last executing test programs: 11m43.052542646s ago: executing program 32 (id=29): r0 = socket(0x1e, 0x4, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x4}, 0x18) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000180)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x16) close(r0) 11m35.630798059s ago: executing program 33 (id=61): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) 11m28.228927559s ago: executing program 34 (id=26): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) (async) fchdir(r1) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000480)={@mcast2={0xff, 0x5}, @private0, @loopback, 0x800000, 0xa, 0x0, 0x500, 0x7ffffffe, 0x140192}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000240), &(0x7f0000000280)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree\x00', r4}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree\x00', r4}, 0x18) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',access=o']) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',access=o']) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) socket$inet_tcp(0x2, 0x1, 0x0) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r9, 0x0, 0xfffffffffffffffd}, 0x18) syz_open_dev$usbfs(&(0x7f0000000040), 0x10, 0x41341) (async) r10 = syz_open_dev$usbfs(&(0x7f0000000040), 0x10, 0x41341) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmmsg(r7, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f00000003c0)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0xc}}], 0x2, 0x4048814) (async) sendmmsg(r7, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f00000003c0)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0xc}}], 0x2, 0x4048814) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x13, 0xd, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x6f5b, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r11, 0x0, 0x2}, 0x18) 11m23.767441735s ago: executing program 35 (id=150): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000200)={r3, 0xcb}, 0x0, &(0x7f0000000580)="951aef3aaf1ba05f3da1bc522b0b70bedf1a43dc99f778a45a9f09b6a7df17b2eeddd5e44f1bd46110e964e8baa7e3e6e271c89f1fddf8de5b3f2d74b4abf96fc7bad7921fa99fbd7c035247413afa4e181d8737001e53dfea5c578f1c4d974cb7fa9f40bc0af5bbede079f0b6012086846e00d982fb3ec177ad349ad6df95e606f9490d43cedae2ba39aea8003463fedb76b388fe86052e507076f1ad449568b47306ffd0d669146a450dbfe316103c57368246aaa1ac7d4956b5a6f4bc5e6e65ddf4272b10b6b55896db", 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x3}, 0x18) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000004c0)={r7, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x47}}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={r7, 0x1, 0x6}, 0x10) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r7, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x6c, 0x24, 0xf0b, 0x709d2e, 0x25dfdbfd, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xf39a0a944d4bc56b}, @TCA_TBF_BURST={0x8, 0x6, 0xfff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x2, 0x9, 0x3, 0x4, 0x9}, {0xfe, 0x1, 0x1, 0x1, 0x1, 0x1000000}, 0x6, 0xffffffff, 0x1bf4}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x3c000001}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='erofs_readpage\x00', r10}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000740), &(0x7f0000000780)='%-010d \x00'}, 0x20) r11 = socket$nl_route(0x10, 0x3, 0x0) lseek(r11, 0x7, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4804}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0) 11m15.641039118s ago: executing program 36 (id=230): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40142, 0x1) socket(0x2c, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) syz_emit_ethernet(0x6c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaabb8848000001000000000082f04daf2e180bfe42992621bb433c434ad1e03fa0ae6f9f7b4cc65d9e97afdd643c04b036daa3ece70c9776ddfe55556c2aed3395e5baea3bc93b228487f9ff1c1828ab05c560060193f6b88b255bfca63ad57e2776f1507f4b54bdbcdea008d649b02d6e45"], &(0x7f0000000000)={0x0, 0x3, [0xb6a, 0x441, 0x9db, 0x559]}) 6m16.940158028s ago: executing program 37 (id=4754): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES8=r0, @ANYRES16=r0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r2 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r3 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x2, 0x571, &(0x7f0000000780)="$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") ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010004000000000004000500a9930000100000000000000020"], 0x24, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@bloom_filter={0x1e, 0xff, 0xffffffff, 0x7, 0x8, r2, 0x7f, '\x00', 0x0, r2, 0x4, 0x5, 0x1, 0xb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18dfff0000002577c60020000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = open(&(0x7f0000000700)='./file1\x00', 0x400200, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r4, 0x8008f512, &(0x7f0000000540)) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, &(0x7f0000000600)=""/16, 0x7d, 0x10, 0x0, 0x7f, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRESOCT=r4, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000380)=@nat={'nat\x00', 0x19, 0x2, 0x324, [0x200000001040, 0x0, 0x0, 0x200000001070, 0x200000001304], 0x0, &(0x7f0000000340), &(0x7f0000001400)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff020000000300000001000000884d6261746164765f736c6176655f30000076657468315f6d6123767461700000007767300000000000000000000000000076657468300000000000000000000000eaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000ff6e000000de0000d81e5df55000160100006172707265706c79000000000000000000000000000000000000dd000000001000000000000000aaaaaaaaaaaa00000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaaaa0000fcffffff000000006190707265706c790000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa3d0000030000000000000005000000090000000001766c616e310000000000000000000000e26f6e645f736c6176655f31000000006e657464657673696d3000000000000076657468315f746f5f7465616d000000ffffff4a07000000ff00ffffbbbbbbbbbbbb0000ff00ffb06d3d918f76ec06004e010000636f6e6e62797465730000000000000000000000000000000000000000000000180000000000000001000000000000ee060000000000000002f00000000000006370750000000000000000000000000000000000000000000000000000000000080000000000000000000000000000006172707265706c79000000000000000000000000000000000000000000000000100000000000000009b6e8e9caee0000feffffff000000006172707265706c7900000000000000000000000000000000000000000000000010000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000080000000000000002000000fcffffff0000000000000000020000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000fd7a6408121564aefae0dbd3d81b057d95e96ad8a0af8e32c2d72b714068d18293993d49784a60874caa17f5e8f3a0cf3968690442a81a88e638e5055389b86298b8f9830f31c2a2d0be12961877f079717806230ec9044a133b99f5c70f13056bf38989fb4a7b538f8662a671c270095189153259f26a756e040964a64a3a7e25a500a0765e80ae6942ce3a23d1f31f9d8608c46745787964931a875ca64d8b6eb4ded35203c00cc173aaf3683741db06000000653560fe5dec6bf82d5cfc519b227af527f8"]}, 0x466) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000070000001000"/20, @ANYRES32=r7, @ANYBLOB="080012000a0002"], 0x28}, 0x1, 0x0, 0x0, 0x400c0}, 0x10) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f00000006c0)=r7) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x10, 0xc, &(0x7f0000000f80)=ANY=[@ANYBLOB="1d285da626c95b35840cb0dd96627238faef50ee16f9693becfdd9ea4af0f17bcf7f7fea52d1d1b7a84c450cbb536d473e40c0556e68973567a951db609222554dca7198ca075e819fd5cf5e4fe3215a6b6a1ee1db36167e094e", @ANYRES32, @ANYBLOB="0000000000000000b7e55ca37200e6ff7a8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000400000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r8, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r9}, 0x3d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 5m45.921323713s ago: executing program 4 (id=5164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0xa4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r6, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x44010) 5m44.85647914s ago: executing program 9 (id=5174): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x583, &(0x7f0000000800)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) setxattr(&(0x7f0000000240)='./file1\x00', &(0x7f0000000380)=@known='trusted.overlay.redirect\x00', &(0x7f00000003c0)='\x00', 0x1, 0x1) 5m44.700348095s ago: executing program 9 (id=5177): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x80002, 0x0) ppoll(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r0, 0x0, 0xffff}, 0x18) r1 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000680)='syzkaller\x00', 0x7, 0x1016, &(0x7f0000001880)=""/4118, 0x41000, 0x28}, 0x94) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) io_setup(0x4, &(0x7f0000000240)) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0xa, 0x3, 0x3a) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x0, 0x0, r7}, 0xc) write(r4, &(0x7f0000000000)="2000000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1200000005000000040000000200000000000000", @ANYRES32, @ANYBLOB="00000001000000000000deff0000000096000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000006c0)={@multicast1, @multicast2, 0x0}, &(0x7f0000000700)=0xc) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000740)={0x4, 0x0}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000780)={r1, r4, 0x25, 0x18, @val=@target_btf_id=r5}, 0x14) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r6, 0x402, 0x40000029) fcntl$notify(r3, 0x402, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048fc) 5m44.492877446s ago: executing program 4 (id=5181): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1200000005000000040000000200000000000000", @ANYRES32, @ANYBLOB="00000001000000000000deff0000000096000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000006c0)={@multicast1, @multicast2, 0x0}, &(0x7f0000000700)=0xc) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000740)={0x4, 0x0}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000780)={r1, r4, 0x25, 0x18, @val=@target_btf_id=r5}, 0x14) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r6, 0x402, 0x40000029) fcntl$notify(r3, 0x402, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048fc) 5m44.391488066s ago: executing program 4 (id=5183): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="d801000021000100000000000100000064010102000000000000000000000000ac1414aa0000000000000000000000000000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000010000000080011100e0000001000000000000000000000000ac1e010100000000000000000000000064010101000000000000000000000000ffffffff0000000000000000000000006c030000043500000a000200fc000000000000000000000000000001e0000001000000000000000000000000fe8800000000000000000000000001010000000000000000000000000000000000010000ff3400000a000a"], 0x1d8}}, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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") mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2236824, 0x0) write$cgroup_int(r2, &(0x7f0000000340)=0x4, 0x12) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'hsr0\x00', 0x4}, 0x18) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r6 = inotify_init1(0x0) r7 = inotify_add_watch(r6, &(0x7f0000000440)='.\x00', 0x20000000) write$binfmt_elf32(r5, &(0x7f0000005640)=ANY=[@ANYRES16=r7], 0x69) close(r5) execve(&(0x7f0000019140)='./file0\x00', 0x0, &(0x7f0000000040)={[&(0x7f0000000200)=' ']}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0xa4}, @call={0x85, 0x0, 0x0, 0x8b}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x4}]}, &(0x7f0000000680)='syzkaller\x00', 0x5, 0x0, &(0x7f0000000700), 0x40f00, 0x20, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000740)={0x4, 0xffff0000}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000007c0)=[{0x1, 0x3, 0xa, 0x1}, {0x4, 0x1, 0xe, 0x8}, {0x5, 0x4, 0xd, 0x6}], 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000001c0)='rpcgss_upcall_result\x00', r5}, 0x18) syz_clone3(&(0x7f00000004c0)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r8 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00') pread64(r8, &(0x7f0000000140)=""/116, 0x74, 0x4) 5m44.146784531s ago: executing program 4 (id=5187): r0 = socket(0x40000000015, 0x5, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000001f) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x4) fcntl$notify(r2, 0x402, 0x8000003d) close_range(r1, r2, 0x0) r3 = fsopen(&(0x7f0000002200)='ramfs\x00', 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000002640)='mode\x00\xbf+\xb1O\x85I5_Qj\xebIw\x1d\x800\xfc\xed\xf2\xe7=\a\x80W\x17\xe9\x80\x00$S\xce\xf3\x9b\xee$\xa0\x12\xe34m\x17`\x80Z\x16\x9ba\f\xd1\xfaAm+sUh\xae\xf1}G\xb1E\x8e8\xf5\x19\\\xbb\xd9\x83*Ly\x99\xac\x95O\f\xff\xff\x00\x00\x00\x00\x00\x00v', &(0x7f0000000400)='7', 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x2, 0x0, r2, 0xa21, '\x00', 0x0, r1, 0x1, 0x5, 0x4}, 0x50) sendmsg$nl_generic(r1, 0x0, 0x2004c000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000045) close(0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_tcp(&(0x7f00000002c0), &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000380), 0x2011013, &(0x7f00000003c0)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@noextend}, {@privport}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}]}}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r9, {}, {}, {0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40d5}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r6, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x40000) 5m43.918891444s ago: executing program 4 (id=5191): close(0x3) r0 = socket$vsock_stream(0x28, 0x1, 0x0) creat(&(0x7f0000000280)='./bus\x00', 0x2) r1 = dup2(r0, r0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="060000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x410fd, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) memfd_secret(0x80000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r3 = dup2(r2, r2) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r3, 0x1276, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x800810, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r4 = syz_io_uring_setup(0x7053, &(0x7f0000000400)={0x0, 0x79af, 0x10000, 0x0, 0x40024e}, &(0x7f0000000140), &(0x7f0000000040)=0x0) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0xe103, 0x8, 0x2, 0x2d}, &(0x7f0000000080)=0x0, &(0x7f0000000300)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x5c, 0x6d01f1b011d64e45, r7, 0x0, 0x0, 0x0, 0xc0000, 0x0, {0x0, r8}}) 5m43.918594344s ago: executing program 38 (id=5191): close(0x3) r0 = socket$vsock_stream(0x28, 0x1, 0x0) creat(&(0x7f0000000280)='./bus\x00', 0x2) r1 = dup2(r0, r0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="060000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x410fd, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) memfd_secret(0x80000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r3 = dup2(r2, r2) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r3, 0x1276, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x800810, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r4 = syz_io_uring_setup(0x7053, &(0x7f0000000400)={0x0, 0x79af, 0x10000, 0x0, 0x40024e}, &(0x7f0000000140), &(0x7f0000000040)=0x0) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0xe103, 0x8, 0x2, 0x2d}, &(0x7f0000000080)=0x0, &(0x7f0000000300)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x5c, 0x6d01f1b011d64e45, r7, 0x0, 0x0, 0x0, 0xc0000, 0x0, {0x0, r8}}) 5m43.771322418s ago: executing program 9 (id=5195): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) 5m43.594085606s ago: executing program 9 (id=5197): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="d801000021000100000000000100000064010102000000000000000000000000ac1414aa0000000000000000000000000000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000010000000080011100e0000001000000000000000000000000ac1e010100000000000000000000000064010101000000000000000000000000ffffffff0000000000000000000000006c030000043500000a000200fc000000000000000000000000000001e0000001000000000000000000000000fe8800000000000000000000000001010000000000000000000000000000000000010000ff3400000a000a"], 0x1d8}}, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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") mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2236824, 0x0) write$cgroup_int(r2, &(0x7f0000000340)=0x4, 0x12) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'hsr0\x00', 0x4}, 0x18) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r6 = inotify_init1(0x0) r7 = inotify_add_watch(r6, &(0x7f0000000440)='.\x00', 0x20000000) write$binfmt_elf32(r5, &(0x7f0000005640)=ANY=[@ANYRES16=r7], 0x69) close(r5) execve(&(0x7f0000019140)='./file0\x00', 0x0, &(0x7f0000000040)={[&(0x7f0000000200)=' ']}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0xa4}, @call={0x85, 0x0, 0x0, 0x8b}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x4}]}, &(0x7f0000000680)='syzkaller\x00', 0x5, 0x0, &(0x7f0000000700), 0x40f00, 0x20, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000740)={0x4, 0xffff0000}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000007c0)=[{0x1, 0x3, 0xa, 0x1}, {0x4, 0x1, 0xe, 0x8}, {0x5, 0x4, 0xd, 0x6}], 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000001c0)='rpcgss_upcall_result\x00', r5}, 0x18) syz_clone3(&(0x7f00000004c0)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00') 5m43.358638629s ago: executing program 9 (id=5200): r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_access(r0, &(0x7f0000000440)=ANY=[@ANYBLOB='system_u:objec_li:s0 unconfined 0'], 0x43) io_uring_setup(0x4d3f, &(0x7f0000000200)={0x0, 0xca6a, 0x40, 0x3, 0x6}) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, 0x0, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x4000, 0xc001, 0x0, 0x0, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x400e800}, 0x4000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000007000000000000000000000018010000202070250000000f002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='leases_conflict\x00', r2, 0x0, 0x4}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) sendmmsg$inet(r3, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r3, 0x0, 0x0, 0x12000000, 0x0, 0x0) socketpair(0x0, 0x100000005, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x1294, 0x2, 0x5}) mq_getsetattr(r5, &(0x7f0000000000)={0x800, 0x4, 0x9, 0x9a}, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) socket$netlink(0x10, 0x3, 0x0) mq_timedreceive(r5, &(0x7f0000000340)=""/195, 0xc3, 0x0, 0x0) 5m42.731000533s ago: executing program 9 (id=5203): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xc0100, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000bc0)=0x1, 0x4) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2000000) 5m42.730830412s ago: executing program 39 (id=5203): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xc0100, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000bc0)=0x1, 0x4) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2000000) 3m41.622388676s ago: executing program 7 (id=6695): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) 3m40.28307168s ago: executing program 8 (id=6717): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0xd, 0x4}, 0x9092, 0x0, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x157f, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x0, 0x1a}, &(0x7f0000000080), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340)}], 0x0, 0x2}, 0x20) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) 3m40.241840794s ago: executing program 8 (id=6718): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x4}, 0x18) dup(0xffffffffffffffff) socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x1, @mcast1, 0x7f}, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0ff5b14104fe62cc60e413905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf2364149215108333719acd97cfa107d40224edc5465a93df8513a32ec450bebc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe511195418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4929330142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da8c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000dd11e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15f2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f000010000000000000905ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400bee3dfc8fb24f67c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341b74abaa7c95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb232bbdb9dc33cbd7643866fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595270fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f76dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d2e959efc71f665c4d75cf2458e3322c9062ece84c99a061997a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99f0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d164118e4cbe02400000000ff0700000000cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a4867217373934bbd42dcb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcd62981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba495aea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b60000000000001700d6d5210d7560eb92d6a97a27602b81f76386f1535b1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294059323e7a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd704e4214de5946932d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1fc8df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1785eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be2f5656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fd78f9743af932cd6db49a47613808bad959719c0000000000378a921c7f7f6933c2e24c7e800003c9e8095e02985f28de0bbc76d58dd92606b1ef6486c85fa3e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6968d12418a4d2a0d086d8438d415d713acebc5b014e61a543a5a391f03daca80f08f0e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e112645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c000000000000000000000000000000a1c3da144589dcaddb71cf9374843e23f992a237a9040747e0434a8a643990b4059a98411ce867d1af7e8ea89f49e6f564d4dce8a7d6939a9214a7f39e83bd247e03a09dba000000000000000000000000aaf033d47249c8444bc13844cbf1be617d82b269e5ea0c0d525603c0ec543ea581f63893ae414a6683e941fdbdff03cfc5f8744583c0aa766a65321f907927a59d75b47f06895e8471ebc2840ce5bd054df223fb09b9c739ad64cfcfd2d498b0f11056f6c40874cb977c99b6bc1a8732198a17e610082b7ce0365f271b11d4b4a3d4c7d0bb273f406ecd4b26c93151c30f5a269991402d109becb1b9bafcb2b47e940000000000e540d8b0db3774effb7469a21f96e2594b2973ebf7a1bd9ace2ed4d6eb1735f85885be5be74dc2ea5d7d499bd28271b98f187f5879b16b409a04d78175cc8d0f707c822805d7011ed4b22419186dd2b22aadf15828db2ca19d79e1bf2f7989237ee5cb2e1eb7b2bfc92d3aa95a26f060935c4fee8b2d7d0bf3c6d82d04329164bd4ee0b8060183f36762b0440d9082d7c8b06e4c2024f77e1018758d28e7ee290f32a48bfc2aa10b3dba9bff00d2410f3477a8e0df689c880dc9a677cfaa16603527c06625a3363744cea5f2d350224cc0fea76c72ca08507235c67346722f20690fde0790f040f5fd3eff75f9b291cc5e9c686ebaadbe756c6fa039ff441e427ed12578d5cb041ebf729cfaa575cc852fbdb54e60435e6d62b9d270433b220ed9ff1ff042b8d3d866231c460765"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0xf}, {0xd}, {0x3}}}, 0x24}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="a1830000000000000000356586070500000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000ffffffff"], 0x28}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) fremovexattr(r0, &(0x7f0000000200)=@known='user.incfs.size\x00') mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 3m40.145510333s ago: executing program 8 (id=6721): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newtaction={0x494, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x8000a001, 0x0, 0xc267, 0xe3df, 0xc265, 0x2, 0x800, 0x9, 0x0, 0x10, 0x40, 0x3ff, 0xfff, 0x6, 0x4, 0x7f, 0x2, 0x2135, 0xffff8001, 0x0, 0x3, 0x3, 0x8, 0xb, 0x9, 0x9fbd, 0x0, 0x1, 0x40, 0x8, 0xe, 0x7, 0x200, 0x3, 0x8, 0x107a, 0x5, 0x3, 0xd6bc, 0x3, 0x831a, 0x2, 0x9, 0x2, 0x30, 0x5, 0x87fc, 0xfff, 0x6, 0xa7, 0x7, 0xffffffff, 0xff, 0x1400, 0x7, 0x3, 0x4, 0x807fff, 0x4, 0x4, 0xfffff896, 0x2, 0x8, 0x79, 0x0, 0x80, 0x3, 0x57, 0x8, 0x7fff, 0xf, 0x0, 0x8, 0xa0, 0x1, 0x85, 0x3, 0x1ff, 0x3, 0x85bd, 0x4, 0x865, 0x6, 0xa, 0xfffffff8, 0x2, 0xfffffffa, 0xb7f, 0x8b, 0x80000000, 0x80000000, 0x8, 0x100, 0x2, 0x400, 0x2, 0x4, 0x3, 0x400, 0x5, 0x1, 0x101, 0xd4e, 0x65ad, 0x0, 0x5, 0x7, 0x32, 0x5, 0xad8, 0x3, 0x4, 0x8, 0x4, 0x1, 0x6, 0x0, 0x5, 0x0, 0x6, 0xa0, 0x8, 0x6, 0x100, 0x100, 0x200, 0x0, 0x0, 0xffff, 0x3, 0x1, 0x2, 0x3, 0xfff, 0x2, 0x6, 0x200, 0x3, 0x47, 0x0, 0x2, 0xfffffff8, 0x8, 0x7f, 0x87ca, 0x1, 0x80000001, 0x4, 0x8, 0x401, 0xffff0000, 0xed1, 0x9, 0xfffffff7, 0xfffffffb, 0xfffffffb, 0x3, 0x2, 0x0, 0x2, 0x1, 0xffffff89, 0xfff, 0x0, 0x8, 0x5, 0x0, 0x8, 0xfffffffe, 0x0, 0x4, 0x5, 0x44, 0x5, 0x0, 0x8000, 0x2, 0x0, 0x8, 0x3ff, 0x5, 0x6, 0xb, 0xca43, 0x3, 0x3, 0x6, 0x0, 0x9, 0x3, 0x7, 0x8001, 0xf0000000, 0xc, 0x3, 0x3, 0x7, 0x7f, 0x5, 0x4, 0xd, 0xffffffff, 0x2, 0x7f, 0x9, 0x7, 0x8, 0x7, 0xffff, 0x1d, 0xc5, 0x9, 0x0, 0x1, 0x5, 0x9, 0x3, 0x1, 0x5, 0x2, 0x2, 0x9, 0x7, 0x40, 0x3, 0x400, 0x8, 0x2, 0xc, 0x6, 0x9982, 0x8001, 0x1ff, 0x2706, 0x2, 0x8001, 0x0, 0x2, 0x400, 0x7e, 0xc806, 0xb, 0x1, 0x1, 0x7, 0x2, 0x5, 0x8, 0x2, 0x2, 0x3, 0x41, 0x3, 0x200, 0xc8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffff2a5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x2, 0x3, 0x7, 0x40, {0x4, 0x0, 0x3, 0x7, 0x6, 0x9}, {0x40, 0x2, 0x3, 0x435b, 0x5a44}, 0x8c79, 0x5, 0x6}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x494}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00'}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f0000000680)={[{@nojournal_checksum}, {@stripe={'stripe', 0x3d, 0x1000}}, {@dax_inode}], [{@fsname={'fsname', 0x3d, '('}}, {@euid_lt}, {@uid_gt}]}, 0xff, 0x541, &(0x7f0000001400)="$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") 3m40.08354227s ago: executing program 8 (id=6723): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x22400049, &(0x7f00000002c0)={[{@nombcache}, {@abort}, {@nomblk_io_submit}, {@noblock_validity}, {@nolazytime}, {@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@barrier_val={'barrier', 0x3d, 0xd95a}}, {@debug}]}, 0x84, 0x480, &(0x7f00000004c0)="$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") r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) syz_clone3(&(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='.