last executing test programs: 5m34.693047427s ago: executing program 32 (id=116): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00'}, 0x11) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) r2 = semget$private(0x0, 0x6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='mem_connect\x00', r3, 0x0, 0x3}, 0x18) semctl$IPC_RMID(r2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) lsm_get_self_attr(0x69, 0x0, &(0x7f00000001c0), 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 5m17.636577797s ago: executing program 1 (id=380): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r1}, 0x37) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x2000) 5m17.554088808s ago: executing program 1 (id=386): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x40, 0x84) statx(r0, 0x0, 0x400, 0x20, 0x0) pipe(&(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 5m17.486661958s ago: executing program 1 (id=389): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c61) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x101}, 0x18) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}}}]}, 0x48}}, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r8, 0x4b67, &(0x7f0000000180)) 5m17.293543881s ago: executing program 1 (id=395): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0xa26}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, 0x0) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYRESOCT=r3], 0x5b0) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) recvmmsg(0xffffffffffffffff, &(0x7f0000003a40)=[{{&(0x7f0000000380)=@xdp, 0x80, &(0x7f0000000940)=[{&(0x7f00000004c0)=""/214, 0xd6}, {&(0x7f0000000600)=""/123, 0x7b}, {&(0x7f0000000680)=""/119, 0x77}, {&(0x7f0000000700)=""/199, 0xc7}, {&(0x7f0000000240)=""/14, 0xe}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000800)=""/94, 0x5e}], 0x7}, 0x7}, {{&(0x7f0000001cc0)=@ieee802154={0x24, @long}, 0x80, 0x0, 0x0, &(0x7f0000001f00)=""/3, 0x3}, 0x6}, {{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000001fc0)=""/29, 0x1d}, {0x0}, {&(0x7f0000003c00)=""/76, 0x4c}, {&(0x7f0000003c80)=""/117, 0x75}, {&(0x7f0000003e00)=""/4096, 0x1000}, {&(0x7f0000004e00)=""/142, 0x8e}], 0x6}, 0x5}, {{&(0x7f0000003140)=@qipcrtr, 0x80, &(0x7f00000035c0)=[{&(0x7f0000003240)=""/88, 0x58}, {0x0}], 0x2}, 0x3}, {{&(0x7f0000003640)=@alg, 0x80, &(0x7f0000003780)=[{&(0x7f00000036c0)=""/186, 0xba}], 0x1, &(0x7f00000037c0)=""/24, 0x18}, 0x5}, {{&(0x7f0000003800)=@rc, 0x80, &(0x7f0000003900)=[{&(0x7f0000003880)=""/13, 0xd}, {0x0}], 0x2, &(0x7f0000003940)=""/230, 0xe6}, 0xa}], 0x6, 0x40000000, &(0x7f0000003bc0)={0x0, 0x3938700}) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r1, @ANYRES16=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = getegid() getresuid(&(0x7f00000004c0)=0x0, &(0x7f0000000500), &(0x7f0000000540)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e643000000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/203, 0x34, 0xcb, 0x1, 0x726, 0x0, @void, @value}, 0x28) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000240)="a50769f9b1", 0x5}, {&(0x7f00000003c0)="e2bb1ed63a57576cc2dcd86b8604be154e8a7600393346db8d", 0x19}], 0x2, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32=r8, @ANYRES32, @ANYBLOB="00000814a06bbb0fd79000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r9, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000010000000000000000100000001000000"], 0xe8, 0x200400d1}, 0x80) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f00000009c0)) stat(&(0x7f0000005fc0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000f00)) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) getresuid(&(0x7f0000000f80), &(0x7f0000000fc0), &(0x7f0000001000)) 5m17.117533133s ago: executing program 1 (id=399): bpf$PROG_LOAD(0x5, 0x0, 0x62) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x52, 0x1}, 0x1100, 0x5dd8, 0x0, 0x2, 0x0, 0x4000008, 0xfff9, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18008001000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x4, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x10) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @local}}, 0x14) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200008, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x504, &(0x7f0000001000)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x102000000, 0x5, 0x0, 0x3c14, 0xffffffffffffffff, 0x7b, 0xfffffffffffffffd, 0x3}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r1}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x10, 0x0, &(0x7f0000000380)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0xf0088, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf5e, 0x40ffffffff}, 0x1100, 0x5, 0x3, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r7, 0x0, 0x10000000000ac6}, 0x18) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000240)={@local, @multicast2, 0xfffe, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x3, 0x0, 0x7e, 0x6b}, 0x3c) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) write$UHID_CREATE2(r6, 0x0, 0x8) 5m17.022428834s ago: executing program 1 (id=402): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001100)=ANY=[@ANYBLOB="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"/849], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x56, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000020000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x0, 0x3, 0x4a}, 0x10) close(r4) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00'}, 0x10) r5 = socket(0xa, 0x5, 0x4) sendmsg$nl_route(r5, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB], 0x2c}}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff9000/0x3000)=nil) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0) socket$netlink(0x10, 0x3, 0xf) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x1b, 0xc, &(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYRES16=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000540)='snd_soc_dapm_walk_done\x00'}, 0x18) capset(&(0x7f0000000080)={0x20071026, 0xffffffffffffffff}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0xfffffff9}) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f00000002c0), &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x840080, &(0x7f00000015c0)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d1ffe090000000000000030303030346532322c70726976706f72745cce7bf725489fc70e5142b2b6caaf524ab98c4652be2f583d6948d89e9111b2ad71b5015fdcbb81de47a4e5455711ccb66ad65229be0a542f6e866b872832d50397f670896ad7ffffffffdfdd0ae542980ff02e100561ae19a2a1ffcca78dd90213475f31d09784dfe5eedffc973587f09557009d37f584d800d3059e3d2690dbde45faa521123e8f0dda729579a964", @ANYRES16=r4, @ANYRES32=r3]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x0, @random="7c9ab5135269", 'pim6reg0\x00'}}, 0x1e) 5m1.986040838s ago: executing program 33 (id=402): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001100)=ANY=[@ANYBLOB="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"/849], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x56, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000020000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x0, 0x3, 0x4a}, 0x10) close(r4) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00'}, 0x10) r5 = socket(0xa, 0x5, 0x4) sendmsg$nl_route(r5, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB], 0x2c}}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff9000/0x3000)=nil) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0) socket$netlink(0x10, 0x3, 0xf) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x1b, 0xc, &(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYRES16=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000540)='snd_soc_dapm_walk_done\x00'}, 0x18) capset(&(0x7f0000000080)={0x20071026, 0xffffffffffffffff}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0xfffffff9}) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f00000002c0), &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x840080, &(0x7f00000015c0)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d1ffe090000000000000030303030346532322c70726976706f72745cce7bf725489fc70e5142b2b6caaf524ab98c4652be2f583d6948d89e9111b2ad71b5015fdcbb81de47a4e5455711ccb66ad65229be0a542f6e866b872832d50397f670896ad7ffffffffdfdd0ae542980ff02e100561ae19a2a1ffcca78dd90213475f31d09784dfe5eedffc973587f09557009d37f584d800d3059e3d2690dbde45faa521123e8f0dda729579a964", @ANYRES16=r4, @ANYRES32=r3]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x0, @random="7c9ab5135269", 'pim6reg0\x00'}}, 0x1e) 4m12.745063643s ago: executing program 2 (id=1237): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) flistxattr(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r5, @ANYBLOB="08000a00d4d93ed7ccb5d107201ed820320cc553242c0d0d9ac2d9307d23a2d9a074d18e69cab786173ee33e8f8cd2fe4c63849b1f5de58b8cd313220c5f360b086a8aab3dbb923132503246ec7545d6aafb5589dbac97d8c192fb44e07c3664c3060c148e0c3eb0fd39ae3d38a7c9ffb7c16e135ae2c6a64ea282e4e4ad4384c33eed531791b499c2a9ee3ccd0c1f0cc46630", @ANYRES32=r5, @ANYBLOB], 0x44}}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b00)="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", 0xfc0}, {&(0x7f0000001b00)="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", 0x1000}, {&(0x7f00000004c0)="d082b0b329851326ea21ec45ad740289e96ec6904883c2539b8b9c1464c85aab45da07f09f472c38511847ff2ae1a3d0ffa469e63d1d66962d9391d0c11c50a6d1e3c1d0cb251643794eb51c4020bb8139549f7e25b312dd31380698a9971d3417a8b0afd18e7b6b1724db61cd36d9275faa5309d36e1634d29d0198d927c51d6067bb479ee675d6b1910b02b0384329b8f5de0ffce194814e10d570970d6a928f482dfb498ec3cfa0", 0xa9}], 0x3, 0x0, 0x0, 0x4000050}, 0x10) 4m12.531756215s ago: executing program 2 (id=1240): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffff12850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'ip6gre0\x00', 0x0, 0x4, 0x9, 0x7, 0x9, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x8, 0x80, 0x19}}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000840), 0x101000, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x8, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800040004000000000000000104000018360000040020000000000000bdbd1256c437932dde0bc167fffacfa279462750e4f8ca6cce13d66fe7fa28a80689d687790c2da71ad079529370f7605baa726d40d66e07008846f688fecf66a7e2e3d2ff1adf93adc90a43201776004398fb8c000000000000000000005cd5ad983b7ea9e4b6e05a5b9e65078b4e0e9687f07e12c8056b8d7a67fd5e5360128526582275860f5874794eebb4f0c302f9e1f60e14e3af62d7b4394002d65362cd1a448a654fc482a466fe49a0df8e9335ec47028e32dedd0b2b3b76043267ca4ad3614d3d171dda1fd2df6ca836fbe682ca218f713301b3759a255834432783feee8bbfdf7497f877ff07f6e03b453902152469736cac41929c68d9ac9bec32da3008e0c7469de730"], &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x100, 0x2, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000880)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000008c0)={0x3, 0x4, 0x6, 0x28376c85}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000980)=[r4], &(0x7f00000009c0)=[{0x2, 0x4, 0x2}, {0x2, 0x5, 0x8, 0xc}, {0x2, 0x1, 0x8, 0x12}, {0x0, 0x3, 0x7, 0x5}, {0x4, 0x3, 0x0, 0x3}, {0x5, 0x3, 0xb, 0x3}, {0x1, 0x3, 0x4, 0x8}, {0x1, 0x2, 0x3, 0x9}, {0x3, 0x1, 0x10, 0xe}, {0x4, 0x4, 0xd, 0x5}], 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r1}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x7, 0x1, 0x9, 0x0, 0x0, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800020000000000000000000000002040b02000fcffefff95"], &(0x7f0000000040)='GPL\x00', 0x8, 0x1005, &(0x7f0000001840)=""/4101, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r6}, 0x10) setreuid(0x0, 0xee00) request_key(&(0x7f0000000440)='rxrpc_s\x00', &(0x7f0000000480)={'syz', 0x3}, &(0x7f0000000500)='/dev/vcsu#\x00', 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x759, &(0x7f0000000080)={[{@noload}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@errors_remount}, {@init_itable, 0x0}, {@usrjquota}, {@noload}, {@jqfmt_vfsv1}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@debug}, {@resgid}, {@data_err_ignore}], [], 0x2c}, 0x2, 0x4f9, &(0x7f0000000200)="$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") 4m12.430117807s ago: executing program 2 (id=1242): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbf14, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 4m12.428564027s ago: executing program 2 (id=1244): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000100), 0x1, 0x57e, &(0x7f00000005c0)="$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") statx(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0xff00, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @sack_perm, @mss={0x2, 0xa}, @window={0x3, 0xa, 0x180}, @window={0x3, 0x100, 0x5}, @mss={0x2, 0xf8b}, @window={0x3, 0x6, 0xfff}], 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_clone(0x20180080, 0x0, 0x0, 0x0, 0x0, 0x0) setresuid(0xee01, 0xee00, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r0], 0x30}}, 0x0) 4m12.305148279s ago: executing program 2 (id=1247): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001180)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0x1a400000}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) bpf$MAP_DELETE_ELEM(0x15, 0x0, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000029c0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000008c0)}}], 0x1, 0x24004090) pipe(&(0x7f0000000d00)) r7 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) close(r7) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r8, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100000000000000", @ANYRES32=r11], 0x20}}, 0x0) 4m11.40876971s ago: executing program 2 (id=1260): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f6873720000000058000000160a0101000b000000000000010000000900020073797a32000000000900010073797a30000000002c000380180003801400010076657468305f746f5f6873720000000008000240004400000800"], 0xf8}}, 0x0) 4m11.39085692s ago: executing program 34 (id=1260): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f6873720000000058000000160a0101000b000000000000010000000900020073797a32000000000900010073797a30000000002c000380180003801400010076657468305f746f5f6873720000000008000240004400000800"], 0xf8}}, 0x0) 2m2.338933783s ago: executing program 7 (id=3578): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r4, 0xfffffffffffffc01, 0x0) tee(r1, r4, 0x60000000000, 0x1000000000000000) (fail_nth: 10) 2m2.130046216s ago: executing program 7 (id=3580): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001480)=ANY=[@ANYBLOB="1c0000003e000701fcfffffffe9bdf25065cf6f9550a121051008700"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x3, 0x2c) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x550, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x480, 0x238, 0x238, 0x480, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x338, 0x3a0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [], 0x2, [], 0x0, 0x4}}, @common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x2, 0x6, 0x5}, {0x4, 0x2, 0x6}, 0x1, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r6) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r7, 0xffffffff) r8 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x80000213, 0x0, r6}, &(0x7f0000000380)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000003c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r8, 0x27e2, 0x0, 0x0, 0x0, 0x0) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16, @ANYBLOB="dc58336a4b9442803c68761a07b048998b09bc1b5107ce211bd7e58ee8673d866eb707d1b808b776ee06cc4dce53bde20c73afc376fe7043d978857dd13c55759c263a4b5f6e4504af674807f4ea5abd8e49ff3ef831349f1aa3175ed4ed55fca47549b2e9d31c5d94ca843034c333d4c5713fd0848e9d27e076c5a182cb495b89e91e76b031f198fe13ecf26abe", @ANYRESHEX=0x0, @ANYBLOB="c21a7e899b86b01f564c048b402d2b0202883dbc5fb01c71010e5a50ba157889b6dca4fbb0997bff4bb902f35d4184620d874676e1c20d495e4fd28b3b445b8ea5b087fa173e5353f8925297f09ff4397d6257cc20c700b03b30bc04a596b894b581717836f690b267c52376490153a549130767075006f4e08b968c0a31835eedb0811010b034cde9fba8d21be778357dcee1dc6602becf81e9e86e8329353d042e80822ca71c1f108a49633b84a10a0ae5a76759c3599175d5c3c8050935555e", @ANYRES8, @ANYRES64, @ANYRESHEX=r0, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRES8=r0], 0x48) readlinkat(r6, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=""/78, 0x4e) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000c50000", @ANYRES32=r11, @ANYRESHEX=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r13 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r12}, 0x10) fcntl$getownex(r13, 0x10, &(0x7f00000000c0)) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r14 = socket$inet_dccp(0x2, 0x6, 0x0) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r15}, 0x18) setsockopt(r14, 0x10d, 0xf, &(0x7f00001c9fff)="03", 0x1) 2m1.319614176s ago: executing program 7 (id=3582): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x2a203, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x16, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x800) r2 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0xe533, 0x80, 0x4, 0x1ab}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_uring_enter(r2, 0x47f8, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 2m1.257793297s ago: executing program 7 (id=3583): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x101}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x20000004) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000000bc0)=ANY=[@ANYRES16=0x0, @ANYBLOB="ce3fe8ee795de2851b5ff8a1751aaf4bacd9377bfb3d3e462656278241aa813afcf46a2401d0777e0f716e9a9bf2d58100d8c93973eebed1b38d8b2d33660e5fa16bb2911088d2338d4ea4d0c9f9def7f60fad08c08c0ec40647fdd1441a945c7bd75720536ba3bbd4fab577de58392a6349dccc65ef50e5", @ANYRES64, @ANYBLOB="f855372474cd29de3f47a9d98d95d9cbdbcb78dc88186cc15b3aff1a3292dc2e96d7e6c71ab8833941822132de14e6957360889cb096b25fce02b844ac55e3fadca7bbb74c9b785530e4198f6b843f1629122b7c207602327597559a0405ebd85eda64b7ea5a5f7dc999cc0a647971426547b07327dd1d515a090439984e7731edea515db331473c808245432f2bbf2e90b302388eb9cd017c8d4a63ac3f8f1057d111f40a65dc42ea9b54347b88fb679f1f6dd1554c9398efcb0a5f77c4d8a9e9ea9f415862db57", @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES64, @ANYRESOCT=0x0, @ANYRESHEX=0x0, @ANYRESDEC=0x0], 0x7, 0x35d, &(0x7f0000000f00)="$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") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x4) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000400)=""/99, &(0x7f0000000040)=0x63) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000c50000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$inet(r3, &(0x7f0000000740)={&(0x7f0000000140)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000480)="9f45642b8ba536cca8352b7cb1aee7d11ec84917d57261b0998637d2128e2ee3b26860e8898ac5ecc5b491e45063de9b4c1b152d537ff9a570ee3d41579c578e79c2643b0052ff68b6b679b3eb4949d13f60936c262065dc5a7ebc7dd8d4fb5f36a43463a29ae546138e371eada581b439123c2d7007a3092a80f67d45bcd6b8dd0541de2df8d86e39fa34da0be99f49139e53dfa4ee7ecca822dabdcdd78ad9386e0ead88cdff", 0xa7}, {&(0x7f0000000600)="0c1cb43f9354063ec3bc3830fd344d7913bff85e4eb2f76144618a9c99489dfce6bf78e43837bcbfe0a20926369f1191d49a6c6fa9c73aa2902291d705db7a3c4111b95d19b7b41e739f1a592f4b3ab8aad19d2e2b7d534e995536d7e283cd3e4d153ccb4bfab3da98511014be600476e6a9fb9a49db511b51479f4b6f3b73a2835c06cd2c69b98a05734fdb769e0cd350583dc7e5894335d9156ab3b677adab1be19f6e6e", 0xa5}, {&(0x7f0000000540)="4e51b397185bfa103fbbf89fdcd60b162dfda6957b916e2ecc82a053d32f02a600bae862abd92073f9f771305fbe533b4e2a9d695cb63342bea0177340b053ecd39d4fff", 0x44}, {&(0x7f00000006c0)="7dfd53ed037fcad3096b5bec144bd8260499ebc536bf7668a254220994b2f2ca41d85a0558fee9aeddbb132fdc805f0935e864f9b40ef8a43e174b789f2fae190b1476", 0x43}], 0x4}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = syz_open_dev$loop(&(0x7f00000005c0), 0x9, 0x105e80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000001000), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0155aaffffffffffff0300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}}) 