 0x4, 0x7, 0x6, 0x6f68f081, 0x9, 0x400, 0x1ff, 0xb33, 0x3, 0x8001, 0x2, 0x8, 0x80000001, 0x100, 0x7, 0xa9e0, 0x9, 0xa1e, 0x6, 0xffffffff, 0x2, 0x7, 0x800, 0x40b, 0x1e, 0x8ea, 0x101, 0xb5b, 0x1ff, 0xc, 0x7, 0x5, 0x9, 0x5, 0x3, 0x6, 0xf, 0xfffffff8, 0x80000000, 0x6, 0x3, 0x10000, 0x9, 0xf, 0x2, 0x7, 0x8f6, 0xfffffff7, 0x8, 0x3, 0x1, 0x8, 0x5, 0x7, 0xe, 0x3d8e, 0x0, 0xffffff80, 0x1, 0xffff, 0x6, 0x1, 0x0, 0x8, 0x7, 0x7af375e0, 0x0, 0xa, 0x1d, 0x3, 0x9, 0x8, 0xa, 0x6, 0xf, 0x75, 0x81, 0x2, 0xc2, 0x9c, 0x7fffffff, 0x1c50, 0x1, 0xa, 0xfd, 0x4, 0x0, 0x6, 0x101, 0x7, 0x7, 0x7fffffff, 0x8, 0x4, 0x200, 0x800, 0xffff, 0xf, 0x3, 0xa, 0xc, 0x8, 0x8, 0x7, 0x7, 0xc, 0x3ff, 0x1, 0x6, 0xe96, 0x2, 0x800, 0x9eb, 0x2, 0x7fff, 0x2, 0xa, 0x40, 0x0, 0x101, 0xfffffffa, 0xbd49, 0xe, 0x800, 0x0, 0x400, 0x8000, 0x3, 0x48, 0x3, 0x200000, 0xffffff7c, 0x2, 0xfffffffa, 0x4, 0xd, 0x7fffffff, 0x100, 0x7, 0xde, 0x4, 0x9, 0x7, 0x2, 0x2, 0xffffffff, 0x9, 0x3, 0xf, 0x3, 0x5, 0x8001, 0xe, 0x7, 0xf8c, 0xb, 0x7, 0x1, 0x8001, 0x4, 0x2, 0x5, 0x2, 0x6, 0x6, 0x1ff, 0x80000001, 0x4, 0x0, 0x2, 0xa, 0x9, 0x10001, 0x5, 0x2c, 0x7357, 0x10, 0x3c1, 0x9, 0x4, 0xcd80, 0x1ff, 0x530f1b6]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f00000005c0)="24785466124cebc6c88735f544a9", 0xe, 0x440040c4, &(0x7f00000001c0)={0x11, 0xf8, r9, 0x1, 0xd8, 0x6, @remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r11}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000002000090002000000ffdbdf25020000000800080008"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) socket$packet(0x11, 0x3, 0x300) 8.375917291s ago: executing program 4 (id=16752): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x4}, 0x18) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x14, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x800}, {}, {}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0xb}, @exit, @map_fd={0x18, 0xa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r2 = socket$kcm(0x11, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x8, 0x7, 0x80000001, 0xfffffff7, {{0x9, 0x4, 0x1, 0x2, 0x24, 0x68, 0x0, 0x2, 0x4, 0x0, @private=0xa010100, @rand_addr=0x64010100, {[@cipso={0x86, 0xc, 0x3, [{0x6, 0x6, "1682a264"}]}, @ra={0x94, 0x4}]}}}}}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1a, 0x1, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], &(0x7f00000000c0)='GPL\x00', 0x7, 0x1000, &(0x7f00000017c0)=""/4096, 0x41000, 0x5, '\x00', r3, @fallback=0x1, r4, 0x8, &(0x7f0000000200)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x10, 0xffffffff, 0x59a9}, 0x10, 0xffffffffffffffff, r1, 0x5, &(0x7f0000000280)=[r0], &(0x7f00000002c0)=[{0x4, 0x4, 0xd, 0x9}, {0x3, 0x1, 0x9, 0x6}, {0x4, 0x5, 0x1, 0x9}, {0x5, 0x3, 0x3, 0x2}, {0x1, 0x1, 0x2, 0xa}], 0x10, 0x7fff}, 0x94) sendmsg$kcm(r2, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) syz_usb_disconnect(r5) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r5, 0x40085507, &(0x7f0000000100)=0x1d) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000000580)={&(0x7f0000000340), 0xc, &(0x7f0000000540)={&(0x7f0000000c80)={0x710, 0x0, 0x5, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [{{0x254, 0x1, {{0x0, 0xe387}, 0x80, 0xff, 0x0, 0x0, 0x0, 'syz0\x00', "99a28343667a1eb00bd00b614b0c5801c6a528b686928850648a36d427587945", "bb5f0fdc7babbf320c74162430bc7ece6f3bec4a6a515b9146c643911053ff47", [{0x6, 0x2, {0x3, 0xfff}}, {0x3ff, 0x7, {0x0, 0x4}}, {0x2, 0x101, {0x0, 0x8}}, {0xb6, 0xffff, {0x0, 0x6}}, {0x4, 0x12, {0x1, 0x80000001}}, {0x5, 0x10, {0x0, 0x8}}, {0x2, 0xedc5, {0x0, 0x8}}, {0xd, 0x6, {0x3, 0x3}}, {0x1, 0x101, {0x3, 0xfffffe01}}, {0xf, 0x1, {0x3, 0x1}}, {0x8, 0x3, {0x2, 0x100}}, {0x6, 0xfffa, {0x1, 0xecf}}, {0x7, 0xfffa, {0x2, 0x4}}, {0x5, 0xfff8, {0x2, 0x3}}, {0x9, 0x0, {0x2, 0x2}}, {0x3, 0x8, {0x1, 0x8001}}, {0x7f6, 0x7, {0x3, 0x9daf}}, {0x870, 0x3, {0x3, 0xe}}, {0xaa6c, 0xfff, {0x0, 0x1}}, {0x3, 0x9, {0x2, 0xd32}}, {0x8, 0x2, {0x1, 0x1}}, {0x3f, 0x2, {0x3, 0x9}}, {0x4, 0xe5, {0x0, 0xffff7fff}}, {0xb4, 0xfff8, {0x0, 0x7ff}}, {0x81, 0x8203, {0x1, 0x1}}, {0xc, 0x7, {0x1, 0x6}}, {0xf, 0x40, {0x3, 0x1ff}}, {0x9, 0xda6, {0x1, 0x7}}, {0x8, 0xab1, {0x1, 0xa8f}}, {0x3ff, 0x96e, {0x1, 0x2}}, {0xff, 0xae, {0x3, 0x2}}, {0x6c3c, 0x8001, {0x3, 0x40}}, {0x9, 0x9, {0x0, 0x6}}, {0xfff, 0x8000, {0x1, 0x4}}, {0x4, 0x8, {0x1, 0x4}}, {0x6938, 0x9}, {0x8dc, 0x4, {0x0, 0xfffffff0}}, {0xfffc, 0xe, {0x2, 0xabe7}}, {0x9, 0x0, {0x2, 0x7c}}, {0x0, 0x4, {0x1, 0x9a}}]}}}, {{0x254, 0x1, {{0x2, 0xffffffff}, 0x1, 0x80, 0xc000, 0x92, 0x24, 'syz0\x00', "30ab3e23a84c3eb3905114b3425c7923c0f4dfca937171712c4766614d6f5298", "2f22bdc6bce355a451b7e742311baed47d99c1eb5f1de2986f5b2cc3caaf2813", [{0x5, 0x6, {0x1}}, {0x7, 0xd, {0x3, 0x1000007}}, {0x1, 0x92, {0x2, 0x8000}}, {0x1, 0xd, {0x1, 0x6}}, {0xfffe, 0x5, {0x746ea4e5ac91ff16, 0x5}}, {0x1, 0x400, {0x0, 0x4}}, {0x3, 0x2, {0x2, 0x687}}, {0x9474, 0x2, {0x3, 0xf9}}, {0x7, 0xfff7, {0x0, 0x4}}, {0x4, 0x5, {0x1, 0xc}}, {0x1, 0x0, {0x3, 0xb}}, {0x800, 0x4, {0x1, 0x200}}, {0x0, 0x1a07, {0x2, 0x7}}, {0x4, 0x5, {0x3, 0x1}}, {0x200, 0xff59, {0x0, 0x8}}, {0x1, 0x485, {0x2, 0x7ff}}, {0x1, 0x4, {0x1, 0xffff8000}}, {0x7, 0x683, {0x2, 0x348}}, {0x7, 0xff, {0x0, 0xb}}, {0x8000, 0x8, {0x2, 0xfff}}, {0x0, 0xadac}, {0x7, 0xee0, {0x3, 0x81}}, {0x5, 0x6f9f, {0x3, 0x3}}, {0x3, 0x897, {0x2, 0x7}}, {0x1, 0x7fff, {0x0, 0x4}}, {0x3, 0x7b77, {0x2, 0x9}}, {0x0, 0x8, {0x3, 0x7}}, {0x1a01, 0x4, {0x1, 0xe0}}, {0x4, 0x2, {0x3, 0x20081}}, {0x0, 0x1, {0x1, 0x5ee2}}, {0x6, 0x7, {0x0, 0x8001}}, {0x2, 0x1, {0x3}}, {0x2, 0x9, {0x0, 0x7f}}, {0x9, 0x7, {0x3, 0x7f}}, {0x8001, 0x4, {0x1, 0x2}}, {0x5, 0x4, {0x3, 0x4}}, {0x8, 0xfffe, {0x1, 0xb2b8}}, {0x3, 0x5, {0x2, 0x1000}}, {0xcb4, 0x9, {0x2, 0x4}}, {0x3ff, 0x1, {0x0, 0xe39}}]}}}, {{0x254, 0x1, {{0x2, 0x2}, 0x81, 0x8, 0xe5be, 0xfff0, 0x1a, 'syz1\x00', "cb04b928fbc5670e404ab24192b03fee66dd00fd73ca7328cfba8da7421be7da", "f91510c55fd2ba6d5115ca9d226a17c8c8ebd1780f5c6e9ec14e1b5704c85ff9", [{0x9, 0x7, {0x1, 0x8001}}, {0x7ff, 0x3, {0x0, 0x100}}, {0x9, 0xb067, {0x3, 0x10}}, {0x81, 0x200, {0x1, 0x7}}, {0x2, 0x6, {0x0, 0x4}}, {0x1, 0x6, {0x0, 0x2}}, {0x4, 0x7ff, {0x3, 0x6}}, {0x5, 0x3, {0x1, 0x4}}, {0x800, 0xe, {0x0, 0x8000}}, {0x400, 0xf6, {0x2, 0x8}}, {0x3, 0xc, {0x0, 0x2}}, {0x7, 0x7, {0x1, 0x5}}, {0x400, 0x1, {0x3, 0x4}}, {0x1278, 0x4, {0x3, 0x1}}, {0x8, 0xb13d, {0x1, 0xfffff5de}}, {0x5, 0xe5, {0x3, 0x2}}, {0x5, 0x4, {0x1, 0x3b}}, {0x4, 0x1ff, {0x2, 0x2}}, {0x6, 0x7ff}, {0x6, 0x5, {0x3, 0x6}}, {0x7, 0x3, {0x1, 0x8}}, {0x5, 0xd0c, {0x1, 0x401}}, {0x1, 0x2, {0x3, 0x8}}, {0x2, 0x100, {0x3, 0x4}}, {0x2, 0x9, {0x0, 0x8}}, {0x8220, 0xd9, {0x2, 0x4b82ea51}}, {0x3, 0x5, {0x1, 0x4}}, {0x2, 0xbd5, {0x1, 0x9}}, {0x8, 0x101, {0x3, 0xfff}}, {0x401, 0x200, {0x3, 0x5}}, {0x5, 0x9, {0x2, 0x4}}, {0x6, 0xd87c, {0x0, 0x200}}, {0x2, 0xff, {0x0, 0x3}}, {0x200, 0x40, {0x0, 0xfffffff8}}, {0x4, 0x4da9, {0x0, 0x4}}, {0x2, 0xfff8, {0x3, 0xf}}, {0x80, 0x4, {0x2, 0x8}}, {0x1, 0x36, {0x2, 0xfffffffd}}, {0x1, 0x200, {0x0, 0x7}}, {0xff, 0x4, {0x1, 0x801}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x20008044}, 0x4000) 7.98813391s ago: executing program 4 (id=16754): socket$key(0xf, 0x3, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x1c2, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x5452, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 7.9879446s ago: executing program 45 (id=16754): socket$key(0xf, 0x3, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x1c2, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x5452, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.70015094s ago: executing program 2 (id=16833): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x200, 0x0) open_by_handle_at(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="080000005003a8630900000000000000"], 0x40002) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00'}, 0x10) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r2, &(0x7f0000000640)={'#! ', './file1'}, 0xb) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0x4}, 0x11e167, 0x0, 0xfffffffc, 0x9, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r3, &(0x7f00000004c0)=[{&(0x7f0000000580)=""/152, 0x98}], 0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 2.626682116s ago: executing program 2 (id=16835): r0 = syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000640)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_io_uring_setup(0x5c2, 0x0, 0x0, 0x0) unshare(0x22020600) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47bc, 0xf5, 0x0, 0x0, 0x0) 2.45011448s ago: executing program 3 (id=16841): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r2, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) 2.4420234s ago: executing program 2 (id=16842): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2a080, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) unshare(0x2040400) inotify_rm_watch(0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r2 = getpid() r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0xff, 0x600, 0x0, 0x5022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r4) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000030400000000fdffffff00000400", @ANYRES32=0x0, @ANYBLOB="60bc010004a702002400128009000100626f6e640000000014000280080007000e00000008000300e42e000031b002565e7b9e759e1dd4f615556aef454e3a9dae8aa61e57322e9d92747a5150404095e3146010ec940fc8c35dc82af597"], 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r2, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000080b70300000000edff8400000083000000bf090000000000005509010000000000950000b7020000000000008500000084000000b72f0d6344cd632a2600000000000000000000000000edb8e44b8234e574cddec83c6d035f9b3793e6aaf13ad10dd7f68d3fda13c85d1269ad2631c55747aab7a6e80e6e87302df15401826b9aeff826aa071853d161e712200ad2b84a533d5c49d96fba86b886f01a613b54fd50dfafe3c1a94ea215d7a815428e8f028480761fe594c65730243ecf85dd9b2381a58a9f5ce408a9e450896a828e3f5c6fbdac0629f6a2977d"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1, 0x1, 0x4}}) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000240)={0x0, 0x4000000}, 0x10}, 0x94) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000100)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg1\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) 2.420396742s ago: executing program 3 (id=16844): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00'}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_complete(0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x1000) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f00000006c0)={0x8, {"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", 0x1000}}, 0xffffff41) 1.696935098s ago: executing program 5 (id=16860): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000004200010a00000000000000f2e6c3"], 0x14}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x3, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x90}, 0x50) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000011c0)={r4, &(0x7f00000001c0), &(0x7f0000000000)=@udp=r5}, 0x20) recvmmsg(r5, &(0x7f000000ab40), 0x22c, 0x2201, 0x0) futex(&(0x7f0000000340)=0xfff, 0x9, 0x2, 0x0, &(0x7f00000000c0)=0x55, 0x80000002) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x4000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a00000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) r8 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @empty}, {0xa, 0x4e22, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x899, 0x1]}}, 0x5c) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000180)=0x81, 0x4) r9 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r9, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @random="6c7621d7cc94", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "98a350", 0x2, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @private1}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) 1.572228038s ago: executing program 6 (id=16862): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1a, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000007a000000760000000000000026000000280000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x1e00, 0xd, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x13) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYRES16=r1, @ANYRES16=r1, @ANYRESDEC=r1], &(0x7f0000000080)='syzkaller\x00', 0x10000000, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x345, &(0x7f0000001300)=ANY=[@ANYRES8=r2], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='sched_switch\x00', r2}, 0x18) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x400000, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f0000000000)=r4}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) 1.385245912s ago: executing program 5 (id=16863): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000001fc0)=ANY=[@ANYBLOB="1800000000000000000000000000249f45c58f686ed7e49dd3a472514aee11298290af8ea14a7885d08cad2b04bdad16822f4b68534ebacab916deccf43aa7b64a7c454608cb0c9f8447ef17a76af90e7354af173a6e843b6e184bbe55c4a0019e8ae65176e3fa0e12ab587a66e71e89046894243ae586bee5cdb53b653964de3899285b38ebd10d2f0eb06f1a0d4fcda93fbf8c14f90e77b884ae2de29557e82af1025314d1412264869ad6f9324c8aec6cd1fbea282ed5b68f4f635bc1ebff7b31506848c20e79814fcf0aa5e64bf3717d39672a56c353159fd8c67e3c"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000240)='workqueue_queue_work\x00', r1}, 0x18) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[], 0x28}}, 0x0) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) stat(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r4, {r5, 0xffffffffffffffff}}, './file1\x00'}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) lstat(&(0x7f0000000800)='./bus\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone3(&(0x7f0000000ec0)={0x200000400, &(0x7f0000000c00)=0xffffffffffffffff, &(0x7f0000000c40), &(0x7f0000000c80), {0x13}, &(0x7f0000000cc0)=""/231, 0xe7, &(0x7f0000000dc0)=""/165, &(0x7f0000000e80)=[0x0], 0x1}, 0x58) pipe(&(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r12, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r12, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r12, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x9, 0x11, &(0x7f0000002800)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @alu={0x4, 0x0, 0xb, 0x9, 0x8, 0xfffffffffffffed4, 0x10}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}], &(0x7f00000008c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00, 0x13, '\x00', 0x0, @fallback=0x16, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x2, 0x10, 0x9, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r12, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r12, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r12, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r12, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r13 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$netlink(r8, &(0x7f0000001000)={&(0x7f00000005c0)=@kern={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x100}], 0x1, &(0x7f0000001040)=ANY=[@ANYRES32, @ANYRES32=r9, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRESOCT=r6, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32=r12, @ANYRES32, @ANYRES32=r13], 0x60, 0x8001}, 0x5) r14 = getpid() statx(0xffffffffffffff9c, &(0x7f0000002500)='./file2\x00', 0x400, 0x7ff, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x0, &(0x7f0000002640)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002780)=[{{&(0x7f0000000180)=@file={0x1, './file2\x00'}, 0x6e, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000280)="92fe25012da55d707e193fceba1e484b05113151f5e98e5fcf15f3163552843e85d7e86b48cce5e98140ec0f15ecedf665cb8d32070719c8daf1ac62fd755c00ab8a23e636f1d42fc3002100795b8ae8d83269437b0668a06b0e752f46409c6639e3c76097616c951e35a957f730b60c33dc6993171b49c79c96a2be2c6f4129bc30e186821cc6a8de89bb759ad34f131c144a5b3ba62e327f0b2200ea3e8b8c432be6f3351f764591eec120edbcaf27844e7d8d3790d5e47395580c34db421618e65d8103a483", 0xc7}, {&(0x7f0000000380)="0f9c5da563730fbf811d6a381d1ec3da592fd625306903e27a405120fa9b584b9beeb2d9903e21c9454a4234c3b276e93d405e41b6921c2f28d8a1044e7543013b0e9927e5c9f6fe8c1a8ffb97fe40ed889c2a383ed4bd57ac478ec10e2ed6ef559ec81580a67020b1e4f407054e39d81208634b", 0x74}, {&(0x7f0000000080)="7203c0b65d00725c9de127425deaa17ac1b021bc5406183a9a88acc899a3b686293162ab4d37b579", 0x28}, {&(0x7f0000000200)='d', 0x1}, {&(0x7f0000000400)="b633abcf8e25da0659562f7af5ccee877c1605bf210a8f5d20", 0x19}, {&(0x7f0000000480)}, {&(0x7f0000000540)="827d5e16e9381dedfea520696bb2613aae7f9ac284e2a54d392284dad20d3999e9767c12951923bf3978e69d9c4204e1fe0144cc887e48218378190ebab345e13958f3ff38df9888b9a779fe2989f25576de120c2f3e83baaf695ea36be7474932b2b0eaf5d33ba40c2ffdbbed7d1a261a7625f741300b79d4eadc285d7e7e1fcba965eb4889fb10c80a6a", 0x8b}, {&(0x7f00000004c0)="47afefbfcf4f64a804c8b5ac1abc", 0xe}], 0x9, &(0x7f0000002100)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00D\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0xf0, 0x10000}}, {{&(0x7f0000002200)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002440)=[{&(0x7f0000002280)="a2e933996863e1a88a55abfec1f8e16fb2b23d0ffcee336e2cca663e1fdd6493", 0x20}, {&(0x7f00000022c0)="00a14eb85b8790f9ed67c3051cc714d81d19f62373b47f3c2e835f5d70514bcaa8c4766e81e8a643c58f9b08ede54bad881c6988b2f0a4116f2333afad38e11887d8508cdfb6fe3738b59e2b0171e0c11054379f0e3aab508f", 0x59}, {&(0x7f0000002340)="cdc5dace27b8c91d80840e5b040848e2955f17a5a5afee4dc4c56a38b996d41c550e19264568328088b86b5cb3c1e9144463673bfa82bb91411505a2b331cf1c8bc1ba5b67691c554714f7b7399fc296d554ffcc3810e72e3f32a8bd57d035db0cd666412a3c54d38052583d6a49d63e1101da713c1d07a0fe42cc6ade39f6257cd08d2e9295909242de7695b500c2aea2647526e5e4dee594c2719730223a3fb93a692f2b65c58d88e920491010f899198ee858ef4e8b1c69d581d3aca28fbdc76c0e11e6ec2dcef4b8a82a", 0xcc}], 0x3, &(0x7f0000002680)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r3, @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r14, @ANYRES32=r15, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0xd8, 0x2}}], 0x2, 0x4000080) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x0, &(0x7f0000000440)={[{@init_itable_val={'init_itable', 0x3d, 0x7}}]}, 0x1, 0x523, &(0x7f0000000a80)="$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") 1.379800573s ago: executing program 6 (id=16864): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1a, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000007a000000760000000000000026000000280000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x1e00, 0xd, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x13) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x345, &(0x7f0000001300)=ANY=[@ANYRES8=r2], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='sched_switch\x00', r2}, 0x18) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x400000, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f0000000000)=r5}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f0000000000)=0x1) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r8, @ANYBLOB="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"], 