\x00', 0x2046022, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000940)={0x0, 0x21, 0x0, [0x2, 0x2ce, 0x7fffffffffffffff, 0x8, 0x1], [0xe, 0x2, 0x2, 0x2, 0x7, 0x3, 0xf, 0x3a, 0x23d78041, 0x61e72da7, 0x6ed, 0xffffffff, 0x9b, 0xb, 0x5, 0xfffffffffffffffd, 0x9, 0x4, 0x2, 0x8943, 0xedbb, 0x5, 0x7, 0x7, 0x401, 0x7, 0x1ff, 0xe, 0x7, 0x1ff, 0x5, 0xfffffffffffffffa, 0x8, 0x5, 0x7, 0x1, 0x0, 0x0, 0x5, 0x7, 0xde0, 0x3, 0x5, 0x6, 0xb, 0xffff, 0xc, 0x0, 0x80000000, 0x1, 0x3, 0x7, 0x3, 0x0, 0x800, 0x7, 0x4, 0xff, 0xad, 0x8, 0xfff, 0x6, 0x7, 0x9, 0x8, 0x7, 0x7, 0x7302, 0x27, 0x4, 0x9, 0x2, 0x2, 0x2, 0xc7c, 0x2, 0x6, 0x153, 0x80000001, 0x7fffffffffffffff, 0x5, 0x4, 0x2, 0x8000, 0x8001, 0x8, 0x0, 0x800, 0xfffffffffffffff7, 0x6, 0x9, 0x1, 0x0, 0x2, 0x802, 0x6, 0x5, 0x3, 0x3, 0x2, 0x343c, 0xf8024e, 0x2b8, 0x694, 0x2, 0x20, 0x4, 0xf70, 0x10, 0x4, 0x1, 0x9, 0x217, 0x3, 0x5, 0xa, 0x7f, 0x7, 0x100, 0x0, 0x8000000000000000]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x4092}, 0x18) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendfile(r6, r5, 0x0, 0x7ffff088) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000d80)={r2, 0x1, 0x2}) 3m39.872069951s ago: executing program 8 (id=6728): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0xd, 0x4}, 0x9092, 0x0, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x157f, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x0, 0x1a}, &(0x7f0000000080), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) 3m39.428015646s ago: executing program 8 (id=6734): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x10000002}, 0x18) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) 3m39.427861476s ago: executing program 40 (id=6734): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x10000002}, 0x18) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) 3m39.264865952s ago: executing program 7 (id=6737): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f0000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x0) socket$key(0xf, 0x3, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x2, 0x6, 0x1000, 0x5a1c0, 0xffffffffffffffff, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r3 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000013c0)=ANY=[@ANYBLOB="140000005304010000000000000000000500000a140000001100010000050000000000000000000a"], 0x28}, 0x1, 0x0, 0x0, 0x64049}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r2}, 0x18) r4 = epoll_create(0x3ff) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000280)={0x2000000}) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f0000000680)={[{@nojournal_checksum}, {@stripe={'stripe', 0x3d, 0x1000}}, {@dax_inode}], [{@fsname={'fsname', 0x3d, '('}}, {@euid_lt}, {@uid_gt}]}, 0xff, 0x541, &(0x7f0000001400)="$eJzs3c9vI1cdAPDvzMa72d1skwIHqNRSaNFuBWtvGtpGHEqREJwqIcp9CYk3iuLEUey0m6iC7F+AhBAgcYILFyT+ACS0EheOCKkSnEEqAiHYggQH6CDb4/xwxom7deJd5/ORZue9N575fl+8M57xPI0DOLeejYjXIuL9LMteiIjpvD3Np9jtTK3Xvffg7cXWlESWvfH3JJK8rbutJJ9fzVebjIivfzXiW8nRuI3tndWFWq26mdcrzbWNSmN75+bK2sJydbm6Pjc3+/L8K/Mvzd8aSj+vRcSrX/7zD777s6+8+qvPvfWn23+98e1WWlP58oP9+IAmjlvY6Xrp0mTPCpsPGexR1OpPqVu5PNg6904xHwAA+mud438kIj4dES/EdFw4/nQWAAAAeAxlX5yK/yYRWbGLfdoBAACAx0jaHgObpOV8LMBUpGm53BnD+7G4ktbqjeZn79S31pc6Y2VnopTeWalVb+VjhWeilLTqs+3yfv3FnvpcRDwZEd+fvtyulxfrtaVRf/kBAAAA58TVnuv/f013rv8BAACAMTMz6gQAAACAU+f6HwAAAMaf638AAAAYa197/fXWlHV//3rpze2t1fqbN5eqjdXy2tZiebG+uVFerteX28/sWztpe7V6fePzsb51t9KsNpqVxvbO7bX61nrz9kpMnkmHAAAAgCOe/OT9PyQRsfuFy+2p5eKokwLOxMReKcnnBXv/H5/ozN89o6SAM3FhgNe8e6m43XkCPN4mehv67OvA+CmNOgFg5JITlvcdvPPbfP6p4eYDAAAM3/VPFN//P+l6IGI3PYP0gFNkJ4bzq+f+fzY9qkSAM9e+/z/oQB4nCzBWSgONAATG2Ye+/3+iLPtACQEAAEM31Z6StJx/vTcVaVouR1xr/yxAKbmzUqveiognIuL306VLrfpse81kgDECAAAAAAAAAAAAAAAAAAAAAAAAAEC0n8qdRAYAAACMtYj0L8mvO8/yvz79/FTv9wMXk/+0fxL4YkS89eM3fnh3odncnG21/2OvvfmjvP3FUXyDAQAAAPTqXqe35/8edTYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjJv3Hry92J0GePnlYcX925ciYqYo/kRMtueTUYqIK/9MYuLAeklEXBhC/N17EfHxovhJK629kEXxh/FHOCF+zOR/haL4V4cQH86z+63jz2tF+18az7bnxfvfRMSh+sPqf/yLvePfhT77/7UBYzz1zi8qfePfi3hqovj4042f7MdPD8Z/bsD43/zGzk6/ZdlPIq53P3/aR7yDEfZLlebaRqWxvXNzZW1hubpcXZ+bm315/pX5l+ZvVe6s1Kr5v4Uxvvf0L98/rv9XCj//kjybQ/0/lNPzBdsr+kz63zt3H3y0W9k9Gv/GcwXxf/PT/BVH46d5nM/k5dby693ybqd80DM//90zx/V/ab//pRPe/0P9v9Fvo72O7ChPD/pfBwA4BY3tndWFWq26ObaF1lX6I5DGwxe659yPSj5jVPjOUDeYZVnWeqMKFt2PiEG2kwz7XU6L89kv9D0CjPa4BAAADN/+Sf+oMwEAAAAAAAAAAAAAAAAAAIDz6yyestYbc/8RyMkwHqENAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAU/w8AAP//9mHQfQ==") r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)=@newqdisc={0x40, 0x24, 0xd0f, 0xfffffff9, 0x25dfdbfe, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0x4}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x2}, @TCA_PIE_ALPHA={0x8, 0x4, 0xb}]}}]}, 0x40}}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 3m39.039691734s ago: executing program 7 (id=6742): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fcntl$notify(r0, 0x402, 0x37) getdents(r0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x40001000, 0x3a, 0x0, 0x0, 0x1}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000100)) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) read$qrtrtun(r3, 0x0, 0xeffd) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x403f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000680), &(0x7f00000006c0)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)=@known='system.posix_acl_default\x00') bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x204000, 0x1000, 0x0, 0xf0000}, 0x20) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newtaction={0xc90, 0x30, 0xffff, 0xfffffffe, 0x25dfdbfb, {}, [{0xc7c, 0x1, [@m_police={0xc78, 0x1, 0x0, 0x0, {{0xb}, {0xc4c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x5, 0xc4e, 0x3, 0x5, 0xfffffffc, 0x0, 0x0, 0xfffffff7, 0x1000, 0x4c10, 0x5, 0x6, 0x9, 0x3, 0x1, 0x4, 0x8001, 0x5, 0x9, 0x7, 0x9, 0x1, 0x80000001, 0x49, 0x836, 0x6, 0x2, 0x4, 0x5, 0x1, 0x1ff, 0x4, 0x9, 0x3, 0x6e89, 0x7, 0x8, 0x6, 0x8, 0x3, 0x3, 0x3, 0x6, 0x5, 0x80000001, 0x4d, 0x2, 0x3, 0x7, 0x40, 0xe, 0x9, 0x9, 0x5, 0xfffffffd, 0xada8, 0x1, 0x7cf816ed, 0x6, 0x9, 0x1, 0x7f, 0x10001, 0x3ff, 0x8, 0x5, 0x336, 0xc4, 0x5, 0x400, 0xff, 0x1000, 0xfffffff7, 0x7, 0x3, 0x4, 0x1000, 0x4, 0x4, 0xffff, 0x4, 0x9, 0x7, 0xd, 0x8, 0x6, 0x8, 0x1, 0x6, 0xfffff2f9, 0x9, 0x2, 0x2f05, 0x6, 0x800, 0x8, 0x5, 0x5, 0x2, 0x4b9, 0x80000000, 0x6, 0x4, 0x80000001, 0x4, 0x202e, 0x3, 0xfffffffb, 0xe5a, 0x5, 0x5, 0x4, 0x6, 0x0, 0x6, 0xcec1, 0xffffffff, 0x6, 0x8, 0x4, 0x1, 0x8, 0x5, 0x5, 0xb8, 0xb28, 0x2, 0x5, 0x7fffffff, 0x0, 0x60, 0x9, 0x8, 0x9, 0x4, 0x9, 0x80000001, 0x9, 0x63, 0x7fff, 0x100, 0x412d, 0x98ad, 0x3, 0x7fff, 0xffffffff, 0x16e5, 0x10000, 0x8, 0x80000004, 0xd, 0x7, 0x4ca7, 0x9, 0x6, 0x1, 0x3, 0x13, 0x2, 0xb, 0x6, 0x6, 0x2, 0x5a5a605, 0xc7f, 0xb9f, 0x8, 0xa, 0x4, 0x0, 0x4, 0x80000000, 0x58, 0x5, 0x0, 0x9, 0x0, 0xff, 0x80000000, 0x9, 0x1, 0x7b, 0x0, 0x3, 0xffffe209, 0x7, 0x2000000, 0x9, 0x2, 0x800, 0x7, 0xffff, 0x8, 0xadcd, 0x4, 0x7, 0x2, 0x9, 0x8, 0x4, 0x7, 0x2000008, 0x6, 0x101, 0x600, 0x5, 0xd, 0x9, 0x1, 0x10000, 0x3cba, 0xc, 0xff, 0xab3, 0xa1f2, 0x800, 0x3, 0x1, 0x4, 0x7fffffff, 0x2, 0x0, 0x80000000, 0x3, 0x3, 0x10000, 0x6, 0x2, 0x4, 0xa2d7038, 0xd, 0x0, 0x0, 0x6, 0x0, 0x5, 0x3, 0x40, 0x8, 0xae4d, 0x3, 0x8, 0xe3, 0x7cc9, 0x8001, 0x800, 0xc, 0x2, 0x0, 0x0, 0x8, 0xff, 0x0, 0xe891, 0xe9]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x6, 0x5, 0x9, 0xffffffdb, 0x6, 0x1, 0x9, 0x34f, 0x3, 0x6, 0x7, 0x986b, 0x40, 0x8, 0xeea, 0x3, 0x9, 0x9, 0x9, 0x7fff, 0x3, 0x86, 0x6, 0x5, 0x532c, 0xfffffffb, 0x0, 0x80000000, 0x6, 0x2, 0x8, 0x8001, 0xffff, 0xffff7f6f, 0x6, 0x0, 0x8, 0x4, 0x3, 0x1000, 0x9, 0x5, 0x7, 0x5, 0xfffffffb, 0xfff, 0x5, 0x8, 0x7fe703d2, 0x4, 0x8001, 0x55e, 0x3, 0x7, 0x6, 0xe, 0xe2f6, 0x3, 0xfffffc14, 0x4, 0xfffffff1, 0x2, 0x5, 0x6, 0xc5, 0x0, 0xd, 0x8, 0x5, 0xdcc, 0x300000, 0xffff, 0x10001, 0xfffffffd, 0x5a, 0x10006, 0x2, 0x1, 0x0, 0x9, 0x1, 0x4, 0xf, 0x800, 0x1b6, 0x7, 0xf, 0x81c5, 0xfffffffa, 0xd, 0x9, 0xfffffffd, 0x6, 0x10001, 0x1022000, 0x4, 0x22c5, 0x2, 0x2, 0x0, 0x9aa7, 0x14a476c4, 0xd54, 0x1, 0x39e, 0x2, 0x3ff, 0x0, 0x5d02, 0x8, 0x7, 0xff, 0x2dd8, 0x7, 0x3, 0xff, 0x6, 0x3, 0x6, 0x7, 0x713a, 0x9, 0x400, 0x1, 0x1000004e, 0x80, 0x9, 0x8, 0x8, 0x80000000, 0x8, 0x6, 0x3, 0x5, 0x2, 0x2, 0x6, 0x7fff, 0x4, 0x2, 0x4, 0x2, 0x8, 0x6, 0x1, 0x4, 0x5, 0xfffffffe, 0x10, 0x8, 0x0, 0xfe3, 0x8, 0xee, 0x2, 0x8, 0x0, 0x400, 0x7, 0xe45, 0x5, 0x2, 0x80, 0x3, 0x398, 0x40, 0x6, 0x2d4, 0x3, 0x7, 0x6, 0x26, 0x200, 0x1bb, 0x1ff, 0x7, 0x7ffffc, 0x502e, 0x3, 0x8, 0x4, 0x7, 0x80000001, 0xce, 0x9, 0x1, 0x9, 0x1000, 0xffff, 0x7, 0x2, 0x2, 0x5, 0x9, 0x10000000, 0xfffffffd, 0xd, 0x6, 0xdf3, 0x1, 0x910, 0x3ff, 0x9, 0x8, 0x4, 0x1ff, 0x7fff, 0x401, 0x6249d0dd, 0x2e01, 0x1, 0x9, 0x5, 0x7fffffff, 0x361, 0xfffffc01, 0x6, 0x337, 0x28, 0x6, 0x1, 0x6fa, 0x8001, 0x400, 0x0, 0x7, 0xffffffff, 0xfffffff7, 0xfffffff9, 0x7a2, 0x0, 0x8, 0x200, 0xa40, 0x4, 0xfff, 0x1, 0x3, 0x3, 0xf, 0x400, 0x4, 0x4b4, 0x0, 0x7e, 0x5, 0x960, 0x8, 0xff, 0x98e, 0xfffffff9, 0x800, 0x2, 0x9, 0x1a]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x3, 0x5a, 0x7, 0x4, 0x0, 0x1, 0x5, 0xffffff40, 0x3, 0x7, 0x7ff, 0xfffffff7, 0x2, 0x4, 0x81, 0xff7d, 0x30, 0x2, 0x0, 0x1, 0x2, 0x5, 0x2, 0x7f, 0x7, 0xfffffffc, 0x0, 0x80000001, 0x0, 0x4, 0x80, 0x3, 0x7ff, 0x1, 0x4, 0x7, 0x80000001, 0x9, 0x3ff, 0x6, 0x2, 0x87e, 0x3, 0x81, 0x7, 0x400, 0x32c, 0x6, 0x7ff, 0x800, 0x2, 0x6, 0x2, 0x1, 0x3, 0x1c000000, 0x7fffffff, 0x5, 0xfff, 0x2, 0xe, 0x81, 0x6c0, 0x400, 0x7, 0x1, 0x2, 0x4, 0x80, 0x3, 0x7, 0x7fffffff, 0xfffffffe, 0x6, 0x5, 0x7, 0x64f3bf24, 0x3, 0x4, 0x9, 0x401, 0x32, 0x7, 0xc, 0x5, 0x3, 0x8, 0x7, 0xff, 0x1, 0xc9fd, 0x7000000, 0x1, 0x3, 0x0, 0x2, 0x5, 0x0, 0x1, 0x6, 0x7, 0x0, 0xfdb, 0x237, 0x1, 0x7, 0x9, 0xffffffff, 0xed, 0x1, 0xc5a, 0x80, 0xffff17b8, 0x9, 0x8, 0x0, 0x72, 0xe00000, 0x2, 0xffffffff, 0x2, 0x6, 0x9, 0x18000, 0x4, 0x8, 0x9, 0x0, 0xbe98, 0x10001, 0x9, 0x7f, 0x3, 0x1, 0x383d, 0x7fff, 0xfffffffd, 0x1, 0x3, 0x9, 0xffffff81, 0x100, 0x3, 0x3, 0x2, 0x200, 0xf, 0x8, 0x4, 0x6, 0x6, 0x0, 0x7, 0x283a364a, 0x6, 0x100, 0x0, 0x3, 0x2, 0x8001, 0x40, 0x9, 0x4, 0xacfe, 0x0, 0x2, 0x5, 0xfffffff8, 0xfffffff8, 0x9, 0x94e, 0x3, 0x2, 0x94, 0x8, 0xc, 0x9, 0x3ff, 0x3, 0x6, 0xd, 0x69, 0x9b, 0xfff, 0xffff, 0x4, 0x4, 0x3, 0x80000001, 0x2, 0xf48, 0x5, 0x4, 0x0, 0x8001, 0x80000000, 0x8, 0x2, 0x5, 0x4, 0x0, 0xffffffff, 0x100, 0x9e5ffad1, 0x1c000, 0x12, 0x7, 0x5, 0x3, 0xf92, 0x5, 0x1, 0xffff, 0x7, 0x7fffffff, 0x8, 0x6, 0x968, 0x10, 0x3, 0x7, 0x8, 0x30, 0x0, 0x400, 0x2, 0x6, 0x1, 0x3, 0x4, 0x7, 0x6, 0x8, 0x7, 0x3, 0x40000000, 0x9, 0x0, 0x4, 0x84ee0dfd, 0x3, 0x200, 0xd, 0x4, 0x7, 0x0, 0x8, 0xd9, 0xfff, 0xb85d, 0xa, 0x401, 0x7, 0x5, 0x25b3]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x81, 0x2, 0x4, 0x8, 0xf, {0xd, 0x0, 0x2, 0x4, 0x0, 0x3}, {0x2, 0x2, 0x5, 0x5a, 0x2, 0x9}, 0x23a, 0x7, 0xd000000}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc90}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m38.18437548s ago: executing program 7 (id=6759): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x22400049, &(0x7f00000002c0)={[{@nombcache}, {@abort}, {@nomblk_io_submit}, {@noblock_validity}, {@nolazytime}, {@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@barrier_val={'barrier', 0x3d, 0xd95a}}, {@debug}]}, 0x84, 0x480, &(0x7f00000004c0)="$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") r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) syz_clone3(&(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='.\x00', 0x2046022, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000940)={0x0, 0x21, 0x0, [0x2, 0x2ce, 0x7fffffffffffffff, 0x8, 0x1], [0xe, 0x2, 0x2, 0x2, 0x7, 0x3, 0xf, 0x3a, 0x23d78041, 0x61e72da7, 0x6ed, 0xffffffff, 0x9b, 0xb, 0x5, 0xfffffffffffffffd, 0x9, 0x4, 0x2, 0x8943, 0xedbb, 0x5, 0x7, 0x7, 0x401, 0x7, 0x1ff, 0xe, 0x7, 0x1ff, 0x5, 0xfffffffffffffffa, 0x8, 0x5, 0x7, 0x1, 0x0, 0x0, 0x5, 0x7, 0xde0, 0x3, 0x5, 0x6, 0xb, 0xffff, 0xc, 0x0, 0x80000000, 0x1, 0x3, 0x7, 0x3, 0x0, 0x800, 0x7, 0x4, 0xff, 0xad, 0x8, 0xfff, 0x6, 0x7, 0x9, 0x8, 0x7, 0x7, 0x7302, 0x27, 0x4, 0x9, 0x2, 0x2, 0x2, 0xc7c, 0x2, 0x6, 0x153, 0x80000001, 0x7fffffffffffffff, 0x5, 0x4, 0x2, 0x8000, 0x8001, 0x8, 0x0, 0x800, 0xfffffffffffffff7, 0x6, 0x9, 0x1, 0x0, 0x2, 0x802, 0x6, 0x5, 0x3, 0x3, 0x2, 0x343c, 0xf8024e, 0x2b8, 0x694, 0x2, 0x20, 0x4, 0xf70, 0x10, 0x4, 0x1, 0x9, 0x217, 0x3, 0x5, 0xa, 0x7f, 0x7, 0x100, 0x0, 0x8000000000000000]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x4092}, 0x18) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendfile(r6, r5, 0x0, 0x7ffff088) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000d80)={r2, 0x1, 0x2}) 3m37.934615375s ago: executing program 7 (id=6761): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) setitimer(0x1, &(0x7f0000000080)={{}, {0x0, 0xea60}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket(0x1, 0x803, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x8) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYRES32=r7], 0x5c}}, 0x40) 3m37.447002034s ago: executing program 7 (id=6763): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000640)="0800f8db3d0aa6b7386a", 0xa}, {0x0}], 0x2}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) r2 = msgget$private(0x0, 0x40) msgrcv(r2, 0x0, 0x0, 0x0, 0x0) msgsnd(r2, &(0x7f0000000380)={0x2}, 0x8, 0x0) 3m37.446591284s ago: executing program 41 (id=6763): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000640)="0800f8db3d0aa6b7386a", 0xa}, {0x0}], 0x2}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) r2 = msgget$private(0x0, 0x40) msgrcv(r2, 0x0, 0x0, 0x0, 0x0) msgsnd(r2, &(0x7f0000000380)={0x2}, 0x8, 0x0) 2m17.404837176s ago: executing program 1 (id=8260): socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x6025, 0x4005, 0xe, 0x0, 0x80, 0x4001, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c01000015000a001800feffffff09000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r3}, 0x10) getrusage(0x0, &(0x7f0000000800)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r4, 0x0, 0x0, 0x20000880, &(0x7f0000000240)={0xa, 0x4e24, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) poll(0x0, 0x0, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x2, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x40000) 2m17.244879332s ago: executing program 1 (id=8263): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e20, 0x7ff, @mcast2, 0x6}}, 0x2000, 0x430, 0x6, 0x0, 0x2}, &(0x7f0000000000)=0x98) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r1, 0x0, 0x3}, 0xc) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x18) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000001c0)=0x1, 0xfcbe) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)="964a6c5176e84b4d7ad04e", 0xb}], 0x1}, 0x4048081) add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000040)=0x810, 0x4) request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) connect$can_j1939(r2, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0x1, 0x4}}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 2m17.214350845s ago: executing program 1 (id=8264): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="cc3be46e2ffe92111000010400000000", @ANYBLOB="0400"/12, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) io_setup(0x8f0, &(0x7f0000002400)) syslog(0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) lsm_get_self_attr(0x65, &(0x7f0000000080)={0x0, 0x0, 0xb9, 0x99, ""/153}, &(0x7f0000000000)=0xb9, 0x0) (fail_nth: 2) 2m16.823450344s ago: executing program 1 (id=8270): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES16=r0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000340)={0x0, &(0x7f00000000c0)}) poll(0x0, 0x0, 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1a, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000001f00)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRESHEX], 0x8, 0x2eb, &(0x7f00000004c0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x3, 0x14, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cf6d61fd01335263bd9bffbcc2542ded71038259ea171ce1a320ef54ec32d71e14ef3dc177e9b48b009000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x3]}) setxattr$security_ima(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200), &(0x7f0000000240)=@md5={0x1, "890000000000cac563e62f5b0cf700"}, 0x11, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) utimensat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0/../file0\x00', 0x0, 0x100) syz_mount_image$vfat(&(0x7f0000000840), &(0x7f0000000880)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xbd053, 0x0, 0x4, 0x0, &(0x7f00000008c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a54000000060a0b040000000000000000020000000900020073797a320000000028000480240001800a000100696e6e650100006befdd4ff953b66f40000000070800014000000000090001007379ff3100000000140000001100010200000000000000000300000a"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000500000000000a50000000060a010400000000000000000200000324000480200001800e000100627974656f726465720000000c00028008000140000000120900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x78}}, 0x44000) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r7, 0x0, {0x2, 0xff}, 0xfe}, 0x18) 2m16.253636181s ago: executing program 1 (id=8279): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) 2m16.010717845s ago: executing program 1 (id=8283): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="a400000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000140000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18050, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x1216, 0x10000, 0x5, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ff"], 0x5c}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000b40)={'wpan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x38, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008894}, 0x44010) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r1, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008044}, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="1500000000000000000001000000100002800c00018008000100030000000c00018008000100", @ANYRES32=r8], 0x30}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r9, 0x0, 0x9}, 0x18) r10 = getpgid(0x0) r11 = syz_pidfd_open(r10, 0x0) r12 = pidfd_getfd(r11, r11, 0x0) setns(r12, 0x66020000) umount2(&(0x7f0000000040)='.\x00', 0x2) write$binfmt_aout(r12, &(0x7f0000001280)=ANY=[@ANYBLOB="07010509120100007f0000009b000000bf020000400700000000000000000000ff8b79e84eb722a867e5e323df8b77275a77b7632efa46d4cc990ee4f465ea62513cb8c8dbac2b3b77d0551a88beeeba52be92400f6463d9de13222a72d80b54340aec4d1d631a076c61e09bb4a1507216660fc80684a00fce2f2bd6f1011ef3b1b4cc81"], 0x84) 2m16.010393336s ago: executing program 42 (id=8283): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="a400000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000140000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18050, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x1216, 0x10000, 0x5, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ff"], 0x5c}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000b40)={'wpan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x38, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008894}, 0x44010) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r1, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008044}, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="1500000000000000000001000000100002800c00018008000100030000000c00018008000100", @ANYRES32=r8], 0x30}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r9, 0x0, 0x9}, 0x18) r10 = getpgid(0x0) r11 = syz_pidfd_open(r10, 0x0) r12 = pidfd_getfd(r11, r11, 0x0) setns(r12, 0x66020000) umount2(&(0x7f0000000040)='.