2m1.103655729s ago: executing program 7 (id=3585): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000002c0)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x2d) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x5, [@union={0x1, 0x2, 0x0, 0x5, 0x0, 0x7fffffff, [{0x8, 0x0, 0x5}, {0xa, 0x3, 0xffff}]}, @typedef={0x3, 0x0, 0x0, 0x8, 0x3}, @func={0x4, 0x0, 0x0, 0xc, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x8}}, @var={0xd, 0x0, 0x0, 0xe, 0x5}]}, {0x0, [0x30, 0x2e, 0x61]}}, &(0x7f00000000c0)=""/72, 0x81, 0x48, 0x0, 0x7dc, 0x10000, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000025ad9835850000007b00000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x10, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bff200010074", "e2266bd8", "d1b29b99d21d88a2"}, 0x28) write$binfmt_script(r4, &(0x7f00000003c0)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(r3, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x42000000) 2m0.864189292s ago: executing program 7 (id=3588): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) futex_waitv(&(0x7f0000001080)=[{0x3, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x1) 2m0.832007653s ago: executing program 35 (id=3588): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) futex_waitv(&(0x7f0000001080)=[{0x3, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x1) 1m36.468711396s ago: executing program 3 (id=3930): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18) r2 = inotify_init1(0x800) inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x200) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001a00010000000000100000008100800000000005"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18) (async) inotify_init1(0x800) (async) inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x200) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001a00010000000000100000008100800000000005"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) 1m36.432835687s ago: executing program 3 (id=3932): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r2, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r2, 0x6, &(0x7f0000000180)={0x1, 0x1, 0x400000200}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x2}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) write$selinux_validatetrans(r0, 0x0, 0x79) r7 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}, 0x0, &(0x7f0000000380)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r1}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'vxcan1\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x4004743a, &(0x7f0000000300)=0x4c1) 1m34.516018602s ago: executing program 36 (id=3958): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0x3, 0x0, &(0x7f0000000500)='|S1', 0x0, 0xd5a2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000380)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r1}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'vxcan1\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x4004743a, &(0x7f0000000300)=0x4c1) 1m12.12660551s ago: executing program 6 (id=4190): syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x2000000000000226, &(0x7f0000000a00)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b708bfa2ea930000aa6c7d5c7a9e0282f4f2e13b648af8ff00000000bfa200000000000007020000f8fffffeb703000000000000b71d2115e1e213739ed3fdebd7d5f89200f180ecfffddcffbf9f916c087bf06652f7a2fc8c923e39af39b6e16daec7bc3ded8e170a92147dee3cd52d4a5658fd235d90090742c089fa445396286d320120"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x4, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x3c8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xff, 0xd, 0x5, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x6, 0x8a2d, 0x1000, 0x100, 0xa, 0xc, 'sit0\x00', 'team0\x00', {0xff}, {}, 0x0, 0x290}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0xff03}}}, {{@arp={@multicast2, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000020000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000800000000000000000000000000000000100002ea6f92df765f6"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000500)={0x81, 0x7, 0x40}) unshare(0x6a040000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0xfe, 0x0, 0x0, 0x3, 0x80005, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa041, 0x0, 0x20000, 0xfffffffffffffffd, 0x5, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 1m11.244540672s ago: executing program 6 (id=4204): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) close(r2) (fail_nth: 1) 1m10.871892456s ago: executing program 6 (id=4207): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r2, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r2, 0x6, &(0x7f0000000180)={0x1, 0x1, 0x400000200}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000089"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x2}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) write$selinux_validatetrans(r0, 0x0, 0x79) r7 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x4) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4) sendto$packet(r4, &(0x7f0000000240)='\x00', 0x1, 0x800, &(0x7f0000000080)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfc}}, 0x14) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000340)={@local, 0x0}, &(0x7f00000003c0)=0x14) r7 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r7, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r9}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x12, &(0x7f0000000400)={@initdev, 0x0}, &(0x7f0000000440)=0x14) r11 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r12, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x45, 0x3ff, 0x10000, 0x3, 0x8, 0x4, 0xa0000, 0x5, 0xa0000001, 0x59bc9fd6, 0x2, 0x2, 0x8000, 0x8, 0x4, 0x8, 0x401, 0x114b6000, 0xfffffffe, 0x2a70, 0xffff73cc, 0x81, 0x5, 0x0, 0x100a, 0x400042, 0x1d, 0x8, 0x5, 0x9, 0x3, 0xe, 0xa, 0x2, 0x4, 0x5, 0x3, 0xffff, 0x3, 0xffffdff9, 0x4, 0x8, 0x1a0055ee, 0x401, 0x1, 0xffff4226, 0x200000, 0x0, 0x22cc, 0x101, 0x4, 0xb9c3, 0x1, 0x800, 0xf9, 0x9, 0x8, 0x2, 0x8, 0x2f, 0x4000006, 0x0, 0x101, 0x9, 0x7, 0xc5, 0x4, 0x2, 0xffffffff, 0x6, 0x5, 0x5, 0x5, 0x2, 0x9b58, 0x0, 0xb, 0x4be, 0x4, 0x100, 0xa, 0xca6, 0x9fa7, 0x7, 0x3c, 0x4, 0xb, 0x7, 0x4d, 0x7, 0x200, 0x8, 0x401, 0x7, 0x45, 0x3, 0x9, 0x0, 0x7, 0x46, 0x9, 0x3, 0x7, 0x4, 0xc, 0x7, 0x8001, 0x7, 0x7, 0x1902, 0xc3c, 0x3, 0x28000000, 0x4000000, 0x30c7, 0xfad, 0x7, 0x8, 0x0, 0x5, 0x10, 0x400, 0xd58, 0x5, 0x2, 0x4, 0x2, 0x2, 0x8, 0x8, 0xea, 0x0, 0x45ba, 0x9, 0x864b, 0xfffffffa, 0x7, 0x9, 0x8001, 0x7, 0x81, 0x3, 0x9, 0x7, 0xffffff80, 0x43, 0x8, 0x1, 0x6, 0x5, 0x9, 0x7fffffff, 0x4, 0x324f035, 0x6, 0x0, 0x7c1, 0x136, 0x2, 0x5, 0x1, 0x3ff, 0x4, 0x0, 0x2, 0x10001, 0xfffffffd, 0x5, 0x4, 0x400, 0x101, 0x4, 0x1b, 0xd589, 0xffffff81, 0x0, 0x4, 0x0, 0x300, 0x8, 0x60000000, 0xd3d, 0x1, 0xfffffffe, 0x1, 0x401, 0x2, 0x55, 0x4000004, 0xbc6, 0xffff, 0x8, 0x28a6a52, 0x1ff, 0xb, 0x7fff, 0x9, 0x2e4c20b6, 0x1, 0x4, 0x9, 0x7, 0x4, 0x8, 0x0, 0x6, 0x8, 0x3, 0x7, 0x4, 0x9, 0x4, 0xfffffffa, 0x76e8e800, 0x800, 0x400, 0x6, 0x0, 0xcc6, 0xfffffffb, 0x8000, 0xffffff00, 0x894, 0x7, 0x7, 0x6, 0x6, 0x2, 0x9, 0x10001, 0x9, 0x4, 0x8, 0x5d, 0x1000003, 0x7, 0x656, 0x8008, 0x80000001, 0x384, 0x9, 0x58b, 0x80000000, 0xe08, 0x0, 0x1, 0x2c821159, 0x0, 0x9, 0xfff, 0x0, 0x7, 0x0, 0x7f]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x2, 0x8, 0x0, 0xc}, {0xff, 0x2, 0x0, 0x5, 0x5e1d, 0x8}, 0x9, 0x8, 0x99}}]}}]}, 0x45c}}, 0x8840) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x198, r1, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4080}, 0x8000) r13 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r13, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x8001, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0x0, 0x2]}) write$hidraw(r0, &(0x7f00000002c0)="85b63583d9d432ff2d70a8ea6b95965a084c8d9ee47d61244ed498769deef6ce4adfa3ffad724030133fd28811f8308b3ad04f4cacf28506d0a7977af17513c7200a8e1da6d9d5dad4600b614448b176b30b808fc8049c9d5d35cfc60ee47a39", 0x60) 1m10.003950227s ago: executing program 6 (id=4215): syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x2000000000000226, &(0x7f0000000a00)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b708bfa2ea930000aa6c7d5c7a9e0282f4f2e13b648af8ff00000000bfa200000000000007020000f8fffffeb703000000000000b71d2115e1e213739ed3fdebd7d5f89200f180ecfffddcffbf9f916c087bf06652f7a2fc8c923e39af39b6e16daec7bc3ded8e170a92147dee3cd52d4a5658fd235d90090742c089fa445396286d320120"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x4, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x3c8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xff, 0xd, 0x5, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x6, 0x8a2d, 0x1000, 0x100, 0xa, 0xc, 'sit0\x00', 'team0\x00', {0xff}, {}, 0x0, 0x290}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0xff03}}}, {{@arp={@multicast2, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000020000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000800000000000000000000000000000000100002ea6f92df765f6"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000500)={0x81, 0x7, 0x40}) unshare(0x6a040000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0xfe, 0x0, 0x0, 0x3, 0x80005, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa041, 0x0, 0x20000, 0xfffffffffffffffd, 0x5, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 1m9.763905611s ago: executing program 6 (id=4218): clock_gettime(0x6, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$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") r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write$vga_arbiter(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="746172676574205043493a373a623a31612e3cdf85c38b35000f76b2d5ce79f7f2281d417c"], 0x14) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='mm_page_free\x00', r5}, 0x18) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000080)="0000501ef663", 0x0, 0x800004, 0x10030, 0x0, 0x0}) unlink(&(0x7f0000000180)='./file1\x00') r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r7, 0x0, 0x2}, 0x18) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x6, 0xab, @buffer={0x0, 0x0, 0x0}, &(0x7f00000003c0)="00000000f800", 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r8, 0x5386, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) socket$netlink(0x10, 0x3, 0xb) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f0000000780)='./file1\x00', 0x0, 0x4018, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x8, 0x1b, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@call={0x85, 0x0, 0x0, 0x7c}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @ldst={0x3, 0x0, 0x4, 0x5, 0x8, 0x40, 0x8}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}, @exit, @map_val={0x18, 0x8, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x1ff}, @call={0x85, 0x0, 0x0, 0x2e}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0xcf15, 0xc, &(0x7f0000000280)=""/12, 0x41000, 0x68, '\x00', 0x0, @fallback=0x27, r2, 0x8, &(0x7f0000000380)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0xf, 0x8, 0xfffffff9}, 0x10, 0x0, r3, 0x7, &(0x7f0000000840)=[r10, r4], &(0x7f0000000880)=[{0x0, 0x2, 0x6, 0x4}, {0x0, 0x1, 0x10, 0x4}, {0x0, 0x4, 0xa, 0x2}, {0x2, 0x5, 0xc, 0x9}, {0x5, 0x3, 0xd, 0x4}, {0x2, 0x3, 0x0, 0x7}, {0x2, 0x3, 0xb, 0x9}], 0x10, 0x4, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) writev(r9, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x1}], 0x1) 1m9.686564661s ago: executing program 37 (id=4218): clock_gettime(0x6, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$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") r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write$vga_arbiter(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="746172676574205043493a373a623a31612e3cdf85c38b35000f76b2d5ce79f7f2281d417c"], 0x14) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='mm_page_free\x00', r5}, 0x18) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000080)="0000501ef663", 0x0, 0x800004, 0x10030, 0x0, 0x0}) unlink(&(0x7f0000000180)='./file1\x00') r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r7, 0x0, 0x2}, 0x18) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x6, 0xab, @buffer={0x0, 0x0, 0x0}, &(0x7f00000003c0)="00000000f800", 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r8, 0x5386, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) socket$netlink(0x10, 0x3, 0xb) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f0000000780)='./file1\x00', 0x0, 0x4018, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x8, 0x1b, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@call={0x85, 0x0, 0x0, 0x7c}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @ldst={0x3, 0x0, 0x4, 0x5, 0x8, 0x40, 0x8}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}, @exit, @map_val={0x18, 0x8, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x1ff}, @call={0x85, 0x0, 0x0, 0x2e}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0xcf15, 0xc, &(0x7f0000000280)=""/12, 0x41000, 0x68, '\x00', 0x0, @fallback=0x27, r2, 0x8, &(0x7f0000000380)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0xf, 0x8, 0xfffffff9}, 0x10, 0x0, r3, 0x7, &(0x7f0000000840)=[r10, r4], &(0x7f0000000880)=[{0x0, 0x2, 0x6, 0x4}, {0x0, 0x1, 0x10, 0x4}, {0x0, 0x4, 0xa, 0x2}, {0x2, 0x5, 0xc, 0x9}, {0x5, 0x3, 0xd, 0x4}, {0x2, 0x3, 0x0, 0x7}, {0x2, 0x3, 0xb, 0x9}], 0x10, 0x4, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) writev(r9, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x1}], 0x1) 5.668930826s ago: executing program 9 (id=4947): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 5.578642417s ago: executing program 9 (id=4949): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) r1 = open(&(0x7f0000000540)='./file1\x00', 0x48540, 0x20) fcntl$setlease(r1, 0x400, 0x1) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00') r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r3, 0xa, 0x12) fcntl$setown(r3, 0x8, r2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfaa4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, @perf_bp={0x0}, 0x203470, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x7ffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = syz_clone(0x800000, &(0x7f0000000000)="4667c2fea1bd9b8a743799232dbd46b853d651ce7b56af083065ea2557e4093d56a9d90bc8d6f2ae92b5f2d17336ebf73a634c5504244f80bfa37046fad8848f0b54e486a4314ae9a412826f3903b36f616b9350fec32004e4c928f2dba0e9052011cc157dba58", 0x67, &(0x7f0000000080), &(0x7f00000001c0), &(0x7f00000003c0)="bcaa12a045ce3ccc7ecadc79f0342e2b4b37ef061efbc880543d0add22a6c15bc51da4e3671ddf5b56d8d01e7f3d7f377e74c9b774185750dc1a51a3fed69da7d8944005c10556974a0cd0b8d2825b7e28b26a82e34414f100b364f8bb6914f919f11f1f45c5510124031f1afbca028fd6a81a81048573e9657e9dc00cfebabf20678e0906b663e7") timer_create(0x6, &(0x7f00000005c0)={0x0, 0x1d, 0x4, @tid=r2}, &(0x7f0000000600)=0x0) timer_settime(r6, 0x1, &(0x7f0000000640)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000680)) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000780)={'ip6gre0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x29, 0x7f, 0x1, 0x2, 0x1, @private2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8000, 0x8, 0x9, 0xffffff00}}) sendmsg$nl_route_sched(r7, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@gettclass={0x24, 0x2a, 0x8, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xa}, {0xe, 0xc}, {0x0, 0xffff}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20) rt_sigqueueinfo(r5, 0x25, &(0x7f0000000300)={0x1e, 0x3, 0x5}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r9}, 0x10) r10 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r11, 0x89fb, &(0x7f0000000540)={'sit0\x00', &(0x7f0000000500)={@empty, @multicast2, 0xa, 0x19}}) write(r10, &(0x7f00000004c0)="804ce8dd94c8685d3de1cecf30189f097d", 0x11) syz_clone3(&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) 5.38798657s ago: executing program 9 (id=4950): clock_gettime(0x6, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000440)="0800eca3486fa3e8", 0x8}], 0x1}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write$vga_arbiter(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="746172676574205043493a373a623a31612e3cdf85c38b35000f76b2d5ce79f7f2281d417c"], 0x14) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='mm_page_free\x00', r5}, 0x18) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000080)="0000501ef663", 0x0, 0x800004, 0x10030, 0x0, 0x0}) unlink(&(0x7f0000000180)='./file1\x00') r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r7, 0x0, 0x2}, 0x18) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x6, 0xab, @buffer={0x0, 0x0, 0x0}, &(0x7f00000003c0)="00000000f800", 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r8, 0x5386, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) socket$netlink(0x10, 0x3, 0xb) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f0000000780)='./file1\x00', 0x0, 0x4018, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x8, 0x1b, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@call={0x85, 0x0, 0x0, 0x7c}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @ldst={0x3, 0x0, 0x4, 0x5, 0x8, 0x40, 0x8}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}, @exit, @map_val={0x18, 0x8, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x1ff}, @call={0x85, 0x0, 0x0, 0x2e}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0xcf15, 0xc, &(0x7f0000000280)=""/12, 0x41000, 0x68, '\x00', 0x0, @fallback=0x27, r2, 0x8, &(0x7f0000000380)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0xf, 0x8, 0xfffffff9}, 0x10, 0x0, r3, 0x7, &(0x7f0000000840)=[r10, r4], &(0x7f0000000880)=[{0x0, 0x2, 0x6, 0x4}, {0x0, 0x1, 0x10, 0x4}, {0x0, 0x4, 0xa, 0x2}, {0x2, 0x5, 0xc, 0x9}, {0x5, 0x3, 0xd, 0x4}, {0x2, 0x3, 0x0, 0x7}, {0x2, 0x3, 0xb, 0x9}], 0x10, 0x4, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) writev(r9, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x1}], 0x1) 3.688411892s ago: executing program 0 (id=4964): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x31, &(0x7f00000002c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xc3, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') pread64(r1, 0x0, 0x0, 0x5) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x3}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x14, &(0x7f0000001840)=ANY=[@ANYBLOB="1800000000000100000000004f30500e18110000c22e9cfa29c9cfd564b36cecc4a0821038e4b8715e6812777cade0aa21934ae711d6fd9f247a6d6c233f0d8ecf1ecd0385e5db5ee95d004f2a890b9f545ee899561f024cd2272d3749ea3a21d19b2024e738bb7b03ce524593e92292298cfe0962886957da2702009e6f330bb8", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000680)='GPL\x00', 0x2, 0x99, &(0x7f00000006c0)=""/153, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000007c0)={0x2, 0x4, 0x8f, 0x3}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000800)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000840)=[{0x1, 0x5, 0x9, 0x8}, {0x1, 0x4, 0xf, 0xa}, {0x4, 0x2, 0x7, 0x6}, {0x1, 0x3, 0xf, 0x6}, {0x5, 0x1, 0x9, 0xa}, {0x5, 0x5, 0x3, 0x9}, {0x2, 0x3, 0x7, 0x4}, {0x2, 0x5, 0x9, 0x7}, {0x3, 0x5, 0x0, 0x3}], 0x10, 0xd, @void, @value}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a00)=@o_path={&(0x7f00000009c0)='./file0\x00', 0x0, 0xc018, r0}, 0x18) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a80)=@generic={&(0x7f0000000a40)='./file0\x00', 0x0, 0x8}, 0x18) syz_io_uring_setup(0x6167, &(0x7f0000000400)={0x0, 0xfffffffe, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, {0x20}}) syz_io_uring_setup(0x3466, &(0x7f00000005c0)={0x0, 0x923b, 0x10000, 0xffffffff, 0x4c}, &(0x7f0000000380)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_UNLINKAT={0x24, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_io_uring_submit(r3, r6, &(0x7f0000000d40)=@IORING_OP_READ_FIXED={0x4, 0x41, 0x2007, @fd=r2, 0x100000001, 0x2, 0x5, 0x10, 0x1, {0x3}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ac0)={0x1b, 0x0, 0x0, 0xffffffb3, 0x0, 0xffffffffffffffff, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000cc0)={'syzkaller1\x00', 