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="2d726c696d6974202d72646d61202d68756765746c62200072646d61202d6e65745f636c73202d6e65745f636c73202b72646d612099bdd27d2ecc2450b883b4493dd08ccac30e7a753bce0f4ce170e398d0b177e4ba0005dac80ee02e4a8037e93a048c8fe75b6d122eafb29bf36788aa561616d8c7087aef5827c15ffc24072b33c71b2f3d7a365dd26cb254328e42121534380dcf71b70608457d810fde46153cef8396"], 0x35) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000034e0a2ab17203bb67874d6"], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001400038010"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) 1.327620867s ago: executing program 2 (id=16865): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1a, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000007a000000760000000000000026000000280000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x1e00, 0xd, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x13) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x10000000, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x345, &(0x7f0000001300)=ANY=[@ANYRES8=r0], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='sched_switch\x00', r0}, 0x18) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x400000, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f0000000000)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000000)=0x1) 1.260140902s ago: executing program 6 (id=16866): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1.207369226s ago: executing program 2 (id=16867): syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x5d7000000000000, 0x2402) mmap(&(0x7f00001f5000/0x11000)=nil, 0x11000, 0x1000005, 0x11, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) io_uring_setup(0x6f6, &(0x7f0000005100)) close(0x3) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}}]}, &(0x7f00000002c0)=0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x550, 0xfffffffffffffc75}, 0x0, 0x0, 0x8000003, 0x4, 0x0, 0x40d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000180)='cpu<=0||!') setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43) getsockopt$bt_hci(r4, 0x84, 0x0, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 1.207174946s ago: executing program 3 (id=16868): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000600)=0x14) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f00000000c0)=0xffffffffffffffff) close(r1) 1.166652059s ago: executing program 3 (id=16869): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000001fc0)=ANY=[@ANYBLOB="1800000000000000000000000000249f45c58f686ed7e49dd3a472514aee11298290af8ea14a7885d08cad2b04bdad16822f4b68534ebacab916deccf43aa7b64a7c454608cb0c9f8447ef17a76af90e7354af173a6e843b6e184bbe55c4a0019e8ae65176e3fa0e12ab587a66e71e89046894243ae586bee5cdb53b653964de3899285b38ebd10d2f0eb06f1a0d4fcda93fbf8c14f90e77b884ae2de29557e82af1025314d1412264869ad6f9324c8a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r1}, 0x18) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x1) stat(&(0x7f0000000400)='./bus\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone3(&(0x7f0000000ec0)={0x200000400, &(0x7f0000000c00), &(0x7f0000000c40), &(0x7f0000000c80), {0x13}, &(0x7f0000000cc0)=""/231, 0xe7, 0x0, &(0x7f0000000e80)=[0x0], 0x1}, 0x58) pipe(&(0x7f0000000f40)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x9, 0x11, &(0x7f0000002800)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @alu={0x4, 0x0, 0xb, 0x9, 0x8, 0xfffffffffffffed4, 0x10}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}], &(0x7f00000008c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00, 0x13, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x2, 0x10, 0x9, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) getgroups(0x0, &(0x7f0000002640)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002780)=[{{&(0x7f0000000180)=@file={0x1, './file2\x00'}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000fc0)="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", 0x1000}, {&(0x7f0000000280)="92fe25012da55d707e193fceba1e484b05113151f5e98e5fcf15f3163552843e85d7e86b48cce5e98140ec0f15ecedf665cb8d32070719c8daf1ac62fd755c00ab8a23e636f1d42fc3002100795b8ae8d83269437b0668a06b0e752f46409c6639e3c76097616c951e35a957f730b60c33dc6993171b49c79c96a2be2c6f4129bc30e186821cc6a8de89bb759ad34f131c144a5b3ba62e327f0b2200ea3e8b8c432be6f3351f764591eec120edbcaf27844e7d8d3790d5e47395580c34db421618e65d8103a483", 0xc7}, {&(0x7f0000000380)="0f9c5da563730fbf811d6a381d1ec3da592fd625306903e27a405120fa9b584b9beeb2d9903e21c9454a4234c3b276e93d405e41b6921c2f28d8a1044e7543013b0e9927e5c9f6fe8c1a8ffb97fe40ed889c2a383ed4bd57ac478ec10e2ed6ef559ec81580a67020b1e4f407054e39d81208634b", 0x74}, {&(0x7f0000000080)="7203c0b65d00725c9de127425deaa17ac1b021bc5406183a9a88acc899a3b686293162ab4d37b579eb", 0x29}, {&(0x7f0000000200)='d', 0x1}, {&(0x7f0000000400)="b633abcf8e25da0659562f7af5ccee877c1605bf210a8f5d20", 0x19}, {&(0x7f0000000480)}, {&(0x7f0000000540)}, {&(0x7f00000004c0)="47afefbfcf4f64a804c8b5ac1abc", 0xe}], 0x9, &(0x7f0000002100)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00D\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0xf0, 0x10000}}, {{&(0x7f0000002200)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002440)=[{&(0x7f0000002280)="a2e933996863e1a88a55abfec1f8e16fb2b23d0ffcee336e2cca663e1fdd6493", 0x20}, {&(0x7f00000022c0)="00a14eb85b8790f9ed67c3051cc714d81d19f62373b47f3c2e835f5d70514bcaa8c4766e81e8a643c58f9b08ede54bad881c6988b2f0a4116f2333afad38e11887d8508cdfb6fe3738b59e2b0171e0c11054379f0e3aab508f", 0x59}, {&(0x7f0000002340)}], 0x3, &(0x7f0000002680)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0xd8, 0x2}}], 0x2, 0x4000080) 1.090663625s ago: executing program 3 (id=16870): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) syz_io_uring_setup(0x400315f, &(0x7f00000006c0)={0x0, 0xe0b6, 0x1040, 0xfffffffd, 0x183}, 0x0, &(0x7f0000000040)) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_create(r0, &(0x7f00000001c0)=@access={'system_u:object_r:bsdpty_device_t:s0', 0x20, 'unconfined', 0x20, 0x1ff}, 0x45) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000780)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@inlinecrypt}]}, 0x3, 0x440, &(0x7f0000000280)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r2, 0x6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x3e8, 0x0, 0x0) 1.089796495s ago: executing program 5 (id=16871): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xee00, 0xee00, 0x0) r0 = syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000640)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000500)=@IORING_OP_MKDIRAT={0x25, 0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0xf9b7a26b18f77d51}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300), &(0x7f0000000580)) unshare(0x22020600) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47bc, 0xf5, 0x0, 0x0, 0x0) 640.12876ms ago: executing program 8 (id=16875): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x2000, 0x2, 0x1f9}, &(0x7f0000000000), &(0x7f0000000340)) r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, 0x0) fcntl$lock(r1, 0x24, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000300)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) inotify_init1(0x80000) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='cgroup\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lseek(r3, 0xffffff60, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, 0x0, &(0x7f0000000840)}, 0x20) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) ioctl$TIOCSETD(r4, 0x5423, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) 624.405501ms ago: executing program 5 (id=16876): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547e9f17dbe9abc89b6e0704", 0x0, 0x3696, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, 0x0) (async) bind$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x1, 0x0, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r3}, 0x10) (async) readahead(0xffffffffffffffff, 0x6, 0x100) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x95255000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) (async) r4 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f8, 0x2c0, 0x0, 0x2c0, 0x138, 0x0, 0x360, 0x360, 0x360, 0x360, 0x360, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xff, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xf, 0x7b7b, @remote, 0x4e22}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') (async) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="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"}) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f00000008c0)={[{@nolazytime}]}, 0xfc, 0x574, &(0x7f0000001980)="$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") (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xd, 0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYBLOB="4a70dfaea18458b03f4a85153f15dcdac884004a5b509f0e96519120506f5bca2d8694a868056e1f8a70e60ce2af98a39109a3f60d69f063a860c9aa4a67a397d733c0dcbefc643a330e4d59ccc63ea817db3d210169bcbd8a4afc4a6984d0d036bec38415c2f3b98189593f5c9c4db712845c05404e25ae1abb500394d5c52f2af368841fbf", @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x0, r7}}, 0x40) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000880)='afs_cm_no_server_u\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) 568.450016ms ago: executing program 8 (id=16877): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0xb2, 0x2, 0x9, 0x42}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pB \x00'}, 0x20) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r1, &(0x7f0000000000), 0x0}, 0x20) 495.980901ms ago: executing program 8 (id=16878): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1a, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000007a000000760000000000000026000000280000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x1e00, 0xd, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x13) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x10000000, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x345, &(0x7f0000001300)=ANY=[@ANYRES8=r0], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='sched_switch\x00', r0}, 0x18) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x400000, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f0000000000)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000000)=0x1) 458.190484ms ago: executing program 8 (id=16879): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x200, 0x0) open_by_handle_at(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="080000005003a8630900000000000000"], 0x40002) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00'}, 0x10) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r2, &(0x7f0000000640)={'#! ', './file1'}, 0xb) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0x4}, 0x11e167, 0x0, 0xfffffffc, 0x9, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r3, &(0x7f00000004c0)=[{&(0x7f0000000580)=""/152, 0x98}], 0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 354.733302ms ago: executing program 8 (id=16880): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r3}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./bus\x00', 0x480, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c757466383d302c73686f77657865632c646973636172642c757466383d312c6e66732c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c757466383d302c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c002d43c85feaa91b9c2c7e69443d6987a2f44801578200aa8d73d6b7d88bb2056dee1336c0e6a2b0376b8bd2"], 0xfd, 0x2a1, &(0x7f00000006c0)="$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") bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], 0x0, 0xde, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r5 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, 0x0, 0x0) bind$xdp(r0, &(0x7f0000000680)={0x2c, 0x7, r4, 0x7, r5}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000040000009900"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000000a80)=0x0, &(0x7f0000000ac0)=0x4) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20044}, 0xc, &(0x7f0000001280)={&(0x7f0000001300)={0x244, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x1a8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ffe}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xc822}}}]}}]}, 0x244}, 0x1, 0x0, 0x0, 0x800}, 0x801) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000d40)=@filter={'filter\x00', 0x2, 0x4, 0x4a8, 0xffffffff, 0x0, 0xf0, 0xf0, 0xfeffffff, 0xffffffff, 0x3d8, 0x3d8, 0x3d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0xff, 0xff, 0x0, 0xffffff00], [], 'pimreg0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x2f2, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0x1d}, 'caif0\x00', {0x7}}}}, {{@ipv6={@mcast1, @loopback, [], [0x0, 0x0, 0xffffffff], 'netdevsim0\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b689f173dfa40b58c10327e3121114449fd20ba2be6eb0cde72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x602, 'system_u:object_r:boot_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) 262.260689ms ago: executing program 2 (id=16881): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000001fc0)=ANY=[@ANYBLOB="1800000000000000000000000000249f45c58f686ed7e49dd3a472514aee11298290af8ea14a7885d08cad2b04bdad16822f4b68534ebacab916deccf43aa7b64a7c454608cb0c9f8447ef17a76af90e7354af173a6e843b6e184bbe55c4a0019e8ae65176e3fa0e12ab587a66e71e89046894243ae586bee5cdb53b653964de3899285b38ebd10d2f0eb06f1a0d4fcda93fbf8c14f90e77b884ae2de29557e82af1025314d1412264869ad6f9324c8aec6cd1fbea282ed5b68f4f635bc1ebff7b31506848c20e79814fcf0aa5e64bf3717d39672a56c353159fd8c67e3c"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000240)='workqueue_queue_work\x00', r1}, 0x18) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[], 0x28}}, 0x0) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) stat(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r4, {r5, 0xffffffffffffffff}}, './file1\x00'}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) lstat(&(0x7f0000000800)='./bus\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone3(&(0x7f0000000ec0)={0x200000400, &(0x7f0000000c00)=0xffffffffffffffff, &(0x7f0000000c40), &(0x7f0000000c80), {0x13}, &(0x7f0000000cc0)=""/231, 0xe7, &(0x7f0000000dc0)=""/165, &(0x7f0000000e80)=[0x0], 0x1}, 0x58) pipe(&(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r12, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r12, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r12, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x9, 0x11, &(0x7f0000002800)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @alu={0x4, 0x0, 0xb, 0x9, 0x8, 0xfffffffffffffed4, 0x10}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}], &(0x7f00000008c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00, 0x13, '\x00', 0x0, @fallback=0x16, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x2, 0x10, 0x9, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r12, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r12, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r12, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r12, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r13 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$netlink(r8, &(0x7f0000001000)={&(0x7f00000005c0)=@kern={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x100}], 0x1, &(0x7f0000001040)=ANY=[@ANYRES32, @ANYRES32=r9, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRESOCT=r6, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32=r12, @ANYRES32, @ANYRES32=r13], 0x60, 0x8001}, 0x5) r14 = getpid() statx(0xffffffffffffff9c, &(0x7f0000002500)='./file2\x00', 0x400, 0x7ff, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x0, &(0x7f0000002640)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002780)=[{{&(0x7f0000000180)=@file={0x1, './file2\x00'}, 0x6e, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000280)="92fe25012da55d707e193fceba1e484b05113151f5e98e5fcf15f3163552843e85d7e86b48cce5e98140ec0f15ecedf665cb8d32070719c8daf1ac62fd755c00ab8a23e636f1d42fc3002100795b8ae8d83269437b0668a06b0e752f46409c6639e3c76097616c951e35a957f730b60c33dc6993171b49c79c96a2be2c6f4129bc30e186821cc6a8de89bb759ad34f131c144a5b3ba62e327f0b2200ea3e8b8c432be6f3351f764591eec120edbcaf27844e7d8d3790d5e47395580c34db421618e65d8103a483", 0xc7}, {&(0x7f0000000380)="0f9c5da563730fbf811d6a381d1ec3da592fd625306903e27a405120fa9b584b9beeb2d9903e21c9454a4234c3b276e93d405e41b6921c2f28d8a1044e7543013b0e9927e5c9f6fe8c1a8ffb97fe40ed889c2a383ed4bd57ac478ec10e2ed6ef559ec81580a67020b1e4f407054e39d81208634b", 0x74}, {&(0x7f0000000080)="7203c0b65d00725c9de127425deaa17ac1b021bc5406183a9a88acc899a3b686293162ab4d37b579", 0x28}, {&(0x7f0000000200)='d', 0x1}, {&(0x7f0000000400)="b633abcf8e25da0659562f7af5ccee877c1605bf210a8f5d20", 0x19}, {&(0x7f0000000480)}, {&(0x7f0000000540)="827d5e16e9381dedfea520696bb2613aae7f9ac284e2a54d392284dad20d3999e9767c12951923bf3978e69d9c4204e1fe0144cc887e48218378190ebab345e13958f3ff38df9888b9a779fe2989f25576de120c2f3e83baaf695ea36be7474932b2b0eaf5d33ba40c2ffdbbed7d1a261a7625f741300b79d4eadc285d7e7e1fcba965eb4889fb10c80a6a", 0x8b}, {&(0x7f00000004c0)="47afefbfcf4f64a804c8b5ac1abc", 0xe}], 0x9, &(0x7f0000002100)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00D\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0xf0, 0x10000}}, {{&(0x7f0000002200)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002440)=[{&(0x7f0000002280)="a2e933996863e1a88a55abfec1f8e16fb2b23d0ffcee336e2cca663e1fdd6493", 0x20}, {&(0x7f00000022c0)="00a14eb85b8790f9ed67c3051cc714d81d19f62373b47f3c2e835f5d70514bcaa8c4766e81e8a643c58f9b08ede54bad881c6988b2f0a4116f2333afad38e11887d8508cdfb6fe3738b59e2b0171e0c11054379f0e3aab508f", 0x59}, {&(0x7f0000002340)="cdc5dace27b8c91d80840e5b040848e2955f17a5a5afee4dc4c56a38b996d41c550e19264568328088b86b5cb3c1e9144463673bfa82bb91411505a2b331cf1c8bc1ba5b67691c554714f7b7399fc296d554ffcc3810e72e3f32a8bd57d035db0cd666412a3c54d38052583d6a49d63e1101da713c1d07a0fe42cc6ade39f6257cd08d2e9295909242de7695b500c2aea2647526e5e4dee594c2719730223a3fb93a692f2b65c58d88e920491010f899198ee858ef4e8b1c69d581d3aca28fbdc76c0e11e6ec2dcef4b8a82a", 0xcc}], 0x3, &(0x7f0000002680)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r3, @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r14, @ANYRES32=r15, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0xd8, 0x2}}], 0x2, 0x4000080) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x0, &(0x7f0000000440)={[{@init_itable_val={'init_itable', 0x3d, 0x7}}]}, 0x1, 0x523, &(0x7f0000000a80)="$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") 199.094714ms ago: executing program 6 (id=16882): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1a, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000007a000000760000000000000026000000280000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x1e00, 0xd, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x13) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYRES16=r1, @ANYRES16=r1, @ANYRESDEC=r1], &(0x7f0000000080)='syzkaller\x00', 