\x00', 0x2) write$binfmt_aout(r12, &(0x7f0000001280)=ANY=[@ANYBLOB="07010509120100007f0000009b000000bf020000400700000000000000000000ff8b79e84eb722a867e5e323df8b77275a77b7632efa46d4cc990ee4f465ea62513cb8c8dbac2b3b77d0551a88beeeba52be92400f6463d9de13222a72d80b54340aec4d1d631a076c61e09bb4a1507216660fc80684a00fce2f2bd6f1011ef3b1b4cc81"], 0x84) 3.126926547s ago: executing program 6 (id=9863): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r5}, 0x10) socket$netlink(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) 2.070452443s ago: executing program 3 (id=9865): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000000008010e000000000000000003000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000008000004f3c0000000000000000000000664de69122480f1f7184cae2b68844162c6b305815f196fc6846f8704cb45fe8471b31bd8bc0500ad5ce59c154bb2d28d717775d6b8fb703c56eae26544c93a999"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) r3 = getpgrp(0x0) r4 = syz_pidfd_open(r3, 0x0) fsetxattr$trusted_overlay_nlink(r4, &(0x7f00000018c0), 0x0, 0x0, 0x3) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r5}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r7, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfffffffa}}], 0x18}, 0x200040c4) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYRESHEX=r0], 0x64}}, 0x4004000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd2b, 0x25dfdbfb, {0xa, 0x80, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2300}}, 0x1c}}, 0x40000) fchdir(r2) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0xb8, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) lseek(r9, 0x289e0cb5, 0x0) 1.583629062s ago: executing program 6 (id=9867): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r2, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0xb87, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) 1.373228903s ago: executing program 3 (id=9868): socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x6025, 0x4005, 0xe, 0x0, 0x80, 0x4001, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c01000015000a001800feffffff09000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f", 0xd5}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r2}, 0x10) getrusage(0x0, &(0x7f0000000800)) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x2, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x40000) 1.251771195s ago: executing program 2 (id=9871): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000e7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mount$9p_rdma(0x0, &(0x7f00000005c0)='./cgroup\x00', &(0x7f0000000600), 0x2800004, &(0x7f0000000000)=ANY=[]) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0b000000080000000c7826bd7fadfa3fddc2970793cb000000ffffffff01000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000a80)={0x3, &(0x7f0000000780)=[{0x1ff, 0x4, 0x6, 0x2}, {0x6, 0x7f, 0x5, 0x9}, {0x8, 0x5, 0xf, 0x1}]}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000c00)={0x8, 0x80, 0x0, 0x4, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x9, 0x6}, 0xffffffffffffffff, 0x0, r2, 0x0) getrusage(0x1, &(0x7f0000000000)) r7 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r8 = syz_usb_connect$rtl8150(0x2, 0x3f, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r8, &(0x7f0000000600)={0x14, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000840)=ANY=[@ANYBLOB="c83566080ae467000304b4b90d2c58c007dd250db9fc1b41989c3aac79dbbc06eead9babc6ce1a99fa91b8013f734470c498149e0e125c0aaa0813a31fccaaf87023a71af72745ce35f20370f061502374e010f57b345d5bb5cea7b976ba877d1630cdcde08d994d2186e5"]}, &(0x7f0000000800)={0x2c, &(0x7f0000000640)={0x40, 0x1, 0x92, "57d6b0935b6507884ba2f27bedc2f71b9dc355d2c912c1be4b2e04e258683e25cc4f92d8329fc415b859b59cee4b0915ddc4e39ac2b958ec5bfefc1a31cc97a4d4e866e0d0eb154dca6bf4bf121563c03c0f08da283ece23806f4822867c92122819e4dbee229c43acdba4cc5bb33d930eedb7d87f4a146822b080ba36bb53973270e56762e04bdc330924c875dc470602e7"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0}) syz_emit_ethernet(0x7e, &(0x7f00000004c0)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x48, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7d0, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, [@srh, @dstopts={0x1d, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x7}]}]}}}}}}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r9, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef2885"], 0xffdd) ioctl$TUNATTACHFILTER(r9, 0x401054d5, &(0x7f00000005c0)={0x0, &(0x7f00000003c0)}) r10 = fsmount(r7, 0x0, 0x0) write$char_usb(r6, &(0x7f00000010c0)="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", 0x1c4) fchdir(r10) sendmsg$key(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a00)=ANY=[@ANYBLOB="021306090c00000027bd7000ffdbdf250800120001000300000000000500000006006c000a09000003000000000000007ffcff01000000000000000000000000fe8000000000000000000000000000ac02000a0060a60000000000000000000008c8db79af3b9ab5bcea8b76ddefc5fba5e6b5a68c98f0e996b1df"], 0x60}}, 0x10) 1.223849868s ago: executing program 6 (id=9872): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000ffff25bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2002000000200500280012800b00010065727370616e0000180002800400120006001800050000000500160000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000100000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="dfbf00000000000000006700000008000300", @ANYRES32=r1, @ANYBLOB="0800c300741300000800c4"], 0x30}, 0x1, 0x0, 0x0, 0x240408c3}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r6}, 0x10) r7 = memfd_secret(0x0) ftruncate(r7, 0x51a9497) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) writev(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000001c80)="78e8d4c7", 0x4}], 0x1) 1.196791991s ago: executing program 3 (id=9873): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000200)={r3, 0xc5}, 0x0, &(0x7f0000000580)="951aef3aaf1ba05f3da1bc522b0b70bedf1a43dc99f778a45a9f09b6a7df17b2eeddd5e44f1bd46110e964e8baa7e3e6e271c89f1fddf8de5b3f2d74b4abf96fc7bad7921fa99fbd7c035247413afa4e181d8737001e53dfea5c578f1c4d974cb7fa9f40bc0af5bbede079f0b6012086846e00d982fb3ec177ad349ad6df95e606f9490d43cedae2ba39aea8003463fedb76b388fe86052e507076f1ad449568b47306ffd0d669146a450dbfe316103c57368246aaa1ac7d4956b5a6f4bc5e6e65ddf4272b", 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x3}, 0x18) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000004c0)={r7, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x47}}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={r7, 0x1, 0x6}, 0x10) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r7, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x6c, 0x24, 0xf0b, 0x709d2e, 0x25dfdbfd, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xf39a0a944d4bc56b}, @TCA_TBF_BURST={0x8, 0x6, 0xfff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x2, 0x9, 0x3, 0x4, 0x9}, {0xfe, 0x1, 0x1, 0x1, 0x1, 0x1000000}, 0x6, 0xffffffff, 0x1bf4}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x3c000001}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='erofs_readpage\x00', r10}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) lseek(r11, 0x7, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4804}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0) 1.145810586s ago: executing program 6 (id=9874): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x18) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) kexec_load(0x5, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}, {0x0, 0x40, 0x3e0000}], 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r2 = memfd_create(&(0x7f0000000480)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x03\x00\x00\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xcaX\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\xb1\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedP\xff\xff\xff\xff\xff\xff\xff\xef)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xb4Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x9b-\xe3\xe6R\xa2T\x1e\n!\xad$\x93c\xd3\"\xd6\xa1\xd6\xfc\v\x81\x9e\xc1\xb3T\n\xd9\xff\x18 \xf8\xc4\xef\xd2\xb0\xf8\x80\xb8\x1e\xb7fo\x1c\a\xc9\x1a!D\xde\xc6\xf1\x13\xc2F\xc44A\x1d\xb7\xe6\xfbB\xee4\xa1\xdf+\xa5\xb1\xc2\xfb\xc0\t\x15\x7fA{\xe0\xc7\xe0\x96\xc9\xe6\x8fk\xe6\x87;\x03\xff\xb0\x10\x10\x1e\x14\x99\xc7\xd5)\x8d\xc7\xf0\xfd\xe9d\xc9\xce\x85\x88\x88\xcd\xf6\xb2\xbf\xf8E\xe4\xd8\xd0\xe00\xbd\xc2M\xe7\x1b\xac\xc0\v\xb0\xfc\"\x12\x8d\xa5\x96\x10\xf3\x82~2\xa3[\xa4w]\n\xb1+\xac\bR&B\xebW0\xe2\xffBO9y\x8e\xb6\x03\x99\r', 0x3) r3 = dup(r2) write$binfmt_elf64(r3, &(0x7f0000000c00)=ANY=[@ANYBLOB="7f454c4606ff78a3050000000000000002003e00cd220000c9030000000000004000000000000000ea02000000000000020001000500380001000600b10600040300000081000000ff000000000000000900000000000000070000000000000009"], 0x178) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7177}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x5d6aff9e) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000080)={r6, @in6={{0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, 0x5, 0x0, 0x80000003, 0x104, 0xe2d8f2eb1d010935, 0x7, 0x6}, 0x9c) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r6, 0x2}, &(0x7f00000000c0)=0x8) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_TXQLEN={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) 895.330681ms ago: executing program 3 (id=9880): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="16000000000000005eb100000200000000000000", @ANYRES32, @ANYBLOB="00000000000000d4000000000000000100002000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = socket(0x1e, 0x4, 0x0) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r1, 0x2285, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0c00000f7fc08f4d111fbdf23ea32dbb0664a5f74677deda3fa0b7327bd49eb067a0689fff2a41cfbf0e9d8524400000000", 0x36}], 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='mm_page_free\x00', r2, 0x0, 0x2}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="000086dd050056005400000060ec"], 0xfdef) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001e00)={0x121c, r6, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x68}, @void, @val={0xc, 0x99, {0x6, 0x1c}}}}, [@NL80211_ATTR_VENDOR_DATA={0xfe, 0xc5, "07a37fa0825ec7e99e02b10d8346d148b6c0a94c09aed71cc41e23dd5c5328e9064711ccb9a905b9347e694adc7c701d6edae15d809e6623d1f2256ece61527f2d8d06b3f2990e1b4369976b3bc349313fbad3051a63f72571cd7fe50ee06e1b1082fb7a5d6aed94e50c0f9571175186402347a3ec3f6d58e2ba4db83e2ccb36fec7cbce658282b9e5c12007415b810b941bd8d73525a70ae98cee7922c80bfa29694e6d5672fc712be47d0283eeaeede30a725d332a8e7e4644970be3cc20359a1a1f5846c5c07118dff9160868d146581c15baae7b514aa6994a59397e9c58e723bd6fbba6b648d64614175a750b979bd049126500dd83a168"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xb}, @NL80211_ATTR_VENDOR_DATA={0x58, 0xc5, "a3219ba0b93a87d387f9bd627e7d46854876b6acf3ec88e0e4c8483fd1000b36810d6d218e46271b7f5f435108d67cf39e9bc8dd28519e5c5e35423e1c3c89b0f39a70f128da291c504574097c1b2cc89ba6798a"}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_DATA={0x78, 0xc5, "806fb7f1acd3db41a89a69fb6a6a8070229fccebd8724d25614a0466a97b81e71555bed77d6c7d3ebe520d9c5e7d5d6e7fedcd2d4a07ddae67e325b13fe45b58e9fbf412eb24b34ab07a78c7057bbae873001ff60583f9fe5c67bf06d64d86d84fb17e3b24ece191e0faba60fdf9be45f2a098a4"}]}, 0x121c}, 0x1, 0x0, 0x0, 0x8804}, 0x8000) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r4], 0x38}}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={0x1, 0x0}, 0x20) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r9, 0x7}, &(0x7f0000000240)=0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x8, 0x80, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x20046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x2, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 587.623052ms ago: executing program 2 (id=9884): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000ffff25bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2002000000200500280012800b00010065727370616e0000180002800400120006001800050000000500160000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000100000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="dfbf00000000000000006700000008000300", @ANYRES32=r1, @ANYBLOB="0800c300741300000800c4"], 0x30}, 0x1, 0x0, 0x0, 0x240408c3}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r6}, 0x10) r7 = memfd_secret(0x0) ftruncate(r7, 0x51a9497) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) writev(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000001c80)="78e8d4c7", 0x4}], 0x1) 554.141495ms ago: executing program 5 (id=9885): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffa, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6}]}) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0502103, &(0x7f00000001c0)) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r6, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) (async) r7 = socket$netlink(0x10, 0x3, 0x10) (async) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) (async) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r7, 0x0, 0x24040840) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) sendmsg$AUDIT_ADD_RULE(r7, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000a00)={0x42c, 0x3f3, 0x8, 0x70bd2c, 0x25dfdbfb, {0x6, 0x1, 0x31, [0x6, 0x4, 0x8d, 0x3, 0x4, 0x401, 0x1, 0x9, 0x4ab9, 0xfffffff6, 0x3, 0x8, 0x4, 0x780, 0x1da, 0x6, 0xffff, 0x6, 0xe, 0x7fffffff, 0x10001, 0xfff, 0x10001, 0x92, 0x0, 0x2, 0x3, 0x67c, 0x5, 0xfffffff7, 0x80000000, 0x8, 0x5e68, 0x6, 0x7fffffff, 0x1, 0x1, 0x5, 0x8, 0x5, 0x7fffffff, 0x7ff, 0x1, 0x3, 0x0, 0x9, 0x400, 0x0, 0x7fff, 0x7, 0x0, 0x6, 0xfff, 0xffffffff, 0x8, 0xffff064f, 0x200, 0x8, 0xd, 0x8, 0x7, 0x4, 0x800, 0x40], [0xfed, 0xcb, 0x80, 0x4, 0x3, 0x8, 0x7f, 0x6, 0x1de00, 0x9b33, 0x40c, 0x0, 0x1, 0x5, 0x7, 0x6, 0x0, 0x4, 0x10, 0x1, 0x15, 0x2, 0x4da, 0x0, 0x5, 0x7, 0xf287, 0xcc70, 0xd6, 0x1, 0x2, 0x5, 0x6, 0x70000, 0x100, 0xb1b, 0x1, 0x1, 0x4, 0x0, 0x293a, 0xffffffff, 0x7, 0x3, 0x4, 0x2, 0x3, 0x8, 0x5, 0x4, 0x2, 0x1, 0x8, 0x8, 0x4b, 0x0, 0x3, 0x6, 0x3, 0x7ff, 0x8000, 0x5, 0x7, 0x877c], [0x7f8, 0xca, 0x6dcd, 0x1, 0xff, 0x42c, 0x3, 0x424, 0x0, 0xd, 0x8, 0xb, 0x2, 0x7, 0x10000, 0x1, 0x1, 0x5, 0xfffff801, 0x4, 0x10, 0x66d6, 0x54, 0x4, 0x2, 0xc, 0x2, 0x42, 0x4, 0x7f, 0xda8, 0x1000, 0xf, 0x4, 0xae3b, 0x0, 0xc, 0x0, 0x40, 0x2, 0x0, 0x4, 0xfffffff8, 0x5, 0x6, 0x7, 0x1, 0x4, 0x7, 0x3, 0x1000, 0x3ff, 0x8, 0x2, 0x9, 0xf421, 0x942d50b, 0x9, 0x2, 0x7, 0x8, 0x0, 0x5, 0x71], [0x2, 0x0, 0xf0c, 0x5, 0x2, 0xfffffff8, 0x1, 0x9, 0xfff, 0x1, 0x1, 0xfff, 0x6, 0x7, 0x825e, 0x80000000, 0x0, 0x7ff, 0x1, 0x1, 0x101, 0x5f7cb7c0, 0x8d, 0x3ff, 0x36b5d1c5, 0x4, 0x0, 0xc, 0x2, 0x4, 0x0, 0x5a5fbfdb, 0xc468, 0x0, 0x4, 0x3, 0xab1, 0xfffff801, 0x9, 0x6, 0x9, 0x40, 0x4800, 0xdd6cc700, 0x3, 0xfff, 0x0, 0xd728, 0x6, 0x6, 0x6, 0x0, 0x44f4, 0xf, 0x2, 0x2d, 0x5d, 0x2, 0x7, 0xb, 0x80000000, 0x97e, 0xff, 0x80000000], 0xc, [']{--!!,\xc6(\\^\x00']}, ["", "", "", ""]}, 0x42c}, 0x1, 0x0, 0x0, 0x800}, 0x20004884) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r10}, 0x10) (async) sendto$inet6(r0, 0x0, 0x0, 0x2000c851, 0x0, 0x0) 552.836655ms ago: executing program 2 (id=9886): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='xprtrdma_reply\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)}, 0x20) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1e5800, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000500), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000002a000000180001801400020067656e65766530"], 0x2c}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f0000000040)={0x0, 0x408, 0x401, 0x4, 0xffc0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRESOCT, @ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00'}, 0x18) socket$kcm(0x21, 0x2, 0x2) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9], 0x0, 0x21b, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffc30) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYRESOCT=r4], &(0x7f00000004c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r10}, 0x3d) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007b70300000000000085a3877e56ee09d8cf420000007000000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='hrtimer_start\x00', r11}, 0x18) 512.204189ms ago: executing program 2 (id=9887): socket$inet6(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0xffffffffffffffff, 0xa82) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000400)={0x20, 0x3, 0x6, 0x7, 0x0, 0xffffffff, 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000780)={0x4c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x81}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x800002, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000200)=0x7ffffffc) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x500, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) 511.66783ms ago: executing program 3 (id=9888): socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x6025, 0x4005, 0xe, 0x0, 0x80, 0x4001, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c01000015000a001800feffffff09000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f", 0xd5}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r2}, 0x10) getrusage(0x0, &(0x7f0000000800)) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x2, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x40000) 438.490217ms ago: executing program 5 (id=9889): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18050, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x1216, 0x10000, 0x5, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000b40)={'wpan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x38, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008894}, 0x44010) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r1, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008044}, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r5, 0x0, 0x9}, 0x18) r6 = getpgid(0x0) r7 = syz_pidfd_open(r6, 0x0) r8 = pidfd_getfd(r7, r7, 0x0) setns(r8, 0x66020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 437.950497ms ago: executing program 0 (id=9890): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000200)={r3, 0xc5}, 0x0, &(0x7f0000000580)="951aef3aaf1ba05f3da1bc522b0b70bedf1a43dc99f778a45a9f09b6a7df17b2eeddd5e44f1bd46110e964e8baa7e3e6e271c89f1fddf8de5b3f2d74b4abf96fc7bad7921fa99fbd7c035247413afa4e181d8737001e53dfea5c578f1c4d974cb7fa9f40bc0af5bbede079f0b6012086846e00d982fb3ec177ad349ad6df95e606f9490d43cedae2ba39aea8003463fedb76b388fe86052e507076f1ad449568b47306ffd0d669146a450dbfe316103c57368246aaa1ac7d4956b5a6f4bc5e6e65ddf4272b", 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x3}, 0x18) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000004c0)={r7, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x47}}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={r7, 0x1, 0x6}, 0x10) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r7, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x6c, 0x24, 0xf0b, 0x709d2e, 0x25dfdbfd, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xf39a0a944d4bc56b}, @TCA_TBF_BURST={0x8, 0x6, 0xfff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x2, 0x9, 0x3, 0x4, 0x9}, {0xfe, 0x1, 0x1, 0x1, 0x1, 0x1000000}, 0x6, 0xffffffff, 0x1bf4}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x3c000001}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='erofs_readpage\x00', r10}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) lseek(r11, 0x7, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4804}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0) 393.499571ms ago: executing program 2 (id=9891): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$eJzs3U1rG0cfAPD/ylbenycOhNCWUgw9NCWNHNt9SaGH9NyGBtp7KuyNCZajYMkhdgNNDs25hF5KA6X30nOPoV+gh36GQBsIJZj20IvLyivFL5ItJ7KtVL8frJnZXWl2NPsfz2gkFMDAGs3+FCJejoivk4jjEZHkx4YjPzi6et7yk1tT2ZbEysqnfyaN87J887majzuaZ16KiF++ijhT2FxubXFptlyppPN5fqw+d32strh09upceSadSa9NTE6ef2dy4v333u1ZXd+89Pe3nzwYynMn7iVxIY7lubX1eA6312ZGYzR/TYpxYcOJ4z0orJ8kbff+tOfXwc4M5XFejKwPOB5DedQD/31fRsQKMKCSHcf/b8XduRJgbzXHAc25fY/mwS+Mxx+uToA213949b2RONSYGx1ZTtbNjLL57kgPys/K+PmP+/eyLXr3PgTAtm7fiYhzw8Ob+78k7/+e3bkuztlYhv4P9s6DbPzzVrvxT6E1/ok245+jbWL3WWwf/4VHPSimo2z890Hb8W9r0WpkKM/9rzHmKyZXrlbSrG/7f0ScjuLBLL/Ves755YcrnY6tHf9lW1Z+cyyYX8ej4YPrHzNdrpefp85rPb4T8Urb8W/Sav+kTftnr8elLss4ld5/rdOx7eu/u1Z+iHijbfs/XdFKtl6fHGvcD2PNu2Kzv+6e+rVT+ftd/6z9j2xd/5Fk7XptbedlfH/onzRa68nrrat/dH//H0g+a6QP5Ptuluv1+fGIA8nHrf2F5v6Jp49t5pvnZ/U//frW/V+7+/9wRHzeZf3vnvzx1U7H+qH9p9u2f2t2u6H9d554+NEX33Uqv7v+7+1G6nS+p5v+r9sLfJ7XDgAAAAAAAPpNISKORVIotdKFQqm0+vmOk3GkUKnW6meuVBeuTUfju7IjUSw0V7qPr/k8xHi+YtjMT2zIT0bEiYj4ZuhwI1+aqlam97vyAAAAAAAAAAAAAAAAAAAA0CeOdvj+f+b3of2+OmDX+clvGFzbxn8vfukJ6Ev+/8PgEv8wuMQ/DC7xD4NL/MPgEv8wuMQ/DC7xDwAAAAAAAAAAAAAAAAAAAAAAAAAAAD116eLFbFtZfnJrKstP31hcmK3eODud1mZLcwtTpanq/PXSTLU6U0lLU9W57Z6vUq1eH5+IhZtj9bRWH6stLl2eqy5cq1++OleeSS+nxT2pFQAAAAAAAAAAAAAAAAAAALxYaotLs+VKJZ2XkHimxHB/XIZEjxP73TMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFP/BgAA//9q6zMB") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)="30573472b621739991c336124406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f0000000540)='./file1\x00', &(0x7f0000000180), &(0x7f0000000500)=ANY=[], 0x361, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000000)=ANY=[], 0xfe37, 0x100000000000000) 364.510764ms ago: executing program 3 (id=9892): r0 = socket$netlink(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x6, 0x1fd, {0x0, 0xa}, {0x1, 0x7}, @const={0x0, {0x1, 0x8, 0x4, 0x881}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x6}, 0x18) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000100)=[{0x7ff, 0xa, 0x8, 0xb880}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) 319.491958ms ago: executing program 2 (id=9893): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x4, 0x1, 0x7ffc1ff9}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x20000000f}, 0x18) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x6, &(0x7f0000000380), 0x0, 0x0, 0x1}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) ppoll(&(0x7f0000000180)=[{r4}], 0x1, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) socket$nl_route(0x10, 0x3, 0x0) io_setup(0x3fe, &(0x7f00000001c0)) 319.039918ms ago: executing program 5 (id=9894): r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2) close_range(r0, r1, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000040)) r3 = fsopen(&(0x7f0000000080)='affs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f00000000c0)='/dev/snd/seq\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)=0x0) r5 = perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x8, 0x1, 0x7, 0x8, 0x0, 0x81, 0x800, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x100, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x800, 0x0, 0x8, 0x1, 0x4, 0x1, 0xb3, 0x0, 0x6, 0x0, 0x3ff}, r4, 0x8, 0xffffffffffffffff, 0x3) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0xa200, 0x0) getsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f0000000280), &(0x7f00000002c0)=0x4) fchdir(r2) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000300), &(0x7f0000000340), 0x2, 0x2) sendmsg$AUDIT_SIGNAL_INFO(r6, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3f2, 0x800, 0x70bd2a, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000000) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc) getsockopt$inet_opts(r6, 0x0, 0xd, &(0x7f0000000500)=""/53, &(0x7f0000000540)=0x35) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000580), 0x200, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r7, 0x4018f514, &(0x7f00000005c0)={0x32, 0x2, 0x2}) openat$cgroup_subtree(r6, &(0x7f0000000600), 0x2, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r7, 0xf502, 0x0) unshare(0x4030000) r8 = dup3(r6, r2, 0x80000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000000640)={{0x1, 0x1, 0x18, r7, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000000680)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0xe, 0x7ff, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x700, 0x80, 0xffff, 0x5}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000740)={{0x0, 0x5907d633, 0x20d, 0xfffffffffffffffd, 0x11f7, 0x1, 0x7, 0x37, 0x9, 0x7, 0x2, 0xffffffffffff0001, 0xcc00, 0xff, 0x80}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r11, 0x800448d3, &(0x7f0000000800)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6, 0x4, 0x9, 0x1d, 0x6, "1fbb27c20d5f40e67d438920be569901702c94f79e83548e3a1ce08035c0c5b59940bcadfca9ccd5bfbeaa6586e562ac4e5fe885627d17558bc499973455cae5f5ddf8da6a101faf2cef52421804e1691cd91f30865147b26839227f3365a040b83f6d13862b8fea837bc40db5aced5e864b267f02d5946e5f10e7330877b66c"}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x1, 0xef46, 0x8, 0x6, 0x1300, r8, 0x8, '\x00', r10, r9, 0x2, 0x1, 0x5}, 0x50) r12 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) close_range(r12, 0xffffffffffffffff, 0x0) 314.336039ms ago: executing program 0 (id=9895): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) move_pages(r1, 0x5, &(0x7f0000000080)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil], &(0x7f00000000c0)=[0x10000, 0x8, 0x8001, 0x5, 0x10, 0x4a10], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0x1a1) fcntl$setlease(r2, 0x400, 0x1) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r4, 0x545c, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) symlink(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, 0x0, 0x20000081) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r6}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) 229.841707ms ago: executing program 0 (id=9896): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = memfd_secret(0x0) futimesat(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) readv(0xffffffffffffffff, &(0x7f00000002c0), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f00, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0xb0, 0xe, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) msgget(0x2, 0x624) 229.373238ms ago: executing program 5 (id=9897): chroot(0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x4, 0x4f2, &(0x7f0000000a40)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000280)=ANY=[@ANYBLOB="000000004c900200030000000300011900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002e000b0fd25a806c8c6f94f90324fc60", 0x14}], 0x1}, 0x0) 213.719679ms ago: executing program 0 (id=9898): socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x6025, 0x4005, 0xe, 0x0, 0x80, 0x4001, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c01000015000a001800feffffff09000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f", 0xd5}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 150.291585ms ago: executing program 0 (id=9899): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = memfd_secret(0x0) futimesat(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) readv(0xffffffffffffffff, &(0x7f00000002c0), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f00, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0xb0, 0xe, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) msgget(0x2, 0x624) (fail_nth: 1) 138.868257ms ago: executing program 6 (id=9900): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="a400000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000140000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18050, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x1216, 0x10000, 0x5, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e000000200002800600020030000000140006000000000000"], 0x5c}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000b40)={'wpan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x38, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008894}, 0x44010) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r1, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008044}, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="1500000000000000000001000000100002800c00018008000100030000000c00018008000100", @ANYRES32=r8], 0x30}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r9, 0x0, 0x9}, 0x18) r10 = getpgid(0x0) r11 = syz_pidfd_open(r10, 0x0) r12 = pidfd_getfd(r11, r11, 0x0) setns(r12, 0x66020000) umount2(&(0x7f0000000040)='.