0x0}) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000d00)={r7, @rand_addr=0x64010101, @multicast1}, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r9, 0x0, 0x1034}, 0x18) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f00000025c0)=@nat={'nat\x00', 0x1b, 0x5, 0x3d0, 0x238, 0x190, 0xffffffff, 0xd8, 0x238, 0x338, 0x338, 0xffffffff, 0x338, 0x338, 0x5, &(0x7f0000001080), {[{{@uncond, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x3, @ipv6=@mcast1, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @icmp_id=0x65, @icmp_id=0x66}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ip6erspan0\x00', {0x3}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x1, @loopback, @multicast2, @gre_key=0x1, @port=0x4e22}}}}, {{@ip={@local, @multicast2, 0xff, 0x0, 'veth1_to_team\x00', 'dvmrp0\x00', {}, {}, 0x32, 0x1, 0x10}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@icmp={{0x28}, {0x3, "d835", 0x1}}, @common=@ah={{0x30}, {[0x8, 0x100], 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @rand_addr=0x64010102, @icmp_id=0x66, @port=0x4e20}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000002a00)=""/4096, 0x1000}], 0x1}, 0x40000100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4011, &(0x7f0000000000)={[{@nobh}, {@norecovery}, {@nobh}]}, 0x9, 0x66d, &(0x7f00000011c0)="$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") 3.517666434s ago: executing program 9 (id=4967): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x7dc, 0x10000, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socket(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='mm_page_alloc\x00', r3}, 0x10) unshare(0x42000000) 2.863577293s ago: executing program 9 (id=4977): openat(0xffffffffffffff9c, 0x0, 0x88882, 0x0) creat(0x0, 0x8e) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/25]}, 0x91) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) socket$igmp(0x2, 0x3, 0x2) 2.696424124s ago: executing program 8 (id=4980): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x205, 0x2581) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xf0}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f0000000140)={'bond0\x00'}) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000008f00"/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 2.587613826s ago: executing program 9 (id=4981): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000400)={0x60, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macvtap0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x854}, 0x1200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_free_inode\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0xa2b9}]}) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r5, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) r6 = gettid() r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000140)={0x3c, 0x2, 0x6, 0x204, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x3c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000043}, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r8, 0x5452, &(0x7f0000b28000)=0x3) r10 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r10, &(0x7f0000001d80)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3d}}], 0x28}}], 0x1, 0xc04c0d0) fcntl$setsig(r8, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r9}], 0x2c, 0xffffffffffbffff8) dup2(r8, r9) tkill(r6, 0x13) getdents(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 2.533859347s ago: executing program 4 (id=4982): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') r3 = socket(0x28, 0x5, 0x0) sendfile(r3, r2, 0x0, 0x8) 2.514245507s ago: executing program 0 (id=4983): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0xc000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x3, 0x2c) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x550, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x480, 0x238, 0x238, 0x480, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x338, 0x3a0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [], 0x2, [], 0x0, 0x4}}, @common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x2, 0x6, 0x5}, {0x4, 0x2, 0x6}, 0x1, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) 2.439042788s ago: executing program 4 (id=4984): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000009dff2bca6b85180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) io_uring_setup(0x17ba, &(0x7f0000000580)={0x0, 0x913f, 0x800, 0x3, 0x315}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000008800)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x802, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000003c0)="ee", 0x1}], 0x1}}], 0x1, 0x4004) shutdown(r4, 0x1) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @multicast1}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000240)={r6, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000100)={r7, 0x7, 0x6}, 0x8) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r3, 0x0) inotify_init() ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 2.378404849s ago: executing program 0 (id=4986): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001480)=ANY=[@ANYBLOB="1c0000003e000701fcfffffffe9b"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x3, 0x2c) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x550, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x480, 0x238, 0x238, 0x480, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x338, 0x3a0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [], 0x2, [], 0x0, 0x4}}, @common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x2, 0x6, 0x5}, {0x4, 0x2, 0x6}, 0x1, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r6) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r7, 0xffffffff) r8 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x80000213, 0x0, r6}, &(0x7f0000000380)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000003c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r8, 0x27e2, 0x0, 0x0, 0x0, 0x0) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16, @ANYBLOB="dc58336a4b9442803c68761a07b048998b09bc1b5107ce211bd7e58ee8673d866eb707d1b808b776ee06cc4dce53bde20c73afc376fe7043d978857dd13c55759c263a4b5f6e4504af674807f4ea5abd8e49ff3ef831349f1aa3175ed4ed55fca47549b2e9d31c5d94ca843034c333d4c5713fd0848e9d27e076c5a182cb495b89e91e76b031f198fe13ecf26abe", @ANYRESHEX=0x0, @ANYBLOB="c21a7e899b86b01f564c048b402d2b0202883dbc5fb01c71010e5a50ba157889b6dca4fbb0997bff4bb902f35d4184620d874676e1c20d495e4fd28b3b445b8ea5b087fa173e5353f8925297f09ff4397d6257cc20c700b03b30bc04a596b894b581717836f690b267c52376490153a549130767075006f4e08b968c0a31835eedb0811010b034cde9fba8d21be778357dcee1dc6602becf81e9e86e8329353d042e80822ca71c1f108a49633b84a10a0ae5a76759c3599175d5c3c8050935555e", @ANYRES8, @ANYRES64, @ANYRESHEX=r0, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRES8=r0], 0x48) readlinkat(r6, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=""/78, 0x4e) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000c50000", @ANYRES32=r11, @ANYRESHEX=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r13 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r12}, 0x10) fcntl$getownex(r13, 0x10, &(0x7f00000000c0)) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r14 = socket$inet_dccp(0x2, 0x6, 0x0) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r15}, 0x18) setsockopt(r14, 0x10d, 0xf, &(0x7f00001c9fff)="03", 0x1) 2.34696835s ago: executing program 8 (id=4987): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000008500000069000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 2.232672121s ago: executing program 8 (id=4988): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00df0007389420ff00000000000000000000000000000000002c86b1e56c1b81e9b8c87e96c0e9e39b486a36e3e36ffdcdebec73a67e2d9475d0c9d1d7b31baa111ac690101c88d10ec04d33aaba6d0b849bbb5cf220464f0787dc06000000000000"], 0x1c}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010700000000000000002e0000000e0001006e657464657673696d0000000f000200"], 0x3c}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) syz_emit_ethernet(0x28, &(0x7f0000000100)=ANY=[@ANYBLOB="0800000000000180c2006e9e00000806000f891406010003000000000000b8bbbbbbbbbbbb9e8c96"], 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000000), 0x7, r4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r4, &(0x7f0000000000), &(0x7f0000000100)=""/118}, 0x20) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1, 0xfff}, 0x20) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@updsa={0x144, 0x10, 0x1, 0x0, 0x200019, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, {@in6=@private1, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {r9, 0x4}}]}, 0x144}}, 0x0) sendmsg$inet6(r6, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e26, 0x80000, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000002300)=[@flowinfo={{0x14, 0x29, 0xb, 0x10010000}}], 0x18}, 0x40048c0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000580)={0x0}) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r5, &(0x7f0000000140)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f00000003c0)={r10}) r12 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r13 = dup(r12) getsockname$packet(r13, 0x0, &(0x7f0000000180)) 2.203090901s ago: executing program 0 (id=4989): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) listen(r2, 0x6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x3e8, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r7}, 0x10) r8 = io_uring_setup(0x5bec, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r8, 0x2, &(0x7f0000000140), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.011376404s ago: executing program 5 (id=4992): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000009dff2bca6b85180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) io_uring_setup(0x17ba, &(0x7f0000000580)={0x0, 0x913f, 0x800, 0x3, 0x315}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000008800)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x802, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000003c0)="ee", 0x1}], 0x1}}], 0x1, 0x4004) shutdown(r4, 0x1) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @multicast1}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000240)={r6, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000100)={r7, 0x7, 0x6}, 0x8) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r3, 0x0) inotify_init() ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) r9 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000940), 0x1, 0x0, 0x0) recvfrom(r8, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 1.476150681s ago: executing program 4 (id=4993): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x8840) syz_open_pts(0xffffffffffffffff, 0x121500) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) (fail_nth: 6) 1.353806722s ago: executing program 8 (id=4994): syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000400)={'wpan0\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 1.054903706s ago: executing program 0 (id=4995): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x31, &(0x7f00000002c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xc3, 0x8, 0x0, 0x0}}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') pread64(r1, 0x0, 0x0, 0x5) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a00)=@o_path={&(0x7f00000009c0)='./file0\x00', 0x0, 0xc018, r0}, 0x18) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a80)=@generic={0x0, 0x0, 0x8}, 0x18) syz_io_uring_setup(0x6167, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, {0x20}}) syz_io_uring_setup(0x3466, &(0x7f00000005c0)={0x0, 0x923b, 0x10000, 0xffffffff, 0x4c}, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000180)=@IORING_OP_UNLINKAT={0x24, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000d40)=@IORING_OP_READ_FIXED={0x4, 0x41, 0x2007, @fd=r2, 0x100000001, 0x2, 0x5, 0x10, 0x1, {0x3}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ac0)={0x1b, 0x0, 0x0, 0xffffffb3, 0x0, 0xffffffffffffffff, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000cc0)={'syzkaller1\x00', 0x0}) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000d00)={r6, @rand_addr=0x64010101, @multicast1}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r7, 0x0, 0x1034}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f00000025c0)=@nat={'nat\x00', 0x1b, 0x5, 0x3d0, 0x238, 0x190, 0xffffffff, 0xd8, 0x238, 0x338, 0x338, 0xffffffff, 0x338, 0x338, 0x5, &(0x7f0000001080), {[{{@uncond, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x3, @ipv6=@mcast1, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @icmp_id=0x65, @icmp_id=0x66}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ip6erspan0\x00', {0x3}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x1, @loopback, @multicast2, @gre_key=0x1, @port=0x4e22}}}}, {{@ip={@local, @multicast2, 0xff, 0x0, 'veth1_to_team\x00', 'dvmrp0\x00', {}, {}, 0x32, 0x1, 0x10}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@icmp={{0x28}, {0x3, "d835", 0x1}}, @common=@ah={{0x30}, {[0x8, 0x100], 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @rand_addr=0x64010102, @icmp_id=0x66, @port=0x4e20}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000002a00)=""/4096, 0x1000}], 0x1}, 0x40000100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4011, &(0x7f0000000000)={[{@nobh}, {@norecovery}, {@nobh}]}, 0x9, 0x66d, &(0x7f00000011c0)="$eJzs3c1rHG8dAPDvTHaTNPnp5ldE7cUGRFrQJk3aShHBFq+l1JebF2OTltq0KU1EUwsmUC+KePEgePJg/S9swasHrx68eBApBJEerFSzMpvd7Ft2s0l2d9Lk84Fp5pnZmeeZ3X73mXn2eWYCOLWms3/SiHMR8SSJKDWsK0R15fTO697+6/ndbEqiXP7WP5N4/pNko3FfSfXvZHXj/5Ui+XMacXakPd/V9WcPF5aXl55W07Nrj57Mrq4/u/Tg0cL9pftLj+e/PH/92tVr1+cuH+n4ylXZ/K0X3/9h6We3v/O737xP5n7/19tJ3Ijtatmy42rdduxIOWfv2XQt/3f1pWnl3+tH3Pdx8e9S5aNuequSQn7l4WDuVeO8GBGfiVKMRP3DK8VPv5Fr4YCBKif1OhI4bZL947/Yvmh8MIUBhqh2HlC7tt/rOrhdOuCzEmAYtm7uNADsxH4xImrxX9hpG4zxStvAxNskGpt1kog4WsvcjiyPP/3x9otsig7tcMBgbGzWmm5b6/+kEptTMV5JTbxNs/h/VdsubZiy74Vvtu641Fv+0y1p8Q/Ds7EZEZ+t1v+jsV/872qN/+8dMn/xDwAAAAAAAP3z+mZEfGmv/n/pbv+f0Zb+P0l1jN+NPuQ/3TI2sPn3vyzn9E1DtkAfbd2M+Gpb/9//NvYOnhqp/s7/iUp/gGJ678Hy0uWI+GREXIziWJaea95tUwfhS784++tO+Tf2/8umLP9aX8Dqrt4UWgbiLi6sLfTn6OF029qMeFfp/3u+uqS5/09W/ydt/X9//vUswJ/0mMfZL7y807Tg7/Wvh/3jHxiU8m8jLuw5/qd+up10vz/HbOV8YLZ2VtDucz/+5R865S/+IT9Z/T/RPf7Hksb79awebP/ZFfyV9UK50/rDnv+PJt8eqe0/86OFtbWncxGjya325fPN2xcPdghwYtTioRYvWfxf/HyX9r8kqZ//N8ThmYjY6DHPT29P/m030dKKp/6H/GTxv9i9/p9qrv8POjMe8y+nXnWqdu/0VP9frdTpF6tLtP9Bo/b7cfQaoLkUFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+cGlEfBRJOrM7n6YzMxGTEfGpmEiXV1bXvnhv5QePF7N1zc//L+2kk9rz/6ca0vMt6SsR8XFE/GrkTCU9c3dleTHvgwcAAAAAAAAAAAAAAAAAAIBjYrIy5r881jr+P/OPkbxLBwxcofpXvMPpUzj0luWxvhYEGLrDxz/woes9/osDLQcwfJ3j/937csVQiwMM0W78fzffcgDDd8jrfz8XwAmg/Q9Oqx7b9MYHXQ4gDz3X/1uDLQcAAAAAANAXH59//ZckIja+cqYyZUar63T2h5MtzbsAQG726cM7OqxyAMNXWMm7BEBeXOMDye7cf/Yc7L9H7//tnfsCJAMtFwAAAAAAAAAAAABQd+Fc8/j/Qm/j/z8aVvmAwUkjujzCW99+OMm6jP/fK/g98gtOkM6P/uil7k96O0Pw6CA4loz/B+r1+Oae6ztX4UmX9gMAAAAAAAAAAAAAoK/Gnz1cWF5eerq6ns/MWEQcdvOv7fea2tPN8zzA1pmNhaFmGhsRA89re7/X1D6Ig+25eIT/G8d5JonsU+n2btRuwdGHTIuH3DyfryMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDd/wMAAP//0VIyIg==") 1.043535956s ago: executing program 5 (id=4996): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) (async) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r1 = socket$rds(0x15, 0x5, 0x0) r2 = creat(&(0x7f0000000000)='./file1\x00', 0x40) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000001c0)=0x7, 0x4) (async) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40103d0b, 0x0) (async) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='GPL\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100d0000000fbdbdf25010000001800018014000200766574683100000000000000000000001c0002800c"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$rds(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f00000000c0)=""/160, 0xa0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") 1.042779696s ago: executing program 8 (id=4997): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x17}, 0x400, 0xffffffff, 0x6, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fddbdf2520000000", @ANYRES32=r4, @ANYBLOB="54002d8005000100000000000500040000000000080002"], 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x84) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000540)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb810020000800450000380000000000019078ac1e0001ac1414aa030490781200183f2500000000000000000100007f0000017f00000100186371ae9b1c03b9ec62843b1e37cac24720d5cd0185bc9c4c0e5e531931cc3aaefe3428e6fd8d5fca17e6fac1325b3057687676e081871ad7dfb86c918a06ef916349af2b88d753f609644df877541c875105b791c74c0647371bd5dc1f6e17db71399109a1f7eac8"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") r8 = io_uring_setup(0x3eee, &(0x7f0000000080)={0x0, 0x6d33, 0x1000, 0x0, 0x4000000}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x9) r9 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r9, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) ioctl$MON_IOCX_GETX(r9, 0x80089203, &(0x7f0000000a40)={0x0, 0x0}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80280, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x1, 0xffffffffffffffff, 0x9) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) 719.990681ms ago: executing program 5 (id=4998): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) r1 = open(&(0x7f0000000540)='./file1\x00', 0x48540, 0x20) fcntl$setlease(r1, 0x400, 0x1) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00') r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r3, 0xa, 0x12) fcntl$setown(r3, 0x8, r2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfaa4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, @perf_bp={0x0}, 0x203470, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x7ffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = syz_clone(0x800000, &(0x7f0000000000), 0x0, &(0x7f0000000080), &(0x7f00000001c0), &(0x7f00000003c0)="bcaa12a045ce3ccc7ecadc79f0342e2b4b37ef061efbc880543d0add22a6c15bc51da4e3671ddf5b56d8d01e7f3d7f377e74c9b774185750dc1a51a3fed69da7d8944005c10556974a0cd0b8d2825b7e28b26a82e34414f100b364f8bb6914f919f11f1f45c5510124031f1afbca028fd6a81a81048573e9657e9dc00cfebabf20678e0906b663e7") timer_create(0x6, &(0x7f00000005c0)={0x0, 0x1d, 0x4, @tid=r2}, &(0x7f0000000600)=0x0) timer_settime(r6, 0x1, &(0x7f0000000640)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000680)) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000780)={'ip6gre0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x29, 0x7f, 0x1, 0x2, 0x1, @private2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8000, 0x8, 0x9, 0xffffff00}}) sendmsg$nl_route_sched(r7, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@gettclass={0x24, 0x2a, 0x8, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xa}, {0xe, 0xc}, {0x0, 0xffff}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20) rt_sigqueueinfo(r5, 0x25, &(0x7f0000000300)={0x1e, 0x3, 0x5}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r9}, 0x10) r10 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r11, 0x89fb, &(0x7f0000000540)={'sit0\x00', &(0x7f0000000500)={@empty, @multicast2, 0xa, 0x19}}) write(r10, &(0x7f00000004c0)="804ce8dd94c8685d3de1cecf30189f097d", 0x11) syz_clone3(&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) 620.579702ms ago: executing program 4 (id=4999): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x304}, "3cd0e4382df51a98", "faae69d2bd7a70984b34fb42f27e4009", "72c5d1ee", "a15ac3797aa7499d"}, 0x28) writev(r0, &(0x7f00000016c0)=[{&(0x7f00000006c0)='X', 0x1}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000340)=@ccm_128={{0x304}, "c321b200005d3b00", "683cbada91b4cfb57300", "78a74758", "2fec5a5fce9bea8e"}, 0x28) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000001700)=""/4096, 0x1000}], 0x1}, 0x120) 571.858602ms ago: executing program 4 (id=5000): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001480)=ANY=[@ANYBLOB="1c0000003e000701fcfffffffe9bdf25065cf6f955"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x3, 