0x10000000, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x345, &(0x7f0000001300)=ANY=[@ANYRES8=r2], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='sched_switch\x00', r2}, 0x18) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x400000, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f0000000000)=r4}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) 145.295398ms ago: executing program 5 (id=16883): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x18) r1 = socket(0x10, 0x3, 0x0) getpeername$qrtr(r1, 0x0, &(0x7f0000000140)) 144.014199ms ago: executing program 5 (id=16884): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000002c0)={[{@norecovery}, {@max_batch_time={'max_batch_time', 0x3d, 0x2327}}]}, 0xee, 0x480, &(0x7f00000012c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@nombcache}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@abort}]}, 0x3, 0x57b, &(0x7f0000000800)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x1e4, 0x3180, 0x8000, 0x400251}, &(0x7f0000000180)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000500)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x33, 0x4000, @fd_index=0x1, 0x5, 0x0, 0x0, 0x2, 0x1, {0x2}}) io_uring_enter(r5, 0x627, 0x4c1, 0x43, 0x0, 0x0) pwritev2(r2, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000340)=0x7fc00000) ioctl$EXT4_IOC_MOVE_EXT(r8, 0x40305829, &(0x7f0000000340)={0x17c04, 0xffffffffffffffff, 0x7, 0x1c00, 0x2}) 143.277779ms ago: executing program 8 (id=16885): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000004200010a00000000000000f2e6c3"], 0x14}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x3, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x90}, 0x50) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000011c0)={r4, &(0x7f00000001c0), &(0x7f0000000000)=@udp=r5}, 0x20) recvmmsg(r5, &(0x7f000000ab40), 0x22c, 0x2201, 0x0) futex(&(0x7f0000000340)=0xfff, 0x9, 0x2, 0x0, &(0x7f00000000c0)=0x55, 0x80000002) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x4000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a00000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) r8 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @empty}, {0xa, 0x4e22, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x899, 0x1]}}, 0x5c) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000180)=0x81, 0x4) r9 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r9, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @random="6c7621d7cc94", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "98a350", 0x2, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @private1}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) 122.23148ms ago: executing program 3 (id=16886): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xee00, 0xee00, 0x0) r0 = syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000640)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000500)=@IORING_OP_MKDIRAT={0x25, 0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0xf9b7a26b18f77d51}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300), &(0x7f0000000580)) unshare(0x22020600) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47bc, 0xf5, 0x0, 0x0, 0x0) 95.775812ms ago: executing program 6 (id=16887): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000600)=0x14) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f00000000c0)=0xffffffffffffffff) close(r1) 0s ago: executing program 6 (id=16888): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r2, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) kernel console output (not intermixed with test programs): 94967295 subj=root:sysadm_r:sysadm_t pid=17033 comm="syz.2.16124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f273a80df90 code=0x7ffc0000 [ 1053.022883][ T29] audit: type=1326 audit(2000000515.380:79136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17033 comm="syz.2.16124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273a80f749 code=0x7ffc0000 [ 1053.046784][ T29] audit: type=1326 audit(2000000515.380:79137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17033 comm="syz.2.16124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273a80f749 code=0x7ffc0000 [ 1053.070762][ T29] audit: type=1326 audit(2000000515.380:79138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17033 comm="syz.2.16124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f273a80f749 code=0x7ffc0000 [ 1053.094537][ T29] audit: type=1326 audit(2000000515.380:79139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17033 comm="syz.2.16124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273a80f749 code=0x7ffc0000 [ 1053.340801][T17062] hub 1-0:1.0: USB hub found [ 1053.355317][T17062] hub 1-0:1.0: 8 ports detected [ 1053.380748][T17062] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=17062 comm=syz.2.16135 [ 1053.395275][T17062] __nla_validate_parse: 7 callbacks suppressed [ 1053.395297][T17062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16135'. [ 1053.447902][T17072] sd 0:0:1:0: device reset [ 1053.476213][T17074] netlink: 16 bytes leftover after parsing attributes in process `syz.6.16141'. [ 1053.584927][T17087] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16147'. [ 1053.639948][T17094] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16149'. [ 1053.829966][T17101] hub 1-0:1.0: USB hub found [ 1053.835613][T17101] hub 1-0:1.0: 8 ports detected [ 1053.860313][T17101] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=17101 comm=syz.6.16151 [ 1053.891403][T17101] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16151'. [ 1053.955014][T17104] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1054.008083][T17107] sd 0:0:1:0: device reset [ 1054.232670][T17112] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16155'. [ 1054.268872][ T2971] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1054.276716][ T2971] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1054.284471][ T2971] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1054.292161][ T2971] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1054.295250][T17111] siw: device registration error -23 [ 1054.299471][ T2971] rtc rtc0: __rtc_set_alarm: err=-22 [ 1054.406999][T17120] netlink: 16 bytes leftover after parsing attributes in process `syz.6.16159'. [ 1054.419171][T17122] netlink: 28 bytes leftover after parsing attributes in process `syz.8.16160'. [ 1054.473931][T17124] syz.8.16161: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 1054.488903][T17124] CPU: 0 UID: 0 PID: 17124 Comm: syz.8.16161 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1054.488944][T17124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1054.488969][T17124] Call Trace: [ 1054.488976][T17124] [ 1054.488985][T17124] __dump_stack+0x1d/0x30 [ 1054.489026][T17124] dump_stack_lvl+0xe8/0x140 [ 1054.489107][T17124] dump_stack+0x15/0x1b [ 1054.489137][T17124] warn_alloc+0x12b/0x1a0 [ 1054.489171][T17124] ? __schedule+0x85f/0xcd0 [ 1054.489208][T17124] ? __rcu_read_unlock+0x4f/0x70 [ 1054.489306][T17124] __vmalloc_node_range_noprof+0xa0/0x1310 [ 1054.489341][T17124] ? __futex_wait+0x1fa/0x260 [ 1054.489370][T17124] ? __pfx_futex_wake_mark+0x10/0x10 [ 1054.489398][T17124] ? __rcu_read_unlock+0x4f/0x70 [ 1054.489421][T17124] ? avc_has_perm_noaudit+0xab/0x130 [ 1054.489471][T17124] ? should_fail_ex+0x30/0x280 [ 1054.489504][T17124] ? should_failslab+0x8c/0xb0 [ 1054.489541][T17124] vmalloc_user_noprof+0x7d/0xb0 [ 1054.489577][T17124] ? xskq_create+0x80/0xe0 [ 1054.489617][T17124] xskq_create+0x80/0xe0 [ 1054.489650][T17124] xsk_init_queue+0x95/0xf0 [ 1054.489751][T17124] xsk_setsockopt+0x3f5/0x640 [ 1054.489785][T17124] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1054.489847][T17124] __sys_setsockopt+0x184/0x200 [ 1054.489887][T17124] __x64_sys_setsockopt+0x64/0x80 [ 1054.489920][T17124] x64_sys_call+0x21d5/0x3000 [ 1054.489956][T17124] do_syscall_64+0xd8/0x2c0 [ 1054.490051][T17124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.490079][T17124] RIP: 0033:0x7fc3dc35f749 [ 1054.490096][T17124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1054.490115][T17124] RSP: 002b:00007fc3dadc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1054.490135][T17124] RAX: ffffffffffffffda RBX: 00007fc3dc5b5fa0 RCX: 00007fc3dc35f749 [ 1054.490210][T17124] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 1054.490277][T17124] RBP: 00007fc3dc3e3f91 R08: 0000000000000004 R09: 0000000000000000 [ 1054.490295][T17124] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1054.490309][T17124] R13: 00007fc3dc5b6038 R14: 00007fc3dc5b5fa0 R15: 00007ffc297cefb8 [ 1054.490328][T17124] [ 1054.490335][T17124] Mem-Info: [ 1054.570754][T17128] ip6gre1: entered promiscuous mode [ 1054.575072][T17124] active_anon:4089 inactive_anon:1 isolated_anon:0 [ 1054.575072][T17124] active_file:25160 inactive_file:2922 isolated_file:0 [ 1054.575072][T17124] unevictable:0 dirty:316 writeback:0 [ 1054.575072][T17124] slab_reclaimable:3824 slab_unreclaimable:38291 [ 1054.575072][T17124] mapped:29627 shmem:201 pagetables:1407 [ 1054.575072][T17124] sec_pagetables:0 bounce:0 [ 1054.575072][T17124] kernel_misc_reclaimable:0 [ 1054.575072][T17124] free:1827131 free_pcp:40876 free_cma:0 [ 1054.579989][T17128] ip6gre1: entered allmulticast mode [ 1054.584950][T17124] Node 0 active_anon:16356kB inactive_anon:4kB active_file:100640kB inactive_file:11688kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118508kB dirty:1264kB writeback:0kB shmem:804kB kernel_stack:4464kB pagetables:5628kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1054.591255][T28049] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1054.593938][T17124] Node 0 [ 1054.598336][T28049] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1054.610073][T17128] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1054.613317][T17124] DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1054.621085][T20216] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1054.623104][T17124] lowmem_reserve[]: [ 1054.692268][T17132] sd 0:0:1:0: device reset [ 1054.698716][T17124] 0 2880 7859 7859 [ 1054.712874][T17130] hub 1-0:1.0: USB hub found [ 1054.713057][T17124] [ 1054.713067][T17124] Node 0 [ 1054.718551][T17130] hub 1-0:1.0: 8 ports detected [ 1054.763370][T17124] DMA32 free:2943284kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949496kB mlocked:0kB bounce:0kB free_pcp:6212kB local_pcp:2684kB free_cma:0kB [ 1054.770808][T17129] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=17129 comm=syz.4.16162 [ 1054.796164][T17124] lowmem_reserve[]: [ 1054.824742][ T3936] Bluetooth: hci0: command 0x1003 tx timeout [ 1054.850525][T17124] 0 0 4978 4978 [ 1054.858078][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1054.861863][T17124] [ 1054.861874][T17124] Node 0 Normal free:4349624kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16472kB inactive_anon:4kB active_file:100640kB inactive_file:11688kB unevictable:0kB writepending:1264kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:156892kB local_pcp:73696kB free_cma:0kB [ 1054.900279][T17129] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16162'. [ 1054.915643][T17124] lowmem_reserve[]: 0 0 0 0 [ 1054.997611][T17124] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1055.010687][T17124] Node 0 DMA32: 5*4kB (M) 4*8kB (UM) 4*16kB (UM) 4*32kB (UM) 3*64kB (M) 3*128kB (UM) 4*256kB (M) 5*512kB (UM) 4*1024kB (UM) 3*2048kB (M) 715*4096kB (UM) = 2943284kB [ 1055.027606][T17124] Node 0 Normal: 3510*4kB (UME) 3362*8kB (UME) 2884*16kB (UME) 2227*32kB (UME) 2008*64kB (UME) 1606*128kB (UME) 1209*256kB (UM) 1029*512kB (UME) 948*1024kB (UME) 799*2048kB (UME) 101*4096kB (U) = 4349576kB [ 1055.048163][T17124] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1055.057508][T17124] 28258 total pagecache pages [ 1055.062425][T17124] 9 pages in swap cache [ 1055.066823][T17124] Free swap = 123248kB [ 1055.071015][T17124] Total swap = 124996kB [ 1055.075313][T17124] 2097051 pages RAM [ 1055.079224][T17124] 0 pages HighMem/MovableOnly [ 1055.080674][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1055.083998][T17124] 81277 pages reserved [ 1055.135315][T17141] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16166'. [ 1055.226116][T17150] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1055.268682][ T2971] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1055.276395][ T2971] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1055.284227][ T2971] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1055.291998][ T2971] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1055.299493][ T2971] rtc rtc0: __rtc_set_alarm: err=-22 [ 1055.319353][T17141] siw: device registration error -23 [ 1055.499751][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1055.953283][T17167] tipc: Started in network mode [ 1055.958282][T17167] tipc: Node identity 86d259527633, cluster identity 4711 [ 1055.965464][T17167] tipc: Enabled bearer , priority 0 [ 1055.972635][T17167] FAULT_INJECTION: forcing a failure. [ 1055.972635][T17167] name failslab, interval 1, probability 0, space 0, times 0 [ 1055.985316][T17167] CPU: 0 UID: 0 PID: 17167 Comm: syz.3.16179 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1055.985386][T17167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1055.985404][T17167] Call Trace: [ 1055.985412][T17167] [ 1055.985421][T17167] __dump_stack+0x1d/0x30 [ 1055.985454][T17167] dump_stack_lvl+0xe8/0x140 [ 1055.985477][T17167] dump_stack+0x15/0x1b [ 1055.985580][T17167] should_fail_ex+0x265/0x280 [ 1055.985612][T17167] should_failslab+0x8c/0xb0 [ 1055.985643][T17167] __kmalloc_node_noprof+0xbe/0x5c0 [ 1055.985674][T17167] ? qdisc_alloc+0x65/0x410 [ 1055.985743][T17167] ? taprio_dev_notifier+0xdb/0x700 [ 1055.985777][T17167] qdisc_alloc+0x65/0x410 [ 1055.985811][T17167] ? mutex_unlock+0x4f/0x90 [ 1055.985904][T17167] qdisc_create_dflt+0x7f/0x2d0 [ 1055.985939][T17167] ? dev_activate+0xbb/0x9e0 [ 1055.986038][T17167] dev_activate+0xde/0x9e0 [ 1055.986075][T17167] ? _raw_spin_unlock_bh+0x36/0x40 [ 1055.986107][T17167] __dev_open+0x4b4/0x560 [ 1055.986135][T17167] __dev_change_flags+0x147/0x3c0 [ 1055.986207][T17167] netif_change_flags+0x5a/0xd0 [ 1055.986241][T17167] dev_change_flags+0xce/0x180 [ 1055.986272][T17167] dev_ifsioc+0x44b/0xaa0 [ 1055.986372][T17167] ? mutex_lock+0x58/0x90 [ 1055.986486][T17167] dev_ioctl+0x70a/0x960 [ 1055.986534][T17167] sock_do_ioctl+0x197/0x220 [ 1055.986562][T17167] sock_ioctl+0x41b/0x610 [ 1055.986608][T17167] ? __pfx_sock_ioctl+0x10/0x10 [ 1055.986748][T17167] __se_sys_ioctl+0xce/0x140 [ 1055.986792][T17167] __x64_sys_ioctl+0x43/0x50 [ 1055.986834][T17167] x64_sys_call+0x14b0/0x3000 [ 1055.986933][T17167] do_syscall_64+0xd8/0x2c0 [ 1055.987051][T17167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.987081][T17167] RIP: 0033:0x7f081e51f749 [ 1055.987102][T17167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1055.987205][T17167] RSP: 002b:00007f081cf87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1055.987231][T17167] RAX: ffffffffffffffda RBX: 00007f081e775fa0 RCX: 00007f081e51f749 [ 1055.987249][T17167] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000006 [ 1055.987266][T17167] RBP: 00007f081cf87090 R08: 0000000000000000 R09: 0000000000000000 [ 1055.987279][T17167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1055.987292][T17167] R13: 00007f081e776038 R14: 00007f081e775fa0 R15: 00007ffd47ced2f8 [ 1055.987318][T17167] [ 1055.987330][T17167] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1056.112127][T17173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1056.120574][T17167] syzkaller0: entered promiscuous mode [ 1056.126138][T17173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1056.130600][T17167] syzkaller0: entered allmulticast mode [ 1056.159322][T17173] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1056.175137][T17167] tipc: Resetting bearer [ 1056.279624][T17164] tipc: Resetting bearer [ 1056.354599][T17164] tipc: Disabling bearer [ 1056.447958][T17189] siw: device registration error -23 [ 1057.294048][T17222] FAULT_INJECTION: forcing a failure. [ 1057.294048][T17222] name failslab, interval 1, probability 0, space 0, times 0 [ 1057.306757][T17222] CPU: 1 UID: 0 PID: 17222 Comm: syz.8.16199 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1057.306796][T17222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1057.306809][T17222] Call Trace: [ 1057.306836][T17222] [ 1057.306843][T17222] __dump_stack+0x1d/0x30 [ 1057.306866][T17222] dump_stack_lvl+0xe8/0x140 [ 1057.306888][T17222] dump_stack+0x15/0x1b [ 1057.306909][T17222] should_fail_ex+0x265/0x280 [ 1057.307067][T17222] should_failslab+0x8c/0xb0 [ 1057.307090][T17222] __kvmalloc_node_noprof+0x149/0x6b0 [ 1057.307115][T17222] ? traverse+0xa2/0x3a0 [ 1057.307174][T17222] traverse+0xa2/0x3a0 [ 1057.307202][T17222] ? terminate_walk+0x1e6/0x210 [ 1057.307226][T17222] ? path_openat+0x1d88/0x23b0 [ 1057.307317][T17222] seq_read_iter+0x85f/0x950 [ 1057.307345][T17222] ? _parse_integer_limit+0x170/0x190 [ 1057.307368][T17222] seq_read+0x270/0x2b0 [ 1057.307410][T17222] ? __pfx_seq_read+0x10/0x10 [ 1057.307503][T17222] proc_reg_read+0x128/0x1c0 [ 1057.307561][T17222] ? __pfx_proc_reg_read+0x10/0x10 [ 1057.307593][T17222] vfs_readv+0x3fb/0x690 [ 1057.307646][T17222] __x64_sys_preadv+0xfd/0x1c0 [ 1057.307675][T17222] x64_sys_call+0x2805/0x3000 [ 1057.307763][T17222] do_syscall_64+0xd8/0x2c0 [ 1057.307797][T17222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.307818][T17222] RIP: 0033:0x7fc3dc35f749 [ 1057.307840][T17222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1057.307924][T17222] RSP: 002b:00007fc3dadc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1057.308003][T17222] RAX: ffffffffffffffda RBX: 00007fc3dc5b5fa0 RCX: 00007fc3dc35f749 [ 1057.308015][T17222] RDX: 0000000000000001 RSI: 00002000000014c0 RDI: 0000000000000004 [ 1057.308027][T17222] RBP: 00007fc3dadc7090 R08: 0000000000000000 R09: 0000000000000000 [ 1057.308039][T17222] R10: 0000000000000182 R11: 0000000000000246 R12: 0000000000000001 [ 1057.308109][T17222] R13: 00007fc3dc5b6038 R14: 00007fc3dc5b5fa0 R15: 00007ffc297cefb8 [ 1057.308129][T17222] [ 1057.676185][T17231] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1057.697395][T17224] netlink: 'syz.3.16200': attribute type 12 has an invalid length. [ 1057.721363][T17246] sd 0:0:1:0: device reset [ 1058.241522][ T29] kauditd_printk_skb: 597 callbacks suppressed [ 1058.241539][ T29] audit: type=1326 audit(2000000520.404:79737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17276 comm="syz.4.16222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16976f749 code=0x7ffc0000 [ 1058.339405][ T29] audit: type=1326 audit(2000000520.441:79738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17276 comm="syz.4.16222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16976f749 code=0x7ffc0000 [ 1058.418381][ T29] audit: type=1326 audit(2000000520.488:79739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17276 comm="syz.4.16222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb16976f749 