\x00', 0x2) write$binfmt_aout(r12, &(0x7f0000001280)=ANY=[@ANYBLOB="07010509120100007f0000009b000000bf020000400700000000000000000000ff8b79e84eb722a867e5e323df8b77275a77b7632efa46d4cc990ee4f465ea62513cb8c8dbac2b3b77d0551a88beeeba52be92400f6463d9de13222a72d80b54340aec4d1d631a076c61e09bb4a1507216660fc80684a00fce2f2bd6f1011ef3b1b4cc81"], 0x84) 66.808264ms ago: executing program 5 (id=9901): bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x200000000000002f, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000020018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x10, 0x7, 0x0, 0xffffffff, {{0x22, 0x4, 0x0, 0x3c, 0x88, 0x68, 0x0, 0x0, 0x4, 0x0, @multicast1, @loopback, {[@timestamp_addr={0x44, 0x54, 0x5a, 0x1, 0x1, [{@local, 0x7}, {@loopback, 0xff}, {@local, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1ff}, {@multicast1, 0xd5}, {@private=0xa010100, 0x9}, {@multicast1, 0x2}, {@multicast2, 0x1}, {@private=0xa010100, 0x5}, {@private=0xa010100, 0x2}]}, @lsrr={0x83, 0x1f, 0x50, [@local, @broadcast, @remote, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, @loopback]}]}}}}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xf, 0x24, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7a}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_idx={0x18, 0x6}, @map_val={0x18, 0x5de513ac34e57c7f, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x4}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffff9}, @map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x18000000}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r3, @cgroup_device, r4, 0x8, &(0x7f0000000300)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x5, 0x1, 0x80000001}, 0x10, 0x0, r2, 0x6, &(0x7f0000000500)=[r1], &(0x7f0000000540)=[{0x2, 0x1, 0x9, 0x9}, {0x2, 0x5, 0x6, 0x2}, {0x10, 0x4, 0x2, 0x5}, {0x0, 0x5, 0x10, 0xb}, {0x4, 0x1, 0x10, 0x9}, {0x2, 0x4, 0x7, 0x9}], 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000600)='sys_enter\x00', r5}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001200)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00000000000000}}, @IFLA_GRE_LOCAL={0x14, 0x6, @loopback={0x300}}]}}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0xd90}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYRESOCT], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sysinfo(&(0x7f0000000000)=""/115) 66.549864ms ago: executing program 0 (id=9902): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x74, 0x30, 0xffff, 0x0, 0x0, {}, [{0x60, 0x1, [@m_ife={0x5c, 0x1, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, @TCA_IFE_TYPE={0x6, 0x5, 0x3}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x48, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x4}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x48}}, 0x0) fchdir(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = memfd_secret(0x0) futimesat(r4, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) readv(0xffffffffffffffff, &(0x7f00000002c0), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f00, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0xb0, 0xe, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r5}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17f}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x45c], 0x0, 0x0, 0x100000, 0x1}}, 0x40) msgget(0x2, 0x624) 46.908366ms ago: executing program 5 (id=9903): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) syz_emit_ethernet(0x6e, &(0x7f0000000180)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @val={@val={0x88a8, 0x3, 0x1, 0x3}, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, {[], @param_prob={0x2, 0x0, 0x0, 0x55c, {0x0, 0x6, '\x00', 0x40, 0x0, 0xff, @private1, @private2}}}}}}}, 0x0) 0s ago: executing program 6 (id=9904): lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)={0x0, 0xfb, 0x94, 0x2, 0x9, "93a6c9c3fcdf03484c1ebb003dbd779d", "99f1c5d64a9af1e512406158478f067ab8b281e0a24c2b0b259c528c97d2b2f6fc4f29f4222fe563d8069e6521e3d81f078806acd649326c69fba100d2d05fac33ae0feb143359385b3da1d02e00c5b71a61bb445a77a2534e639ae96a08b6a710c767a7cfa11b7a1f8cd741d4fb4bad556e13f2d1b62d4e292e988a024c02"}, 0x94, 0x1) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x404440, 0x0) (async) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) (async) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {r2}}, './file0\x00'}) (async, rerun: 64) r5 = syz_open_dev$vcsn(&(0x7f0000000200), 0x8, 0x4000) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000240)={0x5, 0x401, 0x1, 0x0, 0x6}) r6 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {r6}}, './file0\x00'}) (async, rerun: 64) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000300)=0x0) (rerun: 64) sched_setattr(r9, &(0x7f0000000340)={0x38, 0x5, 0x4c, 0x1cb, 0x5, 0x7, 0x1, 0x1, 0x6757, 0xe}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000015c0)={r3, 0x20, &(0x7f0000001580)={&(0x7f0000001440)=""/14, 0xe, 0x0, &(0x7f0000001480)=""/223, 0xdf}}, 0x10) (async, rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001600)={r8, 0xffffffffffffffff}, 0x4) (rerun: 32) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000001640)=@base={0x1d, 0xfffffffa, 0x2, 0x1, 0x10001, r6, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xd, 0x0, &(0x7f0000000380), &(0x7f00000003c0)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000400)=""/4096, 0x40f00, 0x40, '\x00', 0x0, @sock_ops=0x3, r5, 0x8, &(0x7f0000001400)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, r10, 0xffffffffffffffff, 0x2, &(0x7f00000016c0)=[r7, r4, r3, r11, r12, r7, r1, r1, r3], &(0x7f0000001700)=[{0x4, 0x1, 0xe, 0x9}, {0x3, 0x4, 0x7, 0x6}], 0x10, 0x1}, 0x94) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001840)={0x7, &(0x7f0000001800)=[{0x2, 0x81, 0x79, 0x3}, {0x8, 0x2, 0x7f, 0x1}, {0x4, 0xc3, 0xfb, 0x4}, {0x4, 0x4, 0xb8, 0xfffffffb}, {0x8000, 0x80, 0x8, 0xd}, {0x401, 0x9, 0x88, 0x1}, {0x10, 0x5, 0x9, 0xc}]}) (async) sendmsg$qrtr(r7, &(0x7f0000001b80)={&(0x7f0000001880)={0x2a, 0xfffffffffffffffb, 0x7ffe}, 0xc, &(0x7f0000001b40)=[{&(0x7f00000018c0)="f5374bd2e33d5fb9e063f366584c18504bf05e3c28eaeebba4e7f015898c695f117adb19f012efead9d0f7dbd268ae2b2a3aba5811e59c8e5e71908697d80a516c2ec56a918e646cec65cc754fab45d5e0693aabd115d1407fc96664e70627dd9fa3058d5e11fc7316b7261bace2ccfa76252a91f51511674528181a5e93018d02848d", 0x83}, {&(0x7f0000001980)}, {&(0x7f00000019c0)="4290c08bc699cd3057f43c55efffb62219f72fca3215c8a085347d0b5a5657625b69d3c5c05d20e0316cefd29abfe782884a1429e6c66dbbe92a3de79d6d79fff581d981372ec8f4f960d357cc4c818dd83de32d413b8a4e15c05580fd44ab187c7650537994f9ab1869356f2ecb7a4d", 0x70}, {&(0x7f0000001a40)="1e7144e1fc54f8920cb967652ba87ab752ccf3431dfb327aa433798b1f498c4d4ee6fbe7f475e93aa29d9a6d9eeba85b9718941a84e71373f1f232b067770be71184b083a6676a260e11df347cfac1685d2119cf4353a2009d418ab0dbf4bdd1295f2f827625c6501fd526171350bb27bc813e613316c2d2c1e6df38457fd526f8a51cf6041975d40d3246b2b9e8fb85a9570ba12b7ac87899bdf9dccae304986a0c8db3170577865f9650cc577f8fba3e8240fed800fadc6090e010842915bd4bffc5a00bf18b5132b89cc2", 0xcc}], 0x4, 0x0, 0x0, 0x10}, 0x38) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000001bc0), 0x400000) (async, rerun: 32) r13 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001c00), 0x2, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001c40)={'vxcan0\x00', 0x0}) bind$can_j1939(r13, &(0x7f0000001c80)={0x1d, r14, 0x0, {0x2, 0xff, 0x2}}, 0x18) (async) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r3, &(0x7f0000001d80)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x30, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c000}, 0x8080) (async) pipe2(&(0x7f0000001dc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x2000) open(&(0x7f0000001e00)='./file0/file0\x00', 0x121000, 0x20) (async) lseek(r0, 0x200000000, 0x3) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f0000001e40)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}], 0x20) (async) r16 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001e80), 0x620200, 0x0) lseek(r16, 0x1, 0x2) (async) ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000001ec0)={'bond_slave_1\x00'}) (async) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000002000)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x38, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x6}, @void, @val={0xc, 0x99, {0xc138, 0x50}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x80000) kernel console output (not intermixed with test programs): ntered allmulticast mode [ 639.886040][ T1565] team0: Device ipvlan0 failed to register rx_handler [ 639.891638][ T52] EXT4-fs (loop2): Remounting filesystem read-only [ 640.029062][ T847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.500535][ T1632] bridge_slave_1: left allmulticast mode [ 641.507455][ T1632] bridge_slave_1: left promiscuous mode [ 641.514695][ T1632] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.546409][ T1632] bridge_slave_0: left allmulticast mode [ 641.552309][ T1632] bridge_slave_0: left promiscuous mode [ 641.558256][ T1632] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.598284][ T1632] bridge0 (unregistering): left allmulticast mode [ 641.713287][ T1643] netlink: 'syz.6.8548': attribute type 10 has an invalid length. [ 641.735221][ T1643] team0: Device ipvlan0 failed to register rx_handler [ 642.417124][ T1649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8551'. [ 642.561695][ T1655] loop2: detected capacity change from 0 to 2048 [ 642.596346][ T30] kauditd_printk_skb: 6365 callbacks suppressed [ 642.596374][ T30] audit: type=1326 audit(2000000833.472:62959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1608 comm="syz.3.8538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3be2ff6c9 code=0x50000 [ 642.629348][ T30] audit: type=1326 audit(2000000833.482:62960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1656 comm="syz.6.8554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f729b046567 code=0x7ffc0000 [ 642.655923][ T30] audit: type=1326 audit(2000000833.482:62961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1656 comm="syz.6.8554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f729afeb779 code=0x7ffc0000 [ 642.679621][ T30] audit: type=1326 audit(2000000833.482:62962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1656 comm="syz.6.8554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f729b04f6c9 code=0x7ffc0000 [ 642.679812][ T1655] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 642.703173][ T30] audit: type=1326 audit(2000000833.482:62963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1656 comm="syz.6.8554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729b04f6c9 code=0x7ffc0000 [ 642.703238][ T30] audit: type=1326 audit(2000000833.482:62964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1656 comm="syz.6.8554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f729b04f6c9 code=0x7ffc0000 [ 642.715536][ T1655] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 642.741917][ T30] audit: type=1326 audit(2000000833.482:62965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1656 comm="syz.6.8554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729b04f6c9 code=0x7ffc0000 [ 642.802873][ T30] audit: type=1326 audit(2000000833.482:62966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1656 comm="syz.6.8554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729b04f6c9 code=0x7ffc0000 [ 642.826936][ T30] audit: type=1326 audit(2000000833.482:62967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1656 comm="syz.6.8554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f729b04f6c9 code=0x7ffc0000 [ 642.851039][ T30] audit: type=1326 audit(2000000833.482:62968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1656 comm="syz.6.8554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729b04f6c9 code=0x7ffc0000 [ 642.904902][ T1669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.938031][ T1669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.287159][ T1681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8561'. [ 643.615674][ T1687] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8563'. [ 643.755344][ T1692] netlink: 'syz.5.8564': attribute type 10 has an invalid length. [ 643.856501][ T3608] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 345: padding at end of block bitmap is not set [ 643.901491][ T3608] EXT4-fs (loop2): Remounting filesystem read-only [ 644.065387][ T847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.225942][ T1706] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8571'. [ 644.321080][ T1716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8574'. [ 644.516500][ T1741] ip6gretap0: entered promiscuous mode [ 644.522642][ T1741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8584'. [ 644.535167][ T1741] ip6gretap0 (unregistering): left promiscuous mode [ 645.429612][ T1755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8589'. [ 646.293361][ T1815] netlink: 'syz.0.8611': attribute type 33 has an invalid length. [ 646.301494][ T1815] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8611'. [ 646.326911][ T1816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8611'. [ 646.823229][ T1849] netlink: 176 bytes leftover after parsing attributes in process `syz.0.8623'. [ 646.842633][ T1849] tipc: Enabling of bearer rejected, already enabled [ 647.405123][ T1867] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8632'. [ 647.482994][ T1870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8632'. [ 647.664821][ T30] kauditd_printk_skb: 7804 callbacks suppressed [ 647.664836][ T30] audit: type=1326 audit(2000000838.542:70773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1877 comm="syz.0.8635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59adfef6c9 code=0x7ffc0000 [ 647.747702][ T30] audit: type=1326 audit(2000000838.582:70774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1877 comm="syz.0.8635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f59adfef6c9 code=0x7ffc0000 [ 647.773359][ T30] audit: type=1326 audit(2000000838.582:70775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1877 comm="syz.0.8635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59adfef6c9 code=0x7ffc0000 [ 647.797931][ T30] audit: type=1326 audit(2000000838.582:70776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1877 comm="syz.0.8635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59adfef6c9 code=0x7ffc0000 [ 647.851986][ T30] audit: type=1326 audit(2000000838.732:70777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1882 comm="syz.2.8637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9cd1f6c9 code=0x7ffc0000 [ 647.886020][ T30] audit: type=1326 audit(2000000838.732:70778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1882 comm="syz.2.8637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9cd1f6c9 code=0x7ffc0000 [ 647.909831][ T30] audit: type=1326 audit(2000000838.732:70779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1882 comm="syz.2.8637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f5a9cd1f6c9 code=0x7ffc0000 [ 647.933293][ T30] audit: type=1326 audit(2000000838.732:70780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1882 comm="syz.2.8637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9cd1f6c9 code=0x7ffc0000 [ 647.958076][ T30] audit: type=1326 audit(2000000838.732:70781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1882 comm="syz.2.8637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f5a9cd1f6c9 code=0x7ffc0000 [ 647.983054][ T30] audit: type=1326 audit(2000000838.732:70782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1882 comm="syz.2.8637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9cd1f6c9 code=0x7ffc0000 [ 648.170310][ T1888] bridge_slave_1: left allmulticast mode [ 648.176118][ T1888] bridge_slave_1: left promiscuous mode [ 648.181979][ T1888] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.191234][ T1888] bridge_slave_0: left allmulticast mode [ 648.197196][ T1888] bridge_slave_0: left promiscuous mode [ 648.203127][ T1888] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.260451][ T1888] bridge0 (unregistering): left allmulticast mode [ 648.602050][ T1895] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8639'. [ 648.700090][ T1900] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8641'. [ 650.250009][ T2005] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.8676'. [ 650.259973][ T2005] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8676'. [ 650.310760][ T2005] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 650.323488][ T2005] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.417825][ T2005] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 650.427832][ T2005] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.518453][ T2005] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 650.528504][ T2005] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.540208][ T2030] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.8679'. [ 650.550198][ T2030] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8679'. [ 650.598360][ T2030] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.625929][ T2005] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 650.636111][ T2005] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.694778][ T2030] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.725791][ T52] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.734159][ T52] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.759114][ T52] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.768794][ T52] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.783158][ T2030] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.804207][ T52] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.812937][ T52] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.831759][ T52] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.840355][ T52] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.861306][ T2030] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.928719][ T3917] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.948799][ T3917] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.958100][ T3917] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.976873][ T3917] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.491866][ T2166] netlink: 'syz.3.8695': attribute type 10 has an invalid length. [ 652.505766][ T2166] team0: Device ipvlan0 failed to register rx_handler [ 652.757227][ T30] kauditd_printk_skb: 146 callbacks suppressed [ 652.757246][ T30] audit: type=1326 audit(2000000843.642:70929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2183 comm="syz.2.8697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9cd1f6c9 code=0x7ffc0000 [ 652.808119][ T30] audit: type=1326 audit(2000000843.672:70930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2183 comm="syz.2.8697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f5a9cd1f6c9 code=0x7ffc0000 [ 652.832527][ T30] audit: type=1326 audit(2000000843.672:70931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2183 comm="syz.2.8697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9cd1f6c9 code=0x7ffc0000 [ 652.856411][ T30] audit: type=1326 audit(2000000843.672:70932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2183 comm="syz.2.8697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9cd1f6c9 code=0x7ffc0000 [ 652.887979][ T2186] FAULT_INJECTION: forcing a failure. [ 652.887979][ T2186] name failslab, interval 1, probability 0, space 0, times 0 [ 652.900753][ T2186] CPU: 0 UID: 0 PID: 2186 Comm: syz.2.8698 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 652.900818][ T2186] Tainted: [W]=WARN [ 652.900825][ T2186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 652.900839][ T2186] Call Trace: [ 652.900846][ T2186] [ 652.900855][ T2186] __dump_stack+0x1d/0x30 [ 652.900938][ T2186] dump_stack_lvl+0xe8/0x140 [ 652.900961][ T2186] dump_stack+0x15/0x1b [ 652.900980][ T2186] should_fail_ex+0x265/0x280 [ 652.901001][ T2186] should_failslab+0x8c/0xb0 [ 652.901033][ T2186] kmem_cache_alloc_noprof+0x50/0x480 [ 652.901074][ T2186] ? getname_flags+0x80/0x3b0 [ 652.901114][ T2186] getname_flags+0x80/0x3b0 [ 652.901149][ T2186] path_listxattrat+0x7e/0x2a0 [ 652.901186][ T2186] __x64_sys_listxattr+0x4a/0x60 [ 652.901239][ T2186] x64_sys_call+0x2e06/0x3000 [ 652.901297][ T2186] do_syscall_64+0xd2/0x200 [ 652.901320][ T2186] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 652.901350][ T2186] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 652.901393][ T2186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.901481][ T2186] RIP: 0033:0x7f5a9cd1f6c9 [ 652.901517][ T2186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 652.901536][ T2186] RSP: 002b:00007f5a9b787038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 [ 652.901584][ T2186] RAX: ffffffffffffffda RBX: 00007f5a9cf75fa0 RCX: 00007f5a9cd1f6c9 [ 652.901648][ T2186] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 652.901661][ T2186] RBP: 00007f5a9b787090 R08: 0000000000000000 R09: 0000000000000000 [ 652.901674][ T2186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 652.901687][ T2186] R13: 00007f5a9cf76038 R14: 00007f5a9cf75fa0 R15: 00007ffe6ffed338 [ 652.901708][ T2186] [ 653.113799][ T2192] netlink: 176 bytes leftover after parsing attributes in process `syz.6.8700'. [ 653.127074][ T2192] tipc: Enabling of bearer rejected, already enabled [ 653.156274][ T30] audit: type=1326 audit(2000000843.782:70933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2187 comm="syz.6.8696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729b04f6c9 code=0x7ffc0000 [ 653.180476][ T30] audit: type=1326 audit(2000000843.782:70934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2187 comm="syz.6.8696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729b04f6c9 code=0x7ffc0000 [ 653.204146][ T30] audit: type=1326 audit(2000000843.782:70935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2187 