0x2c) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x550, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x480, 0x238, 0x238, 0x480, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x338, 0x3a0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [], 0x2, [], 0x0, 0x4}}, @common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x2, 0x6, 0x5}, {0x4, 0x2, 0x6}, 0x1, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r6) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r7, 0xffffffff) r8 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x80000213, 0x0, r6}, &(0x7f0000000380)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000003c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r8, 0x27e2, 0x0, 0x0, 0x0, 0x0) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16, @ANYBLOB="dc58336a4b9442803c68761a07b048998b09bc1b5107ce211bd7e58ee8673d866eb707d1b808b776ee06cc4dce53bde20c73afc376fe7043d978857dd13c55759c263a4b5f6e4504af674807f4ea5abd8e49ff3ef831349f1aa3175ed4ed55fca47549b2e9d31c5d94ca843034c333d4c5713fd0848e9d27e076c5a182cb495b89e91e76b031f198fe13ecf26abe", @ANYRESHEX=0x0, @ANYBLOB="c21a7e899b86b01f564c048b402d2b0202883dbc5fb01c71010e5a50ba157889b6dca4fbb0997bff4bb902f35d4184620d874676e1c20d495e4fd28b3b445b8ea5b087fa173e5353f8925297f09ff4397d6257cc20c700b03b30bc04a596b894b581717836f690b267c52376490153a549130767075006f4e08b968c0a31835eedb0811010b034cde9fba8d21be778357dcee1dc6602becf81e9e86e8329353d042e80822ca71c1f108a49633b84a10a0ae5a76759c3599175d5c3c8050935555e", @ANYRES8, @ANYRES64, @ANYRESHEX=r0, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRES8=r0], 0x48) readlinkat(r6, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=""/78, 0x4e) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000c50000", @ANYRES32=r11, @ANYRESHEX=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r13 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r12}, 0x10) fcntl$getownex(r13, 0x10, &(0x7f00000000c0)) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r14 = socket$inet_dccp(0x2, 0x6, 0x0) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r15}, 0x18) setsockopt(r14, 0x10d, 0xf, &(0x7f00001c9fff)="03", 0x1) 518.883773ms ago: executing program 5 (id=5001): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0x28000400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ffea000020000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x24001100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)) futex(&(0x7f0000000040)=0x2, 0x8, 0x2, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100)=0x1, 0x2) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x0, 0x100c40, 0x5, 0x6, 0x2, 0x40, 0x3, 0x0, 0x1, 0x5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='mm_page_alloc\x00', r6}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x28, 0x71430, 0x0, 0x4, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x3}) close(r4) 517.756843ms ago: executing program 4 (id=5002): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r2, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r2, 0x6, &(0x7f0000000180)={0x1, 0x1, 0x400000200}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000089"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x2}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) write$selinux_validatetrans(r0, 0x0, 0x79) r7 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0 [ 331.208625][T14544] __dump_stack+0x1d/0x30 [ 331.208651][T14544] dump_stack_lvl+0xe8/0x140 [ 331.208721][T14544] dump_stack+0x15/0x1b [ 331.208741][T14544] dump_header+0x81/0x220 [ 331.208839][T14544] oom_kill_process+0x334/0x3f0 [ 331.208865][T14544] out_of_memory+0x979/0xb80 [ 331.208889][T14544] ? css_next_descendant_pre+0x138/0x160 [ 331.208959][T14544] mem_cgroup_out_of_memory+0x13d/0x190 [ 331.208994][T14544] try_charge_memcg+0x5e2/0x870 [ 331.209031][T14544] charge_memcg+0x51/0xc0 [ 331.209054][T14544] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 331.209089][T14544] __read_swap_cache_async+0x1df/0x350 [ 331.209115][T14544] swap_cluster_readahead+0x277/0x3e0 [ 331.209144][T14544] swapin_readahead+0xde/0x6f0 [ 331.209167][T14544] ? __filemap_get_folio+0x49f/0x650 [ 331.209209][T14544] ? swap_cache_get_folio+0x77/0x200 [ 331.209299][T14544] do_swap_page+0x301/0x2460 [ 331.209327][T14544] ? _raw_spin_unlock+0x26/0x50 [ 331.209354][T14544] ? finish_task_switch+0xad/0x2b0 [ 331.209376][T14544] ? __pfx_default_wake_function+0x10/0x10 [ 331.209402][T14544] handle_mm_fault+0xb60/0x2ae0 [ 331.209441][T14544] ? mas_walk+0xf2/0x120 [ 331.209496][T14544] do_user_addr_fault+0x636/0x1090 [ 331.209527][T14544] ? switch_fpu_return+0xe/0x20 [ 331.209556][T14544] exc_page_fault+0x54/0xc0 [ 331.209591][T14544] asm_exc_page_fault+0x26/0x30 [ 331.209636][T14544] RIP: 0033:0x7fe0d89611e5 [ 331.209652][T14544] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 5e 33 1c 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 331.209670][T14544] RSP: 002b:00007ffc0f385088 EFLAGS: 00010246 [ 331.209686][T14544] RAX: 0000000000000000 RBX: 00000000000001de RCX: 00007fe0d89611e3 [ 331.209698][T14544] RDX: 00007ffc0f3850a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 331.209710][T14544] RBP: 00007ffc0f38510c R08: 000000000708a673 R09: 0000000000000000 [ 331.209722][T14544] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 331.209734][T14544] R13: 00000000000927c0 R14: 0000000000050b3b R15: 00007ffc0f385160 [ 331.209828][T14544] [ 331.209836][T14544] memory: usage 307200kB, limit 307200kB, failcnt 219 [ 331.324162][T17423] SELinux: failed to load policy [ 331.328580][T14544] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 331.328598][T14544] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 331.328610][T14544] Memory cgroup stats for /syz8: [ 331.329168][T14544] cache 0 [ 331.476191][T14544] rss 0 [ 331.478995][T14544] shmem 0 [ 331.481946][T14544] mapped_file 1576960 [ 331.485945][T14544] dirty 0 [ 331.488873][T14544] writeback 0 [ 331.492165][T14544] workingset_refault_anon 374 [ 331.496842][T14544] workingset_refault_file 2 [ 331.501423][T14544] swap 188416 [ 331.504732][T14544] swapcached 28672 [ 331.508461][T14544] pgpgin 61502 [ 331.511869][T14544] pgpgout 61494 [ 331.515323][T14544] pgfault 81104 [ 331.518774][T14544] pgmajfault 166 [ 331.522463][T14544] inactive_anon 28672 [ 331.526437][T14544] active_anon 0 [ 331.529892][T14544] inactive_file 4096 [ 331.533845][T14544] active_file 0 [ 331.537298][T14544] unevictable 0 [ 331.540767][T14544] hierarchical_memory_limit 314572800 [ 331.546148][T14544] hierarchical_memsw_limit 9223372036854771712 [ 331.552321][T14544] total_cache 0 [ 331.555773][T14544] total_rss 0 [ 331.559091][T14544] total_shmem 0 [ 331.562712][T14544] total_mapped_file 1576960 [ 331.567236][T14544] total_dirty 0 [ 331.570710][T14544] total_writeback 0 [ 331.570722][T14544] total_workingset_refault_anon 374 [ 331.570734][T14544] total_workingset_refault_file 2 [ 331.570744][T14544] total_swap 188416 [ 331.588670][T14544] total_swapcached 28672 [ 331.592982][T14544] total_pgpgin 61502 [ 331.597004][T14544] total_pgpgout 61494 [ 331.601245][T14544] total_pgfault 81104 [ 331.605281][T14544] total_pgmajfault 166 [ 331.609348][T14544] total_inactive_anon 28672 [ 331.614021][T14544] total_active_anon 0 [ 331.618188][T14544] total_inactive_file 4096 [ 331.622671][T14544] total_active_file 0 [ 331.626708][T14544] total_unevictable 0 [ 331.630731][T14544] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.4470,pid=17397,uid=0 [ 331.645504][T14544] Memory cgroup out of memory: Killed process 17397 (syz.8.4470) total-vm:95288kB, anon-rss:1064kB, file-rss:23980kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 331.732214][T17433] bond1: entered promiscuous mode [ 331.737385][T17433] bond1: entered allmulticast mode [ 331.744544][T17433] 8021q: adding VLAN 0 to HW filter on device bond1 [ 331.754886][T17433] bond1 (unregistering): Released all slaves [ 331.886315][T17437] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4482'. [ 331.950870][T17440] loop0: detected capacity change from 0 to 164 [ 331.961434][T17440] syz.0.4483: attempt to access beyond end of device [ 331.961434][T17440] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 331.975492][T17440] syz.0.4483: attempt to access beyond end of device [ 331.975492][T17440] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 332.100426][T17448] loop0: detected capacity change from 0 to 512 [ 332.109547][T17448] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 332.193241][T17451] 9pnet_fd: Insufficient options for proto=fd [ 332.223279][T17448] EXT4-fs (loop0): 1 truncate cleaned up [ 332.236449][T17448] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.268536][T17454] xt_CT: No such helper "pptp" [ 332.464436][T17462] loop8: detected capacity change from 0 to 164 [ 332.474438][T17462] syz.8.4490: attempt to access beyond end of device [ 332.474438][T17462] loop8: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 332.495694][T17462] syz.8.4490: attempt to access beyond end of device [ 332.495694][T17462] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 332.583603][T17468] xt_CT: No such helper "pptp" [ 332.602576][T17471] loop4: detected capacity change from 0 to 164 [ 332.636979][T17476] siw: device registration error -23 [ 332.664152][T17471] syz.4.4493: attempt to access beyond end of device [ 332.664152][T17471] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 332.700087][T17471] syz.4.4493: attempt to access beyond end of device [ 332.700087][T17471] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 332.911855][T17493] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 333.146399][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 333.146418][ T29] audit: type=1326 audit(1745977888.466:12305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17484 comm="syz.9.4498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d34be969 code=0x7ffc0000 [ 333.176273][ T29] audit: type=1326 audit(1745977888.466:12306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17484 comm="syz.9.4498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d34be969 code=0x7ffc0000 [ 333.199892][ T29] audit: type=1326 audit(1745977888.466:12307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17484 comm="syz.9.4498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f06d34be969 code=0x7ffc0000 [ 333.223458][ T29] audit: type=1326 audit(1745977888.466:12308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17484 comm="syz.9.4498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d34be969 code=0x7ffc0000 [ 333.247096][ T29] audit: type=1326 audit(1745977888.466:12309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17484 comm="syz.9.4498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d34be969 code=0x7ffc0000 [ 333.270708][ T29] audit: type=1326 audit(1745977888.466:12310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17484 comm="syz.9.4498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f06d34be969 code=0x7ffc0000 [ 333.294296][ T29] audit: type=1326 audit(1745977888.466:12311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17484 comm="syz.9.4498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d34be969 code=0x7ffc0000 [ 333.317970][ T29] audit: type=1326 audit(1745977888.466:12312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17484 comm="syz.9.4498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d34be969 code=0x7ffc0000 [ 333.341588][ T29] audit: type=1326 audit(1745977888.466:12313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17484 comm="syz.9.4498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f06d34be969 code=0x7ffc0000 [ 333.383314][T17494] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 333.406448][T17494] SELinux: failed to load policy [ 333.414749][ T29] audit: type=1326 audit(1745977888.816:12314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17484 comm="syz.9.4498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d34be969 code=0x7ffc0000 [ 333.415655][T16573] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.540722][T17499] xt_CT: No such helper "pptp" [ 333.581397][T17502] loop0: detected capacity change from 0 to 1024 [ 333.588454][T17502] EXT4-fs: Ignoring removed nobh option [ 333.596187][T17502] ext2: Unknown parameter 'dont_hash' [ 333.645010][ T8433] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 333.763361][T17513] SELinux: syz.5.4506 (17513) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 333.830013][T17519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.845751][T17519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.859113][T17520] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4507'. [ 333.893486][T17522] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4504'. [ 333.946042][T17523] loop4: detected capacity change from 0 to 512 [ 334.004285][T17523] EXT4-fs (loop4): too many log groups per flexible block group [ 334.012042][T17523] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 334.018920][T17523] EXT4-fs (loop4): mount failed [ 334.050889][T17527] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4508'. [ 334.568990][T17532] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4509'. [ 334.625786][T17536] loop0: detected capacity change from 0 to 164 [ 334.644287][T17536] syz.0.4511: attempt to access beyond end of device [ 334.644287][T17536] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 334.662511][T17536] syz.0.4511: attempt to access beyond end of device [ 334.662511][T17536] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 334.715281][T17538] loop0: detected capacity change from 0 to 164 [ 334.723771][T17540] loop9: detected capacity change from 0 to 1024 [ 334.730559][T17540] EXT4-fs: Ignoring removed nobh option [ 334.743789][T17538] syz.0.4512: attempt to access beyond end of device [ 334.743789][T17538] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 334.774116][T17540] ext2: Unknown parameter 'dont_hash' [ 334.789593][T17538] syz.0.4512: attempt to access beyond end of device [ 334.789593][T17538] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 335.203463][ T8374] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 335.480207][T17557] SELinux: failed to load policy [ 335.716335][T17565] netlink: 72 bytes leftover after parsing attributes in process `syz.9.4520'. [ 335.818006][T17568] loop9: detected capacity change from 0 to 512 [ 335.856210][T17568] EXT4-fs (loop9): too many log groups per flexible block group [ 335.864021][T17568] EXT4-fs (loop9): failed to initialize mballoc (-12) [ 335.910979][T17574] loop4: detected capacity change from 0 to 164 [ 335.926082][T17575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4522'. [ 335.944232][T17576] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4521'. [ 335.953986][T17568] EXT4-fs (loop9): mount failed [ 336.072297][T17578] loop4: detected capacity change from 0 to 164 [ 336.152123][T17580] xt_CT: No such helper "pptp" [ 336.362174][T17590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4526'. [ 336.432612][T17593] loop9: detected capacity change from 0 to 512 [ 336.460073][T17593] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 336.485858][T17593] EXT4-fs (loop9): 1 truncate cleaned up [ 336.492401][T17593] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.008241][T17605] siw: device registration error -23 [ 337.152309][T17607] netlink: 'syz.5.4533': attribute type 1 has an invalid length. [ 337.280711][T17614] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 337.296352][T17615] loop5: detected capacity change from 0 to 1024 [ 337.305295][T17615] EXT4-fs: Ignoring removed nobh option [ 337.310938][T17615] EXT4-fs: Ignoring removed nobh option [ 337.343795][T17615] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 337.357979][T17615] EXT4-fs error (device loop5): ext4_get_journal_inode:5798: comm syz.5.4533: inode #4294967295: comm syz.5.4533: iget: illegal inode # [ 337.404470][T17615] EXT4-fs (loop5): no journal found [ 337.409743][T17615] EXT4-fs (loop5): can't get journal size [ 337.427085][T17615] EXT4-fs (loop5): failed to initialize system zone (-22) [ 337.445031][T17615] EXT4-fs (loop5): mount failed [ 337.540508][T17621] loop0: detected capacity change from 0 to 512 [ 337.545798][T17622] hub 9-0:1.0: USB hub found [ 337.555285][T17622] hub 9-0:1.0: 8 ports detected [ 337.560435][T17621] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 337.611541][T17621] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.4537: invalid indirect mapped block 4294967295 (level 1) [ 337.645781][T17626] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4538'. [ 337.659710][T17621] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.4537: invalid indirect mapped block 4294967295 (level 1) [ 337.729256][T17621] EXT4-fs (loop0): 2 truncates cleaned up [ 337.749141][T17627] loop4: detected capacity change from 0 to 512 [ 337.756891][T17621] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.801323][T17627] EXT4-fs (loop4): too many log groups per flexible block group [ 337.809110][T17627] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 337.825097][T17621] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.4537: bg 0: block 5: invalid block bitmap [ 337.839917][T17627] EXT4-fs (loop4): mount failed [ 337.903690][T16573] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.947271][T17632] ALSA: seq fatal error: cannot create timer (-22) [ 338.088658][T17634] hub 9-0:1.0: USB hub found [ 338.100488][T17634] hub 9-0:1.0: 8 ports detected [ 338.290207][T17641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4541'. [ 338.299371][T17639] xt_CT: No such helper "pptp" [ 338.351601][T17643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.360200][T17643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.447613][T17648] loop5: detected capacity change from 0 to 512 [ 338.456497][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 338.456515][ T29] audit: type=1326 audit(1745977893.946:12428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17645 comm="syz.8.4545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d892e969 code=0x7ffc0000 [ 338.463902][T17648] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 338.490604][ T29] audit: type=1326 audit(1745977893.946:12429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17645 comm="syz.8.4545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d892e969 code=0x7ffc0000 [ 338.515662][T17648] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.4544: invalid indirect mapped block 4294967295 (level 1) [ 338.518518][ T29] audit: type=1326 audit(1745977893.946:12430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17645 comm="syz.8.4545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0d892e969 code=0x7ffc0000 [ 338.534436][T17648] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.4544: invalid indirect mapped block 4294967295 (level 1) [ 338.556792][ T29] audit: type=1326 audit(1745977893.946:12431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17645 comm="syz.8.4545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d892e969 code=0x7ffc0000 [ 338.594663][ T29] audit: type=1326 audit(1745977893.946:12432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17645 comm="syz.8.4545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0d892e969 code=0x7ffc0000 [ 338.595534][T17648] EXT4-fs (loop5): 2 truncates cleaned up [ 338.618287][ T29] audit: type=1326 audit(1745977893.946:12433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17645 comm="syz.8.4545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d892e969 code=0x7ffc0000 [ 338.618336][ T29] audit: type=1326 audit(1745977893.946:12434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17645 comm="syz.8.4545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0d892e969 code=0x7ffc0000 [ 338.649619][T17648] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.671219][ T29] audit: type=1326 audit(1745977893.946:12435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17645 comm="syz.8.4545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d892e969 code=0x7ffc0000 [ 338.707406][ T29] audit: type=1326 audit(1745977893.946:12436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17645 comm="syz.8.4545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe0d892e969 code=0x7ffc0000 [ 338.718057][T17648] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.4544: bg 0: block 5: invalid block bitmap [ 338.730990][ T29] audit: type=1326 audit(1745977893.946:12437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17645 comm="syz.8.4545" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe0d892e969 code=0x0 [ 338.769779][T13535] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.776540][T15709] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.799918][T17655] loop5: detected capacity change from 0 to 512 [ 338.915154][T17655] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 338.929353][T17655] program syz.5.4547 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 339.090582][T17666] hub 9-0:1.0: USB hub found [ 339.095587][T17666] hub 9-0:1.0: 8 ports detected [ 339.102638][T13535] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 339.375483][T17673] hub 9-0:1.0: USB hub found [ 339.380280][T17673] hub 9-0:1.0: 8 ports detected [ 339.439315][T17675] loop0: detected capacity change from 0 to 512 [ 339.449038][T17675] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 339.464267][T17675] EXT4-fs (loop0): orphan cleanup on readonly fs [ 339.476654][T17675] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4553: bg 0: block 248: padding at end of block bitmap is not set [ 339.499818][T17675] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.4553: Failed to acquire dquot type 1 [ 339.514397][T17675] EXT4-fs (loop0): 1 truncate cleaned up [ 339.521159][T17675] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 339.536979][T17677] loop5: detected capacity change from 0 to 164 [ 339.543084][T17675] smc: net device bond0 applied user defined pnetid SYZ2 [ 339.550827][ T8433] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 339.552878][T17675] smc: net device bond0 erased user defined pnetid SYZ2 [ 339.601260][T17675] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 339.643156][T17682] siw: device registration error -23 [ 339.658225][T16573] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.763665][T17689] loop8: detected capacity change from 0 to 512 [ 339.772303][T17689] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 339.814788][T17689] EXT4-fs (loop8): 1 truncate cleaned up [ 339.836350][T17695] loop0: detected capacity change from 0 to 164 [ 339.846188][T17689] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.878555][T17696] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 339.922504][T17695] bio_check_eod: 4 callbacks suppressed [ 339.922523][T17695] syz.0.4560: attempt to access beyond end of device [ 339.922523][T17695] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 339.943924][T17695] syz.0.4560: attempt to access beyond end of device [ 339.943924][T17695] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 340.070793][T17703] hub 9-0:1.0: USB hub found [ 340.081131][T17703] hub 9-0:1.0: 8 ports detected [ 340.259510][T17709] loop9: detected capacity change from 0 to 164 [ 340.409910][T17713] SELinux: failed to load policy [ 340.859675][T17728] __nla_validate_parse: 1 callbacks suppressed [ 340.859696][T17728] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4569'. [ 340.965777][ T8373] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 341.401056][T17734] hub 9-0:1.0: USB hub found [ 341.407375][T17734] hub 9-0:1.0: 8 ports detected [ 341.556321][T17743] loop9: detected capacity change from 0 to 164 [ 341.569935][T17743] syz.9.4575: attempt to access beyond end of device [ 341.569935][T17743] loop9: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 341.604991][T17743] syz.9.4575: attempt to access beyond end of device [ 341.604991][T17743] loop9: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 341.609476][T17745] xt_CT: No such helper "pptp" [ 341.737817][T17748] loop0: detected capacity change from 0 to 164 [ 341.786764][T17758] loop4: detected capacity change from 0 to 512 [ 341.798348][T17756] SELinux: syz.5.4580 (17756) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 341.807598][T17758] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 341.825815][T17760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.844026][T14544] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.846279][T17760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.863804][T17758] EXT4-fs (loop4): 1 truncate cleaned up [ 341.869888][T17758] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.043200][T17768] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4581'. [ 342.333179][T17771] netlink: 64 bytes leftover after parsing attributes in process `syz.9.4584'. [ 342.504287][T17773] SELinux: failed to load policy [ 342.553741][T17780] loop9: detected capacity change from 0 to 512 [ 342.624153][T17780] EXT4-fs (loop9): too many log groups per flexible block group [ 342.631988][T17780] EXT4-fs (loop9): failed to initialize mballoc (-12) [ 342.722822][T17780] EXT4-fs (loop9): mount failed [ 342.943891][T17793] loop8: detected capacity change from 0 to 512 [ 342.957117][T17793] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 342.979158][T17793] EXT4-fs (loop8): 1 truncate cleaned up [ 342.997409][T17793] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.045160][T17794] xt_CT: No such helper "pptp" [ 343.288563][T17801] loop5: detected capacity change from 0 to 512 [ 343.337118][T17801] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 343.381195][T17801] program syz.5.4590 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 343.474461][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 343.474477][ T29] audit: type=1326 audit(1745977898.966:12527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17804 comm="syz.9.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d34be969 code=0x7ffc0000 [ 343.504283][ T29] audit: type=1326 audit(1745977898.966:12528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17804 comm="syz.9.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d34be969 code=0x7ffc0000 [ 343.527901][ T29] audit: type=1326 audit(1745977898.966:12529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17804 comm="syz.9.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f06d34be969 code=0x7ffc0000 [ 343.532641][T13535] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 343.551483][ T29] audit: type=1326 audit(1745977898.966:12530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17804 comm="syz.9.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d34be969 code=0x7ffc0000 [ 343.551550][ T29] audit: type=1326 audit(1745977898.966:12531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17804 comm="syz.9.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f06d34be969 code=0x7ffc0000 [ 343.607722][ T29] audit: type=1326 audit(1745977898.966:12532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17804 comm="syz.9.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d34be969 code=0x7ffc0000 [ 343.608371][T13164] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.758350][T17811] loop9: detected capacity change from 0 to 164 [ 343.768586][T17808] loop5: detected capacity change from 0 to 164 [ 343.800790][T17811] syz.9.4594: attempt to access beyond end of device [ 343.800790][T17811] loop9: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 343.815231][T17811] syz.9.4594: attempt to access beyond end of device [ 343.815231][T17811] loop9: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 343.856048][T17813] hub 9-0:1.0: USB hub found [ 343.871813][T17815] SELinux: syz.4.4593 (17815) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 343.900847][T17813] hub 9-0:1.0: 8 ports detected [ 344.691295][ T8430] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 345.087790][T14544] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.148182][T17840] hub 9-0:1.0: USB hub found [ 345.159721][T17838] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4602'. [ 345.172811][T17840] hub 9-0:1.0: 8 ports detected [ 345.230729][ T29] audit: type=1326 audit(1745977900.726:12533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17841 comm="syz.9.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d34be969 code=0x7ffc0000 [ 345.261273][ T29] audit: type=1326 audit(1745977900.746:12534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17841 comm="syz.9.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f06d34be969 code=0x7ffc0000 [ 345.285035][ T29] audit: type=1326 audit(1745977900.746:12535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17841 comm="syz.9.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d34be969 code=0x7ffc0000 [ 345.286915][T17846] loop5: detected capacity change from 0 to 512 [ 345.308710][ T29] audit: type=1326 audit(1745977900.746:12536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17841 comm="syz.9.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f06d34be969 code=0x7ffc0000 [ 345.364724][T17848] loop8: detected capacity change from 0 to 512 [ 345.368515][T17843] tmpfs: Unsupported parameter 'huge' [ 345.411410][T17848] EXT4-fs (loop8): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 345.479289][T17846] EXT4-fs (loop5): too many log groups per flexible block group [ 345.487057][T17846] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 345.497768][T17850] xt_CT: No such helper "pptp" [ 345.512516][T17848] program syz.8.4603 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 345.563827][T17846] EXT4-fs (loop5): mount failed [ 345.607182][T17866] ALSA: seq fatal error: cannot create timer (-22) [ 345.614320][T14544] EXT4-fs (loop8): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 345.785320][T17874] loop0: detected capacity change from 0 to 1024 [ 345.798468][T17876] hub 9-0:1.0: USB hub found [ 345.813663][T17876] hub 9-0:1.0: 8 ports detected [ 345.845743][T17874] EXT4-fs: Ignoring removed nobh option [ 345.868360][T17874] ext2: Unknown parameter 'dont_hash' [ 345.898107][T17882] loop8: detected capacity change from 0 to 164 [ 345.935774][T17882] syz.8.4615: attempt to access beyond end of device [ 345.935774][T17882] loop8: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 345.959909][T17882] syz.8.4615: attempt to access beyond end of device [ 345.959909][T17882] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 345.991189][T17887] hub 9-0:1.0: USB hub found [ 346.031930][T17885] bond1: entered promiscuous mode [ 346.037078][T17885] bond1: entered allmulticast mode [ 346.046415][T17887] hub 9-0:1.0: 8 ports detected [ 346.071093][T17890] netlink: 'syz.8.4619': attribute type 1 has an invalid length. [ 346.088857][T17885] 8021q: adding VLAN 0 to HW filter on device bond1 [ 346.128566][T17885] bond1 (unregistering): Released all slaves [ 346.154170][T17895] xt_CT: No such helper "pptp" [ 346.185376][T17897] loop8: detected capacity change from 0 to 1024 [ 346.209831][T17897] EXT4-fs: Ignoring removed nobh option [ 346.215538][T17897] EXT4-fs: Ignoring removed nobh option [ 346.254138][T17897] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 346.282596][T17903] xt_CT: No such helper "pptp" [ 346.314243][T17899] SELinux: failed to load policy [ 346.319928][T17897] EXT4-fs error (device loop8): ext4_get_journal_inode:5798: comm syz.8.4619: inode #4294967295: comm syz.8.4619: iget: illegal inode # [ 346.336786][T17897] EXT4-fs (loop8): no journal found [ 346.342076][T17897] EXT4-fs (loop8): can't get journal size [ 346.374636][T17897] EXT4-fs (loop8): failed to initialize system zone (-22) [ 346.382565][T17897] EXT4-fs (loop8): mount failed [ 346.562765][T17916] hub 9-0:1.0: USB hub found [ 346.580397][T17916] hub 9-0:1.0: 8 ports detected [ 346.591089][ T8433] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 346.593683][T17920] netlink: 'syz.5.4628': attribute type 1 has an invalid length. [ 346.616797][T17921] loop4: detected capacity change from 0 to 512 [ 346.623795][T17921] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 346.640907][T17921] EXT4-fs (loop4): 1 truncate cleaned up [ 346.649760][T17921] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.674550][T17926] loop5: detected capacity change from 0 to 1024 [ 346.698675][T17926] EXT4-fs: Ignoring removed nobh option [ 346.704432][T17926] EXT4-fs: Ignoring removed nobh option [ 346.758165][T17928] loop9: detected capacity change from 0 to 164 [ 346.776268][T17926] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 346.810559][T17926] EXT4-fs error (device loop5): ext4_get_journal_inode:5798: comm syz.5.4628: inode #4294967295: comm syz.5.4628: iget: illegal inode # [ 346.841083][T17928] syz.9.4630: attempt to access beyond end of device [ 346.841083][T17928] loop9: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 346.855377][T17926] EXT4-fs (loop5): no journal found [ 346.860650][T17926] EXT4-fs (loop5): can't get journal size [ 346.866105][T17928] syz.9.4630: attempt to access beyond end of device [ 346.866105][T17928] loop9: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 346.881190][T17926] EXT4-fs (loop5): failed to initialize system zone (-22) [ 346.910289][T17926] EXT4-fs (loop5): mount failed [ 346.976448][T17934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4631'. [ 347.091093][T17936] hub 9-0:1.0: USB hub found [ 347.100167][T17936] hub 9-0:1.0: 8 ports detected [ 347.161176][T17939] xt_CT: No such helper "pptp" [ 347.259612][T17943] loop9: detected capacity change from 0 to 164 [ 347.268444][T17943] syz.9.4634: attempt to access beyond end of device [ 347.268444][T17943] loop9: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 347.283350][T17943] syz.9.4634: attempt to access beyond end of device [ 347.283350][T17943] loop9: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 347.624121][T13164] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.664378][T17949] loop0: detected capacity change from 0 to 1024 [ 347.671245][T17949] EXT4-fs: Ignoring removed nobh option [ 347.676941][T17949] ext2: Unknown parameter 'dont_hash' [ 347.714835][T17946] hub 9-0:1.0: USB hub found [ 347.740668][T17946] hub 9-0:1.0: 8 ports detected [ 347.823709][T17958] loop8: detected capacity change from 0 to 1024 [ 347.832556][T17958] EXT4-fs: Ignoring removed nobh option [ 347.845709][T17958] ext2: Unknown parameter 'dont_hash' [ 347.890028][T17961] xt_CT: No such helper "pptp" [ 347.958960][T17966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4637'. [ 348.003166][T17967] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4642'. [ 348.173408][T17973] bond1: entered promiscuous mode [ 348.178590][T17973] bond1: entered allmulticast mode [ 348.190806][T17973] 8021q: adding VLAN 0 to HW filter on device bond1 [ 348.205106][T17973] bond1 (unregistering): Released all slaves [ 348.214466][T17976] netlink: 'syz.9.4645': attribute type 1 has an invalid length. [ 348.283274][T17977] loop9: detected capacity change from 0 to 1024 [ 348.290299][T17977] EXT4-fs: Ignoring removed nobh option [ 348.295973][T17977] EXT4-fs: Ignoring removed nobh option [ 348.303715][T17977] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 348.313889][T17977] EXT4-fs error (device loop9): ext4_get_journal_inode:5798: comm syz.9.4645: inode #4294967295: comm syz.9.4645: iget: illegal inode # [ 348.328345][T17977] EXT4-fs (loop9): no journal found [ 348.333680][T17977] EXT4-fs (loop9): can't get journal size [ 348.352018][T17977] EXT4-fs (loop9): failed to initialize system zone (-22) [ 348.359239][T17977] EXT4-fs (loop9): mount failed [ 348.537100][T17980] loop5: detected capacity change from 0 to 164 [ 348.546570][T17980] syz.5.4646: attempt to access beyond end of device [ 348.546570][T17980] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 348.570629][T17980] syz.5.4646: attempt to access beyond end of device [ 348.570629][T17980] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 348.684594][T17986] xt_CT: No such helper "pptp" [ 348.690797][T17989] loop4: detected capacity change from 0 to 512 [ 348.708332][T17989] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 348.723839][T17989] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.4650: invalid indirect mapped block 4294967295 (level 1) [ 348.769478][T17989] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.4650: invalid indirect mapped block 4294967295 (level 1) [ 348.828866][T17991] hub 9-0:1.0: USB hub found [ 348.839390][T17989] EXT4-fs (loop4): 2 truncates cleaned up [ 348.853605][T17991] hub 9-0:1.0: 8 ports detected [ 348.864148][T17989] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.904649][T17995] hub 9-0:1.0: USB hub found [ 348.911130][T17989] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.4650: bg 0: block 5: invalid block bitmap [ 348.928887][T17995] hub 9-0:1.0: 8 ports detected [ 348.986961][T13164] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.996976][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 348.996993][ T29] audit: type=1326 audit(1745977904.486:12610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17999 comm="syz.8.4654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d892e969 code=0x7ffc0000 [ 349.054585][ T29] audit: type=1326 audit(1745977904.486:12611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17999 comm="syz.8.4654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7fe0d892e969 code=0x7ffc0000 [ 349.054689][ T29] audit: type=1326 audit(1745977904.486:12612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17999 comm="syz.8.4654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d892e969 code=0x7ffc0000 [ 349.054820][ T29] audit: type=1326 audit(1745977904.486:12613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17999 comm="syz.8.4654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe0d892e969 code=0x7ffc0000 [ 349.054880][ T29] audit: type=1326 audit(1745977904.486:12614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17999 comm="syz.8.4654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d892e969 code=0x7ffc0000 [ 349.177750][T18009] loop8: detected capacity change from 0 to 1024 [ 349.177995][T18009] EXT4-fs: Ignoring removed nobh option [ 349.178021][T18009] ext2: Unknown parameter 'dont_hash' [ 349.204776][ T29] audit: type=1326 audit(1745977904.676:12615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18002 comm="syz.5.4656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a7cce969 code=0x7ffc0000 [ 349.204889][ T29] audit: type=1326 audit(1745977904.676:12616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18002 comm="syz.5.4656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35a7cce969 code=0x7ffc0000 [ 349.205032][ T29] audit: type=1326 audit(1745977904.676:12617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18002 comm="syz.5.4656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a7cce969 code=0x7ffc0000 [ 349.205125][ T29] audit: type=1326 audit(1745977904.676:12618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18002 comm="syz.5.4656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35a7cce969 code=0x7ffc0000 [ 349.205228][ T29] audit: type=1326 audit(1745977904.676:12619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18002 comm="syz.5.4656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a7cce969 code=0x7ffc0000 [ 349.371785][T18018] SELinux: syz.9.4658 (18018) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 349.377349][T18019] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4656'. [ 349.475121][T18023] loop4: detected capacity change from 0 to 512 [ 349.480374][T18023] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 349.496084][T18023] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.4659: invalid indirect mapped block 4294967295 (level 1) [ 349.503037][T18023] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.4659: invalid indirect mapped block 4294967295 (level 1) [ 349.503341][T18023] EXT4-fs (loop4): 2 truncates cleaned up [ 349.503693][T18023] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.508490][T18023] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.4659: bg 0: block 5: invalid block bitmap [ 349.636772][T18028] xt_CT: No such helper "pptp" [ 349.659820][T18025] loop9: detected capacity change from 0 to 164 [ 349.699618][T13164] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.713962][T18034] loop9: detected capacity change from 0 to 164 [ 349.736595][T18036] hub 9-0:1.0: USB hub found [ 349.741466][T18034] syz.9.4664: attempt to access beyond end of device [ 349.741466][T18034] loop9: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 349.741950][T18036] hub 9-0:1.0: 8 ports detected [ 349.760985][T18034] syz.9.4664: attempt to access beyond end of device [ 349.760985][T18034] loop9: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 349.800796][ T8374] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 349.873299][T18041] loop5: detected capacity change from 0 to 512 [ 349.880270][T18041] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 349.921900][T18041] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.4666: invalid indirect mapped block 4294967295 (level 1) [ 349.928694][T18042] bond1: entered promiscuous mode [ 349.941004][T18042] bond1: entered allmulticast mode [ 349.941660][T18041] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.4666: invalid indirect mapped block 4294967295 (level 1) [ 349.946547][T18042] 8021q: adding VLAN 0 to HW filter on device bond1 [ 349.962681][T18041] EXT4-fs (loop5): 2 truncates cleaned up [ 349.973209][T18041] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.988663][T18042] bond1 (unregistering): Released all slaves [ 349.998934][T18041] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.4666: bg 0: block 5: invalid block bitmap [ 350.044594][T13535] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.060172][T18049] ALSA: seq fatal error: cannot create timer (-22) [ 350.079840][T18051] netlink: 'syz.5.4669': attribute type 1 has an invalid length. [ 350.151727][T18055] loop5: detected capacity change from 0 to 1024 [ 350.160984][T18055] EXT4-fs: Ignoring removed nobh option [ 350.166674][T18055] EXT4-fs: Ignoring removed nobh option [ 350.211646][T18055] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 350.311570][T18055] EXT4-fs error (device loop5): ext4_get_journal_inode:5798: comm syz.5.4669: inode #4294967295: comm syz.5.4669: iget: illegal inode # [ 350.341017][T18055] EXT4-fs (loop5): no journal found [ 350.346292][T18055] EXT4-fs (loop5): can't get journal size [ 350.415520][T18064] xt_CT: No such helper "pptp" [ 350.439973][T18055] EXT4-fs (loop5): failed to initialize system zone (-22) [ 350.451211][T18055] EXT4-fs (loop5): mount failed [ 350.542312][T18068] loop8: detected capacity change from 0 to 164 [ 350.602045][T18072] siw: device registration error -23 [ 350.725276][T18074] SELinux: syz.0.4678 (18074) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 350.741431][T18078] hub 9-0:1.0: USB hub found [ 350.758000][T18078] hub 9-0:1.0: 8 ports detected [ 350.829929][T18084] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 350.847324][T18083] loop9: detected capacity change from 0 to 512 [ 350.864305][T18083] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 350.888269][T18083] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.4680: invalid indirect mapped block 4294967295 (level 1) [ 350.911910][T18083] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.4680: invalid indirect mapped block 4294967295 (level 1) [ 350.971424][T18083] EXT4-fs (loop9): 2 truncates cleaned up [ 350.977772][T18083] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.018936][T18083] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.4680: bg 0: block 5: invalid block bitmap [ 351.064947][T18089] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4682'. [ 351.083344][T15709] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.215135][T18095] loop0: detected capacity change from 0 to 512 [ 351.244044][T18095] EXT4-fs (loop0): too many log groups per flexible block group [ 351.252006][T18095] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 351.279191][T18095] EXT4-fs (loop0): mount failed [ 351.289759][T18098] xt_CT: No such helper "pptp" [ 351.306623][T18103] loop5: detected capacity change from 0 to 1024 [ 351.313955][T18103] EXT4-fs: Ignoring removed nobh option [ 351.319877][T18103] ext2: Unknown parameter 'dont_hash' [ 351.800306][ T8376] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 352.263803][T18126] loop4: detected capacity change from 0 to 512 [ 352.288769][T18126] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 352.321821][T18126] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.4693: invalid indirect mapped block 4294967295 (level 1) [ 352.397924][T18126] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.4693: invalid indirect mapped block 4294967295 (level 1) [ 352.465125][T18126] EXT4-fs (loop4): 2 truncates cleaned up [ 352.472050][T18126] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.501486][T18126] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.4693: bg 0: block 5: invalid block bitmap [ 352.526123][T13164] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.825551][T18158] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4702'. [ 353.025855][T18153] loop5: detected capacity change from 0 to 512 [ 353.034868][T18153] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 353.045935][T18153] EXT4-fs (loop5): 1 truncate cleaned up [ 353.052129][T18153] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.065140][T18153] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.079650][T18153] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 353.089909][T18153] SELinux: failed to load policy [ 353.228431][T18168] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4706'. [ 353.340116][T18174] hub 9-0:1.0: USB hub found [ 353.345521][T18174] hub 9-0:1.0: 8 ports detected [ 353.460898][T18178] bond1: entered promiscuous mode [ 353.465978][T18178] bond1: entered allmulticast mode [ 353.471411][T18178] 8021q: adding VLAN 0 to HW filter on device bond1 [ 353.481948][T18178] bond1 (unregistering): Released all slaves [ 354.032586][T18196] SELinux: failed to load policy [ 354.136179][T18205] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4714'. [ 354.229110][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 354.229146][ T29] audit: type=1326 audit(1745977909.716:12753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18209 comm="syz.5.4722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a7cce969 code=0x7ffc0000 [ 354.264667][ T29] audit: type=1326 audit(1745977909.716:12754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18209 comm="syz.5.4722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a7cce969 code=0x7ffc0000 [ 354.288547][ T29] audit: type=1326 audit(1745977909.716:12755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18209 comm="syz.5.4722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35a7cce969 code=0x7ffc0000 [ 354.312197][ T29] audit: type=1326 audit(1745977909.716:12756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18209 comm="syz.5.4722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a7cce969 code=0x7ffc0000 [ 354.335828][ T29] audit: type=1326 audit(1745977909.716:12757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18209 comm="syz.5.4722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35a7cce969 code=0x7ffc0000 [ 354.359498][ T29] audit: type=1326 audit(1745977909.716:12758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18209 comm="syz.5.4722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a7cce969 code=0x7ffc0000 [ 354.383335][ T29] audit: type=1326 audit(1745977909.716:12759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18209 comm="syz.5.4722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35a7cce969 code=0x7ffc0000 [ 354.407089][ T29] audit: type=1326 audit(1745977909.716:12760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18209 comm="syz.5.4722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a7cce969 code=0x7ffc0000 [ 354.430688][ T29] audit: type=1326 audit(1745977909.716:12761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18209 comm="syz.5.4722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f35a7cce969 code=0x7ffc0000 [ 354.445061][T18217] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4722'. [ 354.454256][ T29] audit: type=1326 audit(1745977909.726:12762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18209 comm="syz.5.4722" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35a7cce969 code=0x0 [ 354.585050][T18219] siw: device registration error -23 [ 354.653584][T18224] loop9: detected capacity change from 0 to 512 [ 354.680579][T18224] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 354.716411][T18224] EXT4-fs (loop9): 1 truncate cleaned up [ 354.723229][T18224] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.790427][T18228] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 354.883676][T18233] netlink: 'syz.4.4728': attribute type 1 has an invalid length. [ 354.913445][ T8374] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 354.949296][T18235] hub 9-0:1.0: USB hub found [ 354.955281][T18235] hub 9-0:1.0: 8 ports detected [ 354.989610][T18236] loop4: detected capacity change from 0 to 1024 [ 355.019127][T18236] EXT4-fs: Ignoring removed nobh option [ 355.024841][T18236] EXT4-fs: Ignoring removed nobh option [ 355.039533][T18238] xt_CT: No such helper "pptp" [ 355.044686][T18236] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 355.072664][T18236] EXT4-fs error (device loop4): ext4_get_journal_inode:5798: comm syz.4.4728: inode #4294967295: comm syz.4.4728: iget: illegal inode # [ 355.103610][T18236] EXT4-fs (loop4): no journal found [ 355.108877][T18236] EXT4-fs (loop4): can't get journal size [ 355.140927][T18236] EXT4-fs (loop4): failed to initialize system zone (-22) [ 355.156342][T18236] EXT4-fs (loop4): mount failed [ 355.193796][T18251] netlink: 'syz.5.4734': attribute type 1 has an invalid length. [ 355.203295][T18250] hub 9-0:1.0: USB hub found [ 355.208036][T18250] hub 9-0:1.0: 8 ports detected [ 355.312286][T18254] loop5: detected capacity change from 0 to 1024 [ 355.328075][T18254] EXT4-fs: Ignoring removed nobh option [ 355.333819][T18254] EXT4-fs: Ignoring removed nobh option [ 355.344968][T18254] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 355.368980][T18254] EXT4-fs error (device loop5): ext4_get_journal_inode:5798: comm syz.5.4734: inode #4294967295: comm syz.5.4734: iget: illegal inode # [ 355.408707][T18254] EXT4-fs (loop5): no journal found [ 355.414077][T18254] EXT4-fs (loop5): can't get journal size [ 355.430661][T18254] EXT4-fs (loop5): failed to initialize system zone (-22) [ 355.437903][T18254] EXT4-fs (loop5): mount failed [ 355.734513][T18265] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 355.803644][T15709] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.845301][T18269] SELinux: failed to load policy [ 355.905112][T18275] netlink: 'syz.9.4743': attribute type 1 has an invalid length. [ 355.945268][T18277] netlink: 'syz.4.4744': attribute type 1 has an invalid length. [ 356.006380][T18278] loop9: detected capacity change from 0 to 1024 [ 356.013343][T18278] EXT4-fs: Ignoring removed nobh option [ 356.018964][T18278] EXT4-fs: Ignoring removed nobh option [ 356.037042][T18279] loop4: detected capacity change from 0 to 512 [ 356.048664][T18278] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 356.058931][T18278] EXT4-fs error (device loop9): ext4_get_journal_inode:5798: comm syz.9.4743: inode #4294967295: comm syz.9.4743: iget: illegal inode # [ 356.085697][T18278] EXT4-fs (loop9): no journal found [ 356.091016][T18278] EXT4-fs (loop9): can't get journal size [ 356.112308][T18278] EXT4-fs (loop9): failed to initialize system zone (-22) [ 356.119755][T18278] EXT4-fs (loop9): mount failed [ 356.129595][T18279] EXT4-fs (loop4): too many log groups per flexible block group [ 356.137388][T18279] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 356.240942][T18279] EXT4-fs (loop4): mount failed [ 356.724271][T18298] loop0: detected capacity change from 0 to 164 [ 356.732855][T18298] syz.0.4750: attempt to access beyond end of device [ 356.732855][T18298] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 356.747815][T18298] syz.0.4750: attempt to access beyond end of device [ 356.747815][T18298] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 356.839964][T18305] netlink: 'syz.5.4753': attribute type 1 has an invalid length. [ 356.939538][T18313] loop5: detected capacity change from 0 to 1024 [ 356.961234][T18313] EXT4-fs: Ignoring removed nobh option [ 356.966987][T18313] EXT4-fs: Ignoring removed nobh option [ 356.972481][T18309] SELinux: syz.0.4754 (18309) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 356.987198][T18313] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 356.997459][T18313] EXT4-fs error (device loop5): ext4_get_journal_inode:5798: comm syz.5.4753: inode #4294967295: comm syz.5.4753: iget: illegal inode # [ 357.012498][T18313] EXT4-fs (loop5): no journal found [ 357.017781][T18313] EXT4-fs (loop5): can't get journal size [ 357.080450][T18315] SELinux: failed to load policy [ 357.098085][T18313] EXT4-fs (loop5): failed to initialize system zone (-22) [ 357.148442][T18325] loop8: detected capacity change from 0 to 1024 [ 357.159488][T18325] EXT4-fs: Ignoring removed nobh option [ 357.171377][T18325] ext2: Unknown parameter 'dont_hash' [ 357.178442][T18328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.190681][T18313] EXT4-fs (loop5): mount failed [ 357.230740][T18328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.317303][T18339] hub 9-0:1.0: USB hub found [ 357.329622][T18339] hub 9-0:1.0: 8 ports detected [ 357.365850][T18342] loop0: detected capacity change from 0 to 164 [ 357.392413][T18344] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4759'. [ 357.401876][T18342] syz.0.4766: attempt to access beyond end of device [ 357.401876][T18342] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 357.470797][ T8374] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 357.506396][T18347] bond1: entered promiscuous mode [ 357.511548][T18347] bond1: entered allmulticast mode [ 357.560495][T18347] 8021q: adding VLAN 0 to HW filter on device bond1 [ 357.571890][T18347] bond1 (unregistering): Released all slaves [ 357.628350][T18342] syz.0.4766: attempt to access beyond end of device [ 357.628350][T18342] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 357.728781][T18350] xt_CT: No such helper "pptp" [ 358.012156][T18361] SELinux: failed to load policy [ 358.340969][T18373] SELinux: syz.8.4775 (18373) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 358.735556][T18385] loop4: detected capacity change from 0 to 164 [ 358.741896][T18389] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4777'. [ 358.956833][T18395] xt_CT: No such helper "pptp" [ 359.025444][T18399] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 359.429988][T18410] hub 9-0:1.0: USB hub found [ 359.434818][T18410] hub 9-0:1.0: 8 ports detected [ 359.476076][T18413] bond1: entered promiscuous mode [ 359.481255][T18413] bond1: entered allmulticast mode [ 359.486723][T18413] 8021q: adding VLAN 0 to HW filter on device bond1 [ 359.497474][T18413] bond1 (unregistering): Released all slaves [ 359.572590][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 359.572605][ T29] audit: type=1326 audit(1745977915.066:12947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18416 comm="syz.0.4789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda42ae969 code=0x7ffc0000 [ 359.602474][ T29] audit: type=1326 audit(1745977915.066:12948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18416 comm="syz.0.4789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda42ae969 code=0x7ffc0000 [ 359.626201][ T29] audit: type=1326 audit(1745977915.066:12949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18416 comm="syz.0.4789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7fdda42ae969 code=0x7ffc0000 [ 359.649889][ T29] audit: type=1326 audit(1745977915.066:12950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18416 comm="syz.0.4789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda42ae969 code=0x7ffc0000 [ 359.673630][ T29] audit: type=1326 audit(1745977915.066:12951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18416 comm="syz.0.4789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdda42ae969 code=0x7ffc0000 [ 359.697441][ T29] audit: type=1326 audit(1745977915.066:12952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18416 comm="syz.0.4789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda42ae969 code=0x7ffc0000 [ 360.208032][T18430] SELinux: syz.9.4793 (18430) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 360.436010][T18439] loop9: detected capacity change from 0 to 512 [ 360.447535][T18438] SELinux: syz.8.4795 (18438) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 360.773258][ T8374] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 360.811306][T18439] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 360.982365][T18439] EXT4-fs (loop9): orphan cleanup on readonly fs [ 361.020108][ T29] audit: type=1326 audit(1745977916.506:12953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18446 comm="syz.0.4797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda42ae969 code=0x7ffc0000 [ 361.043857][ T29] audit: type=1326 audit(1745977916.506:12954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18446 comm="syz.0.4797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdda42ae969 code=0x7ffc0000 [ 361.067452][ T29] audit: type=1326 audit(1745977916.506:12955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18446 comm="syz.0.4797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda42ae969 code=0x7ffc0000 [ 361.091140][ T29] audit: type=1326 audit(1745977916.506:12956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18446 comm="syz.0.4797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdda42ae969 code=0x7ffc0000 [ 361.203724][T18439] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4796: bg 0: block 248: padding at end of block bitmap is not set [ 361.233186][T18439] EXT4-fs error (device loop9): ext4_acquire_dquot:6935: comm syz.9.4796: Failed to acquire dquot type 1 [ 361.316162][T18439] EXT4-fs (loop9): 1 truncate cleaned up [ 361.321978][T18459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4797'. [ 361.351504][T18439] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 361.383763][T18457] SELinux: syz.8.4800 (18457) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 361.446602][T18439] smc: net device bond0 applied user defined pnetid SYZ2 [ 361.477588][T18466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.492909][T18439] smc: net device bond0 erased user defined pnetid SYZ2 [ 361.500211][T18466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.517130][T18439] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 361.540968][T18469] bond1: entered promiscuous mode [ 361.546172][T18469] bond1: entered allmulticast mode [ 361.552483][T18469] 8021q: adding VLAN 0 to HW filter on device bond1 [ 361.597195][T18469] bond1 (unregistering): Released all slaves [ 361.618614][T18472] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4803'. [ 361.678065][T15709] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.756716][T18476] xt_CT: No such helper "pptp" [ 361.865421][T18481] loop0: detected capacity change from 0 to 512 [ 361.897462][T18481] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 