code=0x7ffc0000 [ 1058.442472][ T29] audit: type=1326 audit(2000000520.488:79740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17276 comm="syz.4.16222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16976f749 code=0x7ffc0000 [ 1058.466209][ T29] audit: type=1326 audit(2000000520.488:79741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17276 comm="syz.4.16222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16976f749 code=0x7ffc0000 [ 1058.489977][ T29] audit: type=1326 audit(2000000520.488:79742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17276 comm="syz.4.16222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb16976f749 code=0x7ffc0000 [ 1058.513721][ T29] audit: type=1326 audit(2000000520.488:79743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17276 comm="syz.4.16222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16976f749 code=0x7ffc0000 [ 1058.537439][ T29] audit: type=1326 audit(2000000520.488:79744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17276 comm="syz.4.16222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb16976f749 code=0x7ffc0000 [ 1058.561233][ T29] audit: type=1326 audit(2000000520.488:79745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17276 comm="syz.4.16222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16976f749 code=0x7ffc0000 [ 1058.585044][ T29] audit: type=1326 audit(2000000520.488:79746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17276 comm="syz.4.16222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fb16976f749 code=0x7ffc0000 [ 1058.747080][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1059.322474][T17308] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1059.501460][T11463] bridge_slave_1: left allmulticast mode [ 1059.507221][T11463] bridge_slave_1: left promiscuous mode [ 1059.512921][T11463] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.543290][T11463] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.722494][T11463] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1059.752568][T11463] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1059.773882][T11463] bond0 (unregistering): Released all slaves [ 1059.794776][T11463] bond1 (unregistering): (slave veth5): Releasing active interface [ 1059.814064][T11463] bond1 (unregistering): Released all slaves [ 1059.832266][T11463] bond2 (unregistering): (slave veth7): Releasing active interface [ 1059.848682][T11463] bond2 (unregistering): Released all slaves [ 1059.866031][T11463] bond3 (unregistering): (slave veth9): Releasing active interface [ 1059.892395][T11463] bond3 (unregistering): Released all slaves [ 1059.914447][T17336] hub 1-0:1.0: USB hub found [ 1059.919178][T17336] hub 1-0:1.0: 8 ports detected [ 1059.936301][T17289] lo speed is unknown, defaulting to 1000 [ 1059.942899][T17329] lo speed is unknown, defaulting to 1000 [ 1060.141701][T17343] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.227342][T17343] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.261896][T17347] bond1 (unregistering): Released all slaves [ 1060.280080][T17343] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.291975][T17289] chnl_net:caif_netlink_parms(): no params data found [ 1060.351291][T17351] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1060.361573][T17343] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.429907][T11463] hsr_slave_0: left promiscuous mode [ 1060.450463][T11463] hsr_slave_1: left promiscuous mode [ 1060.508590][T11463] team0 (unregistering): Port device team_slave_0 removed [ 1060.563208][T17361] block device autoloading is deprecated and will be removed. [ 1060.602515][T13936] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.636626][T13936] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.645075][T17289] bridge0: port 1(bridge_slave_0) entered blocking state [ 1060.652230][T17289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.679866][T17289] bridge_slave_0: entered allmulticast mode [ 1060.686734][T17289] bridge_slave_0: entered promiscuous mode [ 1060.703293][T17289] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.710457][T17289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.725277][T17289] bridge_slave_1: entered allmulticast mode [ 1060.732244][T17289] bridge_slave_1: entered promiscuous mode [ 1060.742060][T13936] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.768523][T17289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1060.781764][T13936] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.798254][T17289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1060.852256][T17289] team0: Port device team_slave_0 added [ 1060.869327][T17289] team0: Port device team_slave_1 added [ 1061.268326][T13897] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1061.276063][T13897] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1061.283915][T13897] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1061.291635][T13897] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1061.298961][T13897] rtc rtc0: __rtc_set_alarm: err=-22 [ 1061.453463][T17289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1061.460529][T17289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1061.486590][T17289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1061.500915][T17385] __nla_validate_parse: 5 callbacks suppressed [ 1061.500935][T17385] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16253'. [ 1061.546495][T17289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1061.553551][T17289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1061.579646][T17289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1061.593849][T17379] lo speed is unknown, defaulting to 1000 [ 1061.633645][T17389] netlink: 16 bytes leftover after parsing attributes in process `syz.6.16255'. [ 1061.648232][T17289] hsr_slave_0: entered promiscuous mode [ 1061.657823][T17289] hsr_slave_1: entered promiscuous mode [ 1061.663916][T17289] debugfs: 'hsr0' already exists in 'hsr' [ 1061.669698][T17289] Cannot create hsr debugfs directory [ 1061.695137][T17390] lo speed is unknown, defaulting to 1000 [ 1061.897429][T17406] hub 1-0:1.0: USB hub found [ 1061.921842][T17406] hub 1-0:1.0: 8 ports detected [ 1062.082680][ T3936] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1062.094875][T17411] netlink: 'syz.4.16262': attribute type 21 has an invalid length. [ 1062.102838][T17411] netlink: 128 bytes leftover after parsing attributes in process `syz.4.16262'. [ 1062.148594][T17289] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1062.171148][T17411] netlink: 'syz.4.16262': attribute type 4 has an invalid length. [ 1062.179293][T17289] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1062.195849][T17289] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1062.224837][T17289] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1062.335998][T17289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1062.390219][T17289] 8021q: adding VLAN 0 to HW filter on device team0 [ 1062.405753][T11463] bridge0: port 1(bridge_slave_0) entered blocking state [ 1062.412903][T11463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1062.475533][ T2437] bridge0: port 2(bridge_slave_1) entered blocking state [ 1062.482693][ T2437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1062.532892][T17435] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1062.550509][T17439] hub 1-0:1.0: USB hub found [ 1062.563254][T17439] hub 1-0:1.0: 8 ports detected [ 1062.596512][T17439] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=17439 comm=syz.4.16272 [ 1062.648338][T17439] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16272'. [ 1062.697451][T17445] loop8: detected capacity change from 0 to 1024 [ 1062.731569][T17289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1062.745658][T17445] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1062.806079][T17445] netlink: 16 bytes leftover after parsing attributes in process `syz.8.16273'. [ 1062.953870][T15818] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1062.981581][T17465] netlink: 'syz.4.16277': attribute type 21 has an invalid length. [ 1062.989556][T17465] netlink: 128 bytes leftover after parsing attributes in process `syz.4.16277'. [ 1063.004873][T17289] veth0_vlan: entered promiscuous mode [ 1063.043763][T17289] veth1_vlan: entered promiscuous mode [ 1063.058000][T17465] netlink: 'syz.4.16277': attribute type 4 has an invalid length. [ 1063.081981][T17469] hub 1-0:1.0: USB hub found [ 1063.103733][T17289] veth0_macvtap: entered promiscuous mode [ 1063.119555][T17469] hub 1-0:1.0: 8 ports detected [ 1063.131596][T17289] veth1_macvtap: entered promiscuous mode [ 1063.178782][T17289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1063.227680][T17289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1063.265285][T13936] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.294967][T13936] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.322374][T13936] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.331290][T13936] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.379033][T17483] loop8: detected capacity change from 0 to 128 [ 1063.418913][T17483] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1063.436177][T17490] sd 0:0:1:0: device reset [ 1063.463060][T17483] ext4 filesystem being mounted at /110/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1063.596143][ T29] kauditd_printk_skb: 278 callbacks suppressed [ 1063.596164][ T29] audit: type=1326 audit(2000000525.409:80025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17494 comm="syz.2.16289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f457fd0f749 code=0x7ffc0000 [ 1063.597465][T17500] hub 1-0:1.0: USB hub found [ 1063.602435][ T29] audit: type=1326 audit(2000000525.409:80026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17494 comm="syz.2.16289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457fd0f749 code=0x7ffc0000 [ 1063.654782][ T29] audit: type=1326 audit(2000000525.409:80027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17494 comm="syz.2.16289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457fd0f749 code=0x7ffc0000 [ 1063.664589][T17500] hub 1-0:1.0: 8 ports detected [ 1063.678740][ T29] audit: type=1326 audit(2000000525.409:80028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17484 comm="syz.3.16286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f081e5165e7 code=0x7ffc0000 [ 1063.707876][ T29] audit: type=1326 audit(2000000525.409:80029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17484 comm="syz.3.16286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f081e4bb829 code=0x7ffc0000 [ 1063.732105][ T29] audit: type=1326 audit(2000000525.409:80030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17484 comm="syz.3.16286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f081e51f749 code=0x7ffc0000 [ 1063.755885][ T29] audit: type=1326 audit(2000000525.409:80031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17484 comm="syz.3.16286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f081e51f749 code=0x7ffc0000 [ 1063.780711][T15818] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1063.784628][ T29] audit: type=1326 audit(2000000525.503:80032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17494 comm="syz.2.16289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f457fd0f749 code=0x7ffc0000 [ 1063.813406][ T29] audit: type=1326 audit(2000000525.503:80033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17484 comm="syz.3.16286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f081e5165e7 code=0x7ffc0000 [ 1063.837083][ T29] audit: type=1326 audit(2000000525.503:80034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17484 comm="syz.3.16286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f081e4bb829 code=0x7ffc0000 [ 1064.011292][T17511] hub 1-0:1.0: USB hub found [ 1064.038755][T17511] hub 1-0:1.0: 8 ports detected [ 1064.052847][T17513] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1064.092985][T17511] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=17511 comm=syz.2.16296 [ 1064.106056][T17515] loop8: detected capacity change from 0 to 512 [ 1064.138953][T17515] EXT4-fs warning (device loop8): read_mmp_block:111: Error -117 while reading MMP block 8 [ 1064.157150][T17511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16296'. [ 1064.268173][T13897] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1064.275923][T13897] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1064.283616][T13897] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1064.291386][T13897] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1064.298771][T13897] rtc rtc0: __rtc_set_alarm: err=-22 [ 1064.305742][T17522] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.316154][T17522] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1064.365457][T17524] siw: device registration error -23 [ 1064.651238][T17544] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16308'. [ 1065.053578][T17570] hub 1-0:1.0: USB hub found [ 1065.063970][T17570] hub 1-0:1.0: 8 ports detected [ 1065.085935][T17564] siw: device registration error -23 [ 1065.262472][T17590] sd 0:0:1:0: device reset [ 1065.268336][T17586] hub 1-0:1.0: USB hub found [ 1065.282794][T17586] hub 1-0:1.0: 8 ports detected [ 1065.321851][T17586] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=17586 comm=syz.2.16325 [ 1065.345332][T17596] netlink: 24 bytes leftover after parsing attributes in process `syz.8.16330'. [ 1065.360339][T17586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16325'. [ 1065.380938][T17596] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1065.490353][T17613] sd 0:0:1:0: device reset [ 1065.491638][T17614] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1065.593338][T17615] siw: device registration error -23 [ 1065.635174][T17625] hub 1-0:1.0: USB hub found [ 1065.635247][T17625] hub 1-0:1.0: 8 ports detected [ 1065.645604][T17628] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1065.682017][T17625] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=17625 comm=syz.8.16344 [ 1065.738910][T17631] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1065.790977][T17634] loop8: detected capacity change from 0 to 512 [ 1065.800527][T17634] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: comm syz.8.16348: Parent and EA inode have the same ino 15 [ 1065.800784][T17634] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: comm syz.8.16348: Parent and EA inode have the same ino 15 [ 1065.801030][T17634] EXT4-fs (loop8): 1 orphan inode deleted [ 1065.801621][T17634] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1065.805736][T17634] EXT4-fs error (device loop8): ext4_find_dest_de:2050: inode #2: block 13: comm syz.8.16348: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 1065.854703][T17640] block device autoloading is deprecated and will be removed. [ 1065.870105][T15818] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1065.962827][T17648] sd 0:0:1:0: device reset [ 1066.069728][T17644] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1066.149378][T17654] program syz.2.16355 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1066.190927][T17657] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.268505][T13897] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1066.268891][T13897] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1066.269292][T13897] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1066.269638][T13897] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1066.269661][T13897] rtc rtc0: __rtc_set_alarm: err=-22 [ 1066.398871][T17659] bond1 (unregistering): Released all slaves [ 1066.531249][T17665] loop8: detected capacity change from 0 to 128 [ 1066.542149][T17669] hub 1-0:1.0: USB hub found [ 1066.550030][T17669] hub 1-0:1.0: 8 ports detected [ 1066.561149][T17669] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=17669 comm=syz.6.16358 [ 1066.602909][T17672] loop4: detected capacity change from 0 to 1024 [ 1066.618366][T17672] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1066.629334][T17672] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1066.647133][T17672] JBD2: no valid journal superblock found [ 1066.652916][T17672] EXT4-fs (loop4): Could not load journal inode [ 1066.673828][T17678] sd 0:0:1:0: device reset [ 1066.712756][T17683] program syz.8.16366 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1067.058401][T17657] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.101695][T17701] siw: device registration error -23 [ 1067.171258][T17657] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.299802][T17711] __nla_validate_parse: 5 callbacks suppressed [ 1067.299821][T17711] netlink: 24 bytes leftover after parsing attributes in process `syz.6.16376'. [ 1067.347501][T17657] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.376251][T17717] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1067.395652][ T2437] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.428569][ T53] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.439134][ T2437] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.472571][ T53] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.513799][ T53] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.553113][T17703] lo speed is unknown, defaulting to 1000 [ 1067.561173][ T2437] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.577979][ T53] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.621130][ T2437] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.672368][T17727] program syz.2.16378 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1067.845511][ T2437] bridge_slave_1: left allmulticast mode [ 1067.851212][ T2437] bridge_slave_1: left promiscuous mode [ 1067.856991][ T2437] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.876637][ T2437] bridge_slave_0: left allmulticast mode [ 1067.882408][ T2437] bridge0: port 1(bridge_slave_0) entered disabled state [ 1068.072108][ T2437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1068.101026][ T2437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1068.143985][ T2437] bond0 (unregistering): Released all slaves [ 1068.177357][T13888] sy: Port: 1 Link DOWN [ 1068.291890][T17703] chnl_net:caif_netlink_parms(): no params data found [ 1068.337189][ T2437] tipc: Left network mode [ 1068.420021][T17745] loop8: detected capacity change from 0 to 1024 [ 1068.498312][T17745] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1068.554019][ T2437] hsr_slave_0: left promiscuous mode [ 1068.564415][T17745] netlink: 16 bytes leftover after parsing attributes in process `syz.8.16384'. [ 1068.581842][ T2437] hsr_slave_1: left promiscuous mode [ 1068.592099][ T2437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1068.599540][ T2437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1068.634199][ T2437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1068.639721][T17757] netlink: 16 bytes leftover after parsing attributes