comm="syz.6.8696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f729b04f6c9 code=0x7ffc0000 [ 653.227748][ T30] audit: type=1326 audit(2000000843.782:70936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2187 comm="syz.6.8696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729b04f6c9 code=0x7ffc0000 [ 653.251702][ T30] audit: type=1326 audit(2000000843.782:70937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2187 comm="syz.6.8696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729b04f6c9 code=0x7ffc0000 [ 653.457034][ T2210] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8709'. [ 653.569439][ T30] audit: type=1326 audit(2000000844.452:70938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2217 comm="syz.3.8711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3be2ff6c9 code=0x7ffc0000 [ 653.612831][ T2220] netlink: 176 bytes leftover after parsing attributes in process `syz.5.8712'. [ 653.642169][ T2220] tipc: Enabling of bearer rejected, already enabled [ 653.757136][ T2229] netlink: 'syz.3.8715': attribute type 10 has an invalid length. [ 653.766134][ T2229] team0: Device ipvlan0 failed to register rx_handler [ 653.921644][ T2233] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.8717'. [ 653.930970][ T2233] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8717'. [ 653.946180][ T2233] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 653.956293][ T2233] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.008513][ T2233] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 654.018555][ T2233] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.099371][ T2233] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 654.109310][ T2233] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.188612][ T2233] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 654.198522][ T2233] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.493954][ T2257] netlink: 4436 bytes leftover after parsing attributes in process `syz.2.8726'. [ 654.503781][ T2257] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 654.622361][ T2260] tipc: Started in network mode [ 654.627497][ T2260] tipc: Node identity ac14140f, cluster identity 4711 [ 654.701769][ T2260] tipc: New replicast peer: 255.255.255.255 [ 654.708148][ T2260] tipc: Enabled bearer , priority 10 [ 654.986685][ T2270] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 654.993658][ T2270] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 655.001928][ T2270] vhci_hcd vhci_hcd.0: Device attached [ 655.067298][ T2273] vhci_hcd: connection closed [ 655.067484][ T52] vhci_hcd: stop threads [ 655.076658][ T52] vhci_hcd: release socket [ 655.081094][ T52] vhci_hcd: disconnect device [ 655.193386][ T3608] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 655.202048][ T3608] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.229707][ T3608] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 655.238146][ T3608] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.266590][ T3608] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 655.274921][ T3608] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.284753][ T3608] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 655.293514][ T3608] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.368801][ T2291] __nla_validate_parse: 3 callbacks suppressed [ 655.368892][ T2291] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8738'. [ 655.468634][ T2301] netlink: 176 bytes leftover after parsing attributes in process `syz.0.8742'. [ 655.497576][ T2301] tipc: Enabling of bearer rejected, already enabled [ 655.712536][ T2323] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8749'. [ 656.625686][T26729] tipc: Node number set to 2886997007 [ 657.471584][ T2339] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8753'. [ 657.499751][ T2342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8755'. [ 657.597233][ T2350] netlink: 176 bytes leftover after parsing attributes in process `syz.3.8759'. [ 657.608832][ T2350] tipc: Enabling of bearer rejected, already enabled [ 657.657994][ T2352] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 657.664556][ T2352] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 657.672815][ T2352] vhci_hcd vhci_hcd.0: Device attached [ 657.708384][ T2352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8760'. [ 657.791033][ T2357] vhci_hcd: connection closed [ 657.791327][ T3608] vhci_hcd: stop threads [ 657.800539][ T3608] vhci_hcd: release socket [ 657.805097][ T3608] vhci_hcd: disconnect device [ 657.936943][ T2375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8768'. [ 659.260108][ T2396] loop2: detected capacity change from 0 to 512 [ 659.267267][ T2396] EXT4-fs: Ignoring removed orlov option [ 659.276943][ T2396] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 659.301794][ T2396] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 659.324179][ T2396] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.8775: corrupted in-inode xattr: e_value size too large [ 659.339104][ T2396] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.8775: couldn't read orphan inode 15 (err -117) [ 659.352264][ T2396] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 659.366442][ T2406] netlink: 176 bytes leftover after parsing attributes in process `syz.3.8777'. [ 659.382069][ T2406] tipc: Enabling of bearer rejected, already enabled [ 659.438455][ T2415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8781'. [ 659.480311][ T30] kauditd_printk_skb: 75 callbacks suppressed [ 659.480330][ T30] audit: type=1400 audit(2000000850.362:71014): avc: denied { remount } for pid=2395 comm="syz.2.8775" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 659.511605][ T2423] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 659.542250][ T30] audit: type=1326 audit(2000000850.372:71015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2419 comm="syz.6.8783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729b04f6c9 code=0x7ffc0000 [ 659.566003][ T30] audit: type=1326 audit(2000000850.372:71016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2419 comm="syz.6.8783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729b04f6c9 code=0x7ffc0000 [ 659.590015][ T30] audit: type=1326 audit(2000000850.372:71017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2419 comm="syz.6.8783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f729b04f6c9 code=0x7ffc0000 [ 659.613922][ T30] audit: type=1326 audit(2000000850.372:71018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2419 comm="syz.6.8783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729b04f6c9 code=0x7ffc0000 [ 659.637566][ T30] audit: type=1326 audit(2000000850.372:71019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2419 comm="syz.6.8783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729b04f6c9 code=0x7ffc0000 [ 659.795710][ T847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.966829][ T30] audit: type=1400 audit(2000000850.842:71020): avc: denied { create } for pid=2442 comm="syz.2.8789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 659.987950][ T30] audit: type=1400 audit(2000000850.842:71021): avc: denied { getopt } for pid=2442 comm="syz.2.8789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 660.008886][ T30] audit: type=1400 audit(2000000850.842:71022): avc: denied { connect } for pid=2442 comm="syz.2.8789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 660.203536][ T30] audit: type=1326 audit(2000000851.052:71023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2450 comm="syz.2.8791" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5a9cd1f6c9 code=0x0 [ 660.911033][ T2461] __nla_validate_parse: 3 callbacks suppressed [ 660.911049][ T2461] netlink: 176 bytes leftover after parsing attributes in process `syz.6.8794'. [ 661.098854][ T2462] tipc: Enabling of bearer rejected, already enabled [ 661.262674][ T2468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8796'. [ 661.598746][ T2501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.614857][ T2501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.629480][ T2501] loop2: detected capacity change from 0 to 512 [ 661.636274][ T2501] EXT4-fs: Ignoring removed bh option [ 661.645400][ T2501] EXT4-fs: Mount option(s) incompatible with ext3 [ 662.617879][ T2508] netlink: 176 bytes leftover after parsing attributes in process `syz.6.8808'. [ 662.711437][ T2508] tipc: Enabling of bearer rejected, already enabled [ 663.189763][ T2521] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8812'. [ 663.438677][ T2537] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=2537 comm=syz.3.8817 [ 663.487527][ T2537] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 663.819656][ T2558] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8824'. [ 663.830718][ T2558] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8824'. [ 663.860121][ T2559] ref_ctr_offset mismatch. inode: 0x3a8 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x18 [ 664.939720][ T2581] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8829'. [ 666.055062][ T2587] vlan2: entered allmulticast mode [ 666.060335][ T2587] bridge_slave_0: entered allmulticast mode [ 667.402403][ T30] kauditd_printk_skb: 112 callbacks suppressed [ 667.402419][ T30] audit: type=1326 audit(2000000858.282:71136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2617 comm="syz.0.8845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59adfef6c9 code=0x7ffc0000 [ 667.446532][ T30] audit: type=1326 audit(2000000858.322:71137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2617 comm="syz.0.8845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59adfef6c9 code=0x7ffc0000 [ 667.470798][ T30] audit: type=1326 audit(2000000858.322:71138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2617 comm="syz.0.8845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f59adfef6c9 code=0x7ffc0000 [ 667.495209][ T30] audit: type=1326 audit(2000000858.322:71139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2617 comm="syz.0.8845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59adfef6c9 code=0x7ffc0000 [ 667.519270][ T30] audit: type=1326 audit(2000000858.322:71140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2617 comm="syz.0.8845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59adfef6c9 code=0x7ffc0000 [ 667.698457][ T30] audit: type=1326 audit(2000000858.582:71141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2634 comm="syz.5.8850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c11aef6c9 code=0x7ffc0000 [ 667.744125][ T30] audit: type=1326 audit(2000000858.582:71142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2634 comm="syz.5.8850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c11aef6c9 code=0x7ffc0000 [ 667.767993][ T30] audit: type=1326 audit(2000000858.582:71143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2634 comm="syz.5.8850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f0c11aef6c9 code=0x7ffc0000 [ 667.791813][ T30] audit: type=1326 audit(2000000858.582:71144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2634 comm="syz.5.8850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c11aef6c9 code=0x7ffc0000 [ 667.935689][ T30] audit: type=1326 audit(2000000858.772:71145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2619 comm="syz.2.8846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9cd1f6c9 code=0x7ffc0000 [ 668.554343][ T2658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8858'. [ 668.891355][ T2667] ref_ctr_offset mismatch. inode: 0x906 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x18 [ 669.715027][ T2700] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.8875'. [ 669.725143][ T2700] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8875'. [ 669.777794][ T2702] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.619979][ T2702] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.709435][ T2702] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.826360][ T2702] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.929253][ T3608] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.956299][ T3608] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.964743][ T3608] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.003297][ T3608] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.217821][ T2817] netlink: 'syz.6.8919': attribute type 1 has an invalid length. [ 672.252085][ T2817] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 672.263559][ T2817] bond3: (slave batadv1): making interface the new active one [ 672.276025][ T2817] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 672.565956][ T30] kauditd_printk_skb: 356 callbacks suppressed [ 672.565975][ T30] audit: type=1326 audit(2000000863.442:71502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2864 comm="syz.6.8938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729b04f6c9 code=0x7ffc0000 [ 672.611785][ T30] audit: type=1326 audit(2000000863.452:71503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2864 comm="syz.6.8938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729b04f6c9 code=0x7ffc0000 [ 672.635913][ T30] audit: type=1326 audit(2000000863.452:71504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2864 comm="syz.6.8938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f729b04f6c9 code=0x7ffc0000 [ 672.661105][ T30] audit: type=1326 audit(2000000863.452:71505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2864 comm="syz.6.8938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729b04f6c9 code=0x7ffc0000 [ 672.685629][ T30] audit: type=1326 audit(2000000863.452:71506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2864 comm="syz.6.8938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729b04f6c9 code=0x7ffc0000 [ 672.710090][ T30] audit: type=1326 audit(2000000863.452:71507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2864 comm="syz.6.8938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f729b04f6c9 code=0x7ffc0000 [ 672.734176][ T30] audit: type=1326 audit(2000000863.452:71508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2864 comm="syz.6.8938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729b04f6c9 code=0x7ffc0000 [ 672.755424][ T2869] netlink: 'syz.3.8940': attribute type 3 has an invalid length. [ 672.759409][ T30] audit: type=1326 audit(2000000863.452:71509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2864 comm="syz.6.8938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729b04f6c9 code=0x7ffc0000 [ 672.791107][ T30] audit: type=1326 audit(2000000863.452:71510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2864 comm="syz.6.8938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f729b04f6c9 code=0x7ffc0000 [ 672.815093][ T30] audit: type=1326 audit(2000000863.452:71511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2864 comm="syz.6.8938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729b04f6c9 code=0x7ffc0000 [ 673.019586][ T2897] netlink: 399 bytes leftover after parsing attributes in process `syz.6.8952'. [ 673.029248][ T2897] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 673.038226][ T2897] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 673.436476][ T2940] xt_CT: You must specify a L4 protocol and not use inversions on it [ 673.472717][ T2930] netlink: 'syz.6.8963': attribute type 1 has an invalid length. [ 673.481591][ T2941] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.8969'. [ 673.491236][ T2941] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8969'. [ 673.512769][ T2941] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.522836][ T2941] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.569242][ T2941] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.579121][ T2941] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.676528][ T2941] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.686964][ T2941] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.710509][ T2940] can: request_module (can-proto-0) failed. [ 673.749063][ T2941] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.759350][ T2941] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.827643][T26149] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.835977][T26149] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.868332][T26149] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.878365][T26149] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.919593][T26149] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.928608][T26149] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.949077][T26149] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.957676][T26149] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.057221][ T2982] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8983'. [ 674.321331][ T2999] netlink: 'syz.3.8984': attribute type 1 has an invalid length. [ 674.534341][ T3037] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.9002'. [ 674.543773][ T3037] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9002'. [ 674.596929][ T3037] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.658339][ T3037] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.728535][ T3037] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.808361][ T3053] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9009'. [ 674.820023][ T3037] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.849905][ T3053] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 674.857311][ T3053] macsec1: entered allmulticast mode [ 674.862724][ T3053] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 674.873327][ T3053] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 674.880649][ T3053] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 674.899914][ T3055] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9009'. [ 674.931185][ T4273] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.946041][ T4273] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.960286][T26149] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.974199][T26149] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.017282][ T3067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9015'. [ 675.128321][ T3071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9016'. [ 675.575212][ T3080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9018'. [ 675.899202][ T3088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9021'. [ 675.982287][ T3088] hsr_slave_1 (unregistering): left promiscuous mode [ 676.029544][ T3106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65512 sclass=netlink_route_socket pid=3106 comm=syz.6.9025 [ 676.089535][ T3115] netlink: 176 bytes leftover after parsing attributes in process `syz.3.9028'. [ 676.143361][ T3115] tipc: Enabling of bearer rejected, already enabled [ 677.690767][ T30] kauditd_printk_skb: 702 callbacks suppressed [ 677.690799][ T30] audit: type=1326 audit(2000000868.572:72214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3133 comm="syz.3.9036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3be2ff6c9 code=0x7ffc0000 [ 677.756429][ T30] audit: type=1326 audit(2000000868.572:72215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3133 comm="syz.3.9036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3be2ff6c9 code=0x7ffc0000 [ 677.780066][ T30] audit: type=1326 audit(2000000868.572:72216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3133 comm="syz.3.9036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fa3be2ff6c9 code=0x7ffc0000 [ 677.805374][ T30] audit: type=1326 audit(2000000868.572:72217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3133 comm="syz.3.9036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3be2ff6c9 code=0x7ffc0000 [ 677.830514][ T30] audit: type=1326 audit(2000000868.572:72218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3133 comm="syz.3.9036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3be2ff6c9 code=0x7ffc0000 [ 677.857298][ T30] audit: type=1326 audit(2000000868.572:72219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3133 comm="syz.3.9036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa3be2ff6c9 code=0x7ffc0000 [ 677.885315][ T30] audit: type=1326 audit(2000000868.572:72220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3133 comm="syz.3.9036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3be2ff6c9 code=0x7ffc0000 [ 677.909523][ T30] audit: type=1326 audit(2000000868.572:72221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3133 comm="syz.3.9036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fa3be2ff6c9 code=0x7ffc0000 [ 677.933438][ T30] audit: type=1326 audit(2000000868.572:72222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3133 comm="syz.3.9036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3be2ff6c9 code=0x7ffc0000 [ 677.960107][ T30] audit: type=1326 audit(2000000868.572:72223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3133 comm="syz.3.9036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa3be2ff6c9 code=0x7ffc0000 [ 678.241357][ T3175] tipc: Enabling of bearer rejected, already enabled [ 679.192716][ T3204] __nla_validate_parse: 3 callbacks suppressed [ 679.192737][ T3204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9061'. [ 679.265172][ T3201] netlink: 'syz.0.9059': attribute type 1 has an invalid length. [ 679.286358][ T3201] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 679.296432][ T3201] bond1: (slave batadv1): making interface the new active one [ 679.305743][ T3201] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 679.377434][ T3209] netlink: 176 bytes leftover after parsing attributes in process `syz.2.9062'. [ 679.392614][ T3209] tipc: Enabling of bearer rejected, already enabled [ 679.483760][ T3218] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.9065'. [ 679.494112][ T3218] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9065'. [ 679.513818][ T3218] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 679.524015][ T3218] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.568619][ T3218] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 679.578600][ T3218] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.639611][ T3218] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 679.649726][ T3218] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.718767][ T3218] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 679.728790][ T3218] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.796670][ T4478] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.805044][ T4478] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.818070][ T4478] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.826564][ T4478] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.838725][ T4478] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.847272][ T4478] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.859563][ T4478] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.868568][ T4478] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.018703][ T3242] tipc: Enabling of bearer rejected, already enabled [ 680.362823][ T3275] tipc: Enabling of bearer rejected, already enabled [ 684.012488][ T30] kauditd_printk_skb: 296 callbacks suppressed [ 684.012509][ T30] audit: type=1400 audit(2000000874.892:72520): avc: denied { getopt } for pid=3378 comm="syz.3.9119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 684.259335][ T3407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9124'. [ 684.266709][ T3408] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.9123'. [ 684.280469][ T3408] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9123'. [ 684.327517][ T3408] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.356059][ T3411] tipc: Enabling of bearer rejected, already enabled [ 684.397713][ T30] audit: type=1326 audit(2000000875.282:72521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3415 comm="syz.3.9127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3be2ff6c9 code=0x7ffc0000 [ 684.425386][ T3408] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.446783][ T30] audit: type=1326 audit(2000000875.302:72522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3415 comm="syz.3.9127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3be2ff6c9 code=0x7ffc0000 [ 684.470771][ T30] audit: type=1326 audit(2000000875.302:72523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3415 comm="syz.3.9127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3be2ff6c9 code=0x7ffc0000 [ 684.495045][ T30] audit: type=1326 audit(2000000875.302:72524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3415 comm="syz.3.9127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3be2ff6c9 code=0x7ffc0000 [ 684.519237][ T30] audit: type=1326 audit(2000000875.302:72525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3415 comm="syz.3.9127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3be2ff6c9 code=0x7ffc0000 [ 684.543653][ T30] audit: type=1326 audit(2000000875.302:72526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3415 comm="syz.3.9127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3be2ff6c9 code=0x7ffc0000 [ 684.568214][ T30] audit: type=1326 audit(2000000875.302:72527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3415 comm="syz.3.9127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3be2ff6c9 code=0x7ffc0000 [ 684.592088][ T30] audit: type=1326 audit(2000000875.302:72528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3415 comm="syz.3.9127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3be2ff6c9 code=0x7ffc0000 [ 684.616369][ T30] audit: type=1326 audit(2000000875.302:72529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3415 comm="syz.3.9127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3be2ff6c9 code=0x7ffc0000 [ 684.665036][ T3408] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.684145][ T3432] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 684.706528][ T3408] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.754584][ T3442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9136'. [ 684.789338][ T52] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.832635][ T52] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.841300][ T52] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.850997][ T52] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.878462][ T3450] tipc: Enabling of bearer rejected, already enabled [ 685.079128][ T3469] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9148'. [ 685.176250][ T3480] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9152'. [ 685.191571][ T3484] netlink: 'syz.6.9153': attribute type 13 has an invalid length. [ 686.137301][ T3502] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.9159'. [ 686.147308][ T3502] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9159'. [ 686.618429][ T3484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 686.631191][ T3484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 686.668138][ T3517] netlink: 'syz.3.9165': attribute type 1 has an invalid length. [ 686.781690][ T3502] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.843719][T26149] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.879954][ T3502] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.893126][T26149] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.926237][T26149] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.938173][ T3502] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.977180][T26149] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.003081][ T3551] netlink: 'syz.3.9171': attribute type 4 has an invalid length. [ 687.011052][ T3551] netlink: 17 bytes leftover after parsing attributes in process `syz.3.9171'. [ 687.027266][ T3502] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.078528][ T3558] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9174'. [ 687.108894][ T52] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.141275][ T52] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.176261][ T52] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.215518][ T52] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.608757][ T3604] netlink: 'syz.5.9187': attribute type 4 has an invalid length. [ 689.616696][ T3604] __nla_validate_parse: 1 callbacks suppressed [ 689.616718][ T3604] netlink: 17 bytes leftover after parsing attributes in process `syz.5.9187'. [ 689.827078][ T30] kauditd_printk_skb: 523 callbacks suppressed [ 689.827100][ T30] audit: type=1400 audit(2000000880.612:73053): avc: denied { create } for pid=3598 comm="syz.6.9185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 689.856783][ T30] audit: type=1400 audit(2000000880.612:73054): avc: denied { bind } for pid=3598 comm="syz.6.9185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 689.917411][ T3558] syz.3.9174 (3558) used greatest stack depth: 7240 bytes left [ 690.235997][ T30] audit: type=1326 audit(2000000880.982:73055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3609 comm="syz.3.9188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3be2ff6c9 code=0x7ffc0000 [ 690.260177][ T30] audit: type=1326 audit(2000000880.982:73056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3609 comm="syz.3.9188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3be2ff6c9 code=0x7ffc0000 [ 690.284472][ T30] audit: type=1326 audit(2000000881.002:73057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3609 comm="syz.3.9188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3be2ff6c9 code=0x7ffc0000 [ 690.309877][ T30] audit: type=1326 audit(2000000881.002:73058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3609 comm="syz.3.9188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3be2ff6c9 code=0x7ffc0000 [ 690.336237][ T30] audit: type=1326 audit(2000000881.002:73059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3609 comm="syz.3.9188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3be2ff6c9 code=0x7ffc0000 [ 690.360461][ T30] audit: type=1326 audit(2000000881.002:73060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3609 comm="syz.3.9188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3be2ff6c9 code=0x7ffc0000 [ 690.386231][ T30] audit: type=1326 audit(2000000881.002:73061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3609 comm="syz.3.9188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3be2ff6c9 code=0x7ffc0000 [ 690.413102][ T30] audit: type=1326 audit(2000000881.002:73062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3609 comm="syz.3.9188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3be2ff6c9 code=0x7ffc0000 [ 690.493354][ T3606] netlink: 'syz.2.9186': attribute type 1 has an invalid length. [ 690.605665][ T3631] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9194'. [ 692.081005][ T3699] tipc: Enabling of bearer rejected, already enabled [ 693.594582][ T3738] tipc: Enabling of bearer rejected, already enabled [ 693.703077][ T3746] netlink: 'syz.6.9234': attribute type 1 has an invalid length. [ 694.435686][ T3775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9244'. [ 694.967121][ T3799] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9251'. [ 695.015119][ T3794] sctp: [Deprecated]: syz.2.9252 (pid 3794) Use of struct sctp_assoc_value in delayed_ack socket option. [ 695.015119][ T3794] Use struct sctp_sack_info instead [ 695.160134][ T3814] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9259'. [ 696.942989][ T3845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9268'. [ 697.081686][ T3857] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9272'. [ 697.130516][ T3836] netlink: 'syz.6.9261': attribute type 1 has an invalid length. [ 697.160774][ T30] kauditd_printk_skb: 89 callbacks suppressed [ 697.160794][ T30] audit: type=1326 audit(2000000888.042:73152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3873 comm="syz.3.9279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3be2ff6c9 code=0x7ffc0000 [ 697.212418][ T3823] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 697.232972][ T3823] bond6: (slave batadv2): making interface the new active one [ 697.247804][ T30] audit: type=1326 audit(2000000888.082:73153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3873 comm="syz.3.9279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3be2ff6c9 code=0x7ffc0000 [ 697.271317][ T3823] bond6: (slave batadv2): Enslaving as an active interface with an up link [ 697.272535][ T30] audit: type=1326 audit(2000000888.082:73154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3873 comm="syz.3.9279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3be2ff6c9 code=0x7ffc0000 [ 697.306247][ T30] audit: type=1326 audit(2000000888.082:73155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3873 comm="syz.3.9279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3be2ff6c9 code=0x7ffc0000 [ 697.330678][ T30] audit: type=1326 audit(2000000888.092:73156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3873 comm="syz.3.9279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fa3be2ff6c9 code=0x7ffc0000 [ 697.354488][ T30] audit: type=1326 audit(2000000888.102:73157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3876 comm="syz.3.9279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa3be331f85 code=0x7ffc0000 [ 697.414276][ T30] audit: type=1326 audit(2000000888.252:73158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3876 comm="syz.3.9279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fa3be2ff6c9 code=0x7ffc0000 [ 697.438826][ T30] audit: type=1326 audit(2000000888.262:73159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3873 comm="syz.3.9279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3be2ff6c9 code=0x7ffc0000 [ 697.463730][ T30] audit: type=1326 audit(2000000888.262:73160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3873 comm="syz.3.9279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3be2ff6c9 code=0x7ffc0000 [ 697.503738][ T30] audit: type=1326 audit(2000000888.372:73161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3882 comm="syz.0.9281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59adfef6c9 code=0x7ffc0000 [ 697.536459][ T3881] netlink: 'syz.2.9276': attribute type 1 has an invalid length. [ 697.652516][ T3893] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 697.661518][ T3893] bond1: (slave batadv1): making interface the new active one [ 697.671001][ T3893] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 698.122141][ T3889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9283'. [ 698.880105][ T3916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9288'. [ 699.438189][ T3952] netlink: 'syz.0.9291': attribute type 1 has an invalid length. [ 699.468510][ T3936] chnl_net:caif_netlink_parms(): no params data found [ 699.507538][ T3965] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 699.516511][ T3965] bond2: (slave batadv2): making interface the new active one [ 699.525744][ T3965] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 700.805241][ T3936] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.812494][ T3936] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.863383][ T3936] bridge_slave_0: entered allmulticast mode [ 700.883942][ T3936] bridge_slave_0: entered promiscuous mode [ 700.891151][ T3936] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.898326][ T3936] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.905848][ T3936] bridge_slave_1: entered allmulticast mode [ 700.912686][ T3936] bridge_slave_1: entered promiscuous mode [ 701.980763][ T3936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 701.997875][ T3995] tipc: Enabling of bearer rejected, already enabled [ 702.007375][ T3936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 702.268400][ T3936] team0: Port device team_slave_0 added [ 702.407312][ T3936] team0: Port device team_slave_1 added [ 702.484040][ T30] kauditd_printk_skb: 132 callbacks suppressed [ 702.484058][ T30] audit: type=1326 audit(2000000893.362:73294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4007 comm="syz.5.9313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c11aef6c9 code=0x7ffc0000 [ 702.547530][ T30] audit: type=1326 audit(2000000893.402:73295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4007 comm="syz.5.9313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f0c11aef6c9 code=0x7ffc0000 [ 702.572301][ T30] audit: type=1326 audit(2000000893.402:73296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4007 comm="syz.5.9313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c11aef6c9 code=0x7ffc0000 [ 702.596764][ T30] audit: type=1326 audit(2000000893.402:73297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4007 comm="syz.5.9313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c11aef6c9 code=0x7ffc0000 [ 702.622474][ T3936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 702.629669][ T3936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 702.649807][ T30] audit: type=1326 audit(2000000893.512:73298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4015 comm="syz.6.9317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729b04f6c9 code=0x7ffc0000 [ 702.656502][ T3936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 702.680260][ T30] audit: type=1326 audit(2000000893.512:73299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4015 comm="syz.6.9317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729b04f6c9 code=0x7ffc0000 [ 702.714476][ T30] audit: type=1326 audit(2000000893.512:73300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4015 comm="syz.6.9317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f729b04f6c9 code=0x7ffc0000 [ 702.726684][ T3936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 702.738073][ T30] audit: type=1326 audit(2000000893.512:73301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4015 comm="syz.6.9317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729b04f6c9 code=0x7ffc0000 [ 702.745180][ T3936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 702.769069][ T30] audit: type=1326 audit(2000000893.512:73302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4015 comm="syz.6.9317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729b04f6c9 code=0x7ffc0000 [ 702.794881][ T3936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 702.829127][ T30] audit: type=1326 audit(2000000893.512:73303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4015 comm="syz.6.9317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f729b04f6c9 code=0x7ffc0000 [ 702.916494][ T4024] tipc: Enabling of bearer rejected, already enabled [ 702.938439][ T3936] hsr_slave_0: entered promiscuous mode [ 702.953570][ T3936] hsr_slave_1: entered promiscuous mode [ 703.053738][ T3936] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.392942][ T4041] netlink: 'syz.2.9327': attribute type 1 has an invalid length. [ 703.463763][ T4045] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 703.477373][ T4045] bond2: (slave batadv2): making interface the new active one [ 703.487425][ T4045] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 703.950166][ T4060] tipc: Enabling of bearer rejected, already enabled [ 704.008274][ T3936] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.029066][ T4063] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9334'. [ 704.286765][ T3936] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.428971][ T3936] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.574766][ T3936] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 704.608113][ T3936] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 704.640987][ T3936] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 704.685368][ T3936] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 705.124397][ T3936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 705.139266][ T3936] 8021q: adding VLAN 0 to HW filter on device team0 [ 705.149909][ T3917] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.157033][ T3917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 705.170414][ T3610] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.177575][ T3610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 705.196961][ T3936] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 705.207683][ T3936] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 705.334872][ T4102] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9348'. [ 705.363249][ T3936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 705.569685][ T3936] veth0_vlan: entered promiscuous mode [ 705.849153][ T3936] veth1_vlan: entered promiscuous mode [ 705.978672][ T3936] veth0_macvtap: entered promiscuous mode [ 706.110477][ T3936] veth1_macvtap: entered promiscuous mode [ 706.224463][ T3936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 706.282018][ T3936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 706.300398][ T3610] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.348993][ T3610] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.373060][ T3610] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.385264][ T3610] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.709257][ T4175] loop3: detected capacity change from 0 to 4096 [ 706.718080][ T4175] EXT4-fs: Ignoring removed nomblk_io_submit option [ 706.782552][ T4175] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 706.802935][ T4174] tipc: Enabling of bearer rejected, already enabled [ 707.274924][ T4184] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 707.355407][ T3936] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.412890][ T4191] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9375'. [ 707.526698][ T4199] FAULT_INJECTION: forcing a failure. [ 707.526698][ T4199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 707.540579][ T4199] CPU: 1 UID: 0 PID: 4199 Comm: syz.3.9380 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 707.540625][ T4199] Tainted: [W]=WARN [ 707.540634][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 707.540652][ T4199] Call Trace: [ 707.540693][ T4199] [ 707.540704][ T4199] __dump_stack+0x1d/0x30 [ 707.540813][ T4199] dump_stack_lvl+0xe8/0x140 [ 707.540842][ T4199] dump_stack+0x15/0x1b [ 707.540867][ T4199] should_fail_ex+0x265/0x280 [ 707.540895][ T4199] should_fail+0xb/0x20 [ 707.540919][ T4199] should_fail_usercopy+0x1a/0x20 [ 707.540950][ T4199] _copy_from_user+0x1c/0xb0 [ 707.541064][ T4199] do_sock_getsockopt+0xf1/0x240 [ 707.541115][ T4199] __x64_sys_getsockopt+0x11e/0x1a0 [ 707.541168][ T4199] x64_sys_call+0x2bca/0x3000 [ 707.541248][ T4199] do_syscall_64+0xd2/0x200 [ 707.541291][ T4199] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 707.541328][ T4199] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 707.541432][ T4199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.541462][ T4199] RIP: 0033:0x7f97ce75f6c9 [ 707.541537][ T4199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 707.541562][ T4199] RSP: 002b:00007f97cd1c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 707.541591][ T4199] RAX: ffffffffffffffda RBX: 00007f97ce9b5fa0 RCX: 00007f97ce75f6c9 [ 707.541608][ T4199] RDX: 000000000000000e RSI: 0000000000000107 RDI: 0000000000000003 [ 707.541621][ T4199] RBP: 00007f97cd1c7090 R08: 00002000000000c0 R09: 0000000000000000 [ 707.541638][ T4199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 707.541656][ T4199] R13: 00007f97ce9b6038 R14: 00007f97ce9b5fa0 R15: 00007ffd91f369c8 [ 707.541683][ T4199] [ 707.781266][ T4206] tipc: Started in network mode [ 707.787605][ T4206] tipc: Node identity ac14140f, cluster identity 4711 [ 707.795560][ T4206] tipc: New replicast peer: 255.255.255.255 [ 707.802402][ T4206] tipc: Enabled bearer , priority 10 [ 708.949576][ T3524] tipc: Node number set to 2886997007 [ 709.069604][ T4225] ip6gretap0: entered promiscuous mode [ 709.076526][ T4225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9390'. [ 709.307384][ T4233] netlink: 'syz.0.9393': attribute type 1 has an invalid length. [ 709.376285][ T4238] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 709.385412][ T4238] bond3: (slave batadv3): making interface the new active one [ 709.386104][ T4243] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9395'. [ 709.404760][ T4238] bond3: (slave batadv3): Enslaving as an active interface with an up link [ 709.436565][ T4246] netlink: 'syz.2.9396': attribute type 16 has an invalid length. [ 709.444987][ T4246] netlink: 156 bytes leftover after parsing attributes in process `syz.2.9396'. [ 709.456429][ T4246] tipc: Enabling of bearer rejected, failed to enable media [ 709.479601][ T4250] netlink: 'syz.0.9397': attribute type 1 has an invalid length. [ 709.499797][ T4253] tipc: Enabling of bearer rejected, already enabled [ 709.521663][ T4250] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 709.533156][ T4250] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 709.560925][ T4257] netlink: 'syz.6.9401': attribute type 1 has an invalid length. [ 709.582673][ T4259] bond4: (slave gretap1): making interface the new active one [ 709.590741][ T4259] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 709.605105][ T4257] bond7: (slave vxcan7): The slave device specified does not support setting the MAC address [ 709.616060][ T4257] bond7: (slave vxcan7): Error -95 calling set_mac_address [ 709.628917][ T4259] macvlan0: entered promiscuous mode [ 709.634313][ T4259] macvlan0: entered allmulticast mode [ 709.640482][ T4259] bond4: entered promiscuous mode [ 709.645679][ T4259] gretap1: entered promiscuous mode [ 709.651434][ T4259] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 709.662927][ T4259] bond4: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 709.675281][ T4259] bond4: left promiscuous mode [ 709.680417][ T4259] gretap1: left promiscuous mode [ 709.701574][ T4257] macvlan2: entered promiscuous mode [ 709.707006][ T4257] macvlan2: entered allmulticast mode [ 709.712855][ T4257] bond7: entered promiscuous mode [ 709.718326][ T4257] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 709.727135][ T4257] bond7: left promiscuous mode [ 710.953635][ T4278] netlink: 'syz.2.9408': attribute type 1 has an invalid length. [ 711.263085][ T4295] tipc: Enabling of bearer rejected, already enabled [ 711.449506][ T30] kauditd_printk_skb: 117 callbacks suppressed [ 711.449526][ T30] audit: type=1326 audit(2000000902.332:73421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4318 comm="syz.2.9422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9cd1f6c9 code=0x7ffc0000 [ 711.520274][ T30] audit: type=1326 audit(2000000902.332:73422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4318 comm="syz.2.9422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9cd1f6c9 code=0x7ffc0000 [ 711.544959][ T30] audit: type=1326 audit(2000000902.332:73423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4318 comm="syz.2.9422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a9cd1f6c9 code=0x7ffc0000 [ 711.569283][ T30] audit: type=1326 audit(2000000902.332:73424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4318 comm="syz.2.9422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9cd1f6c9 code=0x7ffc0000 [ 711.593082][ T30] audit: type=1326 audit(2000000902.332:73425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4318 comm="syz.2.9422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9cd1f6c9 code=0x7ffc0000 [ 711.616872][ T30] audit: type=1326 audit(2000000902.332:73426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4318 comm="syz.2.9422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a9cd1f6c9 code=0x7ffc0000 [ 711.640798][ T30] audit: type=1326 audit(2000000902.332:73427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4318 comm="syz.2.9422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9cd1f6c9 code=0x7ffc0000 [ 711.665148][ T30] audit: type=1326 audit(2000000902.332:73428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4318 comm="syz.2.9422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9cd1f6c9 code=0x7ffc0000 [ 711.689983][ T30] audit: type=1326 audit(2000000902.332:73429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4318 comm="syz.2.9422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a9cd1f6c9 code=0x7ffc0000 [ 711.714253][ T30] audit: type=1326 audit(2000000902.332:73430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4318 comm="syz.2.9422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9cd1f6c9 code=0x7ffc0000 [ 711.754288][ T4327] sctp: [Deprecated]: syz.6.9425 (pid 4327) Use of struct sctp_assoc_value in delayed_ack socket option. [ 711.754288][ T4327] Use struct sctp_sack_info instead [ 711.787242][ T4337] netlink: 'syz.2.9430': attribute type 1 has an invalid length. [ 711.885057][ T4350] sctp: [Deprecated]: syz.0.9434 (pid 4350) Use of struct sctp_assoc_value in delayed_ack socket option. [ 711.885057][ T4350] Use struct sctp_sack_info instead [ 712.155331][ T4376] netlink: 'syz.6.9445': attribute type 1 has an invalid length. [ 712.282079][ T4387] sctp: [Deprecated]: syz.6.9451 (pid 4387) Use of struct sctp_assoc_value in delayed_ack socket option. [ 712.282079][ T4387] Use struct sctp_sack_info instead [ 713.897282][ T4413] netlink: 'syz.0.9460': attribute type 1 has an invalid length. [ 714.427551][ T4426] FAULT_INJECTION: forcing a failure. [ 714.427551][ T4426] name failslab, interval 1, probability 0, space 0, times 0 [ 714.441228][ T4426] CPU: 0 UID: 0 PID: 4426 Comm: syz.3.9464 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 714.441333][ T4426] Tainted: [W]=WARN [ 714.441342][ T4426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 714.441433][ T4426] Call Trace: [ 714.441443][ T4426] [ 714.441454][ T4426] __dump_stack+0x1d/0x30 [ 714.441486][ T4426] dump_stack_lvl+0xe8/0x140 [ 714.441508][ T4426] dump_stack+0x15/0x1b [ 714.441680][ T4426] should_fail_ex+0x265/0x280 [ 714.441706][ T4426] should_failslab+0x8c/0xb0 [ 714.441742][ T4426] __kmalloc_noprof+0xa5/0x570 [ 714.441787][ T4426] ? sock_kmalloc+0x85/0xc0 [ 714.441815][ T4426] sock_kmalloc+0x85/0xc0 [ 714.441842][ T4426] ipv6_renew_options+0x1fb/0x5f0 [ 714.441913][ T4426] ? _raw_spin_unlock_bh+0x36/0x40 [ 714.441950][ T4426] ipv6_set_opt_hdr+0x13b/0x620 [ 714.441994][ T4426] do_ipv6_setsockopt+0x10b9/0x2160 [ 714.442071][ T4426] ? kstrtoull+0x111/0x140 [ 714.442117][ T4426] ? avc_has_perm_noaudit+0x1b1/0x200 [ 714.442190][ T4426] ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0 [ 714.442226][ T4426] ipv6_setsockopt+0x59/0x130 [ 714.442272][ T4426] udpv6_setsockopt+0x99/0xb0 [ 714.442322][ T4426] sock_common_setsockopt+0x69/0x80 [ 714.442386][ T4426] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 714.442482][ T4426] __sys_setsockopt+0x184/0x200 [ 714.442527][ T4426] __x64_sys_setsockopt+0x64/0x80 [ 714.442573][ T4426] x64_sys_call+0x20ec/0x3000 [ 714.442606][ T4426] do_syscall_64+0xd2/0x200 [ 714.442711][ T4426] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 714.442749][ T4426] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 714.442796][ T4426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.442838][ T4426] RIP: 0033:0x7f97ce75f6c9 [ 714.442858][ T4426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 714.442877][ T4426] RSP: 002b:00007f97cd1c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 714.442903][ T4426] RAX: ffffffffffffffda RBX: 00007f97ce9b5fa0 RCX: 00007f97ce75f6c9 [ 714.442921][ T4426] RDX: 0000000000000039 RSI: 0000000000000029 RDI: 0000000000000003 [ 714.443003][ T4426] RBP: 00007f97cd1c7090 R08: 0000000000000000 R09: 0000000000000000 [ 714.443020][ T4426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 714.443037][ T4426] R13: 00007f97ce9b6038 R14: 00007f97ce9b5fa0 R15: 00007ffd91f369c8 [ 714.443064][ T4426] [ 716.302417][ T4453] loop3: detected capacity change from 0 to 512 [ 716.311878][ T4453] EXT4-fs: Ignoring removed orlov option [ 716.319031][ T4453] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 716.507542][ T4453] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 716.532599][ T4453] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.9474: corrupted in-inode xattr: e_value size too large [ 716.751771][ T4453] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.9474: couldn't read orphan inode 15 (err -117) [ 716.798955][ T4453] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 717.477838][ T4465] sctp: [Deprecated]: syz.0.9475 (pid 4465) Use of struct sctp_assoc_value in delayed_ack socket option. [ 717.477838][ T4465] Use struct sctp_sack_info instead [ 717.799100][ T4472] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9479'. [ 717.808564][ T4472] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9479'. [ 717.845926][ T4453] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 717.932362][ T3936] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 718.428644][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 718.428663][ T30] audit: type=1326 audit(2000000909.312:73466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4490 comm="syz.3.9481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ce75f6c9 code=0x7ffc0000 [ 718.458493][ T30] audit: type=1326 audit(2000000909.312:73467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4490 comm="syz.3.9481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ce75f6c9 code=0x7ffc0000 [ 718.488882][ T30] audit: type=1326 audit(2000000909.372:73468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4490 comm="syz.3.9481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f97ce75f6c9 code=0x7ffc0000 [ 718.513091][ T30] audit: type=1326 audit(2000000909.372:73469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4490 comm="syz.3.9481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ce75f6c9 code=0x7ffc0000 [ 718.537389][ T30] audit: type=1326 audit(2000000909.372:73470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4490 comm="syz.3.9481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ce75f6c9 code=0x7ffc0000 [ 718.702105][ T30] audit: type=1326 audit(2000000909.582:73471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4498 comm="syz.3.9487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ce75f6c9 code=0x7ffc0000 [ 718.725865][ T30] audit: type=1326 audit(2000000909.582:73472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4498 comm="syz.3.9487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ce75f6c9 code=0x7ffc0000 [ 718.755914][ T4499] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9487'. [ 718.768118][ T30] audit: type=1326 audit(2000000909.632:73473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4498 comm="syz.3.9487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f97ce75f6c9 code=0x7ffc0000 [ 718.792712][ T30] audit: type=1326 audit(2000000909.632:73474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4498 comm="syz.3.9487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ce75f6c9 code=0x7ffc0000 [ 718.817815][ T30] audit: type=1326 audit(2000000909.632:73475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4498 comm="syz.3.9487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ce75f6c9 code=0x7ffc0000 [ 719.118406][ T4499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 719.151467][ T4499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 719.172638][ T4499] bond0 (unregistering): Released all slaves [ 719.383600][ T4524] netlink: 'syz.3.9496': attribute type 1 has an invalid length. [ 720.235223][ T4532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9498'. [ 720.244179][ T4532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9498'. [ 720.258045][ T4532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9498'. [ 720.267437][ T4532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9498'. [ 720.301270][ T4273] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 720.313369][ T4273] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 720.321791][ T4273] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 720.353600][ T4540] netlink: 19 bytes leftover after parsing attributes in process `syz.2.9499'. [ 720.359564][ T4273] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 720.422600][ T4536] lo speed is unknown, defaulting to 1000 [ 720.449838][ T4536] lo speed is unknown, defaulting to 1000 [ 720.473908][ T4536] lo speed is unknown, defaulting to 1000 [ 720.598037][ T4536] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 720.620619][ T4536] lo speed is unknown, defaulting to 1000 [ 720.649107][ T4536] lo speed is unknown, defaulting to 1000 [ 720.668846][ T4536] lo speed is unknown, defaulting to 1000 [ 720.706860][ T4536] lo speed is unknown, defaulting to 1000 [ 720.713411][ T4536] lo speed is unknown, defaulting to 1000 [ 720.732079][ T4536] lo speed is unknown, defaulting to 1000 [ 720.759804][ T4536] lo speed is unknown, defaulting to 1000 [ 721.413838][ T4567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9509'. [ 721.565277][ T4570] lo speed is unknown, defaulting to 1000 [ 722.014316][ T4560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9507'. [ 722.421431][ T4606] loop3: detected capacity change from 0 to 4096 [ 722.428343][ T4606] EXT4-fs: Ignoring removed nomblk_io_submit option [ 722.499367][ T4606] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 723.279991][ T3936] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.848660][ T4626] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9525'. [ 723.939391][ T30] kauditd_printk_skb: 175 callbacks suppressed [ 723.939466][ T30] audit: type=1326 audit(2000000914.822:73651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4630 comm="syz.5.9528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c11aef6c9 code=0x7ffc0000 [ 724.095147][ T30] audit: type=1326 audit(2000000914.852:73652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4630 comm="syz.5.9528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c11aef6c9 code=0x7ffc0000 [ 724.118873][ T30] audit: type=1326 audit(2000000914.852:73653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4630 comm="syz.5.9528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c11aef6c9 code=0x7ffc0000 [ 724.142552][ T30] audit: type=1326 audit(2000000914.852:73654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4630 comm="syz.5.9528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c11aef6c9 code=0x7ffc0000 [ 724.166354][ T30] audit: type=1326 audit(2000000914.852:73655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4630 comm="syz.5.9528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c11aef6c9 code=0x7ffc0000 [ 724.190097][ T30] audit: type=1326 audit(2000000914.862:73656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4630 comm="syz.5.9528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c11aef6c9 code=0x7ffc0000 [ 724.213886][ T30] audit: type=1326 audit(2000000914.862:73657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4630 comm="syz.5.9528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c11aef6c9 code=0x7ffc0000 [ 724.237468][ T30] audit: type=1326 audit(2000000914.862:73658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4630 comm="syz.5.9528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c11aef6c9 code=0x7ffc0000 [ 724.261019][ T30] audit: type=1326 audit(2000000914.862:73659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4630 comm="syz.5.9528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c11aef6c9 code=0x7ffc0000 [ 724.284817][ T30] audit: type=1326 audit(2000000914.862:73660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4630 comm="syz.5.9528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c11aef6c9 code=0x7ffc0000 [ 724.344053][ T4642] netlink: 'syz.6.9532': attribute type 1 has an invalid length. [ 724.423037][ T4642] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 724.515410][ T4642] bond9: (slave batadv3): making interface the new active one [ 724.524361][ T4642] bond9: (slave batadv3): Enslaving as an active interface with an up link [ 724.776151][ T4663] loop3: detected capacity change from 0 to 4096 [ 724.783210][ T4663] EXT4-fs: Ignoring removed nomblk_io_submit option [ 724.865145][ T4671] netlink: 'syz.0.9541': attribute type 1 has an invalid length. [ 725.066741][ T4663] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 725.099872][ T4676] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 725.110478][ T4676] bond6: (slave batadv4): making interface the new active one [ 725.120007][ T4676] bond6: (slave batadv4): Enslaving as an active interface with an up link [ 725.211123][ T4697] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9553'. [ 725.232695][ T4699] sctp: [Deprecated]: syz.6.9552 (pid 4699) Use of struct sctp_assoc_value in delayed_ack socket option. [ 725.232695][ T4699] Use struct sctp_sack_info instead [ 725.265191][ T3936] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 725.401257][ T4705] sctp: [Deprecated]: syz.5.9557 (pid 4705) Use of struct sctp_assoc_value in delayed_ack socket option. [ 725.401257][ T4705] Use struct sctp_sack_info instead [ 725.424335][ T4716] netlink: 'syz.2.9560': attribute type 1 has an invalid length. [ 725.558366][ T4712] bond5: (slave vxcan7): The slave device specified does not support setting the MAC address [ 725.570551][ T4712] bond5: (slave vxcan7): Error -95 calling set_mac_address [ 725.610872][ T4716] bond5: (slave bridge0): Enslaving as an active interface with a down link [ 725.632502][ T4716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9560'. [ 725.648189][ T4716] macvlan2: entered promiscuous mode [ 725.653572][ T4716] macvlan2: entered allmulticast mode [ 726.036705][ T4735] netlink: 'syz.2.9565': attribute type 1 has an invalid length. [ 726.149428][ T4735] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 726.168462][ T4735] bond6: (slave batadv4): making interface the new active one [ 726.185335][ T4735] bond6: (slave batadv4): Enslaving as an active interface with an up link [ 726.278295][ T4740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9567'. [ 727.211498][ T4772] sctp: [Deprecated]: syz.3.9579 (pid 4772) Use of struct sctp_assoc_value in delayed_ack socket option. [ 727.211498][ T4772] Use struct sctp_sack_info instead [ 728.372074][ T4764] Set syz1 is full, maxelem 65536 reached [ 728.775790][ T4814] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9590'. [ 729.495186][ T30] kauditd_printk_skb: 97 callbacks suppressed [ 729.495205][ T30] audit: type=1326 audit(2000000920.372:73758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.0.9592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59adfef6c9 code=0x7ffc0000 [ 729.587673][ T30] audit: type=1326 audit(2000000920.412:73759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.0.9592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59adfef6c9 code=0x7ffc0000 [ 729.611684][ T30] audit: type=1326 audit(2000000920.412:73760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.0.9592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59adfef6c9 code=0x7ffc0000 [ 729.635344][ T30] audit: type=1326 audit(2000000920.412:73761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.0.9592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59adfef6c9 code=0x7ffc0000 [ 729.659129][ T30] audit: type=1326 audit(2000000920.422:73762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.0.9592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59adfef6c9 code=0x7ffc0000 [ 729.683023][ T30] audit: type=1326 audit(2000000920.422:73763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.0.9592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59adfef6c9 code=0x7ffc0000 [ 729.689294][ T4824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9593'. [ 729.706645][ T30] audit: type=1326 audit(2000000920.422:73764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.0.9592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59adfef6c9 code=0x7ffc0000 [ 729.739740][ T30] audit: type=1326 audit(2000000920.432:73765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.0.9592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59adfef6c9 code=0x7ffc0000 [ 729.763441][ T30] audit: type=1326 audit(2000000920.432:73766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.0.9592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59adfef6c9 code=0x7ffc0000 [ 729.787124][ T30] audit: type=1326 audit(2000000920.432:73767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.0.9592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59adfef6c9 code=0x7ffc0000 [ 730.410682][ T4834] sctp: [Deprecated]: syz.3.9596 (pid 4834) Use of struct sctp_assoc_value in delayed_ack socket option. [ 730.410682][ T4834] Use struct sctp_sack_info instead [ 730.920347][ T4853] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9601'. [ 731.886876][ T4861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9606'. [ 732.209955][ T4877] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9613'. [ 732.489418][ T4884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9616'. [ 732.738796][ T4893] blktrace: Concurrent blktraces are not allowed on loop1 [ 733.018428][ T4906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9622'. [ 733.047884][ T4909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9621'. [ 733.291154][ T4930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9624'. [ 734.616307][ T30] kauditd_printk_skb: 103 callbacks suppressed [ 734.616326][ T30] audit: type=1326 audit(2000000925.402:73871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.5.9632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c11aef6c9 code=0x7ffc0000 [ 734.646480][ T30] audit: type=1326 audit(2000000925.402:73872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.5.9632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c11aef6c9 code=0x7ffc0000 [ 734.906925][ T30] audit: type=1326 audit(2000000925.782:73873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.5.9632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f0c11aef6c9 code=0x7ffc0000 [ 734.930957][ T30] audit: type=1326 audit(2000000925.782:73874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.5.9632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c11aef6c9 code=0x7ffc0000 [ 734.954660][ T30] audit: type=1326 audit(2000000925.782:73875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.5.9632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c11aef6c9 code=0x7ffc0000 [ 735.095682][ T30] audit: type=1326 audit(2000000925.812:73876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.5.9632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f0c11aef6c9 code=0x7ffc0000 [ 735.119337][ T30] audit: type=1326 audit(2000000925.812:73877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.5.9632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0c11aef703 code=0x7ffc0000 [ 735.142898][ T30] audit: type=1326 audit(2000000925.812:73878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.5.9632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0c11aef703 code=0x7ffc0000 [ 735.166416][ T30] audit: type=1326 audit(2000000925.812:73879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.5.9632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c11aef6c9 code=0x7ffc0000 [ 735.190091][ T30] audit: type=1326 audit(2000000925.812:73880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.5.9632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c11aef6c9 code=0x7ffc0000 [ 735.292131][ T4966] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9642'. [ 735.309435][ T4968] netlink: 'syz.3.9644': attribute type 1 has an invalid length. [ 735.325483][ T4970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9643'. [ 735.390080][ T4968] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 735.408534][ T4968] bond0: (slave batadv1): making interface the new active one [ 735.427601][ T4968] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 735.444419][ T4978] tipc: Enabling of bearer rejected, already enabled [ 735.580368][ T4980] blktrace: Concurrent blktraces are not allowed on loop11 [ 735.764051][ T5006] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9658'. [ 735.886709][ T5016] tipc: Enabling of bearer rejected, already enabled [ 735.931867][ T5019] netlink: 'syz.6.9662': attribute type 1 has an invalid length. [ 735.993808][ T5019] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 736.012957][ T5017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9659'. [ 736.037348][ T5019] bond10: (slave batadv4): making interface the new active one [ 736.058975][ T5019] bond10: (slave batadv4): Enslaving as an active interface with an up link [ 736.068070][ T5012] lo speed is unknown, defaulting to 1000 [ 736.205009][ T5025] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9664'. [ 736.444422][ T5043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9671'. [ 736.466713][ T5055] netlink: 'syz.3.9675': attribute type 1 has an invalid length. [ 736.533104][ T5055] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 736.579687][ T5055] bond1: (slave batadv2): making interface the new active one [ 736.597631][ T5055] bond1: (slave batadv2): Enslaving as an active interface with an up link [ 737.042724][ T5081] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9681'. [ 737.409162][ T5091] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9685'. [ 737.940962][ T5113] lo speed is unknown, defaulting to 1000 [ 738.087162][ T5113] chnl_net:caif_netlink_parms(): no params data found [ 738.087901][ T5128] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.9696'. [ 738.103292][ T5128] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9696'. [ 738.155954][ T5128] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 738.166478][ T5128] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.227222][ T5113] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.234385][ T5113] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.255238][ T5113] bridge_slave_0: entered allmulticast mode [ 738.268728][ T5113] bridge_slave_0: entered promiscuous mode [ 738.283946][ T5128] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 738.293902][ T5128] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.316659][ T5113] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.323893][ T5113] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.347252][ T5113] bridge_slave_1: entered allmulticast mode [ 738.363744][ T5113] bridge_slave_1: entered promiscuous mode [ 738.375395][ T5128] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 738.385242][ T5128] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.432219][ T5113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 738.453844][ T5113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.465829][ T5128] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 738.475725][ T5128] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.504405][ T5113] team0: Port device team_slave_0 added [ 738.511611][ T5113] team0: Port device team_slave_1 added [ 738.558762][T26149] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 738.567245][T26149] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.591808][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 738.598998][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 738.626852][ T5113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 738.640928][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 738.647950][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 738.673958][ T5113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.686834][T26149] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 738.695234][T26149] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.713750][T26149] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 738.722158][T26149] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.745096][ T5146] tipc: Enabling of bearer rejected, already enabled [ 738.753166][T26149] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 738.761599][T26149] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.937515][ T5113] hsr_slave_0: entered promiscuous mode [ 738.943821][ T5113] hsr_slave_1: entered promiscuous mode [ 738.951346][ T5113] debugfs: 'hsr0' already exists in 'hsr' [ 738.957157][ T5113] Cannot create hsr debugfs directory [ 739.211184][ T5162] netlink: 'syz.2.9709': attribute type 1 has an invalid length. [ 739.272678][ T5162] bond7: (slave vxcan7): The slave device specified does not support setting the MAC address [ 739.284596][ T5162] bond7: (slave vxcan7): Error -95 calling set_mac_address [ 739.329633][ T5164] bond7: (slave gretap1): making interface the new active one [ 739.337952][ T5164] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 739.387784][ T5162] macvlan3: entered promiscuous mode [ 739.393206][ T5162] macvlan3: entered allmulticast mode [ 739.399503][ T5162] bond7: entered promiscuous mode [ 739.404561][ T5162] gretap1: entered promiscuous mode [ 739.414686][ T5162] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 739.426851][ T5162] bond7: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 739.439150][ T5162] bond7: left promiscuous mode [ 739.444040][ T5162] gretap1: left promiscuous mode [ 739.815103][ T5174] netlink: 'syz.0.9713': attribute type 1 has an invalid length. [ 740.433991][ T5113] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 740.467334][ T5113] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 740.499101][ T5113] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 740.530423][ T5113] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 740.660576][ T5113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 740.705955][ T5113] 8021q: adding VLAN 0 to HW filter on device team0 [ 740.740776][ T3610] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.747934][ T3610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 740.804395][ T5113] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 740.815088][ T5113] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 740.900244][ T3610] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.907562][ T3610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 741.014144][ T5113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 741.126739][ T5210] __nla_validate_parse: 3 callbacks suppressed [ 741.126761][ T5210] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9723'. [ 741.157195][ T30] kauditd_printk_skb: 131 callbacks suppressed [ 741.157213][ T30] audit: type=1326 audit(2000000932.042:74012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5213 comm="syz.2.9724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9cd1f6c9 code=0x7ffc0000 [ 741.189296][ T30] audit: type=1326 audit(2000000932.042:74013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5213 comm="syz.2.9724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9cd1f6c9 code=0x7ffc0000 [ 741.927863][ T30] audit: type=1326 audit(2000000932.802:74014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5213 comm="syz.2.9724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f5a9cd1f6c9 code=0x7ffc0000 [ 741.951824][ T30] audit: type=1326 audit(2000000932.802:74015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5213 comm="syz.2.9724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9cd1f6c9 code=0x7ffc0000 [ 741.975763][ T30] audit: type=1326 audit(2000000932.802:74016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5213 comm="syz.2.9724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9cd1f6c9 code=0x7ffc0000 [ 742.006548][ T5113] veth0_vlan: entered promiscuous mode [ 742.027689][ T5113] veth1_vlan: entered promiscuous mode [ 742.058606][ T5238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9728'. [ 742.097990][ T5113] veth0_macvtap: entered promiscuous mode [ 742.119888][ T5113] veth1_macvtap: entered promiscuous mode [ 742.133504][ T5240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9729'. [ 742.138146][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 742.152312][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 742.197451][ T30] audit: type=1326 audit(2000000933.052:74017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5246 comm="syz.2.9731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9cd1f6c9 code=0x7ffc0000 [ 742.221659][ T30] audit: type=1326 audit(2000000933.052:74018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5246 comm="syz.2.9731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9cd1f6c9 code=0x7ffc0000 [ 742.246748][ T30] audit: type=1326 audit(2000000933.052:74019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5246 comm="syz.2.9731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f5a9cd1f6c9 code=0x7ffc0000 [ 742.274210][ T30] audit: type=1326 audit(2000000933.052:74020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5246 comm="syz.2.9731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9cd1f6c9 code=0x7ffc0000 [ 742.299526][ T30] audit: type=1326 audit(2000000933.052:74021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5246 comm="syz.2.9731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9cd1f6c9 code=0x7ffc0000 [ 742.326618][ T52] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.343435][ T52] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.361318][ T52] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.377771][ T5254] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9734'. [ 742.380933][ T52] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.762267][ T5267] loop6: detected capacity change from 0 to 2048 [ 743.386776][ T5267] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 743.706302][ T5267] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 743.887461][ T5284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.928937][ T5284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.529334][ T5303] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9746'. [ 744.569529][ T5305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9748'. [ 744.586521][ T5307] netlink: 'syz.2.9747': attribute type 1 has an invalid length. [ 744.626690][ T5307] bond8: (slave vxcan7): The slave device specified does not support setting the MAC address [ 744.641141][ T5307] bond8: (slave vxcan7): Error -95 calling set_mac_address [ 744.687077][ T5310] macvlan3: entered promiscuous mode [ 744.692898][ T5310] macvlan3: entered allmulticast mode [ 744.716568][ T5310] bond8: entered promiscuous mode [ 744.722347][ T5310] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 744.732745][ T5310] bond8: left promiscuous mode [ 744.849807][ T5322] tipc: Enabling of bearer rejected, already enabled [ 745.007119][ T5272] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 745.036917][ T5272] EXT4-fs (loop6): Remounting filesystem read-only [ 745.307905][ T5113] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 745.352101][ T5341] netlink: 'syz.3.9762': attribute type 1 has an invalid length. [ 745.403460][ T5346] netlink: 'syz.6.9763': attribute type 1 has an invalid length. [ 745.404955][ T5341] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 745.453713][ T5341] bond2: (slave batadv3): making interface the new active one [ 745.474809][ T5350] sctp: [Deprecated]: syz.5.9764 (pid 5350) Use of struct sctp_assoc_value in delayed_ack socket option. [ 745.474809][ T5350] Use struct sctp_sack_info instead [ 745.497615][ T5341] bond2: (slave batadv3): Enslaving as an active interface with an up link [ 745.757162][ T5363] loop6: detected capacity change from 0 to 1024 [ 746.019636][ T5363] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 746.118758][ T5363] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 746.255012][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 746.255028][ T30] audit: type=1400 audit(2000000937.132:74043): avc: denied { write } for pid=5360 comm="syz.6.9769" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 746.292020][ T5370] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 746.353100][ T5363] sg_write: data in/out 49276/12 bytes for SCSI command 0x6-- guessing data in; [ 746.353100][ T5363] program syz.6.9769 not setting count and/or reply_len properly [ 746.598829][ T5374] sctp: [Deprecated]: syz.6.9769 (pid 5374) Use of struct sctp_assoc_value in delayed_ack socket option. [ 746.598829][ T5374] Use struct sctp_sack_info instead [ 746.881346][ T5113] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 746.999576][ T5388] netlink: 'syz.2.9777': attribute type 1 has an invalid length. [ 747.039480][ T5388] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 747.058371][ T5388] bond9: (slave batadv5): making interface the new active one [ 747.076801][ T5388] bond9: (slave batadv5): Enslaving as an active interface with an up link [ 747.236857][ T5401] ip6gretap0: entered promiscuous mode [ 747.265958][ T30] audit: type=1326 audit(2000000938.072:74044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5393 comm="syz.5.9780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c11aef6c9 code=0x7ffc0000 [ 747.290796][ T30] audit: type=1326 audit(2000000938.072:74045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5393 comm="syz.5.9780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f0c11aef6c9 code=0x7ffc0000 [ 747.316713][ T30] audit: type=1326 audit(2000000938.072:74046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5393 comm="syz.5.9780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c11aef6c9 code=0x7ffc0000 [ 747.341134][ T30] audit: type=1326 audit(2000000938.072:74047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5393 comm="syz.5.9780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0c11aef6c9 code=0x7ffc0000 [ 747.379236][ T5404] netlink: 'syz.2.9782': attribute type 1 has an invalid length. [ 747.422420][ T5406] blktrace: Concurrent blktraces are not allowed on loop11 [ 748.380593][ T30] audit: type=1326 audit(2000000939.262:74048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5393 comm="syz.5.9780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c11aef6c9 code=0x7ffc0000 [ 748.521261][ T30] audit: type=1326 audit(2000000939.262:74049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5393 comm="syz.5.9780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c11aef6c9 code=0x7ffc0000 [ 748.698239][ T30] audit: type=1326 audit(2000000939.582:74050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5393 comm="syz.5.9780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0c11aef6c9 code=0x7ffc0000 [ 748.722052][ T30] audit: type=1326 audit(2000000939.582:74051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5393 comm="syz.5.9780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c11aef6c9 code=0x7ffc0000 [ 748.745601][ T30] audit: type=1326 audit(2000000939.582:74052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5393 comm="syz.5.9780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c11aef6c9 code=0x7ffc0000 [ 748.905733][ T5404] bond10: (slave vxcan7): The slave device specified does not support setting the MAC address [ 748.923739][ T5404] bond10: (slave vxcan7): Error -95 calling set_mac_address [ 748.958135][ T5397] ip6gretap0: left promiscuous mode [ 748.971260][ T5411] macvlan3: entered promiscuous mode [ 748.976691][ T5411] macvlan3: entered allmulticast mode [ 748.983416][ T5411] bond10: entered promiscuous mode [ 748.989445][ T5411] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 749.011184][ T5411] bond10: left promiscuous mode [ 749.058936][ T5422] loop6: detected capacity change from 0 to 512 [ 749.068810][ T5422] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 749.094124][ T5429] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9788'. [ 749.668611][ T5422] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #17: comm syz.6.9787: inode has both inline data and extents flags [ 749.704706][ T5422] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.9787: couldn't read orphan inode 17 (err -117) [ 749.717415][ T5422] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 749.796111][ T5113] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 749.865580][ T5452] loop6: detected capacity change from 0 to 512 [ 749.876883][ T5452] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 749.900821][ T5452] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.9796: bg 0: block 104: invalid block bitmap [ 749.919899][ T5452] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 749.929196][ T5452] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.9796: invalid indirect mapped block 1 (level 1) [ 749.929743][ T5443] blktrace: Concurrent blktraces are not allowed on loop1 [ 749.944759][ T5454] lo speed is unknown, defaulting to 1000 [ 749.955854][ T5452] EXT4-fs (loop6): 1 truncate cleaned up [ 749.966260][ T5452] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 750.106334][ T5113] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.469266][ T5496] ip6gretap0: entered promiscuous mode [ 750.488467][ T5496] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9811'. [ 750.515877][ T5496] ip6gretap0 (unregistering): left promiscuous mode [ 750.600287][ T5498] netlink: 'syz.6.9812': attribute type 1 has an invalid length. [ 750.742963][ T5498] macvlan2: entered promiscuous mode [ 750.748420][ T5498] macvlan2: entered allmulticast mode [ 750.970339][ T5503] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9814'. [ 751.049023][ T5512] netlink: 21088 bytes leftover after parsing attributes in process `syz.5.9817'. [ 751.092436][ T5516] blktrace: Concurrent blktraces are not allowed on loop1 [ 751.122893][ T5521] tipc: Enabling of bearer rejected, failed to enable media [ 751.249669][ T5523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9822'. [ 751.370341][ T5532] loop6: detected capacity change from 0 to 4096 [ 751.377264][ T5532] EXT4-fs: Ignoring removed nomblk_io_submit option [ 751.448601][ T5532] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 751.661337][ T5541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9828'. [ 751.756263][ T30] kauditd_printk_skb: 177 callbacks suppressed [ 751.756282][ T30] audit: type=1326 audit(2000000942.612:74230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5540 comm="syz.0.9828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59adfef6c9 code=0x7ffc0000 [ 751.786521][ T30] audit: type=1326 audit(2000000942.612:74231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5540 comm="syz.0.9828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59adfef6c9 code=0x7ffc0000 [ 751.810139][ T30] audit: type=1326 audit(2000000942.612:74232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5540 comm="syz.0.9828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f59adfef6c9 code=0x7ffc0000 [ 751.833690][ T30] audit: type=1326 audit(2000000942.612:74233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5540 comm="syz.0.9828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59adfef6c9 code=0x7ffc0000 [ 751.857263][ T30] audit: type=1326 audit(2000000942.612:74234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5540 comm="syz.0.9828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59adfef6c9 code=0x7ffc0000 [ 751.906668][ T5549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9826'. [ 752.058520][ T5113] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.077842][ T5558] netlink: 'syz.2.9833': attribute type 1 has an invalid length. [ 752.478217][ T30] audit: type=1326 audit(2000000943.282:74235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5567 comm="syz.3.9835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ce75f6c9 code=0x7ffc0000 [ 752.501878][ T30] audit: type=1326 audit(2000000943.282:74236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5567 comm="syz.3.9835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ce75f6c9 code=0x7ffc0000 [ 752.525791][ T30] audit: type=1326 audit(2000000943.282:74237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5567 comm="syz.3.9835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f97ce75f6c9 code=0x7ffc0000 [ 752.549667][ T30] audit: type=1326 audit(2000000943.282:74238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5567 comm="syz.3.9835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ce75f6c9 code=0x7ffc0000 [ 752.573606][ T30] audit: type=1326 audit(2000000943.282:74239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5567 comm="syz.3.9835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ce75f6c9 code=0x7ffc0000 [ 752.746048][ T5568] blktrace: Concurrent blktraces are not allowed on loop7 [ 752.916670][ T5563] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 752.944894][ T5563] bond11: (slave batadv6): making interface the new active one [ 752.958107][ T5563] bond11: (slave batadv6): Enslaving as an active interface with an up link [ 753.041477][ T5580] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9840'. [ 753.147856][ T5585] netlink: 'syz.3.9842': attribute type 10 has an invalid length. [ 753.184509][ T5585] team0: Port device dummy0 added [ 753.245302][ T5602] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9843'. [ 753.325623][ T5606] netlink: 'syz.6.9849': attribute type 1 has an invalid length. [ 753.408319][ T5615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9853'. [ 753.543685][ T5623] loop6: detected capacity change from 0 to 512 [ 753.550610][ T5623] journal_path: Non-blockdev passed as './bus' [ 753.556911][ T5623] EXT4-fs: error: could not find journal device path [ 754.463442][ T5638] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9860'. [ 754.784283][ T5652] loop6: detected capacity change from 0 to 4096 [ 754.790995][ T5652] EXT4-fs: Ignoring removed nomblk_io_submit option [ 754.811025][ T5652] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 755.614592][ T5657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9865'. [ 756.078665][ T5113] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 756.271721][ T5661] netlink: 'syz.2.9866': attribute type 1 has an invalid length. [ 756.341895][ T5663] tipc: Enabling of bearer rejected, already enabled [ 756.361845][ T5665] 8021q: adding VLAN 0 to HW filter on device batadv7 [ 756.372677][ T5665] bond12: (slave batadv7): making interface the new active one [ 756.383030][ T5665] bond12: (slave batadv7): Enslaving as an active interface with an up link [ 756.462334][ T5675] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9872'. [ 756.473307][ T5673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9870'. [ 756.585408][ T5684] tipc: Enabling of bearer rejected, already enabled [ 756.688263][ T5677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9873'. [ 756.708620][ T5690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9878'. [ 756.788601][ T30] kauditd_printk_skb: 301 callbacks suppressed [ 756.788620][ T30] audit: type=1326 audit(2000000947.672:74541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5696 comm="syz.0.9881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59adfef6c9 code=0x7ffc0000 [ 756.826239][ T5695] sctp: [Deprecated]: syz.3.9880 (pid 5695) Use of struct sctp_assoc_value in delayed_ack socket option. [ 756.826239][ T5695] Use struct sctp_sack_info instead [ 756.857904][ T30] audit: type=1326 audit(2000000947.702:74542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5696 comm="syz.0.9881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f59adfef6c9 code=0x7ffc0000 [ 756.881907][ T30] audit: type=1326 audit(2000000947.702:74543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5696 comm="syz.0.9881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59adfef6c9 code=0x7ffc0000 [ 756.905569][ T30] audit: type=1326 audit(2000000947.702:74544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5696 comm="syz.0.9881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59adfef6c9 code=0x7ffc0000 [ 756.929463][ T30] audit: type=1326 audit(2000000947.702:74545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5696 comm="syz.0.9881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59adfef6c9 code=0x7ffc0000 [ 756.953277][ T30] audit: type=1326 audit(2000000947.702:74546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5696 comm="syz.0.9881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59adfef6c9 code=0x7ffc0000 [ 756.976969][ T30] audit: type=1326 audit(2000000947.702:74547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5696 comm="syz.0.9881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59adfef6c9 code=0x7ffc0000 [ 757.000740][ T30] audit: type=1326 audit(2000000947.702:74548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5696 comm="syz.0.9881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59adfef6c9 code=0x7ffc0000 [ 757.024330][ T30] audit: type=1326 audit(2000000947.702:74549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5696 comm="syz.0.9881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59adfef6c9 code=0x7ffc0000 [ 757.047843][ T30] audit: type=1326 audit(2000000947.702:74550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5696 comm="syz.0.9881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59adfef6c9 code=0x7ffc0000 [ 757.085010][ T5708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9884'. [ 757.150516][ T5717] netlink: 'syz.2.9887': attribute type 10 has an invalid length. [ 757.163170][ T5717] team0: Port device dummy0 added [ 757.173649][ T5717] netlink: 'syz.2.9887': attribute type 10 has an invalid length. [ 757.203060][ T5717] team0: Port device dummy0 removed [ 757.218652][ T5717] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 757.237321][ T5719] tipc: Enabling of bearer rejected, already enabled [ 757.305537][ T5724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9890'. [ 757.379545][ T5739] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.9892'. [ 757.388904][ T5739] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9892'. [ 757.469799][ T5744] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.554207][ T5744] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.626321][ T5744] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.675045][ T5762] ================================================================== [ 757.683189][ T5762] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace [ 757.690511][ T5762] [ 757.692847][ T5762] write to 0xffff888104387e00 of 8 bytes by task 5759 on cpu 1: [ 757.700500][ T5762] mas_wmb_replace+0x208/0xfa0 [ 757.705283][ T5762] mas_wr_store_entry+0x13e3/0x2750 [ 757.710524][ T5762] mas_store_prealloc+0x760/0xa90 [ 757.715562][ T5762] vma_iter_store_new+0x1c5/0x200 [ 757.720608][ T5762] vma_complete+0x125/0x580 [ 757.725155][ T5762] __split_vma+0x5d9/0x650 [ 757.729614][ T5762] vma_modify+0x3f2/0xc80 [ 757.734008][ T5762] vma_modify_flags+0x101/0x130 [ 757.738887][ T5762] mprotect_fixup+0x2cc/0x570 [ 757.744980][ T5762] do_mprotect_pkey+0x6d6/0x980 [ 757.749878][ T5762] __x64_sys_mprotect+0x48/0x60 [ 757.754768][ T5762] x64_sys_call+0x2752/0x3000 [ 757.759482][ T5762] do_syscall_64+0xd2/0x200 [ 757.764177][ T5762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.770260][ T5762] [ 757.772602][ T5762] read to 0xffff888104387e00 of 8 bytes by task 5762 on cpu 0: [ 757.780175][ T5762] mas_state_walk+0x119/0x650 [ 757.784894][ T5762] mas_walk+0x60/0x150 [ 757.788987][ T5762] lock_vma_under_rcu+0x95/0x170 [ 757.793963][ T5762] do_user_addr_fault+0x233/0x1080 [ 757.799115][ T5762] exc_page_fault+0x62/0xa0 [ 757.803677][ T5762] asm_exc_page_fault+0x26/0x30 [ 757.808550][ T5762] [ 757.810880][ T5762] value changed: 0xffff888129ea8bc1 -> 0xffff888104387e00 [ 757.817997][ T5762] [ 757.820327][ T5762] Reported by Kernel Concurrency Sanitizer on: [ 757.826490][ T5762] CPU: 0 UID: 0 PID: 5762 Comm: syz.6.9904 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 757.837799][ T5762] Tainted: [W]=WARN [ 757.841612][ T5762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 757.851680][ T5762] ================================================================== [ 757.908498][ T5744] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.976018][T26149] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.992226][T26149] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.005785][T26149] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.024570][T26149] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0