361.917335][T18482] bond1: entered promiscuous mode [ 361.922506][T18482] bond1: entered allmulticast mode [ 361.928038][T18482] 8021q: adding VLAN 0 to HW filter on device bond1 [ 361.938849][T18482] bond1 (unregistering): Released all slaves [ 361.948012][T18481] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.4806: invalid indirect mapped block 4294967295 (level 1) [ 361.978885][T18481] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.4806: invalid indirect mapped block 4294967295 (level 1) [ 362.008197][T18481] EXT4-fs (loop0): 2 truncates cleaned up [ 362.028460][T18481] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.045269][T18487] loop8: detected capacity change from 0 to 164 [ 362.136160][T16573] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.150922][T18487] syz.8.4807: attempt to access beyond end of device [ 362.150922][T18487] loop8: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 362.197377][T18487] syz.8.4807: attempt to access beyond end of device [ 362.197377][T18487] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 362.271114][T18491] xt_CT: No such helper "pptp" [ 362.417367][T18500] loop8: detected capacity change from 0 to 512 [ 362.426827][T18501] loop5: detected capacity change from 0 to 512 [ 362.435835][T18501] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 362.466372][T18500] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 362.481614][T18501] EXT4-fs (loop5): 1 truncate cleaned up [ 362.487847][T18501] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.524339][T18500] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.4813: invalid indirect mapped block 4294967295 (level 1) [ 362.962925][T18500] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.4813: invalid indirect mapped block 4294967295 (level 1) [ 363.041654][T18500] EXT4-fs (loop8): 2 truncates cleaned up [ 363.075324][T18500] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.199067][T18500] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.4813: bg 0: block 5: invalid block bitmap [ 363.251243][ T8430] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 363.329289][T18513] xt_CT: No such helper "pptp" [ 363.429014][T14544] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.464394][T18517] hub 9-0:1.0: USB hub found [ 363.469114][T18517] hub 9-0:1.0: 8 ports detected [ 363.556150][T18520] loop0: detected capacity change from 0 to 512 [ 363.572653][T18520] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 363.604757][T18523] SELinux: failed to load policy [ 363.619627][T18520] EXT4-fs (loop0): 1 truncate cleaned up [ 363.626008][T18520] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.677507][T18526] loop9: detected capacity change from 0 to 164 [ 364.506777][T13535] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.524939][T16573] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.659485][T18548] SELinux: failed to load policy [ 364.688487][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 364.688504][ T29] audit: type=1326 audit(1745977920.176:12985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18549 comm="syz.5.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a7cce969 code=0x7ffc0000 [ 364.719905][ T29] audit: type=1326 audit(1745977920.216:12986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18549 comm="syz.5.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35a7cce969 code=0x7ffc0000 [ 364.720302][T18559] loop0: detected capacity change from 0 to 164 [ 364.743603][ T29] audit: type=1326 audit(1745977920.216:12987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18549 comm="syz.5.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a7cce969 code=0x7ffc0000 [ 364.773504][ T29] audit: type=1326 audit(1745977920.216:12988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18549 comm="syz.5.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35a7cce969 code=0x7ffc0000 [ 364.797261][ T29] audit: type=1326 audit(1745977920.216:12989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18549 comm="syz.5.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a7cce969 code=0x7ffc0000 [ 364.820903][ T29] audit: type=1326 audit(1745977920.216:12990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18549 comm="syz.5.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35a7cce969 code=0x7ffc0000 [ 364.844573][ T29] audit: type=1326 audit(1745977920.216:12991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18549 comm="syz.5.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a7cce969 code=0x7ffc0000 [ 364.868358][ T29] audit: type=1326 audit(1745977920.216:12992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18549 comm="syz.5.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f35a7cce969 code=0x7ffc0000 [ 364.869298][T18558] loop4: detected capacity change from 0 to 164 [ 364.892048][ T29] audit: type=1326 audit(1745977920.216:12993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18549 comm="syz.5.4827" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35a7cce969 code=0x0 [ 364.953743][T18559] syz.0.4828: attempt to access beyond end of device [ 364.953743][T18559] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 364.967955][T18559] syz.0.4828: attempt to access beyond end of device [ 364.967955][T18559] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 364.973082][T18566] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4827'. [ 365.033326][ T29] audit: type=1326 audit(1745977920.526:12994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18549 comm="syz.5.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a7cce969 code=0x7ffc0000 [ 365.074521][T18573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.101149][T18573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.143054][T18554] loop8: detected capacity change from 0 to 512 [ 365.154949][T18554] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 365.173878][T18554] EXT4-fs (loop8): 1 truncate cleaned up [ 365.180081][T18554] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.193555][T18554] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.202993][T18577] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4839'. [ 365.217234][T18580] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4837'. [ 365.255160][T18554] SELinux: failed to load policy [ 365.268495][T18582] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4836'. [ 365.314599][T18585] loop0: detected capacity change from 0 to 512 [ 365.358691][T18587] SELinux: syz.8.4841 (18587) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 365.385548][T18585] EXT4-fs (loop0): too many log groups per flexible block group [ 365.393503][T18585] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 365.444106][T18585] EXT4-fs (loop0): mount failed [ 365.703040][T18602] loop5: detected capacity change from 0 to 512 [ 365.710127][T18602] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 365.744637][T18602] EXT4-fs (loop5): 1 truncate cleaned up [ 365.759279][T18602] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.906677][T18606] loop0: detected capacity change from 0 to 164 [ 366.154298][T18613] bond1: entered promiscuous mode [ 366.159416][T18613] bond1: entered allmulticast mode [ 366.220421][T18613] 8021q: adding VLAN 0 to HW filter on device bond1 [ 366.231427][T18617] loop4: detected capacity change from 0 to 164 [ 366.239696][T18617] syz.4.4850: attempt to access beyond end of device [ 366.239696][T18617] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 366.241862][T18613] bond1 (unregistering): Released all slaves [ 366.279029][T18617] syz.4.4850: attempt to access beyond end of device [ 366.279029][T18617] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 366.430708][ T8433] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 366.975996][T13535] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.024767][T18625] hub 9-0:1.0: USB hub found [ 367.052511][T18625] hub 9-0:1.0: 8 ports detected [ 367.184610][T18633] loop4: detected capacity change from 0 to 1024 [ 367.191365][T18633] EXT4-fs: Ignoring removed nobh option [ 367.198294][T18634] SELinux: failed to load policy [ 367.212682][T18633] ext2: Unknown parameter 'dont_hash' [ 367.276201][T18641] loop4: detected capacity change from 0 to 164 [ 367.383166][T18649] loop5: detected capacity change from 0 to 512 [ 367.409039][T18650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4858'. [ 367.474280][T18654] bond1: entered promiscuous mode [ 367.479391][T18654] bond1: entered allmulticast mode [ 367.485090][T18654] 8021q: adding VLAN 0 to HW filter on device bond1 [ 367.494788][T18649] EXT4-fs (loop5): too many log groups per flexible block group [ 367.502600][T18649] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 367.509504][T18649] EXT4-fs (loop5): mount failed [ 367.515912][T18654] bond1 (unregistering): Released all slaves [ 368.133934][T18672] SELinux: failed to load policy [ 368.199707][T18678] loop9: detected capacity change from 0 to 164 [ 368.300869][T18682] hub 9-0:1.0: USB hub found [ 368.305984][T18682] hub 9-0:1.0: 8 ports detected [ 368.365408][T18691] FAULT_INJECTION: forcing a failure. [ 368.365408][T18691] name failslab, interval 1, probability 0, space 0, times 0 [ 368.378260][T18691] CPU: 0 UID: 0 PID: 18691 Comm: syz.4.4877 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 368.378296][T18691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 368.378319][T18691] Call Trace: [ 368.378392][T18691] [ 368.378400][T18691] __dump_stack+0x1d/0x30 [ 368.378421][T18691] dump_stack_lvl+0xe8/0x140 [ 368.378443][T18691] dump_stack+0x15/0x1b [ 368.378462][T18691] should_fail_ex+0x265/0x280 [ 368.378534][T18691] should_failslab+0x8c/0xb0 [ 368.378572][T18691] kmem_cache_alloc_node_noprof+0x57/0x320 [ 368.378739][T18691] ? __alloc_skb+0x101/0x320 [ 368.378787][T18691] __alloc_skb+0x101/0x320 [ 368.378846][T18691] netlink_alloc_large_skb+0xba/0xf0 [ 368.378886][T18691] netlink_sendmsg+0x3cf/0x6b0 [ 368.378928][T18691] ? __pfx_netlink_sendmsg+0x10/0x10 [ 368.378968][T18691] __sock_sendmsg+0x142/0x180 [ 368.378996][T18691] ____sys_sendmsg+0x31e/0x4e0 [ 368.379066][T18691] ___sys_sendmsg+0x17b/0x1d0 [ 368.379095][T18691] __x64_sys_sendmsg+0xd4/0x160 [ 368.379150][T18691] x64_sys_call+0x2999/0x2fb0 [ 368.379263][T18691] do_syscall_64+0xd0/0x1a0 [ 368.379288][T18691] ? clear_bhb_loop+0x25/0x80 [ 368.379314][T18691] ? clear_bhb_loop+0x25/0x80 [ 368.379414][T18691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.379437][T18691] RIP: 0033:0x7fe168eae969 [ 368.379452][T18691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.379470][T18691] RSP: 002b:00007fe167517038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 368.379488][T18691] RAX: ffffffffffffffda RBX: 00007fe1690d5fa0 RCX: 00007fe168eae969 [ 368.379507][T18691] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 368.379592][T18691] RBP: 00007fe167517090 R08: 0000000000000000 R09: 0000000000000000 [ 368.379603][T18691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.379614][T18691] R13: 0000000000000000 R14: 00007fe1690d5fa0 R15: 00007ffd4cfbe2d8 [ 368.379633][T18691] [ 368.688076][T18700] SELinux: failed to load policy [ 368.781418][T18707] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4880'. [ 368.815227][T18711] loop0: detected capacity change from 0 to 164 [ 368.894473][T18714] netlink: 'syz.8.4887': attribute type 1 has an invalid length. [ 368.957447][T18718] hub 9-0:1.0: USB hub found [ 368.964112][T18718] hub 9-0:1.0: 8 ports detected [ 368.973619][T18716] bond1: entered promiscuous mode [ 368.978741][T18716] bond1: entered allmulticast mode [ 368.991371][ T8373] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 369.008582][T18720] loop8: detected capacity change from 0 to 1024 [ 369.031821][T18716] 8021q: adding VLAN 0 to HW filter on device bond1 [ 369.063034][T18720] EXT4-fs: Ignoring removed nobh option [ 369.068657][T18720] EXT4-fs: Ignoring removed nobh option [ 369.076707][T18716] bond1 (unregistering): Released all slaves [ 369.138484][T18720] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 369.150750][T18720] EXT4-fs error (device loop8): ext4_get_journal_inode:5798: comm syz.8.4887: inode #4294967295: comm syz.8.4887: iget: illegal inode # [ 369.174519][T18720] EXT4-fs (loop8): no journal found [ 369.179873][T18720] EXT4-fs (loop8): can't get journal size [ 369.193100][T18724] xt_CT: No such helper "pptp" [ 369.209975][T18720] EXT4-fs (loop8): failed to initialize system zone (-22) [ 369.217609][T18720] EXT4-fs (loop8): mount failed [ 369.473971][T18735] loop0: detected capacity change from 0 to 164 [ 369.507256][T18737] SELinux: syz.0.4894 (18737) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 369.521751][T18739] loop4: detected capacity change from 0 to 164 [ 369.566611][T18739] syz.4.4893: attempt to access beyond end of device [ 369.566611][T18739] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 369.584150][T18739] syz.4.4893: attempt to access beyond end of device [ 369.584150][T18739] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 369.801953][T18744] xt_CT: No such helper "pptp" [ 370.334743][T18756] netlink: 'syz.0.4900': attribute type 1 has an invalid length. [ 370.360550][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 370.360566][ T29] audit: type=1326 audit(1745977925.856:13181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18755 comm="syz.5.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a7cce969 code=0x7ffc0000 [ 370.420379][ T29] audit: type=1326 audit(1745977925.886:13182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18755 comm="syz.5.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a7cce969 code=0x7ffc0000 [ 370.444053][ T29] audit: type=1326 audit(1745977925.886:13183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18755 comm="syz.5.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35a7cce969 code=0x7ffc0000 [ 370.451604][T18760] loop0: detected capacity change from 0 to 1024 [ 370.467641][ T29] audit: type=1326 audit(1745977925.886:13184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18755 comm="syz.5.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a7cce969 code=0x7ffc0000 [ 370.497598][ T29] audit: type=1326 audit(1745977925.886:13185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18755 comm="syz.5.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a7cce969 code=0x7ffc0000 [ 370.504821][T18760] EXT4-fs: Ignoring removed nobh option [ 370.521653][ T29] audit: type=1326 audit(1745977925.886:13186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18755 comm="syz.5.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35a7cce969 code=0x7ffc0000 [ 370.521691][ T29] audit: type=1326 audit(1745977925.886:13187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18755 comm="syz.5.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a7cce969 code=0x7ffc0000 [ 370.527297][T18760] EXT4-fs: Ignoring removed nobh option [ 370.550829][ T29] audit: type=1326 audit(1745977925.886:13188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18755 comm="syz.5.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35a7cce969 code=0x7ffc0000 [ 370.603700][ T29] audit: type=1326 audit(1745977925.886:13189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18755 comm="syz.5.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a7cce969 code=0x7ffc0000 [ 370.627387][ T29] audit: type=1326 audit(1745977925.886:13190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18755 comm="syz.5.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f35a7cce969 code=0x7ffc0000 [ 370.712717][T18760] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 370.723410][T18760] EXT4-fs error (device loop0): ext4_get_journal_inode:5798: comm syz.0.4900: inode #4294967295: comm syz.0.4900: iget: illegal inode # [ 370.767742][T18767] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4901'. [ 370.808559][T18760] EXT4-fs (loop0): no journal found [ 370.813915][T18760] EXT4-fs (loop0): can't get journal size [ 370.831971][T18771] loop8: detected capacity change from 0 to 164 [ 370.873573][T18773] netlink: 'syz.9.4906': attribute type 1 has an invalid length. [ 370.881219][T18760] EXT4-fs (loop0): failed to initialize system zone (-22) [ 370.917247][T18760] EXT4-fs (loop0): mount failed [ 370.937002][T18778] loop8: detected capacity change from 0 to 512 [ 370.945385][T18778] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 370.970616][T18779] loop9: detected capacity change from 0 to 1024 [ 370.981550][T18779] EXT4-fs: Ignoring removed nobh option [ 370.987260][T18779] EXT4-fs: Ignoring removed nobh option [ 371.030718][T18779] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 371.042009][T18778] EXT4-fs (loop8): 1 truncate cleaned up [ 371.048117][T18778] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.060931][T18779] EXT4-fs error (device loop9): ext4_get_journal_inode:5798: comm syz.9.4906: inode #4294967295: comm syz.9.4906: iget: illegal inode # [ 371.110412][T18779] EXT4-fs (loop9): no journal found [ 371.115686][T18779] EXT4-fs (loop9): can't get journal size [ 371.133677][T18779] EXT4-fs (loop9): failed to initialize system zone (-22) [ 371.153756][T18779] EXT4-fs (loop9): mount failed [ 371.217328][T18786] SELinux: syz.5.4909 (18786) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 372.190876][ T8430] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 372.456923][T18801] hub 9-0:1.0: USB hub found [ 372.466683][T18801] hub 9-0:1.0: 8 ports detected [ 372.576518][T18804] loop4: detected capacity change from 0 to 512 [ 372.583633][T18804] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 372.601566][T18804] EXT4-fs (loop4): 1 truncate cleaned up [ 372.617042][T18804] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.730149][T14544] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.784273][T18810] hub 9-0:1.0: USB hub found [ 372.789044][T18812] xt_CT: No such helper "pptp" [ 372.812360][T18810] hub 9-0:1.0: 8 ports detected [ 372.949599][T18818] SELinux: syz.0.4920 (18818) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 372.966240][T18822] loop9: detected capacity change from 0 to 512 [ 373.021339][T18822] EXT4-fs (loop9): too many log groups per flexible block group [ 373.029107][T18822] EXT4-fs (loop9): failed to initialize mballoc (-12) [ 373.069114][T18822] EXT4-fs (loop9): mount failed [ 373.281956][T18835] hub 9-0:1.0: USB hub found [ 373.286710][T18835] hub 9-0:1.0: 8 ports detected [ 373.293360][T18838] loop5: detected capacity change from 0 to 164 [ 373.303688][T18839] netlink: 'syz.8.4926': attribute type 1 has an invalid length. [ 373.395810][T18842] loop8: detected capacity change from 0 to 1024 [ 373.403475][T18842] EXT4-fs: Ignoring removed nobh option [ 373.409135][T18842] EXT4-fs: Ignoring removed nobh option [ 373.450360][T18842] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 373.460144][T18842] EXT4-fs error (device loop8): ext4_get_journal_inode:5798: comm syz.8.4926: inode #4294967295: comm syz.8.4926: iget: illegal inode # [ 373.464859][T18848] loop5: detected capacity change from 0 to 512 [ 373.492303][T18842] EXT4-fs (loop8): no journal found [ 373.497609][T18842] EXT4-fs (loop8): can't get journal size [ 373.533705][T18848] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 373.571219][T18842] EXT4-fs (loop8): failed to initialize system zone (-22) [ 373.578503][T18842] EXT4-fs (loop8): mount failed [ 373.591288][T18848] EXT4-fs (loop5): 1 truncate cleaned up [ 373.622899][T18848] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.275058][T18860] FAULT_INJECTION: forcing a failure. [ 374.275058][T18860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.288214][T18860] CPU: 1 UID: 0 PID: 18860 Comm: syz.9.4932 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 374.288243][T18860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 374.288255][T18860] Call Trace: [ 374.288262][T18860] [ 374.288269][T18860] __dump_stack+0x1d/0x30 [ 