in process `syz.6.16388'. [ 1068.641750][ T2437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1068.661469][ T2437] veth1_vlan: left promiscuous mode [ 1068.667408][ T2437] veth0_vlan: left promiscuous mode [ 1068.679926][T17753] siw: device registration error -23 [ 1068.721996][T15818] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1068.737764][T17766] loop4: detected capacity change from 0 to 1024 [ 1068.771273][T17766] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1068.838745][ T2437] team0 (unregistering): Port device team_slave_0 removed [ 1068.846660][T17766] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16391'. [ 1068.867900][ T12] smc: removing ib device sy [ 1068.901153][T17773] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16393'. [ 1068.930917][T17703] bridge0: port 1(bridge_slave_0) entered blocking state [ 1068.938188][T17703] bridge0: port 1(bridge_slave_0) entered disabled state [ 1068.964523][ T29] kauditd_printk_skb: 576 callbacks suppressed [ 1068.964539][ T29] audit: type=1326 audit(2000000530.433:80611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17772 comm="syz.2.16393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457fd0f749 code=0x7ffc0000 [ 1068.976835][T17703] bridge_slave_0: entered allmulticast mode [ 1069.043663][T15244] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1069.083702][ T29] audit: type=1326 audit(2000000530.470:80612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17772 comm="syz.2.16393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457fd0f749 code=0x7ffc0000 [ 1069.107609][ T29] audit: type=1326 audit(2000000530.470:80613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17772 comm="syz.2.16393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f457fd0f749 code=0x7ffc0000 [ 1069.131510][ T29] audit: type=1326 audit(2000000530.470:80614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17772 comm="syz.2.16393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457fd0f749 code=0x7ffc0000 [ 1069.155440][ T29] audit: type=1326 audit(2000000530.470:80615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17772 comm="syz.2.16393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457fd0f749 code=0x7ffc0000 [ 1069.179341][ T29] audit: type=1326 audit(2000000530.470:80616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17772 comm="syz.2.16393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f457fd0f749 code=0x7ffc0000 [ 1069.203276][ T29] audit: type=1326 audit(2000000530.470:80617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17772 comm="syz.2.16393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457fd0f749 code=0x7ffc0000 [ 1069.227202][ T29] audit: type=1326 audit(2000000530.470:80618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17772 comm="syz.2.16393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457fd0f749 code=0x7ffc0000 [ 1069.251020][ T29] audit: type=1326 audit(2000000530.470:80619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17772 comm="syz.2.16393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f457fd0f749 code=0x7ffc0000 [ 1069.266755][T17703] bridge_slave_0: entered promiscuous mode [ 1069.274903][ T29] audit: type=1326 audit(2000000530.470:80620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17772 comm="syz.2.16393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457fd0f749 code=0x7ffc0000 [ 1069.314322][T17780] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1069.332064][T17703] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.339269][T17703] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.354941][T17703] bridge_slave_1: entered allmulticast mode [ 1069.362143][T17785] loop4: detected capacity change from 0 to 1024 [ 1069.370919][T17703] bridge_slave_1: entered promiscuous mode [ 1069.417889][T17785] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1069.463218][T17703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1069.481290][T17785] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16395'. [ 1069.523950][T17703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1069.594298][T15244] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1069.614308][T17703] team0: Port device team_slave_0 added [ 1069.643210][T17703] team0: Port device team_slave_1 added [ 1069.707647][T17703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1069.714670][T17703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1069.740631][T17703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1069.780454][T17703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1069.787444][T17703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1069.813571][T17703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1069.845114][T17703] hsr_slave_0: entered promiscuous mode [ 1069.851315][T17703] hsr_slave_1: entered promiscuous mode [ 1069.857676][T17703] debugfs: 'hsr0' already exists in 'hsr' [ 1069.863435][T17703] Cannot create hsr debugfs directory [ 1070.007904][T17794] siw: device registration error -23 [ 1070.110784][T17799] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1070.136065][T17802] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16401'. [ 1070.152101][T17703] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1070.229807][T17703] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1070.279274][T13887] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1070.286998][T13887] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1070.294761][T13887] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1070.302488][T13887] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1070.309876][T13887] rtc rtc0: __rtc_set_alarm: err=-22 [ 1070.327586][T17703] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1070.735612][T17703] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1070.747019][T17813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16404'. [ 1070.838168][T17826] sd 0:0:1:0: device reset [ 1070.889371][T17703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1070.960551][T17703] 8021q: adding VLAN 0 to HW filter on device team0 [ 1070.972423][T17832] loop4: detected capacity change from 0 to 128 [ 1071.003291][T12961] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.010460][T12961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1071.051458][ T2437] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.058655][ T2437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1071.189125][T17837] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1071.267657][ T2971] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1071.275462][ T2971] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1071.283216][ T2971] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1071.289549][T17846] netlink: 16 bytes leftover after parsing attributes in process `syz.6.16414'. [ 1071.290980][ T2971] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1071.306957][ T2971] rtc rtc0: __rtc_set_alarm: err=-22 [ 1071.412580][T17703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1071.962682][T17703] veth0_vlan: entered promiscuous mode [ 1071.970405][T17703] veth1_vlan: entered promiscuous mode [ 1071.985417][T17703] veth0_macvtap: entered promiscuous mode [ 1072.008961][T17703] veth1_macvtap: entered promiscuous mode [ 1072.032879][T17703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1072.042879][T17703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1072.049567][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.049697][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.049733][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.049773][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.104507][T15244] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1072.104546][T15244] CPU: 0 UID: 0 PID: 15244 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 1072.104580][T15244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1072.104597][T15244] Call Trace: [ 1072.104606][T15244] [ 1072.104615][T15244] __dump_stack+0x1d/0x30 [ 1072.104667][T15244] dump_stack_lvl+0xe8/0x140 [ 1072.104716][T15244] dump_stack+0x15/0x1b [ 1072.104742][T15244] dump_header+0x81/0x240 [ 1072.104769][T15244] oom_kill_process+0x295/0x350 [ 1072.104848][T15244] out_of_memory+0x97b/0xb80 [ 1072.104881][T15244] try_charge_memcg+0x610/0xa10 [ 1072.104916][T15244] charge_memcg+0x51/0xc0 [ 1072.104959][T15244] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 1072.105051][T15244] __read_swap_cache_async+0x17b/0x2d0 [ 1072.105099][T15244] swap_cluster_readahead+0x262/0x3c0 [ 1072.105146][T15244] swapin_readahead+0xde/0x820 [ 1072.105245][T15244] ? bpf_perf_event_read+0x137/0x150 [ 1072.105278][T15244] ? __rcu_read_unlock+0x4f/0x70 [ 1072.105305][T15244] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 1072.105335][T15244] ? __rcu_read_unlock+0x4f/0x70 [ 1072.105380][T15244] ? __rcu_read_unlock+0x4f/0x70 [ 1072.105431][T15244] ? swap_cache_get_folio+0x277/0x280 [ 1072.105473][T15244] do_swap_page+0x2b4/0x21e0 [ 1072.105512][T15244] ? _raw_spin_unlock+0x26/0x50 [ 1072.105550][T15244] ? __schedule+0x85f/0xcd0 [ 1072.105582][T15244] ? __pfx_default_wake_function+0x10/0x10 [ 1072.105660][T15244] handle_mm_fault+0x9d8/0x2c60 [ 1072.105708][T15244] do_user_addr_fault+0x630/0x1080 [ 1072.105755][T15244] exc_page_fault+0x62/0xa0 [ 1072.105788][T15244] asm_exc_page_fault+0x26/0x30 [ 1072.105815][T15244] RIP: 0033:0x7fb1697a1fc5 [ 1072.105852][T15244] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 1072.105878][T15244] RSP: 002b:00007ffd81ed06d8 EFLAGS: 00010246 [ 1072.105900][T15244] RAX: 0000000000000000 RBX: 00000000000001ca RCX: 00007fb1697a1fc3 [ 1072.105917][T15244] RDX: 00007ffd81ed06f0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1072.105930][T15244] RBP: 00007ffd81ed075c R08: 00000000174fba41 R09: 0000000000000000 [ 1072.105942][T15244] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 1072.105956][T15244] R13: 00000000000927c0 R14: 0000000000101985 R15: 00007ffd81ed07b0 [ 1072.106045][T15244] [ 1072.106067][T15244] memory: usage 307200kB, limit 307200kB, failcnt 14992 [ 1072.106086][T15244] memory+swap: usage 313132kB, limit 9007199254740988kB, failcnt 0 [ 1072.106180][T15244] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 1072.106240][T15244] Memory cgroup stats for /syz4: [ 1072.112701][T15244] cache 0 [ 1072.112714][T15244] rss 0 [ 1072.112723][T15244] shmem 0 [ 1072.112813][T15244] mapped_file 0 [ 1072.112823][T15244] dirty 0 [ 1072.112833][T15244] writeback 0 [ 1072.112843][T15244] workingset_refault_anon 3198 [ 1072.112855][T15244] workingset_refault_file 4265 [ 1072.112903][T15244] swap 6074368 [ 1072.112913][T15244] swapcached 0 [ 1072.112982][T15244] pgpgin 1341430 [ 1072.112992][T15244] pgpgout 1341430 [ 1072.113002][T15244] pgfault 1257474 [ 1072.113012][T15244] pgmajfault 1319 [ 1072.113022][T15244] inactive_anon 0 [ 1072.113033][T15244] active_anon 0 [ 1072.113042][T15244] inactive_file 0 [ 1072.113053][T15244] active_file 0 [ 1072.113111][T15244] unevictable 0 [ 1072.113122][T15244] hierarchical_memory_limit 314572800 [ 1072.113134][T15244] hierarchical_memsw_limit 9223372036854771712 [ 1072.113147][T15244] total_cache 0 [ 1072.113157][T15244] total_rss 0 [ 1072.113167][T15244] total_shmem 0 [ 1072.113176][T15244] total_mapped_file 0 [ 1072.113186][T15244] total_dirty 0 [ 1072.113196][T15244] total_writeback 0 [ 1072.113207][T15244] total_workingset_refault_anon 3198 [ 1072.113231][T15244] total_workingset_refault_file 4265 [ 1072.113267][T15244] total_swap 6074368 [ 1072.113277][T15244] total_swapcached 0 [ 1072.113302][T15244] total_pgpgin 1341430 [ 1072.113311][T15244] total_pgpgout 1341430 [ 1072.113322][T15244] total_pgfault 1257474 [ 1072.113333][T15244] total_pgmajfault 1319 [ 1072.113343][T15244] total_inactive_anon 0 [ 1072.113354][T15244] total_active_anon 0 [ 1072.113410][T15244] total_inactive_file 0 [ 1072.113421][T15244] total_active_file 0 [ 1072.113432][T15244] total_unevictable 0 [ 1072.113443][T15244] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.16419,pid=17858,uid=0 [ 1072.113565][T15244] Memory cgroup out of memory: Killed process 17858 (syz.4.16419) total-vm:96016kB, anon-rss:1136kB, file-rss:22316kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1072.211099][T17877] program syz.4.16422 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1072.227565][T17876] netlink: 16 bytes leftover after parsing attributes in process `syz.6.16423'. [ 1072.232044][T17880] hub 1-0:1.0: USB hub found [ 1072.232111][T17880] hub 1-0:1.0: 8 ports detected [ 1072.261147][T17880] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=17880 comm=syz.3.16424 [ 1072.278693][T17885] loop8: detected capacity change from 0 to 1756 [ 1072.278981][T17885] iso9660: Unknown parameter 'bloԣ|hӤ0000000Uverriderockperm' [ 1072.666878][T17907] loop8: detected capacity change from 0 to 512 [ 1072.695790][T17907] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: comm syz.8.16436: Parent and EA inode have the same ino 15 [ 1072.696111][T17907] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: comm syz.8.16436: Parent and EA inode have the same ino 15 [ 1072.699620][T17907] EXT4-fs (loop8): 1 orphan inode deleted [ 1072.700067][T17907] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1072.705570][T17907] EXT4-fs error (device loop8): ext4_find_dest_de:2050: inode #2: block 13: comm syz.8.16436: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 1072.740735][T15818] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1073.104661][T17925] hub 1-0:1.0: USB hub found [ 1073.129181][T17925] hub 1-0:1.0: 8 ports detected [ 1073.158107][T17928] __nla_validate_parse: 1 callbacks suppressed [ 1073.158129][T17928] netlink: 12 bytes leftover after parsing attributes in process `syz.8.16444'. [ 1073.318479][T17932] siw: device registration error -23 [ 1073.421194][T17941] siw: device registration error -23 [ 1073.432198][T17944] netlink: 'syz.4.16451': attribute type 21 has an invalid length. [ 1073.440321][T17944] netlink: 128 bytes leftover after parsing attributes in process `syz.4.16451'. [ 1073.466360][T17944] netlink: 'syz.4.16451': attribute type 4 has an invalid length. [ 1073.476875][T17946] loop8: detected capacity change from 0 to 1756 [ 1073.483650][T17946] iso9660: Unknown parameter 'bloԣ|hӤ0000000Uverriderockperm' [ 1073.606543][T17953] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1073.688674][T17956] hub 1-0:1.0: USB hub found [ 1073.707494][T17956] hub 1-0:1.0: 8 ports detected [ 1073.877167][T17970] loop4: detected capacity change from 0 to 512 [ 1073.896585][T17970] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.16463: Parent and EA inode have the same ino 15 [ 1073.921485][T17970] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.16463: Parent and EA inode have the same ino 15 [ 1073.939490][T17970] EXT4-fs (loop4): 1 orphan inode deleted [ 1073.945878][T17970] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1073.960231][T17970] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 13: comm syz.4.16463: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 1073.999484][T15244] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1074.061565][T17977] loop8: detected capacity change from 0 to 1024 [ 1074.069704][T17977] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1074.075565][T17981] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16468'. [ 1074.080680][T17977] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1074.107880][T17977] JBD2: no valid journal superblock found [ 1074.113694][T17977] EXT4-fs (loop8): Could not load journal inode [ 1074.142547][T17979] netlink: 'syz.3.16466': attribute type 21 has an invalid length. [ 1074.150818][T17979] netlink: 128 bytes leftover after parsing attributes in process `syz.3.16466'. [ 1074.181733][T17979] netlink: 'syz.3.16466': attribute type 4 has an invalid length. [ 1074.192836][T17987] hub 1-0:1.0: USB hub found [ 1074.211077][T17987] hub 1-0:1.0: 8 ports detected [ 1074.222937][T17990] program syz.4.16473 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1074.268391][T13896] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1074.268763][T13896] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1074.269121][T13896] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1074.269504][T13896] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1074.269522][T13896] rtc rtc0: __rtc_set_alarm: err=-22 [ 1074.385618][ T29] kauditd_printk_skb: 603 callbacks suppressed [ 1074.385632][ T29] audit: type=1326 audit(2000000535.513:81224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18008 comm="syz.4.16482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16976f749 code=0x7ffc0000 [ 1074.385855][ T29] audit: type=1326 audit(2000000535.513:81225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18008 comm="syz.4.16482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb16976f749 code=0x7ffc0000 [ 1074.385989][ T29] audit: type=1326 audit(2000000535.513:81226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18008 comm="syz.4.16482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16976f749 code=0x7ffc0000 [ 1074.386214][ T29] audit: type=1326 audit(2000000535.513:81227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18008 comm="syz.4.16482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fb16976f749 code=0x7ffc0000 [ 1074.386396][ T29] audit: type=1326 audit(2000000535.513:81228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18008 comm="syz.4.16482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16976f749 code=0x7ffc0000 [ 1074.386639][ T29] audit: type=1326 audit(2000000535.513:81229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18008 comm="syz.4.16482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb16976f749 code=0x7ffc0000 [ 1074.386829][ T29] audit: type=1326 audit(2000000535.513:81230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18008 comm="syz.4.16482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16976f749 code=0x7ffc0000 [ 1074.386978][ T29] audit: type=1326 audit(2000000535.513:81231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18008 comm="syz.4.16482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb16976f749 code=0x7ffc0000 [ 1074.387738][ T29] audit: type=1326 audit(2000000535.513:81232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18008 comm="syz.4.16482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16976f749 code=0x7ffc0000 [ 1074.584601][T18009] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1074.623905][T18011] FAULT_INJECTION: forcing a failure. [ 1074.623905][T18011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1074.623944][T18011] CPU: 1 UID: 0 PID: 18011 Comm: syz.3.16483 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1074.623971][T18011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1074.624066][T18011] Call Trace: [ 1074.624076][T18011] [ 1074.624087][T18011] __dump_stack+0x1d/0x30 [ 1074.624196][T18011] dump_stack_lvl+0xe8/0x140 [ 1074.624272][T18011] dump_stack+0x15/0x1b [ 1074.624298][T18011] should_fail_ex+0x265/0x280 [ 1074.624330][T18011] should_fail+0xb/0x20 [ 1074.624385][T18011] should_fail_usercopy+0x1a/0x20 [ 1074.624496][T18011] _copy_from_user+0x1c/0xb0 [ 1074.624538][T18011] __sys_bpf+0x183/0x7c0 [ 1074.624632][T18011] __x64_sys_bpf+0x41/0x50 [ 1074.624678][T18011] x64_sys_call+0x28e1/0x3000 [ 1074.624714][T18011] do_syscall_64+0xd8/0x2c0 [ 1074.624766][T18011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1074.624796][T18011] RIP: 0033:0x7f36e686f749 [ 1074.624818][T18011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1074.624878][T18011] RSP: 002b:00007f36e52cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1074.624905][T18011] RAX: ffffffffffffffda RBX: 00007f36e6ac5fa0 RCX: 00007f36e686f749 [ 1074.624923][T18011] RDX: 0000000000000020 RSI: 0000200000000000 RDI: 000000000000001c [ 1074.624941][T18011] RBP: 00007f36e52cf090 R08: 0000000000000000 R09: 0000000000000000 [ 1074.624960][T18011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1074.624977][T18011] R13: 00007f36e6ac6038 R14: 00007f36e6ac5fa0 R15: 00007ffd47abeb88 [ 1074.625053][T18011] [ 1074.635372][ T29] audit: type=1326 audit(2000000535.569:81233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18008 comm="syz.4.16482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb16976f749 code=0x7ffc0000 [ 1074.763237][ T2437] Bluetooth: hci0: Frame reassembly failed (-84) [ 1074.797857][T18021] hub 1-0:1.0: USB hub found [ 1074.830824][T18021] hub 1-0:1.0: 8 ports detected [ 1074.839201][T18015] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.930915][T18030] hub 1-0:1.0: USB hub found [ 1074.930990][T18030] hub 1-0:1.0: 8 ports detected [ 1074.946242][T18030] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=18030 comm=syz.8.16491 [ 1074.946463][T18030] netlink: 12 bytes leftover after parsing attributes in process `syz.8.16491'. [ 1075.088950][T18038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16494'. [ 1075.204627][T18045] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1075.245759][T18047] hub 1-0:1.0: USB hub found [ 1075.250806][T18047] hub 1-0:1.0: 8 ports detected [ 1075.281374][T18049] netlink: 'syz.2.16499': attribute type 1 has an invalid length. [ 1075.289286][T18049] netlink: 'syz.2.16499': attribute type 4 has an invalid length. [ 1075.297179][T18049] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.16499'. [ 1075.307096][T18049] netlink: 'syz.2.16499': attribute type 1 has an invalid length. [ 1075.315118][T18049] netlink: 'syz.2.16499': attribute type 4 has an invalid length. [ 1075.323011][T18049] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.16499'. [ 1075.410941][T18055] netlink: 'syz.2.16502': attribute type 21 has an invalid length. [ 1075.418950][T18055] netlink: 128 bytes leftover after parsing attributes in process `syz.2.16502'. [ 1075.428486][T18055] netlink: 'syz.2.16502': attribute type 4 has an invalid length. [ 1075.488927][T18061] sd 0:0:1:0: device reset [ 1075.668030][T18015] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.727444][T18015] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.792846][T18015] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.861177][T14557] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.874868][T14557] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.874905][T14557] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.891554][T14557] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.961654][T18069] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1076.006452][T18071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16509'. [ 1076.043267][T18075] hub 1-0:1.0: USB hub found [ 1076.043323][T18075] hub 1-0:1.0: 8 ports detected [ 1076.148505][T18085] loop8: detected capacity change from 0 to 1756 [ 1076.148810][T18085] iso9660: Unknown parameter 'bloԣ|hӤ0000000Uverriderockperm' [ 1076.464626][T18103] lo speed is unknown, defaulting to 1000 [ 1076.494088][T18109] program syz.3.16527 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1076.509456][T18110] loop8: detected capacity change from 0 to 512 [ 1076.523172][T18110] EXT4-fs: inline encryption not supported [ 1076.530269][T18110] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1076.565092][T18110] EXT4-fs (loop8): 1 truncate cleaned up [ 1076.573217][T18110] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1076.606040][T15818] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1076.827017][T18143] netem: change failed [ 1076.962023][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 1076.962060][ T3936] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1077.722071][T18162] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.776187][T18162] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.830110][T18162] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.864897][T18164] bond1 (unregistering): Released all slaves [ 1077.916636][T18172] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1077.951744][T18162] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.994773][T18174] FAULT_INJECTION: forcing a failure. [ 1077.994773][T18174] name failslab, interval 1, probability 0, space 0, times 0 [ 1078.007541][T18174] CPU: 0 UID: 0 PID: 18174 Comm: syz.3.16552 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1078.007573][T18174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1078.007660][T18174] Call Trace: [ 1078.007698][T18174] [ 1078.007709][T18174] __dump_stack+0x1d/0x30 [ 1078.007742][T18174] dump_stack_lvl+0xe8/0x140 [ 1078.007773][T18174] dump_stack+0x15/0x1b [ 1078.007794][T18174] should_fail_ex+0x265/0x280 [ 1078.007818][T18174] should_failslab+0x8c/0xb0 [ 1078.007893][T18174] __kmalloc_cache_noprof+0x65/0x4c0 [ 1078.007922][T18174] ? alloc_pipe_info+0xae/0x340 [ 1078.007953][T18174] alloc_pipe_info+0xae/0x340 [ 1078.007982][T18174] splice_direct_to_actor+0x592/0x680 [ 1078.008052][T18174] ? kstrtouint_from_user+0x9f/0xf0 [ 1078.008082][T18174] ? __pfx_direct_splice_actor+0x10/0x10 [ 1078.008107][T18174] ? __rcu_read_unlock+0x4f/0x70 [ 1078.008132][T18174] ? get_pid_task+0x96/0xd0 [ 1078.008229][T18174] ? avc_policy_seqno+0x15/0x30 [ 1078.008251][T18174] ? selinux_file_permission+0x1e2/0x320 [ 1078.008291][T18174] do_splice_direct+0xda/0x150 [ 1078.008321][T18174] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1078.008418][T18174] do_sendfile+0x380/0x650 [ 1078.008454][T18174] __x64_sys_sendfile64+0x105/0x150 [ 1078.008532][T18174] x64_sys_call+0x2db1/0x3000 [ 1078.008563][T18174] do_syscall_64+0xd8/0x2c0 [ 1078.008671][T18174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.008700][T18174] RIP: 0033:0x7f36e686f749 [ 1078.008724][T18174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1078.008749][T18174] RSP: 002b:00007f36e52cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1078.008802][T18174] RAX: ffffffffffffffda RBX: 00007f36e6ac5fa0 RCX: 00007f36e686f749 [ 1078.008819][T18174] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 1078.008836][T18174] RBP: 00007f36e52cf090 R08: 0000000000000000 R09: 0000000000000000 [ 1078.008853][T18174] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001 [ 1078.008870][T18174] R13: 00007f36e6ac6038 R14: 00007f36e6ac5fa0 R15: 00007ffd47abeb88 [ 1078.008894][T18174] [ 1078.237305][T18177] hub 1-0:1.0: USB hub found [ 1078.242037][T18177] hub 1-0:1.0: 8 ports detected [ 1078.307387][T18175] siw: device registration error -23 [ 1078.332097][T12961] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.366689][T12961] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.374002][T18181] hub 1-0:1.0: USB hub found [ 1078.384325][T12961] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.403380][T12961] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.417491][T18181] hub 1-0:1.0: 8 ports detected [ 1078.437424][T18186] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=18186 comm=syz.2.16556 [ 1078.505624][T18191] hub 1-0:1.0: USB hub found [ 1078.516294][T18191] hub 1-0:1.0: 8 ports detected [ 1078.688220][T18209] hub 1-0:1.0: USB hub found [ 1078.706633][T18209] hub 1-0:1.0: 8 ports detected [ 1078.754248][T18209] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=18209 comm=syz.8.16568 [ 1078.771736][T18216] hub 1-0:1.0: USB hub found [ 1078.779648][T18216] hub 1-0:1.0: 8 ports detected [ 1078.787297][T18214] validate_nla: 8 callbacks suppressed [ 1078.787316][T18214] netlink: 'syz.2.16570': attribute type 21 has an invalid length. [ 1078.793334][T18216] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=18216 comm=syz.4.16572 [ 1078.801036][T18214] __nla_validate_parse: 8 callbacks suppressed [ 1078.801062][T18214] netlink: 128 bytes leftover after parsing attributes in process `syz.2.16570'. [ 1078.814875][T18209] netlink: 12 bytes leftover after parsing attributes in process `syz.8.16568'. [ 1078.839703][T18216] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16572'. [ 1078.856006][T18214] netlink: 'syz.2.16570': attribute type 4 has an invalid length. [ 1078.904098][T18221] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16573'. [ 1078.938387][T18223] hub 1-0:1.0: USB hub found [ 1078.949329][T18223] hub 1-0:1.0: 8 ports detected [ 1078.955090][T18225] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16575'. [ 1078.988432][T18231] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.005130][T18233] hub 1-0:1.0: USB hub found [ 1079.009849][T18233] hub 1-0:1.0: 8 ports detected [ 1079.037411][T18231] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.060752][T18238] loop8: detected capacity change from 0 to 128 [ 1079.085007][T18244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16583'. [ 1079.120246][T18246] hub 1-0:1.0: USB hub found [ 1079.125709][T18246] hub 1-0:1.0: 8 ports detected [ 1079.144578][T18231] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.157022][T18246] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=18246 comm=syz.2.16584 [ 1079.170520][T18246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16584'. [ 1079.186529][T18251] bond0 (unregistering): Released all slaves [ 1079.217713][T18256] netlink: 12 bytes leftover after parsing attributes in process `syz.8.16587'. [ 1079.219398][T18254] netlink: 'syz.2.16586': attribute type 21 has an invalid length. [ 1079.234899][T18254] netlink: 128 bytes leftover after parsing attributes in process `syz.2.16586'. [ 1079.244727][T18254] netlink: 'syz.2.16586': attribute type 4 has an invalid length. [ 1079.264339][T18231] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.297122][T18260] lo speed is unknown, defaulting to 1000 [ 1079.315727][T18262] program syz.2.16590 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1079.340009][T18264] netlink: 16 bytes leftover after parsing attributes in process `syz.6.16591'. [ 1079.362186][T18260] loop8: detected capacity change from 0 to 512 [ 1079.373420][ T310] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.393158][T18260] EXT4-fs: inline encryption not supported [ 1079.401470][ T310] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.414589][T18260] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1079.424886][ T310] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.434041][ T310] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.445911][T18260] EXT4-fs (loop8): 1 truncate cleaned up [ 1079.462496][T18260] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1079.512779][T15818] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1079.569446][T18280] hub 1-0:1.0: USB hub found [ 1079.577794][T18280] hub 1-0:1.0: 8 ports detected [ 1079.593744][T18280] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=18280 comm=syz.8.16597 [ 1079.630563][T18284] FAULT_INJECTION: forcing a failure. [ 1079.630563][T18284] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1079.643894][T18284] CPU: 1 UID: 0 PID: 18284 Comm: syz.8.16599 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1079.644001][T18284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1079.644019][T18284] Call Trace: [ 1079.644028][T18284] [ 1079.644038][T18284] __dump_stack+0x1d/0x30 [ 1079.644069][T18284] dump_stack_lvl+0xe8/0x140 [ 1079.644129][T18284] dump_stack+0x15/0x1b [ 1079.644156][T18284] should_fail_ex+0x265/0x280 [ 1079.644189][T18284] should_fail_alloc_page+0xf2/0x100 [ 1079.644219][T18284] __alloc_frozen_pages_noprof+0x109/0x360 [ 1079.644299][T18284] alloc_pages_mpol+0xb3/0x260 [ 1079.644337][T18284] vma_alloc_folio_noprof+0x1aa/0x300 [ 1079.644504][T18284] handle_mm_fault+0xef5/0x2c60 [ 1079.644558][T18284] do_user_addr_fault+0x630/0x1080 [ 1079.644632][T18284] exc_page_fault+0x62/0xa0 [ 1079.644715][T18284] asm_exc_page_fault+0x26/0x30 [ 1079.644762][T18284] RIP: 0033:0x7fc3dc30cc5b [ 1079.644778][T18284] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 1079.644800][T18284] RSP: 002b:00007fc3dadc4e10 EFLAGS: 00010246 [ 1079.644848][T18284] RAX: 00007fc3dadc6f30 RBX: 00007fc3dc58a640 RCX: 0000000000000000 [ 1079.644866][T18284] RDX: 00007fc3dadc6f78 RSI: 00007fc3dc3c0df8 RDI: 00007fc3dadc4e30 [ 1079.644882][T18284] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 1079.644908][T18284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1079.644925][T18284] R13: 00007fc3dc5b6038 R14: 00007fc3dc5b5fa0 R15: 00007ffc297cefb8 [ 1079.644950][T18284] [ 1079.802826][T18284] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1079.825064][T18282] netlink: 'syz.2.16598': attribute type 21 has an invalid length. [ 1079.833347][T18282] netlink: 'syz.2.16598': attribute type 4 has an invalid length. [ 1079.962831][T18295] loop4: detected capacity change from 0 to 1756 [ 1079.981811][T18295] iso9660: Unknown parameter 'bloԣ|hӤ0000000Uverriderockperm' [ 1080.008219][ T29] kauditd_printk_skb: 646 callbacks suppressed [ 1080.008233][ T29] audit: type=1326 audit(2000000540.761:81880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18294 comm="syz.4.16604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16976f749 code=0x7ffc0000 [ 1080.038301][ T29] audit: type=1326 audit(2000000540.770:81881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18294 comm="syz.4.16604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16976f749 code=0x7ffc0000 [ 1080.062618][ T29] audit: type=1326 audit(2000000540.826:81882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18294 comm="syz.4.16604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb16976f749 code=0x7ffc0000 [ 1080.086384][ T29] audit: type=1326 audit(2000000540.826:81883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18294 comm="syz.4.16604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16976f749 code=0x7ffc0000 [ 1080.110118][ T29] audit: type=1326 audit(2000000540.826:81884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18294 comm="syz.4.16604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16976f749 code=0x7ffc0000 [ 1080.136049][ T29] audit: type=1326 audit(2000000540.864:81885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18294 comm="syz.4.16604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb16976f749 code=0x7ffc0000 [ 1080.159807][ T29] audit: type=1326 audit(2000000540.864:81886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18294 comm="syz.4.16604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16976f749 code=0x7ffc0000 [ 1080.183642][ T29] audit: type=1326 audit(2000000540.864:81887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18294 comm="syz.4.16604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb16976f749 code=0x7ffc0000 [ 1080.207407][ T29] audit: type=1326 audit(2000000540.864:81888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18294 comm="syz.4.16604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16976f749 code=0x7ffc0000 [ 1080.231121][ T29] audit: type=1326 audit(2000000540.864:81889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18294 comm="syz.4.16604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16976f749 code=0x7ffc0000 [ 1080.384551][T18309] FAULT_INJECTION: forcing a failure. [ 1080.384551][T18309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1080.397787][T18309] CPU: 0 UID: 0 PID: 18309 Comm: syz.6.16609 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1080.397866][T18309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1080.397946][T18309] Call Trace: [ 1080.397953][T18309] [ 1080.397961][T18309] __dump_stack+0x1d/0x30 [ 1080.397987][T18309] dump_stack_lvl+0xe8/0x140 [ 1080.398017][T18309] dump_stack+0x15/0x1b [ 1080.398078][T18309] should_fail_ex+0x265/0x280 [ 1080.398102][T18309] should_fail+0xb/0x20 [ 1080.398133][T18309] should_fail_usercopy+0x1a/0x20 [ 1080.398166][T18309] _copy_from_user+0x1c/0xb0 [ 1080.398234][T18309] sg_write+0x1ed/0x750 [ 1080.398254][T18309] ? path_openat+0x1d88/0x23b0 [ 1080.398306][T18309] vfs_writev+0x406/0x8b0 [ 1080.398402][T18309] ? __pfx_sg_write+0x10/0x10 [ 1080.398434][T18309] do_writev+0xe7/0x210 [ 1080.398464][T18309] __x64_sys_writev+0x45/0x50 [ 1080.398486][T18309] x64_sys_call+0x1ba5/0x3000 [ 1080.398542][T18309] do_syscall_64+0xd8/0x2c0 [ 1080.398582][T18309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1080.398621][T18309] RIP: 0033:0x7f522b2af749 [ 1080.398640][T18309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1080.398664][T18309] RSP: 002b:00007f5229d17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1080.398721][T18309] RAX: ffffffffffffffda RBX: 00007f522b505fa0 RCX: 00007f522b2af749 [ 1080.398737][T18309] RDX: 0000000000000002 RSI: 0000200000000080 RDI: 0000000000000003 [ 1080.398751][T18309] RBP: 00007f5229d17090 R08: 0000000000000000 R09: 0000000000000000 [ 1080.398765][T18309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1080.398777][T18309] R13: 00007f522b506038 R14: 00007f522b505fa0 R15: 00007ffca9cfbd08 [ 1080.398797][T18309] [ 1080.604039][T18308] loop4: detected capacity change from 0 to 128 [ 1080.701669][T18311] loop4: detected capacity change from 0 to 1756 [ 1080.708531][T18311] iso9660: Unknown parameter 'bloԣ|hӤ0000000Uverriderockperm' [ 1080.812908][T18313] siw: device registration error -23 [ 1080.865951][T18322] hub 1-0:1.0: USB hub found [ 1080.877031][T18322] hub 1-0:1.0: 8 ports detected [ 1080.906417][T18322] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=18322 comm=syz.4.16615 [ 1080.935462][T18329] hub 1-0:1.0: USB hub found [ 1080.940782][T18329] hub 1-0:1.0: 8 ports detected [ 1081.150856][T18350] loop8: detected capacity change from 0 to 128 [ 1081.161631][T18351] loop4: detected capacity change from 0 to 512 [ 1081.179460][T18350] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1081.194792][T18351] EXT4-fs warning (device loop4): read_mmp_block:111: Error -117 while reading MMP block 8 [ 1081.238408][T18350] ext4 filesystem being mounted at /193/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1081.303354][T18354] lo speed is unknown, defaulting to 1000 [ 1081.329986][T15818] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1081.416761][T18361] hub 1-0:1.0: USB hub found [ 1081.427136][T18361] hub 1-0:1.0: 8 ports detected [ 1081.446284][T18363] loop8: detected capacity change from 0 to 1024 [ 1081.462975][T18361] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=18361 comm=syz.4.16630 [ 1081.496553][T18363] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1081.540558][T18370] hub 1-0:1.0: USB hub found [ 1081.545388][T18370] hub 1-0:1.0: 8 ports detected [ 1081.613877][T15818] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1081.680179][T18381] loop8: detected capacity change from 0 to 1024 [ 1081.690814][T18381] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1081.701784][T18381] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1081.712649][T18381] JBD2: no valid journal superblock found [ 1081.718526][T18381] EXT4-fs (loop8): Could not load journal inode [ 1081.778137][T18386] loop8: detected capacity change from 0 to 128 [ 1081.797097][T18386] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1081.844981][T18386] ext4 filesystem being mounted at /197/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1081.936144][T18395] sd 0:0:1:0: device reset [ 1082.006664][T18399] hub 1-0:1.0: USB hub found [ 1082.022306][T18399] hub 1-0:1.0: 8 ports detected [ 1082.040135][T15818] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1082.116635][T18412] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.116972][T18408] loop8: detected capacity change from 0 to 1024 [ 1082.169744][T18412] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.181207][T18408] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1082.222538][T18412] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.245957][T18420] FAULT_INJECTION: forcing a failure. [ 1082.245957][T18420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1082.259085][T18420] CPU: 1 UID: 0 PID: 18420 Comm: syz.2.16651 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1082.259147][T18420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1082.259162][T18420] Call Trace: [ 1082.259171][T18420] [ 1082.259180][T18420] __dump_stack+0x1d/0x30 [ 1082.259284][T18420] dump_stack_lvl+0xe8/0x140 [ 1082.259317][T18420] dump_stack+0x15/0x1b [ 1082.259341][T18420] should_fail_ex+0x265/0x280 [ 1082.259376][T18420] should_fail+0xb/0x20 [ 1082.259401][T18420] should_fail_usercopy+0x1a/0x20 [ 1082.259518][T18420] _copy_from_user+0x1c/0xb0 [ 1082.259554][T18420] ___sys_sendmsg+0xc1/0x1d0 [ 1082.259604][T18420] __x64_sys_sendmsg+0xd4/0x160 [ 1082.259709][T18420] x64_sys_call+0x17ba/0x3000 [ 1082.259743][T18420] do_syscall_64+0xd8/0x2c0 [ 1082.259821][T18420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.259844][T18420] RIP: 0033:0x7f457fd0f749 [ 1082.259934][T18420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1082.259959][T18420] RSP: 002b:00007f457e777038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1082.259986][T18420] RAX: ffffffffffffffda RBX: 00007f457ff65fa0 RCX: 00007f457fd0f749 [ 1082.260003][T18420] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1082.260020][T18420] RBP: 00007f457e777090 R08: 0000000000000000 R09: 0000000000000000 [ 1082.260034][T18420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1082.260119][T18420] R13: 00007f457ff66038 R14: 00007f457ff65fa0 R15: 00007ffeba948008 [ 1082.260141][T18420] [ 1082.426774][T18412] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.448019][T18424] bond1 (unregistering): Released all slaves [ 1082.467077][T15818] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1082.528129][T14557] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.542361][T14557] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.603662][T14557] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.649854][T14557] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.817667][T18443] FAULT_INJECTION: forcing a failure. [ 1082.817667][T18443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1082.830824][T18443] CPU: 0 UID: 0 PID: 18443 Comm: syz.2.16657 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1082.830855][T18443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1082.830870][T18443] Call Trace: [ 1082.830893][T18443] [ 1082.830901][T18443] __dump_stack+0x1d/0x30 [ 1082.830998][T18443] dump_stack_lvl+0xe8/0x140 [ 1082.831030][T18443] dump_stack+0x15/0x1b [ 1082.831068][T18443] should_fail_ex+0x265/0x280 [ 1082.831096][T18443] should_fail+0xb/0x20 [ 1082.831166][T18443] should_fail_usercopy+0x1a/0x20 [ 1082.831200][T18443] _copy_from_user+0x1c/0xb0 [ 1082.831269][T18443] ___sys_sendmsg+0xc1/0x1d0 [ 1082.831326][T18443] __x64_sys_sendmsg+0xd4/0x160 [ 1082.831390][T18443] x64_sys_call+0x17ba/0x3000 [ 1082.831424][T18443] do_syscall_64+0xd8/0x2c0 [ 1082.831469][T18443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.831507][T18443] RIP: 0033:0x7f457fd0f749 [ 1082.831528][T18443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1082.831550][T18443] RSP: 002b:00007f457e777038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1082.831575][T18443] RAX: ffffffffffffffda RBX: 00007f457ff65fa0 RCX: 00007f457fd0f749 [ 1082.831590][T18443] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 1082.831689][T18443] RBP: 00007f457e777090 R08: 0000000000000000 R09: 0000000000000000 [ 1082.831706][T18443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1082.831723][T18443] R13: 00007f457ff66038 R14: 00007f457ff65fa0 R15: 00007ffeba948008 [ 1082.831763][T18443] [ 1083.505168][T18471] sd 0:0:1:0: device reset [ 1083.506447][T18468] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.16667: Parent and EA inode have the same ino 15 [ 1083.595162][T18468] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.16667: Parent and EA inode have the same ino 15 [ 1083.639850][T18468] EXT4-fs (loop4): 1 orphan inode deleted [ 1083.652470][T18476] hub 1-0:1.0: USB hub found [ 1083.661877][T18468] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1083.676389][T18476] hub 1-0:1.0: 8 ports detected [ 1083.699201][T18476] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=18476 comm=syz.3.16670 [ 1083.736122][T18468] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 13: comm syz.4.16667: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 1083.827650][T15244] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1084.627116][T18501] pimreg: entered allmulticast mode [ 1084.636766][T18501] pimreg: left allmulticast mode [ 1084.741993][T18503] sd 0:0:1:0: device reset [ 1084.840345][T18507] lo speed is unknown, defaulting to 1000 [ 1084.858301][T18505] netlink: 'syz.6.16681': attribute type 21 has an invalid length. [ 1084.858325][T18505] __nla_validate_parse: 14 callbacks suppressed [ 1084.858341][T18505] netlink: 128 bytes leftover after parsing attributes in process `syz.6.16681'. [ 1084.858434][T18505] netlink: 'syz.6.16681': attribute type 4 has an invalid length. [ 1084.871709][T18508] set_capacity_and_notify: 1 callbacks suppressed [ 1084.871729][T18508] loop8: detected capacity change from 0 to 512 [ 1084.872084][T18508] EXT4-fs: inline encryption not supported [ 1084.872489][T18508] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1084.903363][T18508] EXT4-fs (loop8): 1 truncate cleaned up [ 1084.903914][T18508] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1085.139842][T18517] hub 1-0:1.0: USB hub found [ 1085.147720][T18517] hub 1-0:1.0: 8 ports detected [ 1085.176915][T18517] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=18517 comm=syz.6.16684 [ 1085.192712][T18517] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16684'. [ 1085.197200][T18519] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.224864][T18523] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16687'. [ 1085.227759][T18519] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1085.256252][T18526] netlink: 36 bytes leftover after parsing attributes in process `syz.6.16688'. [ 1085.271160][T18526] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1085.377994][T18537] lo speed is unknown, defaulting to 1000 [ 1085.391863][ T29] kauditd_printk_skb: 459 callbacks suppressed [ 1085.391884][ T29] audit: type=1326 audit(2000000545.803:82349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18539 comm="syz.3.16692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e686f749 code=0x7ffc0000 [ 1085.423376][ T29] audit: type=1326 audit(2000000545.831:82350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18539 comm="syz.3.16692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36e686f749 code=0x7ffc0000 [ 1085.447278][ T29] audit: type=1326 audit(2000000545.831:82351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18539 comm="syz.3.16692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e686f749 code=0x7ffc0000 [ 1085.471114][ T29] audit: type=1326 audit(2000000545.831:82352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18539 comm="syz.3.16692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e686f749 code=0x7ffc0000 [ 1085.472925][T18541] loop4: detected capacity change from 0 to 512 [ 1085.504938][ T29] audit: type=1326 audit(2000000545.906:82353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18539 comm="syz.3.16692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f36e686f749 code=0x7ffc0000 [ 1085.528688][ T29] audit: type=1326 audit(2000000545.906:82354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18539 comm="syz.3.16692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e686f749 code=0x7ffc0000 [ 1085.546030][T18541] EXT4-fs: inline encryption not supported [ 1085.552448][ T29] audit: type=1326 audit(2000000545.906:82355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18539 comm="syz.3.16692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e686f749 code=0x7ffc0000 [ 1085.586041][T18541] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1085.609295][ T3936] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1085.638854][T18541] EXT4-fs (loop4): 1 truncate cleaned up [ 1085.646793][T18541] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1085.658607][ T29] audit: type=1326 audit(2000000545.981:82356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18539 comm="syz.3.16692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f36e686f749 code=0x7ffc0000 [ 1085.682722][ T29] audit: type=1326 audit(2000000545.981:82357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18539 comm="syz.3.16692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f36e686f783 code=0x7ffc0000 [ 1085.706316][ T29] audit: type=1326 audit(2000000545.981:82358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18539 comm="syz.3.16692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f36e686e1ff code=0x7ffc0000 [ 1085.717708][T18545] hub 1-0:1.0: USB hub found [ 1085.765077][T18545] hub 1-0:1.0: 8 ports detected [ 1085.779058][T15818] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1086.228625][T18563] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16700'. [ 1086.292129][T15244] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1086.511728][T14557] Bluetooth: hci0: Frame reassembly failed (-84) [ 1087.767302][T18589] hub 1-0:1.0: USB hub found [ 1087.791457][T18589] hub 1-0:1.0: 8 ports detected [ 1087.845168][T18589] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=18589 comm=syz.3.16709 [ 1087.898634][T18589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16709'. [ 1087.930612][T18595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16712'. [ 1088.272615][T18611] bond1 (unregistering): Released all slaves [ 1088.512252][T18625] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16724'. [ 1088.546129][T18626] bond1 (unregistering): Released all slaves [ 1088.581674][T18631] netlink: 188 bytes leftover after parsing attributes in process `syz.8.16723'. [ 1088.604177][T18629] FAULT_INJECTION: forcing a failure. [ 1088.604177][T18629] name failslab, interval 1, probability 0, space 0, times 0 [ 1088.616957][T18629] CPU: 1 UID: 0 PID: 18629 Comm: syz.6.16725 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1088.616985][T18629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1088.617058][T18629] Call Trace: [ 1088.617067][T18629] [ 1088.617077][T18629] __dump_stack+0x1d/0x30 [ 1088.617106][T18629] dump_stack_lvl+0xe8/0x140 [ 1088.617129][T18629] dump_stack+0x15/0x1b [ 1088.617156][T18629] should_fail_ex+0x265/0x280 [ 1088.617241][T18629] should_failslab+0x8c/0xb0 [ 1088.617272][T18629] __kmalloc_noprof+0xb9/0x5a0 [ 1088.617303][T18629] ? security_prepare_creds+0x52/0x120 [ 1088.617345][T18629] security_prepare_creds+0x52/0x120 [ 1088.617411][T18629] prepare_creds+0x37f/0x550 [ 1088.617503][T18629] copy_creds+0x8f/0x340 [ 1088.617528][T18629] ? dup_task_struct+0x60b/0x950 [ 1088.617635][T18629] copy_process+0x638/0x1ef0 [ 1088.617682][T18629] ? 0xffffffff81000000 [ 1088.617702][T18629] kernel_clone+0x16c/0x5c0 [ 1088.617755][T18629] ? vfs_write+0x7e8/0x960 [ 1088.617784][T18629] __x64_sys_clone+0xe6/0x120 [ 1088.617875][T18629] x64_sys_call+0x12d0/0x3000 [ 1088.617948][T18629] do_syscall_64+0xd8/0x2c0 [ 1088.617988][T18629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.618013][T18629] RIP: 0033:0x7f522b2af749 [ 1088.618032][T18629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1088.618057][T18629] RSP: 002b:00007f5229d16fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1088.618153][T18629] RAX: ffffffffffffffda RBX: 00007f522b505fa0 RCX: 00007f522b2af749 [ 1088.618171][T18629] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000100411 [ 1088.618189][T18629] RBP: 00007f5229d17090 R08: 0000000000000000 R09: 0000000000000000 [ 1088.618210][T18629] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 1088.618224][T18629] R13: 00007f522b506038 R14: 00007f522b505fa0 R15: 00007ffca9cfbd08 [ 1088.618243][T18629] [ 1088.691777][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1088.692289][ T3936] Bluetooth: hci0: command 0x1003 tx timeout [ 1088.878721][T18639] loop4: detected capacity change from 0 to 512 [ 1088.895255][T18639] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.16728: Parent and EA inode have the same ino 15 [ 1088.910138][T18639] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.16728: Parent and EA inode have the same ino 15 [ 1088.914875][T18642] netlink: 36 bytes leftover after parsing attributes in process `syz.8.16729'. [ 1088.932119][T18639] EXT4-fs (loop4): 1 orphan inode deleted [ 1088.944575][T18639] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1088.960732][T18642] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1088.982372][T18639] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 13: comm syz.4.16728: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 1089.024650][T15244] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1089.096543][T18655] loop8: detected capacity change from 0 to 1756 [ 1089.103352][T18655] iso9660: Unknown parameter 'bloԣ|hӤ0000000Uverriderockperm' [ 1089.373030][T18684] loop4: detected capacity change from 0 to 512 [ 1089.382033][T18684] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.16746: Parent and EA inode have the same ino 15 [ 1089.395128][T18684] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.16746: Parent and EA inode have the same ino 15 [ 1089.408108][T18684] EXT4-fs (loop4): 1 orphan inode deleted [ 1089.414500][T18684] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1089.429422][T18684] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 13: comm syz.4.16746: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 1089.470175][T15244] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1089.554806][T18696] bond1 (unregistering): Released all slaves [ 1089.582765][T18700] loop4: detected capacity change from 0 to 2048 [ 1089.598157][T18700] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 1089.621167][T18700] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1089.636720][T18700] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 1089.649076][T18700] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1089.649076][T18700] [ 1089.658839][T18700] EXT4-fs (loop4): Total free blocks count 0 [ 1089.664932][T18700] EXT4-fs (loop4): Free/Dirty block details [ 1089.670861][T18700] EXT4-fs (loop4): free_blocks=2415919104 [ 1089.676649][T18700] EXT4-fs (loop4): dirty_blocks=32 [ 1089.681825][T18700] EXT4-fs (loop4): Block reservation details [ 1089.687822][T18700] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 1089.736478][T15244] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11 [ 1089.748775][T15244] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11 [ 1089.994262][T18707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 1090.059820][T12920] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.122977][T12920] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.186097][T12920] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.229513][T12920] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.290193][T18713] lo speed is unknown, defaulting to 1000 [ 1090.306293][T18730] loop8: detected capacity change from 0 to 512 [ 1090.314401][T18730] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 1090.315485][T18731] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16760'. [ 1090.323456][T18730] EXT4-fs (loop8): invalid journal inode [ 1090.345692][T18730] EXT4-fs (loop8): can't get journal size [ 1090.354178][T18730] EXT4-fs (loop8): 1 truncate cleaned up [ 1090.362475][T18730] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1090.381662][T12920] bridge_slave_1: left allmulticast mode [ 1090.387406][T12920] bridge_slave_1: left promiscuous mode [ 1090.393137][T12920] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.402007][T12920] bridge_slave_0: left allmulticast mode [ 1090.407777][T12920] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.528514][T12920] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1090.539652][T12920] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1090.550254][T12920] .` (unregistering): Released all slaves [ 1090.560892][T18730] netlink: 'syz.8.16759': attribute type 3 has an invalid length. [ 1090.568747][T18730] netlink: 'syz.8.16759': attribute type 3 has an invalid length. [ 1090.625363][T15818] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1090.650137][T12920] hsr_slave_0: left promiscuous mode [ 1090.655850][T12920] hsr_slave_1: left promiscuous mode [ 1090.661514][T12920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1090.669055][T12920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1090.677179][T12920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1090.684588][T12920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1090.714099][T12920] veth1_macvtap: left promiscuous mode [ 1090.724334][T12920] veth0_macvtap: left promiscuous mode [ 1090.729996][T12920] veth1_vlan: left promiscuous mode [ 1090.741138][T12920] veth0_vlan: left promiscuous mode [ 1090.748349][ T29] kauditd_printk_skb: 999 callbacks suppressed [ 1090.748367][ T29] audit: type=1326 audit(2000000550.808:83358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18743 comm="syz.2.16763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f457fd065e7 code=0x7ffc0000 [ 1090.795593][ T29] audit: type=1326 audit(2000000550.846:83359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18743 comm="syz.2.16763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f457fcab829 code=0x7ffc0000 [ 1090.819605][ T29] audit: type=1326 audit(2000000550.846:83360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18743 comm="syz.2.16763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f457fd065e7 code=0x7ffc0000 [ 1090.843729][ T29] audit: type=1326 audit(2000000550.846:83361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18743 comm="syz.2.16763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f457fcab829 code=0x7ffc0000 [ 1090.867343][ T29] audit: type=1326 audit(2000000550.846:83362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18743 comm="syz.2.16763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f457fd0f749 code=0x7ffc0000 [ 1090.891222][ T29] audit: type=1326 audit(2000000550.855:83363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18743 comm="syz.2.16763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f457fd065e7 code=0x7ffc0000 [ 1090.909891][T18757] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16767'. [ 1090.914972][ T29] audit: type=1326 audit(2000000550.855:83364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18743 comm="syz.2.16763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f457fcab829 code=0x7ffc0000 [ 1090.947519][ T29] audit: type=1326 audit(2000000550.855:83365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18743 comm="syz.2.16763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f457fd0f749 code=0x7ffc0000 [ 1090.974466][ T29] audit: type=1326 audit(2000000550.902:83366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18743 comm="syz.2.16763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f457fd065e7 code=0x7ffc0000 [ 1090.998091][ T29] audit: type=1326 audit(2000000550.902:83367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18743 comm="syz.2.16763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f457fcab829 code=0x7ffc0000 [ 1091.048528][T12920] team0 (unregistering): Port device team_slave_1 removed [ 1091.059748][T12920] team0 (unregistering): Port device team_slave_0 removed [ 1091.128144][T18713] chnl_net:caif_netlink_parms(): no params data found [ 1091.168271][T18713] bridge0: port 1(bridge_slave_0) entered blocking state [ 1091.175336][T18713] bridge0: port 1(bridge_slave_0) entered disabled state [ 1091.182926][T18713] bridge_slave_0: entered allmulticast mode [ 1091.189631][T18713] bridge_slave_0: entered promiscuous mode [ 1091.196706][T18713] bridge0: port 2(bridge_slave_1) entered blocking state [ 1091.203908][T18713] bridge0: port 2(bridge_slave_1) entered disabled state [ 1091.211449][T18713] bridge_slave_1: entered allmulticast mode [ 1091.218070][T18713] bridge_slave_1: entered promiscuous mode [ 1091.239053][T18713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1091.249811][T18713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1091.271421][T18713] team0: Port device team_slave_0 added [ 1091.278180][T18713] team0: Port device team_slave_1 added [ 1091.296735][T18713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1091.303728][T18713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1091.329752][T18713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1091.340475][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 1091.346522][ T3936] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1091.355306][T18713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1091.358246][T18766] loop8: detected capacity change from 0 to 512 [ 1091.362382][T18713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1091.362422][T18713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1091.419940][T18766] EXT4-fs warning (device loop8): read_mmp_block:111: Error -117 while reading MMP block 8 [ 1091.438757][T18713] hsr_slave_0: entered promiscuous mode [ 1091.444908][T18713] hsr_slave_1: entered promiscuous mode [ 1091.490651][T18771] loop8: detected capacity change from 0 to 1024 [ 1091.532499][T18771] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1091.552560][T18771] netlink: 16 bytes leftover after parsing attributes in process `syz.8.16770'. [ 1091.625285][T18777] bond1 (unregistering): Released all slaves [ 1091.633317][T15818] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1091.677787][T18784] loop8: detected capacity change from 0 to 512 [ 1091.695761][T18784] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1091.729163][T15818] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1091.760408][T18713] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1091.770816][T18713] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1091.784107][T18713] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1091.794472][T18713] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1091.827417][T18795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16777'. [ 1091.840242][T18713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1091.857429][T18713] 8021q: adding VLAN 0 to HW filter on device team0 [ 1091.869627][T12920] bridge0: port 1(bridge_slave_0) entered blocking state [ 1091.876745][T12920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1091.889743][ T2437] bridge0: port 2(bridge_slave_1) entered blocking state [ 1091.896851][ T2437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1091.911302][T18806] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1091.989186][T18713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1092.096542][T18816] loop8: detected capacity change from 0 to 512 [ 1092.109497][T18816] EXT4-fs warning (device loop8): read_mmp_block:111: Error -117 while reading MMP block 8 [ 1092.193696][T18826] IPv6: Can't replace route, no match found [ 1092.209527][T18826] loop8: detected capacity change from 0 to 1024 [ 1092.258587][T18713] veth0_vlan: entered promiscuous mode [ 1092.267427][T18713] veth1_vlan: entered promiscuous mode [ 1092.284246][T18713] veth0_macvtap: entered promiscuous mode [ 1092.292038][T18713] veth1_macvtap: entered promiscuous mode [ 1092.303535][T18713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1092.315474][T18713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1092.330720][T11463] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.356218][T11463] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.372752][T11463] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.382546][T11463] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.423712][T18841] bridge_slave_0: left allmulticast mode [ 1092.429604][T18841] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.441781][T18841] bridge_slave_1: left allmulticast mode [ 1092.447461][T18841] bridge_slave_1: left promiscuous mode [ 1092.453237][T18841] bridge0: port 2(bridge_slave_1) entered disabled state [ 1092.463945][T18841] bond0: (slave bond_slave_0): Releasing backup interface [ 1092.474665][T18841] bond0: (slave bond_slave_1): Releasing backup interface [ 1092.486971][T18841] team0: Port device team_slave_0 removed [ 1092.496883][T18841] team0: Port device team_slave_1 removed [ 1092.504110][T18841] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1092.511536][T18841] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1092.520573][T18841] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1092.528165][T18841] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1092.537930][T18841] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1092.584349][T18852] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.666405][T18852] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.721619][T18852] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.805232][T18852] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.894005][T28049] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.907998][T18872] netlink: 16 bytes leftover after parsing attributes in process `GPL'. [ 1092.916599][T28049] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.930253][T28049] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.949704][T28049] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.014626][T18880] netlink: 16 bytes leftover after parsing attributes in process `syz.5.16797'. [ 1093.068637][T18882] bond1 (unregistering): Released all slaves [ 1093.190407][T18891] netlink: 'syz.5.16801': attribute type 21 has an invalid length. [ 1093.198365][T18891] netlink: 128 bytes leftover after parsing attributes in process `syz.5.16801'. [ 1093.207759][T18891] netlink: 'syz.5.16801': attribute type 4 has an invalid length. [ 1093.278911][ T310] Bluetooth: hci0: Frame reassembly failed (-84) [ 1093.325757][T18900] program syz.5.16805 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1093.964673][T18918] netlink: 'syz.2.16812': attribute type 21 has an invalid length. [ 1093.972758][T18918] netlink: 128 bytes leftover after parsing attributes in process `syz.2.16812'. [ 1093.983337][T18918] netlink: 'syz.2.16812': attribute type 4 has an invalid length. [ 1094.198181][T18930] program syz.2.16817 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1094.227122][T18932] hub 1-0:1.0: USB hub found [ 1094.231930][T18932] hub 1-0:1.0: 8 ports detected [ 1094.267221][T18934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16819'. [ 1094.466632][T18950] bond1 (unregistering): Released all slaves [ 1094.894192][T18920] FAULT_INJECTION: forcing a failure. [ 1094.894192][T18920] name failslab, interval 1, probability 0, space 0, times 0 [ 1094.894332][T18920] CPU: 1 UID: 0 PID: 18920 Comm: syz.6.16813 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1094.894359][T18920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1094.894375][T18920] Call Trace: [ 1094.894383][T18920] [ 1094.894392][T18920] __dump_stack+0x1d/0x30 [ 1094.894416][T18920] dump_stack_lvl+0xe8/0x140 [ 1094.894446][T18920] dump_stack+0x15/0x1b [ 1094.894471][T18920] should_fail_ex+0x265/0x280 [ 1094.894562][T18920] should_failslab+0x8c/0xb0 [ 1094.894593][T18920] kmem_cache_alloc_noprof+0x69/0x4b0 [ 1094.894626][T18920] ? taskstats_exit+0x297/0x6a0 [ 1094.894654][T18920] taskstats_exit+0x297/0x6a0 [ 1094.894715][T18920] do_exit+0x404/0x15d0 [ 1094.894815][T18920] do_group_exit+0xff/0x140 [ 1094.894848][T18920] ? get_signal+0xe50/0xf70 [ 1094.894884][T18920] get_signal+0xe58/0xf70 [ 1094.894917][T18920] arch_do_signal_or_restart+0x96/0x450 [ 1094.894953][T18920] exit_to_user_mode_loop+0x6a/0x740 [ 1094.894986][T18920] do_syscall_64+0x1ef/0x2c0 [ 1094.895083][T18920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.895112][T18920] RIP: 0033:0x7f522b2af749 [ 1094.895132][T18920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1094.895155][T18920] RSP: 002b:00007f5229d17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1094.895200][T18920] RAX: fffffffffffffe00 RBX: 00007f522b505fa0 RCX: 00007f522b2af749 [ 1094.895215][T18920] RDX: 10000000000000fb RSI: 0000200000002940 RDI: 0000000000000003 [ 1094.895232][T18920] RBP: 00007f5229d17090 R08: 0000000000000000 R09: 0000000000000000 [ 1094.895245][T18920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1094.895289][T18920] R13: 00007f522b506038 R14: 00007f522b505fa0 R15: 00007ffca9cfbd08 [ 1094.895314][T18920] [ 1095.268380][T18965] hub 9-0:1.0: USB hub found [ 1095.268433][T18965] hub 9-0:1.0: 8 ports detected [ 1095.443372][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 1095.449443][ T3936] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1095.459102][T18981] netlink: 16 bytes leftover after parsing attributes in process `syz.5.16834'. [ 1095.590437][T18996] hub 1-0:1.0: USB hub found [ 1095.597973][T18996] hub 1-0:1.0: 8 ports detected [ 1095.618598][T18996] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=18996 comm=syz.3.16839 [ 1095.700217][T18994] siw: device registration error -23 [ 1095.716483][T19005] netlink: 'syz.8.16843': attribute type 21 has an invalid length. [ 1095.724609][T19005] __nla_validate_parse: 1 callbacks suppressed [ 1095.724628][T19005] netlink: 128 bytes leftover after parsing attributes in process `syz.8.16843'. [ 1095.741179][T19005] netlink: 'syz.8.16843': attribute type 4 has an invalid length. [ 1095.766998][T19008] bond1 (unregistering): Released all slaves [ 1095.880059][T19020] hub 1-0:1.0: USB hub found [ 1095.880152][T19020] hub 1-0:1.0: 8 ports detected [ 1095.893655][T19020] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=19020 comm=syz.5.16848 [ 1095.893977][T19020] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16848'. [ 1096.030416][T19027] hub 1-0:1.0: USB hub found [ 1096.030482][T19027] hub 1-0:1.0: 8 ports detected [ 1096.032905][T19028] loop8: detected capacity change from 0 to 512 [ 1096.038757][T19028] EXT4-fs warning (device loop8): read_mmp_block:111: Error -117 while reading MMP block 8 [ 1096.068419][T19027] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=19027 comm=syz.5.16851 [ 1096.069586][T19027] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16851'. [ 1096.123489][T19030] hub 1-0:1.0: USB hub found [ 1096.123582][T19030] hub 1-0:1.0: 8 ports detected [ 1096.197600][T19038] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.253336][ T29] kauditd_printk_skb: 643 callbacks suppressed [ 1096.253350][ T29] audit: type=1326 audit(2000000555.963:84011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19037 comm="syz.8.16856" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc3dc35f749 code=0x0 [ 1096.260925][T19038] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.322840][T19038] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.375364][T19038] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.407010][ T29] audit: type=1400 audit(2000000556.113:84012): avc: denied { write } for pid=19047 comm="syz.6.16859" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1096.407049][ T29] audit: type=1400 audit(2000000556.113:84013): avc: denied { ioctl } for pid=19047 comm="syz.6.16859" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1096.407175][T19048] random: crng reseeded on system resumption [ 1096.474405][ T29] audit: type=1326 audit(2000000556.178:84014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19049 comm="syz.6.16861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522b2af749 code=0x7ffc0000 [ 1096.498658][ T12] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.519543][ T12] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.519589][ T12] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.519731][ T12] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.542145][ T29] audit: type=1326 audit(2000000556.206:84015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19049 comm="syz.6.16861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f522b2af749 code=0x7ffc0000 [ 1096.542192][ T29] audit: type=1326 audit(2000000556.206:84016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19049 comm="syz.6.16861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522b2af749 code=0x7ffc0000 [ 1096.542281][ T29] audit: type=1326 audit(2000000556.206:84017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19049 comm="syz.6.16861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f522b2adf90 code=0x7ffc0000 [ 1096.542393][ T29] audit: type=1326 audit(2000000556.206:84018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19049 comm="syz.6.16861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522b2af749 code=0x7ffc0000 [ 1096.542429][ T29] audit: type=1326 audit(2000000556.206:84019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19049 comm="syz.6.16861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f522b2af749 code=0x7ffc0000 [ 1096.542466][ T29] audit: type=1326 audit(2000000556.206:84020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19049 comm="syz.6.16861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522b2af749 code=0x7ffc0000 [ 1096.573493][T19052] siw: device registration error -23 [ 1096.749833][T19060] hub 1-0:1.0: USB hub found [ 1096.749966][T19060] hub 1-0:1.0: 8 ports detected [ 1096.754739][T19060] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=19060 comm=syz.6.16864 [ 1096.778161][T19060] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16864'. [ 1096.839578][T19063] hub 1-0:1.0: USB hub found [ 1096.844582][T19063] hub 1-0:1.0: 8 ports detected [ 1097.083945][T19078] lo speed is unknown, defaulting to 1000 [ 1097.404237][T19090] siw: device registration error -23 [ 1097.507225][T19095] netlink: 16 bytes leftover after parsing attributes in process `syz.5.16876'. [ 1097.603398][T19099] hub 1-0:1.0: USB hub found [ 1097.613440][T19099] hub 1-0:1.0: 8 ports detected [ 1097.777825][T19094] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1097.808216][T19104] loop8: detected capacity change from 0 to 128 [ 1098.111456][T19116] siw: device registration error -23 [ 1098.147802][T19119] ================================================================== [ 1098.155965][T19119] BUG: KCSAN: data-race in memcpy_and_pad / trc_wait_for_one_reader [ 1098.164066][T19119] [ 1098.166408][T19119] write to 0xffff888161dc845c of 4 bytes by task 28 on cpu 1: [ 1098.173893][T19119] trc_wait_for_one_reader+0x283/0x380 [ 1098.179394][T19119] check_all_holdout_tasks_trace+0xcb/0x4b0 [ 1098.185314][T19119] rcu_tasks_wait_gp+0x3fd/0x530 [ 1098.190286][T19119] rcu_tasks_one_gp+0x7f6/0x8e0 [ 1098.195164][T19119] rcu_tasks_kthread+0xf7/0x110 [ 1098.200050][T19119] kthread+0x489/0x510 [ 1098.204158][T19119] ret_from_fork+0x149/0x290 [ 1098.208789][T19119] ret_from_fork_asm+0x1a/0x30 [ 1098.213575][T19119] [ 1098.215943][T19119] read to 0xffff888161dc8000 of 3264 bytes by task 19119 on cpu 0: [ 1098.223839][T19119] memcpy_and_pad+0x48/0x80 [ 1098.228370][T19119] arch_dup_task_struct+0x2c/0x40 [ 1098.233417][T19119] dup_task_struct+0x6e/0x950 [ 1098.238123][T19119] copy_process+0x37d/0x1ef0 [ 1098.242746][T19119] create_io_thread+0x71/0xa0 [ 1098.247438][T19119] create_io_worker+0xdf/0x360 [ 1098.252211][T19119] io_wq_enqueue+0x2c1/0x3a0 [ 1098.257000][T19119] io_queue_iowq+0x208/0x2f0 [ 1098.261619][T19119] io_req_task_submit+0x69/0xa0 [ 1098.266508][T19119] __io_run_local_work+0x2ea/0x580 [ 1098.271648][T19119] io_run_local_work_locked+0x5a/0x70 [ 1098.277039][T19119] __se_sys_io_uring_enter+0xd71/0x1a30 [ 1098.282596][T19119] __x64_sys_io_uring_enter+0x78/0x90 [ 1098.287994][T19119] x64_sys_call+0x27e4/0x3000 [ 1098.292692][T19119] do_syscall_64+0xd8/0x2c0 [ 1098.297225][T19119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.303146][T19119] [ 1098.305475][T19119] Reported by Kernel Concurrency Sanitizer on: [ 1098.311633][T19119] CPU: 0 UID: 60928 PID: 19119 Comm: syz.3.16886 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1098.321888][T19119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1098.331963][T19119] ==================================================================