374.288322][T18860] dump_stack_lvl+0xe8/0x140 [ 374.288346][T18860] dump_stack+0x15/0x1b [ 374.288366][T18860] should_fail_ex+0x265/0x280 [ 374.288430][T18860] should_fail+0xb/0x20 [ 374.288461][T18860] should_fail_usercopy+0x1a/0x20 [ 374.288495][T18860] _copy_from_user+0x1c/0xb0 [ 374.288520][T18860] kstrtouint_from_user+0x69/0xf0 [ 374.288566][T18860] ? avc_policy_seqno+0x15/0x30 [ 374.288605][T18860] proc_fail_nth_write+0x50/0x160 [ 374.288632][T18860] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 374.288660][T18860] vfs_write+0x266/0x8d0 [ 374.288712][T18860] ? __rcu_read_unlock+0x4f/0x70 [ 374.288739][T18860] ? __fget_files+0x184/0x1c0 [ 374.288775][T18860] ksys_write+0xda/0x1a0 [ 374.288806][T18860] __x64_sys_write+0x40/0x50 [ 374.288831][T18860] x64_sys_call+0x2cdd/0x2fb0 [ 374.288909][T18860] do_syscall_64+0xd0/0x1a0 [ 374.288930][T18860] ? clear_bhb_loop+0x25/0x80 [ 374.288960][T18860] ? clear_bhb_loop+0x25/0x80 [ 374.288987][T18860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.289060][T18860] RIP: 0033:0x7f06d34bd41f [ 374.289077][T18860] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 374.289099][T18860] RSP: 002b:00007f06d1b27030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 374.289122][T18860] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f06d34bd41f [ 374.289138][T18860] RDX: 0000000000000001 RSI: 00007f06d1b270a0 RDI: 0000000000000006 [ 374.289169][T18860] RBP: 00007f06d1b27090 R08: 0000000000000000 R09: 0000000000000000 [ 374.289185][T18860] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 374.289200][T18860] R13: 0000000000000000 R14: 00007f06d36e5fa0 R15: 00007ffc57082528 [ 374.289224][T18860] [ 374.586577][T18867] loop0: detected capacity change from 0 to 164 [ 374.603870][T18867] syz.0.4933: attempt to access beyond end of device [ 374.603870][T18867] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 374.618036][T18867] syz.0.4933: attempt to access beyond end of device [ 374.618036][T18867] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 374.751548][ T8374] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 374.819796][T13164] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.832813][T13535] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.842019][T18873] loop8: detected capacity change from 0 to 1024 [ 374.848800][T18873] EXT4-fs: Ignoring removed nobh option [ 374.868913][T18873] ext2: Unknown parameter 'dont_hash' [ 374.961189][T18881] loop5: detected capacity change from 0 to 1024 [ 374.977445][T18881] EXT4-fs: Ignoring removed nobh option [ 374.988336][T18881] ext2: Unknown parameter 'dont_hash' [ 375.002546][T18886] siw: device registration error -23 [ 375.042921][T18890] loop9: detected capacity change from 0 to 164 [ 375.099266][T18897] netlink: 'syz.4.4946': attribute type 1 has an invalid length. [ 375.100016][T18894] hub 9-0:1.0: USB hub found [ 375.120693][T18894] hub 9-0:1.0: 8 ports detected [ 375.146907][T18899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4943'. [ 375.181260][T18902] loop4: detected capacity change from 0 to 1024 [ 375.232237][T18906] loop5: detected capacity change from 0 to 164 [ 375.253553][T18907] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 375.275864][T18902] EXT4-fs: Ignoring removed nobh option [ 375.281567][T18902] EXT4-fs: Ignoring removed nobh option [ 375.295356][T18905] SELinux: syz.9.4949 (18905) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 375.300556][T18906] syz.5.4948: attempt to access beyond end of device [ 375.300556][T18906] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 375.326919][T18906] syz.5.4948: attempt to access beyond end of device [ 375.326919][T18906] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 375.351161][T18902] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 375.369529][T18902] EXT4-fs error (device loop4): ext4_get_journal_inode:5798: comm syz.4.4946: inode #4294967295: comm syz.4.4946: iget: illegal inode # [ 375.409979][T18902] EXT4-fs (loop4): no journal found [ 375.415358][T18902] EXT4-fs (loop4): can't get journal size [ 375.447415][T18902] EXT4-fs (loop4): failed to initialize system zone (-22) [ 375.465922][T18902] EXT4-fs (loop4): mount failed [ 375.517846][T18913] loop9: detected capacity change from 0 to 512 [ 375.545639][T18913] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 375.609732][T18913] EXT4-fs (loop9): 1 truncate cleaned up [ 375.616540][T18913] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.844461][T18920] loop0: detected capacity change from 0 to 512 [ 375.875258][T18920] EXT4-fs error (device loop0): ext4_iget_extra_inode:4693: inode #15: comm syz.0.4952: corrupted in-inode xattr: invalid ea_ino [ 375.957037][T18920] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.4952: couldn't read orphan inode 15 (err -117) [ 376.009828][T18920] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.045178][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 376.045197][ T29] audit: type=1400 audit(1745977931.536:13256): avc: denied { create } for pid=18919 comm="syz.0.4952" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 376.105880][T18920] FAULT_INJECTION: forcing a failure. [ 376.105880][T18920] name failslab, interval 1, probability 0, space 0, times 0 [ 376.118591][T18920] CPU: 0 UID: 0 PID: 18920 Comm: syz.0.4952 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 376.118621][T18920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 376.118634][T18920] Call Trace: [ 376.118642][T18920] [ 376.118651][T18920] __dump_stack+0x1d/0x30 [ 376.118744][T18920] dump_stack_lvl+0xe8/0x140 [ 376.118774][T18920] dump_stack+0x15/0x1b [ 376.118792][T18920] should_fail_ex+0x265/0x280 [ 376.118837][T18920] should_failslab+0x8c/0xb0 [ 376.118868][T18920] __kmalloc_noprof+0xa5/0x3e0 [ 376.118888][T18920] ? ext4_htree_store_dirent+0x52/0x2e0 [ 376.118922][T18920] ? dx_probe+0x892/0x990 [ 376.118957][T18920] ext4_htree_store_dirent+0x52/0x2e0 [ 376.119063][T18920] ext4_htree_fill_tree+0x3d5/0x9c0 [ 376.119097][T18920] ? terminate_walk+0x27f/0x2a0 [ 376.119129][T18920] ? path_openat+0x1bf8/0x2170 [ 376.119185][T18920] ? kstrtoull+0x111/0x140 [ 376.119213][T18920] ext4_readdir+0x1729/0x1d40 [ 376.119248][T18920] ? get_pid_task+0x96/0xd0 [ 376.119306][T18920] ? proc_fail_nth_write+0x12d/0x160 [ 376.119333][T18920] ? avc_policy_seqno+0x15/0x30 [ 376.119366][T18920] ? selinux_file_permission+0x213/0x360 [ 376.119444][T18920] iterate_dir+0x111/0x330 [ 376.119466][T18920] ? mutex_lock+0xd/0x30 [ 376.119498][T18920] __se_sys_getdents64+0x88/0x1b0 [ 376.119553][T18920] ? __pfx_filldir64+0x10/0x10 [ 376.119638][T18920] __x64_sys_getdents64+0x43/0x50 [ 376.119662][T18920] x64_sys_call+0x1302/0x2fb0 [ 376.119713][T18920] do_syscall_64+0xd0/0x1a0 [ 376.119736][T18920] ? clear_bhb_loop+0x25/0x80 [ 376.119771][T18920] ? clear_bhb_loop+0x25/0x80 [ 376.119793][T18920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.119819][T18920] RIP: 0033:0x7fdda42ae969 [ 376.119852][T18920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.119870][T18920] RSP: 002b:00007fdda2917038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 376.119889][T18920] RAX: ffffffffffffffda RBX: 00007fdda44d5fa0 RCX: 00007fdda42ae969 [ 376.119903][T18920] RDX: 0000000000000ffe RSI: 0000200000000f80 RDI: 0000000000000007 [ 376.119915][T18920] RBP: 00007fdda2917090 R08: 0000000000000000 R09: 0000000000000000 [ 376.119927][T18920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.119962][T18920] R13: 0000000000000000 R14: 00007fdda44d5fa0 R15: 00007ffd6b060468 [ 376.119981][T18920] [ 376.401657][T18924] loop8: detected capacity change from 0 to 512 [ 376.419738][T16573] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.429641][T18924] EXT4-fs error (device loop8): ext4_iget_extra_inode:4693: inode #15: comm syz.8.4954: corrupted in-inode xattr: invalid ea_ino [ 376.470595][T18924] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.4954: couldn't read orphan inode 15 (err -117) [ 376.484944][T18924] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.545881][ T29] audit: type=1400 audit(1745977932.016:13257): avc: denied { connect } for pid=18923 comm="syz.8.4954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 376.553132][T18929] loop0: detected capacity change from 0 to 1024 [ 376.594442][T18929] EXT4-fs: Ignoring removed nobh option [ 376.600113][T18929] ext2: Unknown parameter 'dont_hash' [ 376.644120][T14544] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.662943][ T29] audit: type=1400 audit(1745977932.076:13258): avc: denied { write } for pid=18923 comm="syz.8.4954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 376.706846][T18935] loop4: detected capacity change from 0 to 1024 [ 376.722909][T18935] EXT4-fs: Ignoring removed nobh option [ 376.728970][T18935] ext2: Unknown parameter 'dont_hash' [ 376.786336][ T29] audit: type=1326 audit(1745977932.266:13259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18938 comm="syz.8.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d892e969 code=0x7ffc0000 [ 376.810198][ T29] audit: type=1326 audit(1745977932.266:13260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18938 comm="syz.8.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7fe0d892e969 code=0x7ffc0000 [ 376.833836][ T29] audit: type=1326 audit(1745977932.266:13261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18938 comm="syz.8.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d892e969 code=0x7ffc0000 [ 376.857555][ T29] audit: type=1326 audit(1745977932.266:13262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18938 comm="syz.8.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe0d892e969 code=0x7ffc0000 [ 376.881055][ T29] audit: type=1326 audit(1745977932.266:13263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18938 comm="syz.8.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d892e969 code=0x7ffc0000 [ 376.932979][T18948] vlan2: entered allmulticast mode [ 376.938156][T18948] bridge_slave_0: entered allmulticast mode [ 376.942768][T18947] xt_CT: No such helper "pptp" [ 376.957285][T18949] hub 9-0:1.0: USB hub found [ 376.969606][T18952] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4959'. [ 376.969896][T18949] hub 9-0:1.0: 8 ports detected [ 377.020021][ T29] audit: type=1326 audit(1745977932.506:13264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18954 comm="syz.4.4963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe168eae969 code=0x7ffc0000 [ 377.043803][ T29] audit: type=1326 audit(1745977932.506:13265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18954 comm="syz.4.4963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe168eae969 code=0x7ffc0000 [ 377.088450][T18957] netlink: 'syz.0.4964': attribute type 1 has an invalid length. [ 377.237629][T15709] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.258171][T18962] loop0: detected capacity change from 0 to 1024 [ 377.287000][T18962] EXT4-fs: Ignoring removed nobh option [ 377.292776][T18962] EXT4-fs: Ignoring removed nobh option [ 377.365092][T18962] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 377.410487][T18962] EXT4-fs error (device loop0): ext4_get_journal_inode:5798: comm syz.0.4964: inode #4294967295: comm syz.0.4964: iget: illegal inode # [ 377.460836][T18962] EXT4-fs (loop0): no journal found [ 377.466140][T18962] EXT4-fs (loop0): can't get journal size [ 377.482225][T18962] EXT4-fs (loop0): failed to initialize system zone (-22) [ 377.493147][T18962] EXT4-fs (loop0): mount failed [ 377.803512][T18987] SELinux: syz.8.4975 (18987) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 377.950859][ T8438] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 377.983159][T18995] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 378.056395][T18997] hub 9-0:1.0: USB hub found [ 378.063368][T18995] SELinux: failed to load policy [ 378.167069][T18997] hub 9-0:1.0: 8 ports detected [ 378.312124][T19009] xt_CT: No such helper "pptp" [ 378.446734][T19020] hub 9-0:1.0: USB hub found [ 378.447615][T19015] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 378.459037][T19021] xt_CT: No such helper "pptp" [ 378.472493][T19020] hub 9-0:1.0: 8 ports detected [ 378.482485][T19015] SELinux: failed to load policy [ 378.534960][T19026] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4988'. [ 378.634353][T19031] bond1: entered promiscuous mode [ 378.639546][T19031] bond1: entered allmulticast mode [ 378.645696][T19031] 8021q: adding VLAN 0 to HW filter on device bond1 [ 378.664835][T19031] bond1 (unregistering): Released all slaves [ 378.718494][T19035] SELinux: ebitmap: truncated map [ 378.724491][T19035] SELinux: failed to load policy [ 379.422163][T19042] FAULT_INJECTION: forcing a failure. [ 379.422163][T19042] name failslab, interval 1, probability 0, space 0, times 0 [ 379.434898][T19042] CPU: 0 UID: 0 PID: 19042 Comm: syz.4.4993 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 379.434980][T19042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 379.434993][T19042] Call Trace: [ 379.435001][T19042] [ 379.435011][T19042] __dump_stack+0x1d/0x30 [ 379.435067][T19042] dump_stack_lvl+0xe8/0x140 [ 379.435092][T19042] dump_stack+0x15/0x1b [ 379.435111][T19042] should_fail_ex+0x265/0x280 [ 379.435152][T19042] ? snd_timer_instance_new+0x31/0x160 [ 379.435231][T19042] should_failslab+0x8c/0xb0 [ 379.435268][T19042] __kmalloc_cache_noprof+0x4c/0x320 [ 379.435293][T19042] snd_timer_instance_new+0x31/0x160 [ 379.435378][T19042] snd_seq_timer_open+0x12f/0x330 [ 379.435419][T19042] ? __kmalloc_cache_noprof+0x189/0x320 [ 379.435441][T19042] ? _raw_spin_lock_irqsave+0x3a/0x90 [ 379.435515][T19042] ? snd_seq_timer_defaults+0x1c1/0x1e0 [ 379.435547][T19042] snd_seq_queue_alloc+0x269/0x420 [ 379.435580][T19042] snd_seq_ioctl_create_queue+0x4d/0x1b0 [ 379.435680][T19042] snd_seq_ioctl+0x17a/0x2e0 [ 379.435762][T19042] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 379.435807][T19042] __se_sys_ioctl+0xcb/0x140 [ 379.435877][T19042] __x64_sys_ioctl+0x43/0x50 [ 379.435974][T19042] x64_sys_call+0x19a8/0x2fb0 [ 379.436000][T19042] do_syscall_64+0xd0/0x1a0 [ 379.436021][T19042] ? clear_bhb_loop+0x25/0x80 [ 379.436043][T19042] ? clear_bhb_loop+0x25/0x80 [ 379.436099][T19042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.436126][T19042] RIP: 0033:0x7fe168eae969 [ 379.436143][T19042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.436163][T19042] RSP: 002b:00007fe1674d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 379.436242][T19042] RAX: ffffffffffffffda RBX: 00007fe1690d6160 RCX: 00007fe168eae969 [ 379.436328][T19042] RDX: 0000200000000300 RSI: 00000000c08c5332 RDI: 0000000000000007 [ 379.436340][T19042] RBP: 00007fe1674d5090 R08: 0000000000000000 R09: 0000000000000000 [ 379.436354][T19042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.436369][T19042] R13: 0000000000000000 R14: 00007fe1690d6160 R15: 00007ffd4cfbe2d8 [ 379.436393][T19042] [ 379.724001][T19048] netlink: 'syz.0.4995': attribute type 1 has an invalid length. [ 379.736934][T19047] netlink: 'syz.8.4997': attribute type 1 has an invalid length. [ 379.737133][T19050] rdma_op ffff888117ef2580 conn xmit_rdma 0000000000000000 [ 379.763468][T19050] loop5: detected capacity change from 0 to 512 [ 379.795539][T19050] EXT4-fs (loop5): 1 orphan inode deleted [ 379.805054][T19050] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.827244][T19055] loop0: detected capacity change from 0 to 1024 [ 379.833915][ T8438] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:50: Failed to release dquot type 1 [ 379.855124][T19056] loop8: detected capacity change from 0 to 512 [ 379.862326][T19050] ext4 filesystem being mounted at /305/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.874162][ T8374] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 379.886218][T19050] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.916872][T19055] EXT4-fs: Ignoring removed nobh option [ 379.922537][T19055] EXT4-fs: Ignoring removed nobh option [ 379.945899][T19055] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 380.006628][T19055] EXT4-fs error (device loop0): ext4_get_journal_inode:5798: comm syz.0.4995: inode #4294967295: comm syz.0.4995: iget: illegal inode # [ 380.027163][T19056] EXT4-fs (loop8): too many log groups per flexible block group [ 380.035020][T19056] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 380.047484][T19060] SELinux: syz.5.4998 (19060) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 380.072663][T19055] EXT4-fs (loop0): no journal found [ 380.078004][T19055] EXT4-fs (loop0): can't get journal size [ 380.090393][T19056] EXT4-fs (loop8): mount failed [ 380.133350][T19055] EXT4-fs (loop0): failed to initialize system zone (-22) [ 380.143946][T19055] EXT4-fs (loop0): mount failed [ 380.206691][T19067] xt_CT: No such helper "pptp" [ 380.257450][T19070] netlink: 'syz.5.5001': attribute type 1 has an invalid length. [ 380.296250][T19074] loop4: detected capacity change from 0 to 164 [ 380.365786][T19076] loop5: detected capacity change from 0 to 512 [ 380.417584][T19076] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 380.446063][T19076] EXT4-fs (loop5): 1 truncate cleaned up [ 380.461878][T19076] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.609882][T13535] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.666155][T19081] hub 9-0:1.0: USB hub found [ 380.675147][T19081] hub 9-0:1.0: 8 ports detected [ 380.755648][ T3006] ================================================================== [ 380.763799][ T3006] BUG: KCSAN: data-race in dentry_unlink_inode / step_into [ 380.771040][ T3006] [ 380.773373][ T3006] write to 0xffff888192887c30 of 8 bytes by task 8484 on cpu 1: [ 380.781026][ T3006] dentry_unlink_inode+0x65/0x260 [ 380.786076][ T3006] d_delete+0x164/0x180 [ 380.790259][ T3006] d_delete_notify+0x32/0x100 [ 380.794969][ T3006] vfs_unlink+0x30b/0x420 [ 380.799330][ T3006] do_unlinkat+0x28e/0x4c0 [ 380.803778][ T3006] __x64_sys_unlink+0x2e/0x40 [ 380.808484][ T3006] x64_sys_call+0x22a6/0x2fb0 [ 380.813190][ T3006] do_syscall_64+0xd0/0x1a0 [ 380.817714][ T3006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.823627][ T3006] [ 380.825960][ T3006] read to 0xffff888192887c30 of 8 bytes by task 3006 on cpu 0: [ 380.833513][ T3006] step_into+0x122/0x820 [ 380.837777][ T3006] walk_component+0x162/0x220 [ 380.842562][ T3006] path_lookupat+0xfe/0x2a0 [ 380.847100][ T3006] filename_lookup+0x147/0x340 [ 380.851887][ T3006] do_readlinkat+0x7d/0x320 [ 380.856397][ T3006] __x64_sys_readlink+0x47/0x60 [ 380.861268][ T3006] x64_sys_call+0x2cf3/0x2fb0 [ 380.865955][ T3006] do_syscall_64+0xd0/0x1a0 [ 380.870470][ T3006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.876370][ T3006] [ 380.878693][ T3006] value changed: 0xffff888103a67aa0 -> 0x0000000000000000 [ 380.885799][ T3006] [ 380.888121][ T3006] Reported by Kernel Concurrency Sanitizer on: [ 380.894271][ T3006] CPU: 0 UID: 0 PID: 3006 Comm: udevd Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 380.906272][ T3006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 380.916342][ T3006] ================================================================== [ 380.999040][T19086] bond1: entered promiscuous mode [ 381.004197][T19086] bond1: entered allmulticast mode [ 381.015849][T19091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5004'. [ 381.026136][T19086] 8021q: adding VLAN 0 to HW filter on device bond1 [ 381.038065][T19086] bond1 (unregistering): Released all slaves [ 381.060480][T19092] bond1: entered promiscuous mode [ 381.065588][T19092] bond1: entered allmulticast mode [ 381.071868][T19092] 8021q: adding VLAN 0 to HW filter on device bond1 [ 381.082490][T19092] bond1 (unregistering): Released all slaves [ 383.070782][ T8430] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 384.910671][ T8430] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 388.830734][ T8430] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 390.110664][ T8373] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration