last executing test programs: 15m16.985562503s ago: executing program 32 (id=1925): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000ed00e165d51de0800450000200000e0"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x20000000000000ba, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfd71}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x10, 0x80}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 13m55.033691004s ago: executing program 33 (id=4087): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) capset(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) poll(&(0x7f0000000780)=[{r4, 0x3230}], 0x1, 0x40000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) 13m40.223420981s ago: executing program 34 (id=4255): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') getpid() r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sched_setscheduler(0x0, 0x6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, r0, 0x1, 0x70bd27, 0x25dfdbfb}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x20004831) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0x8ce}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 11m41.835542616s ago: executing program 35 (id=5109): unshare(0x6a040000) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x18) setitimer(0x2, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') move_mount(r1, &(0x7f00000000c0)='./mnt\x00', r1, &(0x7f0000000000)='./mnt\x00', 0x177) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000580)='fscache_acquire\x00', 0xffffffffffffffff, 0x0, 0x6a7d}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$eJzs3U1vG1sZAODXzpeTm97kXu4CENBSCgVVdRK3jaouoKwQQpUQXYLUhsSNothxFDulCV2k/wGJSqxgyQ9g3RV7Ngh2bMoCiY8I1FRiYTTjSeomdpOSNI7i55FGM+eMM+85ieec+nXtE0DfuhQRWxExHBEPI2Iiq89lW9xtbcnjXm0/nd/Zfjqfi2bz/j9z6fmkLtp+JvFRds1CRPzoexE/zR2MW9/YXJ6rVMprWXmqUV2dqm9sXl+qzi2WF8srpdLszOz07Ru3SifW14vV4ezoyy//sPWtnyfNGs9q2vtxklpdH9qLE9nv/AcfIlgPDETEYPb8yVzoZXt4P/mI+DQiLqf3/0QMpH9NAOA8azYnojnRXgYAzrt8mgPL5YtZLmA88vlisZXD+yzG8pVavXHtUW19ZaGVK5uMofyjpUp5OssVTsZQLinPpMdvyqV95RsR8UlE/GJkNC0X52uVhV7+wwcA+thH++b//4y05n8A4Jwr9LoBAMCpM/8DQP8x/wNA/zH/A0D/Mf8DQP8x/wNA/zH/A0Bf+eG9e8nW3Mm+/3rh8cb6cu3x9YVyfblYXZ8vztfWVouLtdpi+p091cOuV6nVVmduxvqTyW+v1htT9Y3NB9Xa+krjQfq93g/KQ6fSKwDgXT65+OLPuYjYujOabtG2loO5Gs63fK8bAPTMQK8bAPSM1b6gfx3jNb70AJwTHZbofUshIkb3VzabzeaHaxLwgV39gvw/9Ku2/L//BQx9Rv4f+lfX/P+BF/vAedNs5o665n8c9YEAwNkmxw90ef//02z/2+zNgZ8s7H/E8/0VPlEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/9hd/7eYrdwxHvl8sRhxISImYyj3aKlSno6IjyPiTyNDI0l5psdtBgCOK/+3XLb+19WJK+P7zw7nXo+k+4j42a/u//LJXKOx9sek/l979Y3nWX2pF+0HAA6zO0+n+7YX8q+2n87vbqfZnr9/NyIKrfg728Oxsxd/MAbTfSGGImLs37ms3JJry10cx9aziPh8p/7nYjzNgbRWPt0fP4l94VTj59+Kn0/PtfbJ7+JzJ9AW6DcvkvHnbqf7Lx+X0n3n+7+QjlDHl41/yaXmd9Ix8E383fFvoMv4d+moMW7+/vuto9GD555FfHEwYjf2Ttv4sxs/1yX+lYOX6+gvX/rK5W7nmr+OuBqd47fHmmpUV6fqG5vXl6pzi+XF8kqpNDszO337xq3SVJqjnuo+G/zjzrWPu51L+j/WJX7hkP5//Wjdj9/89+GPv/qO+N/8Wqf4+fjsHfGTOfEbR4w/N/a7QrdzSfyFLv0/7O9/7YjxX/5188Cy4QBA79Q3NpfnKpXymgMHZ/8gecqegWZ0PPjOacUajvf6qWbz/4rVbcQ4iawbcBbs3fQR8brXjQEAAAAAAAAAAAAAADo6jU8s9bqPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CwAA//8wuNJ1") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='jbd2_end_commit\x00'}, 0x18) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x20000002, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 11m2.016210368s ago: executing program 36 (id=5441): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000bb00000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1fa) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = epoll_create1(0x0) r3 = eventfd2(0xfdfc, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0xc, &(0x7f0000000540)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64], 0x0, 0x2, 0x0, 0x0, 0xc3100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000191c0)=ANY=[@ANYBLOB="010000000b000000050010000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r8, @ANYRES32, @ANYBLOB="0000000002"], 0x48) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) epoll_pwait2(r2, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000b80)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)={0x20000005}) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000001f00000000000a"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 10m26.475760664s ago: executing program 37 (id=6681): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x18, 0x1404, 0x1, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x8040}, 0x4) 10m3.54343829s ago: executing program 38 (id=7499): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}}}, @IFLA_LINK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffedb, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r2], 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) 8m41.360349454s ago: executing program 39 (id=8491): socket(0x1e, 0x1, 0x0) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x0, 0x0, 0xfffffffd, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x2a}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x8, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @local}}}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x64000600) 8m40.393366649s ago: executing program 40 (id=8500): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) r3 = open(&(0x7f0000000280)='.\x00', 0x40080, 0x1d2) fcntl$notify(r3, 0x402, 0x5) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$packet(0x11, 0x3, 0x300) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r4, 0x1) recvfrom(r4, 0x0, 0x0, 0x734, 0x0, 0x0) 7m53.008148051s ago: executing program 41 (id=8812): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xcf) r8 = socket$inet6_sctp(0xa, 0x6, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000380)={0x0, 0x6}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB='trans=fd']) bpf$MAP_CREATE(0x0, &(0x7f00000191c0)=ANY=[@ANYBLOB="010000000b000000050010000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="0000000002"], 0x48) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745a91b08363bcc34006d0009788455ec9ad10b24"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x600, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 7m35.429937869s ago: executing program 42 (id=8850): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x6042, 0x10000, 0x8, 0x1, 0x8, 0x2020085, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x8, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000040000008000000004000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = semget(0x1, 0x4, 0x39c) semop(r3, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semop(r3, 0x0, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, 0x0, 0x20000001) sendmsg$sock(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)}, 0x6a5ef9290445fc1d) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000140)=[0x7, 0x7fff]) unshare(0x6a040000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 5m17.269500203s ago: executing program 43 (id=10095): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 4m27.01817799s ago: executing program 44 (id=10489): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m36.507812802s ago: executing program 45 (id=11052): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) r1 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x7, 0xe}, 0x0, 0x0, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) timerfd_create(0x0, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r3}, 0x10) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x9effffff, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) socket(0x2, 0x4, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x9, &(0x7f00000002c0), 0x4, 0x50e, &(0x7f0000000e40)="$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") lsm_get_self_attr(0x64, 0x0, &(0x7f0000000000), 0x3800) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) socket(0xa, 0x80805, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) shmdt(r1) 3m31.258766597s ago: executing program 46 (id=11095): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0xffffffff}, {0x0}, 0x0}}], 0x48}, 0x0) r1 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x7, 0xe}, 0x0, 0x0, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) timerfd_create(0x0, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r3}, 0x10) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x9effffff, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) socket(0x2, 0x4, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x9, &(0x7f00000002c0), 0x4, 0x50e, &(0x7f0000000e40)="$eJzs3c1vVF8ZAOD33nZoKYUBZaFGBRFFQ5h+AA1hI2w0hpCYEOPCBdR2aJrOME2nRFpJbJfuSSRxpX+COxcmrFy4c6c7N7gwQSUSauJizL0zbQf6Kf2YXzvPk9zee84Z5j1nhnPO3APTE0DXuhgRSxFxIiIeRUSxlZ+0jrjTPLLHvX/7fGLl7fOJJBqNB/9M8vIsL9r+TOZU6zn7fx4R34v4SbIxbn1hcWa8UinPtdJD89XZofrC4rXptJUzOjYyNnzr+s3RfWvrhepv33x3+t4Pf/+7r7z+09K3f5ZVa/AXp/Oy9nbsp2bTCzHYltcbEfcOIliH9Lb+/nD0ZL3tcxFxKe//xejJ300A4DhrNIrRKLanAYDjLrv/H4wkLbXWAgYjTUul5hre+RhIK7X6/NVi7emTycjXsM5GIX08XSkPt9YKz0YhydIj+fV6evSD9Ivy9Yg4FxEv+k7m5aWJWmWykx98AKCLnfpo/n/X15z/t/fucCoHAByc/k5XAAA4dOZ/AOg+5n8A6D7/x/zv24EAcEy4/weA7mP+B4Dus+P8v3w49QAADsUP7t/PjsZK8/dfr/6m7muT5fpMqfp0ojRRm5stTdVqU5VyaaLR2On5KrXa7MiNtWR9YfFhtfb0yfzD6er4VPlhuXCQjQEAduXchVd/ySb9pdsn8yPa9nIwV8Pxlna6AkDH9HS6AkDH+D4PdK9d3ONbBoBjbpMtej+w5X8RemnzVziqrnzR+j90q72s/1s7gKPt09b/v7Pv9QAOnzkculejkdjzHwC6jDV+YE///g8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABdajA/krSU7wW+lP1MS6WI0xFxNgrJ4+lKeTgizkTEn/sKfVl6pNOVBgD2KP170tr/60rx8mB7STEiTiT/6cuuT0TET3/14JfPxufn50ay/H+t5c+/bOUnjU41AgBYdWdjVj5Pj7bObTfy798+n1g9DrOKb+42NxfN4q60jmZJb/Tm5/4oRMTAv5NWuin7vNKzD/GXliPiC+vtf9YWYTBfA2nufPpx/Cz26QOIv/76fxw//SB+mpdl50L+Wnx+H+oC3ebV3eY42ep7WRdr9b80Lubnzft/fz5C7V02/mVjycqG8S9dG/96NsRP8j5/cS29fU3e3PjD9zdkNorNsuWIL/VuFj9Zi59sPv4WLu8ufPz1y1+9tFVZ49cRVzZt/+qO1NV8mB2ar84O1RcWr01Xx6fKU+Uno6NjI2PDt67fHB3K16ibP/+4WYx/3L56ZsvXZjliYIv4/du3P76xfbPX/Oa/j378tW3if+vrm7//57eJn82J39xl/PGBO1tu353Fn1xtf6G9ZMf3P67uFDhtnl7/bXFyl1UFAA5BfWFxZrxSKc/tcJF91tzpMS6O5kUsRezXE+aLEhHxWWhXl1ykse1jfvSJPbfTIxNw0NY7fadrAgAAAAAAAAAAAAAAbKW+sDjTd8Df1up0GwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADi+/hcAAP//G4rEcQ==") lsm_get_self_attr(0x64, 0x0, &(0x7f0000000000), 0x3800) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) socket(0xa, 0x80805, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) shmdt(r1) 3m12.656890061s ago: executing program 47 (id=11244): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0xffffffff}, {0x0}, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x48}, 0x0) r1 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x7, 0xe}, 0x0, 0x0, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) timerfd_create(0x0, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r3}, 0x10) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x9effffff, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) socket(0x2, 0x4, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x9, &(0x7f00000002c0), 0x4, 0x50e, &(0x7f0000000e40)="$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") lsm_get_self_attr(0x64, 0x0, &(0x7f0000000000), 0x3800) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) socket(0xa, 0x80805, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) shmdt(r1) 2m57.56926253s ago: executing program 2 (id=11413): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0xffffffff}, {0x0}, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x48}, 0x0) r1 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x7, 0xe}, 0x0, 0x0, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) timerfd_create(0x0, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r3}, 0x10) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x9effffff, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) socket(0x2, 0x4, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x9, &(0x7f00000002c0), 0x4, 0x50e, &(0x7f0000000e40)="$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") lsm_get_self_attr(0x64, 0x0, &(0x7f0000000000), 0x3800) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) socket(0xa, 0x80805, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0xfc}}, 0x0) shmdt(r1) 2m57.06324596s ago: executing program 2 (id=11418): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1801000005000000000000009f86c47c7b1ad6fc6d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000100)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0xae8}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e0000000400000008000000080000000000002cc77581da00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240)={[{@usrquota}, {@grpjquota}, {@nombcache}]}, 0x1, 0x4c0, &(0x7f0000000600)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x737f0c77864bf3b9, 0x0) write(r5, &(0x7f0000000280)="dd", 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r6 = getpid() socket(0x10, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x7, &(0x7f0000000200)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x7, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') 2m56.904116045s ago: executing program 48 (id=11327): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0xffffffff}, {0x0}, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x48}, 0x0) r1 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x7, 0xe}, 0x0, 0x0, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) timerfd_create(0x0, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r3}, 0x10) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x9effffff, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) socket(0x2, 0x4, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x9, &(0x7f00000002c0), 0x4, 0x50e, &(0x7f0000000e40)="$eJzs3c1vVF8ZAOD33nZoKYUBZaFGBRFFQ5h+AA1hI2w0hpCYEOPCBdR2aJrOME2nRFpJbJfuSSRxpX+COxcmrFy4c6c7N7gwQSUSauJizL0zbQf6Kf2YXzvPk9zee84Z5j1nhnPO3APTE0DXuhgRSxFxIiIeRUSxlZ+0jrjTPLLHvX/7fGLl7fOJJBqNB/9M8vIsL9r+TOZU6zn7fx4R34v4SbIxbn1hcWa8UinPtdJD89XZofrC4rXptJUzOjYyNnzr+s3RfWvrhepv33x3+t4Pf/+7r7z+09K3f5ZVa/AXp/Oy9nbsp2bTCzHYltcbEfcOIliH9Lb+/nD0ZL3tcxFxKe//xejJ300A4DhrNIrRKLanAYDjLrv/H4wkLbXWAgYjTUul5hre+RhIK7X6/NVi7emTycjXsM5GIX08XSkPt9YKz0YhydIj+fV6evSD9Ivy9Yg4FxEv+k7m5aWJWmWykx98AKCLnfpo/n/X15z/t/fucCoHAByc/k5XAAA4dOZ/AOg+5n8A6D7/x/zv24EAcEy4/weA7mP+B4Dus+P8v3w49QAADsUP7t/PjsZK8/dfr/6m7muT5fpMqfp0ojRRm5stTdVqU5VyaaLR2On5KrXa7MiNtWR9YfFhtfb0yfzD6er4VPlhuXCQjQEAduXchVd/ySb9pdsn8yPa9nIwV8Pxlna6AkDH9HS6AkDH+D4PdK9d3ONbBoBjbpMtej+w5X8RemnzVziqrnzR+j90q72s/1s7gKPt09b/v7Pv9QAOnzkculejkdjzHwC6jDV+YE///g8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABdajA/krSU7wW+lP1MS6WI0xFxNgrJ4+lKeTgizkTEn/sKfVl6pNOVBgD2KP170tr/60rx8mB7STEiTiT/6cuuT0TET3/14JfPxufn50ay/H+t5c+/bOUnjU41AgBYdWdjVj5Pj7bObTfy798+n1g9DrOKb+42NxfN4q60jmZJb/Tm5/4oRMTAv5NWuin7vNKzD/GXliPiC+vtf9YWYTBfA2nufPpx/Cz26QOIv/76fxw//SB+mpdl50L+Wnx+H+oC3ebV3eY42ep7WRdr9b80Lubnzft/fz5C7V02/mVjycqG8S9dG/96NsRP8j5/cS29fU3e3PjD9zdkNorNsuWIL/VuFj9Zi59sPv4WLu8ufPz1y1+9tFVZ49cRVzZt/+qO1NV8mB2ar84O1RcWr01Xx6fKU+Uno6NjI2PDt67fHB3K16ibP/+4WYx/3L56ZsvXZjliYIv4/du3P76xfbPX/Oa/j378tW3if+vrm7//57eJn82J39xl/PGBO1tu353Fn1xtf6G9ZMf3P67uFDhtnl7/bXFyl1UFAA5BfWFxZrxSKc/tcJF91tzpMS6O5kUsRezXE+aLEhHxWWhXl1ykse1jfvSJPbfTIxNw0NY7fadrAgAAAAAAAAAAAAAAbKW+sDjTd8Df1up0GwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADi+/hcAAP//G4rEcQ==") lsm_get_self_attr(0x64, 0x0, &(0x7f0000000000), 0x3800) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) socket(0xa, 0x80805, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c"], 0xfc}}, 0x0) shmdt(r1) 2m56.782407657s ago: executing program 2 (id=11422): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b000000000000000000000000804dbc1258afbf026fc7c49c3fddc60a7465a67dcf3b0d158c4602b5928b09286995e01b9ab06be66c6597952636c350f008e34de3d4db65ec6e9ef071811c76b9fbbadc27cf42aa71cb4d3fe7096929cfc1013df84ef3fc65fb3303d145b82658ef8de5d12bb578f66ca8f860a8a7a0925d7aadd4a49da976d81b8fcfb46488768f038c9f54ec4d5b7666a0c6111646b71bd5b7cd7e327f6ad338e28f8276dca9639bfd8a85f949e9ec3dd455cfdc06f7b442b45e00bbbde4b765f3ebf9e2"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="180000e32564e875ce7040000000000018110000", @ANYRESOCT=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ustat(0x3, 0x0) socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004110) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2m56.474153638s ago: executing program 2 (id=11423): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 2m56.45088875s ago: executing program 2 (id=11424): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4804}, 0x18) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = epoll_create(0x9) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r10, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 2m56.095955604s ago: executing program 2 (id=11427): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0xffffffff}, {0x0}, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x48}, 0x0) r1 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x7, 0xe}, 0x0, 0x0, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) timerfd_create(0x0, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r3}, 0x10) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x9effffff, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) socket(0x2, 0x4, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x9, &(0x7f00000002c0), 0x4, 0x50e, &(0x7f0000000e40)="$eJzs3c1vVF8ZAOD33nZoKYUBZaFGBRFFQ5h+AA1hI2w0hpCYEOPCBdR2aJrOME2nRFpJbJfuSSRxpX+COxcmrFy4c6c7N7gwQSUSauJizL0zbQf6Kf2YXzvPk9zee84Z5j1nhnPO3APTE0DXuhgRSxFxIiIeRUSxlZ+0jrjTPLLHvX/7fGLl7fOJJBqNB/9M8vIsL9r+TOZU6zn7fx4R34v4SbIxbn1hcWa8UinPtdJD89XZofrC4rXptJUzOjYyNnzr+s3RfWvrhepv33x3+t4Pf/+7r7z+09K3f5ZVa/AXp/Oy9nbsp2bTCzHYltcbEfcOIliH9Lb+/nD0ZL3tcxFxKe//xejJ300A4DhrNIrRKLanAYDjLrv/H4wkLbXWAgYjTUul5hre+RhIK7X6/NVi7emTycjXsM5GIX08XSkPt9YKz0YhydIj+fV6evSD9Ivy9Yg4FxEv+k7m5aWJWmWykx98AKCLnfpo/n/X15z/t/fucCoHAByc/k5XAAA4dOZ/AOg+5n8A6D7/x/zv24EAcEy4/weA7mP+B4Dus+P8v3w49QAADsUP7t/PjsZK8/dfr/6m7muT5fpMqfp0ojRRm5stTdVqU5VyaaLR2On5KrXa7MiNtWR9YfFhtfb0yfzD6er4VPlhuXCQjQEAduXchVd/ySb9pdsn8yPa9nIwV8Pxlna6AkDH9HS6AkDH+D4PdK9d3ONbBoBjbpMtej+w5X8RemnzVziqrnzR+j90q72s/1s7gKPt09b/v7Pv9QAOnzkculejkdjzHwC6jDV+YE///g8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABdajA/krSU7wW+lP1MS6WI0xFxNgrJ4+lKeTgizkTEn/sKfVl6pNOVBgD2KP170tr/60rx8mB7STEiTiT/6cuuT0TET3/14JfPxufn50ay/H+t5c+/bOUnjU41AgBYdWdjVj5Pj7bObTfy798+n1g9DrOKb+42NxfN4q60jmZJb/Tm5/4oRMTAv5NWuin7vNKzD/GXliPiC+vtf9YWYTBfA2nufPpx/Cz26QOIv/76fxw//SB+mpdl50L+Wnx+H+oC3ebV3eY42ep7WRdr9b80Lubnzft/fz5C7V02/mVjycqG8S9dG/96NsRP8j5/cS29fU3e3PjD9zdkNorNsuWIL/VuFj9Zi59sPv4WLu8ufPz1y1+9tFVZ49cRVzZt/+qO1NV8mB2ar84O1RcWr01Xx6fKU+Uno6NjI2PDt67fHB3K16ibP/+4WYx/3L56ZsvXZjliYIv4/du3P76xfbPX/Oa/j378tW3if+vrm7//57eJn82J39xl/PGBO1tu353Fn1xtf6G9ZMf3P67uFDhtnl7/bXFyl1UFAA5BfWFxZrxSKc/tcJF91tzpMS6O5kUsRezXE+aLEhHxWWhXl1ykse1jfvSJPbfTIxNw0NY7fadrAgAAAAAAAAAAAAAAbKW+sDjTd8Df1up0GwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADi+/hcAAP//G4rEcQ==") lsm_get_self_attr(0x64, 0x0, &(0x7f0000000000), 0x3800) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) socket(0xa, 0x80805, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0xfc}}, 0x0) shmdt(r1) 2m40.935834981s ago: executing program 49 (id=11427): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0xffffffff}, {0x0}, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x48}, 0x0) r1 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x7, 0xe}, 0x0, 0x0, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) timerfd_create(0x0, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r3}, 0x10) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x9effffff, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) socket(0x2, 0x4, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x9, &(0x7f00000002c0), 0x4, 0x50e, &(0x7f0000000e40)="$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") lsm_get_self_attr(0x64, 0x0, &(0x7f0000000000), 0x3800) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) socket(0xa, 0x80805, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0xfc}}, 0x0) shmdt(r1) 1m7.553206796s ago: executing program 0 (id=12197): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") setresgid(0xee00, 0xee01, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) statfs(&(0x7f00000009c0)='./file1\x00', &(0x7f0000000440)=""/133) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) bpf$MAP_CREATE(0x0, 0x0, 0x48) fallocate(r3, 0x0, 0xbf5, 0x2000402) openat$selinux_relabel(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) 1m7.367035375s ago: executing program 7 (id=12200): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_cancel(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={&(0x7f00000014c0)}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a808682b7fc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000023f0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\x00\x00\b\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0xfffffffffffffd15}}}}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f0000000380)='|', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00', 0x4}, 0x1c) sendto$inet6(r3, &(0x7f0000000100)='c', 0x1, 0x28011, &(0x7f0000000200)={0xa, 0x4e20, 0xdc3c, @local, 0x1}, 0x1c) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x16360, 0x20}, &(0x7f0000000080)=0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 1m6.767764154s ago: executing program 7 (id=12203): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") setresgid(0xee00, 0xee01, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$eJzs3M9r034YwPGn6dZ0+7Ifpy/oxQe96CXMelQPVTYQC0q3inoQMpZpaG1HErQVwZw97e8YHr0J4j+w/8LbEGSnnYyszbKs+4Wza2f7fkHJkzz5tE8SUp5PId16uv66uupbq3YgRl7FEAllR2RWXNmTiZe5dpxLtsvdgoRyY+7N9sfFZ88fFkul+bLqQnHpVkFVp698ffv+09VvwX9PPk+bpmzOvtj6Wfi++f/mpa1fS69cX11f641AbV1uNAJ7ueboiutXLdXHNcf2HXXrvuMdyK/WGmtrLbXrK1OTa57j+2rXW2pIS4OG5uOq6mpZlk5N7sZ5GSG5Px5R2SiX7eK5FIMLw/OKdlZEJg7dDZWNwVQEAAAG6fj+30j22ev/je7+X+SU/v9DvNf0l573/1lJ+v+q0+7/A6+l9kvbTff/ONHZ+n/jfIrB38iEqZV7B1KeV5w4ehD9PwAAAAAAAAAAAAAAAAAAAAAA/4KdKJqJomhmd2mISBSvmyKSTa0fMXSknq0fVunrH6VeZnyBT7j+GAKpB/fyIj/CZqVZybSXnfzCg9L8nLalHvzbbjYr2SR/s5PXg/lxmYzzhSPzObl+rZPfzd1/VErn15uVCVk5sfKwV6cAAAAAAIChZ2liNtmYl2R+b1lqSne+PX/vROH+7wNd8/sxuTzWv+MAAAAAAADH81vvqnat5nj9CbJ9/KwzByJnG347MntSRlZETtmnvCgy+BN1KDDlQpQxzMGdnr1hlBHpbBmPvwy67gIAAAAAw2V/PjDoSgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGF39+OuyQR8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcFH8DgAA//8sg70h") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) statfs(&(0x7f00000009c0)='./file1\x00', &(0x7f0000000440)=""/133) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) bpf$MAP_CREATE(0x0, 0x0, 0x48) fallocate(r4, 0x0, 0xbf5, 0x2000402) openat$selinux_relabel(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000040)={0xc, r4, 0x0, 0x0, 0x0, 0xfffffffffe000001}) 1m6.624579168s ago: executing program 0 (id=12205): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_tgsigqueueinfo(0x0, 0x0, 0x2d, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x9, 0x0}, 0xfffffe40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x8047, 0x10, 0x7, 0x7, {{0x7, 0x4, 0x0, 0x7, 0x1c, 0x66, 0x0, 0x5, 0x4, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1e}, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x4, 0x20, 0x3, 0xe}]}}}}}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x68}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c00)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000c00)='i'}, 0x50) openat$snapshot(0xffffffffffffff9c, 0x0, 0x2400, 0x0) socket$nl_audit(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[], 0x48) setrlimit(0xf, &(0x7f0000000000)={0xffff, 0x100003}) timer_create(0x3, 0x0, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000080), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000280), &(0x7f0000048000)=0x1, 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) 1m5.839143455s ago: executing program 7 (id=12211): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m5.792568149s ago: executing program 7 (id=12212): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4804}, 0x18) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = epoll_create(0x9) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m5.537752274s ago: executing program 0 (id=12215): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m5.502280938s ago: executing program 7 (id=12216): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) syz_genetlink_get_family_id$mptcp(0x0, r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003200)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x3f, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 1m5.327225065s ago: executing program 0 (id=12220): socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd8e, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0xfff2}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8848}, 0x90) 1m5.138478784s ago: executing program 7 (id=12222): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresgid(0xee00, 0xee01, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m3.967009928s ago: executing program 0 (id=12228): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x101}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x5c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r8 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170) fgetxattr(r8, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r9, 0x29, 0x36, &(0x7f0000000500)=ANY=[@ANYRES8=r3, @ANYRES16=r7, @ANYRES16, @ANYBLOB="42bd3370367907a13b01797db247622ceab5b3c3712c69d0e243d9097834b963fd94fddf2aadc52c33a0bdce3f22eb03c8a6fffeded8d9b921519392af041d47e1d2742f2d1ce3ff5b179549bc70451dfb298e9e1c390bf48c938970d0a928a1b71ea024c34130c497fe8f66b9816abf2b23c5ebbbe3efef03817563a11261a2dbc2e94820364ea832f0d7c2323142d512f9956c46adebb765162200970791", @ANYRESHEX=r2, @ANYRES8=r5], 0x8) 1m3.878413107s ago: executing program 0 (id=12229): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresgid(0xee00, 0xee01, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 49.899689727s ago: executing program 50 (id=12222): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresgid(0xee00, 0xee01, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 48.636363341s ago: executing program 51 (id=12229): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresgid(0xee00, 0xee01, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 43.995442836s ago: executing program 1 (id=12494): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b0000000500000002000000040042ec050000000ef27400e453c10bd990c7b471a29fe3647b74eb10b06ef9d3ee05d7ddfb5afc34fb7563f44a00c69a013eb64d1454625fe32d50ee0006a31a65b1d428bef2c595da8e75cd09a16df471d3e136b933aa4e9213ec0a52ff64a76ba5a93c2d0ddff78200892a21ad64bc3d9f59c88ed28add3005d6eb46badaee042db8d434d9d671489fb7443e77f2d55a239c9057b8e2bf4ecea14b3b8963c1758ad7b4f4b6730385861cd471c906", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000060000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001d0001008a0000000000000007000000", @ANYRES32=r1, @ANYBLOB="080012000a0002000180c200c901009e"], 0x28}}, 0x10) 43.966233169s ago: executing program 1 (id=12497): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000002a00000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xec, 0x7ffc0202}]}) sync() 43.75878261s ago: executing program 1 (id=12502): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 43.673717228s ago: executing program 1 (id=12505): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170) fgetxattr(r2, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) 43.583286267s ago: executing program 1 (id=12508): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c9a82, 0x38) r1 = socket$inet_udplite(0x2, 0x2, 0x88) set_mempolicy(0x4005, 0x0, 0x9) socket(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x230, 0x12, 0x60a, 0x0, 0x202, 0x338, 0x2e8, 0x2e8, 0x338, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x230, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x57c, 'system_u:object_r:file_context_t:s0\x00'}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f00000002c0)={'tunl0\x00', r3, 0x8000, 0x40, 0x8001, 0x9, {{0x17, 0x4, 0x1, 0x0, 0x5c, 0x8, 0x0, 0x6, 0x2f, 0x0, @multicast1, @multicast1, {[@timestamp_addr={0x44, 0x4, 0x85, 0x1, 0x2}, @cipso={0x86, 0x41, 0xffffffffffffffff, [{0x7, 0xc, "2d30ec9fc3c39f045331"}, {0x1, 0xe, "a7bda05ff49a1da03fd8f3a3"}, {0x5, 0xe, "fe1f57c49b279cfe23c6016a"}, {0x6, 0x10, "5cfb51c77ac7dfdf39f2edc05c62"}, {0x0, 0x3, "91"}]}]}}}}}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018ed8, &(0x7f0000000180)={[{@sysvgroups}, {@noload}, {@nobh}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@norecovery}, {@errors_continue}, {@quota}]}, 0x1, 0x655, &(0x7f0000000d40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2b1245d, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0xf9, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x6, 0x0, 0x1, 0x3, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x8}, 0x94) socket$packet(0x11, 0x3, 0x300) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 43.419672273s ago: executing program 1 (id=12513): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresgid(0xee00, 0xee01, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 42.859921258s ago: executing program 3 (id=12523): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x50) creat(&(0x7f0000000240)='./file1\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = open(0x0, 0x20000, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 42.793664024s ago: executing program 3 (id=12527): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x101}, 0x18) r1 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170) fgetxattr(r1, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) 42.675713136s ago: executing program 3 (id=12531): setresgid(0xee00, 0xee01, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x3200890, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x619) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xa, 0x4, 0xf1, 0x5}, 0x50) readahead(0xffffffffffffffff, 0x8000, 0x8000000000000001) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f0000000300)=ANY=[@ANYBLOB='time_offset=0x00000000000004f7,nocase,nodots,errors=remount-ro,check=strict,errors=continue,cheQk=relaxed,dots,quiet,fmask=00000000000000000000776,nfs=stale_rw,discard,dots,nodots,nodots,nodots,\x00'], 0x21, 0x23d, &(0x7f0000000a40)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000300)={0x20000002}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000080)={0x28000006}) 42.540308519s ago: executing program 3 (id=12536): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003200)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x3f, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 42.270701166s ago: executing program 3 (id=12544): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\x00\x00\b\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x16360, 0x20}, &(0x7f0000000080)=0xc) 42.203987922s ago: executing program 3 (id=12547): socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000001000)='./file0\x00', 0x10c) r2 = dup(r1) pipe2$9p(&(0x7f00000046c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) mount$9p_fd(0x0, &(0x7f0000004640)='./file0\x00', &(0x7f0000004680), 0x40, &(0x7f0000004700)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) vmsplice(r4, &(0x7f0000011240)=[{&(0x7f0000011180)="ad", 0x1}], 0x1, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x100010, r5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount(&(0x7f0000000300)=@rnullb, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='efs\x00', 0x2000000, &(0x7f00000003c0)='#! ') r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000100000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500"/96], &(0x7f0000002140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r9}, 0x10) r10 = syz_io_uring_setup(0x49b, &(0x7f0000000380)={0x0, 0xd6ee, 0x200, 0x1, 0x20e}, &(0x7f0000000200)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x4c, 0x0, r5, 0x0, &(0x7f00000004c0)='./file0\x00', 0x48, 0x0, 0x1}) io_uring_enter(r10, 0x5fdd, 0x5aa6, 0xa5, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r13, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_NODELAY(r7, 0x84, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00008000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x4000) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r14, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) 28.347130661s ago: executing program 52 (id=12513): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresgid(0xee00, 0xee01, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 27.161534617s ago: executing program 53 (id=12547): socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000001000)='./file0\x00', 0x10c) r2 = dup(r1) pipe2$9p(&(0x7f00000046c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) mount$9p_fd(0x0, &(0x7f0000004640)='./file0\x00', &(0x7f0000004680), 0x40, &(0x7f0000004700)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) vmsplice(r4, &(0x7f0000011240)=[{&(0x7f0000011180)="ad", 0x1}], 0x1, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x100010, r5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount(&(0x7f0000000300)=@rnullb, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='efs\x00', 0x2000000, &(0x7f00000003c0)='#! ') r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000100000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500"/96], &(0x7f0000002140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r9}, 0x10) r10 = syz_io_uring_setup(0x49b, &(0x7f0000000380)={0x0, 0xd6ee, 0x200, 0x1, 0x20e}, &(0x7f0000000200)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x4c, 0x0, r5, 0x0, &(0x7f00000004c0)='./file0\x00', 0x48, 0x0, 0x1}) io_uring_enter(r10, 0x5fdd, 0x5aa6, 0xa5, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r13, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_NODELAY(r7, 0x84, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00008000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x4000) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r14, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) 2.444036241s ago: executing program 5 (id=13279): unshare(0x22020600) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000800)=""/255, 0xff}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@dellinkprop={0x4c, 0x6c, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1a, 0x2800}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bridge0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) 2.443348661s ago: executing program 5 (id=13280): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) close(r1) 2.405210694s ago: executing program 5 (id=13282): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001d0001008a000000000000000700", @ANYRES32=r1, @ANYBLOB="080012000a0002"], 0x28}}, 0x10) 2.34906068s ago: executing program 5 (id=13284): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = socket(0x2, 0x80805, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmmsg$inet(r2, &(0x7f0000000900)=[{{&(0x7f0000000080)={0x2, 0x4c21, @private=0xa010100}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f00000002c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000ac0)="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", 0x541}], 0x1}}], 0x2, 0x0) 2.307725894s ago: executing program 5 (id=13285): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b2ff8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x5f}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {0x2}, {0x280000, 0x4, 0x10009, 0x6}], 0x10, 0xfffffff6}, 0x94) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r5, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r6, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000019200)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') socket(0x10, 0x3, 0x0) msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x3, 0x0, 0x1, 0x8, 0x7f, 0x3}) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000a00)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffee1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0) 2.233108361s ago: executing program 9 (id=13287): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000500)=ANY=[@ANYRES8=r2, @ANYRES16, @ANYRES16, @ANYBLOB="42bd3370367907a13b01797db247622ceab5b3c3712c69d0e243d9097834b963fd94fddf2aadc52c33a0bdce3f22eb03c8a6fffeded8d9b921519392af041d47e1d2742f2d1ce3ff5b179549bc70451dfb298e9e1c390bf48c938970d0a928a1b71ea024c34130c497fe8f66b9816abf2b23c5ebbbe3efef03817563a11261a2dbc2e94820364ea832f0d7c2323142d512f9956c46adebb765162200970791", @ANYRESHEX=r1, @ANYRES8], 0x8) 2.168453657s ago: executing program 9 (id=13288): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) tee(r2, r1, 0x8, 0xa) 2.167871077s ago: executing program 9 (id=13289): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b2ff8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x5f}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {0x2}, {0x280000, 0x4, 0x10009, 0x6}], 0x10, 0xfffffff6}, 0x94) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r5, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r6, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000019200)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r8 = socket(0x10, 0x3, 0x0) r9 = msgget$private(0x0, 0x2) msgsnd(r9, &(0x7f0000000340)=ANY=[@ANYRES16=r9], 0x2000, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800000000020002000000000004000000010000000a000000020000008f00000400"/60], 0x3c}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000a00)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffee1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0) 1.740762639s ago: executing program 8 (id=13305): r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000f140164c4bd7000fcdbdf25090045"], 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4004804) 1.671684056s ago: executing program 8 (id=13297): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170) fgetxattr(r2, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) 1.593281234s ago: executing program 8 (id=13298): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000500)=ANY=[@ANYRES8=r2, @ANYRES16, @ANYRES16, @ANYBLOB="42bd3370367907a13b01797db247622ceab5b3c3712c69d0e243d9097834b963fd94fddf2aadc52c33a0bdce3f22eb03c8a6fffeded8d9b921519392af041d47e1d2742f2d1ce3ff5b179549bc70451dfb298e9e1c390bf48c938970d0a928a1b71ea024c34130c497fe8f66b9816abf2b23c5ebbbe3efef03817563a11261a2dbc2e94820364ea832f0d7c2323142d512f9956c46adebb765162200970791", @ANYRESHEX=r1, @ANYRES8], 0x8) 1.590496154s ago: executing program 4 (id=13299): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffbffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x5, 0x2, 0x20005, 0x8000, 0x0, 0x0, 0x0, 0x20008006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x54, 0x1, [@m_sample={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x15}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x68}}, 0x0) 1.589973594s ago: executing program 8 (id=13300): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x18) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[], 0x14}}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000a00)) 1.499469863s ago: executing program 8 (id=13302): socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd8e, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r7}, 0x18) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0xfff2}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8848}, 0x90) 1.499014903s ago: executing program 4 (id=13303): syz_mount_image$iso9660(&(0x7f00000009c0), &(0x7f0000000a00)='./file0\x00', 0x18, &(0x7f0000000a40), 0x1, 0x9b4, &(0x7f0000000a80)="$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") 1.406428492s ago: executing program 4 (id=13307): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b000000000000000000000000804dbc1258afbf026fc7c49c3fddc60a7465a67dcf3b0d158c4602b5928b09286995e01b9ab06be66c6597952636c350f008e34de3d4db65ec6e9ef071811c76b9fbbadc27cf42aa71cb4d3fe7096929cfc1013df84ef3fc65fb3303d145b82658ef8de5d12bb578f66ca8f860a8a7a0925d7aadd4a49da976d81b8fcfb46488768f038c9f54ec4d5b7666a0c6111646b71bd5b7cd7e327f6ad338e28f8276dca9639bfd8a85f949e9ec3dd455cfdc06f7b442b45e00bbbde4b765f3ebf9e2"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) ustat(0x3, 0x0) socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004110) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r8}, 0x18) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) dup2(r9, r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.293597283s ago: executing program 6 (id=13310): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) close(r1) 1.258577107s ago: executing program 6 (id=13311): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000500)=ANY=[@ANYRES8=r2, @ANYRES16, @ANYRES16, @ANYBLOB="42bd3370367907a13b01797db247622ceab5b3c3712c69d0e243d9097834b963fd94fddf2aadc52c33a0bdce3f22eb03c8a6fffeded8d9b921519392af041d47e1d2742f2d1ce3ff5b179549bc70451dfb298e9e1c390bf48c938970d0a928a1b71ea024c34130c497fe8f66b9816abf2b23c5ebbbe3efef03817563a11261a2dbc2e94820364ea832f0d7c2323142d512f9956c46adebb765162200970791", @ANYRESHEX=r1, @ANYRES8], 0x8) 1.127654429s ago: executing program 6 (id=13312): openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c9a82, 0x38) socket$inet_udplite(0x2, 0x2, 0x88) set_mempolicy(0x4005, 0x0, 0x9) socket(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x230, 0x12, 0x60a, 0x0, 0x202, 0x338, 0x2e8, 0x2e8, 0x338, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x230, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x57c, 'system_u:object_r:file_context_t:s0\x00'}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.095435702s ago: executing program 6 (id=13313): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003200)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x3f, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 955.244866ms ago: executing program 6 (id=13314): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup(r4) sendmsg$tipc(r5, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)="52bf8644f34898693946487a31ab3e782c31589b6d8e8c9d", 0x18, 0x2000c040}, 0x8000) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0500000062afdb8d59d79fb367d6031297479a520721d6a2848eea134325a0000b45bcfc630924ebd0556233a29a204b754c08f67fefe2666c620ada66c3dc1132b9a51f6222d90b52249f9e04cb370113df17386e22a56fcaa444549f97eb5c38745979a3cf42ae6a3bf826126cb9e9e01968a08591b5913c886d4e8d9b1aae34000562aaa069f8a7bf86f904ad950ce546f383c91ce1bf6f6c0d1f749f7bb2c59300adac1db191203cbf752e53b3b4d9664e2f392eec207490f9451f1087372b4d4f9eea85d52d788030570264c9f035067053007b9719a1a207eae57518d3b908f059219eb46991d1d2215c2932f9408a8d91c50c7e2704bf29e1ab0bb0e909feffffff3ccafb3b0e6f81072cd4bc332b6e6cc49b3c23b3833e347dbcd7b10c6c26bf9312afbdf406fc02843e4a6ce8df53f60c43cf95683c534c490ed7a57a6b6a418f93cc62b1637cab700dc50000000000000000176942c14a33112f083c663c1fedba6308ad6a2580aa971e4fe474f930d0399127031ffc37d52dc9a363b8fc00c953283025b1787a964e10491c3de22fb4f82592775375c211ea783c5319cd31708928e7646246f93543372970237d94b40242c95e96330f1e565b8ac229a542be1d30704f6de9bc80ca28d578ad815fc515804d1d3dcf46f1cba61f5b38bad8a8f2a3565c4957d10f0e69ba4594ad6ec90514c33b0a7b7e8fd5424a7545d8b27bb643dfa92103178c4f33b257a197751e8f523413ee893efe87dd1caa386c9e7fffdac63fcd0decb2f5564043b45456f8c4192e473338b47613f20a7b70f1841f585fcd7315a42354b047ca5a481a77f2287fcd79fb1677e8b751d411db533dae34e4e06ebbd684cb4d9cb1f7ed403bf60b5c8110946e5bd20ac31f76cf1f62c48b319ff3df01f2a86350d66c1826dcd81275a49695d69b61a99f8c0308fa2a36a683b545adb7cfffc0c350ad042671531e30556e5834fa6d043ffde2d9430fb716005dd1e40138caa35384bed20dfab872514850c0fdf049c5aa821425db4c39ece9766dd08efd5c5e07a4ca69dae64a366cc59fd46bb39646954af1ddf1541dbd2dc51f3ad6d0943f8cd3f55600061f38a4cd009cc75ad05a5fbcc61016eac2fa30450b58ee438c36ce5e01072a4d0a0a6d5a00e7c78242a7367e40c6c7", @ANYRES16=r8, @ANYBLOB="796128bd7000000000007e0000000c009900ff07000048000000"], 0x20}}, 0x4000054) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0xbc, r8, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xc9, 0x5f}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x17}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x25}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5}, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x29}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xbc}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x2}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x401}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0xf4}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x66}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6b}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff96}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x2}, @NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xf}]}, 0xbc}, 0x1, 0x0, 0x0, 0x44045}, 0x4012) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x28, 0x1411, 0x300, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40044000}, 0x1d60f8ad3ece4254) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r13, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 807.302011ms ago: executing program 6 (id=13315): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_tgsigqueueinfo(0x0, 0x0, 0x2d, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x9, 0x0}, 0xfffffe40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x8047, 0x10, 0x7, 0x7, {{0x7, 0x4, 0x0, 0x7, 0x1c, 0x66, 0x0, 0x5, 0x4, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1e}, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x4, 0x20, 0x3, 0xe}]}}}}}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x68}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c00)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000c00)='i'}, 0x50) openat$snapshot(0xffffffffffffff9c, 0x0, 0x2400, 0x0) socket$nl_audit(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[], 0x48) setrlimit(0xf, &(0x7f0000000000)={0xffff, 0x100003}) timer_create(0x3, 0x0, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000080), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000280), 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) 783.957983ms ago: executing program 5 (id=13316): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x40) recvfrom(r1, &(0x7f00000002c0)=""/198, 0xc6, 0x20, &(0x7f0000000480)=@l2={0x1f, 0xef2, @none, 0x7, 0x2}, 0x80) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000400)={'gretap0\x00', 0x0, 0x80, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) 675.138003ms ago: executing program 9 (id=13317): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x20ffe, 0x0, 0x0, 0x40f00, 0xac, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8002}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 663.189395ms ago: executing program 8 (id=13318): socket$netlink(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x8c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syslog(0x9, 0x0, 0x0) r1 = accept$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs, &(0x7f0000000080)=0x6e) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000001c0)={0x2, 'ip6tnl0\x00', {0x8}, 0x8}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) writev(r4, &(0x7f0000000140)=[{&(0x7f00000000c0)="4f3bf5835e00000000225121d6958c78cfc0e1f14f1b257f40ad", 0x1a}, {&(0x7f00000011c0)="580b195de8c0f63351265e9be5", 0xd}], 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x18010, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x4, 0x2fc, &(0x7f00000006c0)="$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") rmdir(&(0x7f0000000340)='./file0\x00') fallocate(r0, 0x10, 0x6, 0x10001) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x1a08700, &(0x7f0000000700)={[{@nodioread_nolock}, {@nouid32}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@usrquota}, {@journal_dev={'journal_dev', 0x3d, 0x1}}]}, 0x0, 0x470, &(0x7f0000001040)="$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") 525.242968ms ago: executing program 9 (id=13319): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES64, @ANYRES8], 0x0, 0x23e, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 493.317421ms ago: executing program 4 (id=13320): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) dup(0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(0x0, r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 441.510636ms ago: executing program 4 (id=13321): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c000000150a0102", @ANYRES64=r0], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 242.918456ms ago: executing program 9 (id=13322): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b000000000000000000000000804dbc1258afbf026fc7c49c3fddc60a7465a67dcf3b0d158c4602b5928b09286995e01b9ab06be66c6597952636c350f008e34de3d4db65ec6e9ef071811c76b9fbbadc27cf42aa71cb4d3fe7096929cfc1013df84ef3fc65fb3303d145b82658ef8de5d12bb578f66ca8f860a8a7a0925d7aadd4a49da976d81b8fcfb46488768f038c9f54ec4d5b7666a0c6111646b71bd5b7cd7e327f6ad338e28f8276dca9639bfd8a85f949e9ec3dd455cfdc06f7b442b45e00bbbde4b765f3ebf9e2"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) ustat(0x3, 0x0) socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004110) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r8}, 0x18) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) dup2(r9, r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 0s ago: executing program 4 (id=13323): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r0, 0x0, 0x100000000}, 0x18) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendto$inet6(0xffffffffffffffff, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006040a0000000d0085a168d0bf46d32345653600648d04000b000a00000849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f6523250", 0x78, 0x0, 0x0, 0xe0ffffff) r1 = socket$kcm(0xa, 0x1, 0x106) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x10000, &(0x7f0000000040)) sendmsg$kcm(r1, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x24004059) close(r1) kernel console output (not intermixed with test programs): .002455][ T7290] sock_common_setsockopt+0x69/0x80 [ 970.002480][ T7290] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 970.002562][ T7290] __sys_setsockopt+0x184/0x200 [ 970.002602][ T7290] __x64_sys_setsockopt+0x64/0x80 [ 970.002704][ T7290] x64_sys_call+0x20ec/0x3000 [ 970.002732][ T7290] do_syscall_64+0xd2/0x200 [ 970.002753][ T7290] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 970.002788][ T7290] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 970.002902][ T7290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.002928][ T7290] RIP: 0033:0x7f6a7f21efc9 [ 970.002947][ T7290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 970.003045][ T7290] RSP: 002b:00007f6a7dc87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 970.003068][ T7290] RAX: ffffffffffffffda RBX: 00007f6a7f475fa0 RCX: 00007f6a7f21efc9 [ 970.003084][ T7290] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000007 [ 970.003098][ T7290] RBP: 00007f6a7dc87090 R08: 0000000000000468 R09: 0000000000000000 [ 970.003113][ T7290] R10: 0000200000000740 R11: 0000000000000246 R12: 0000000000000001 [ 970.003170][ T7290] R13: 00007f6a7f476038 R14: 00007f6a7f475fa0 R15: 00007ffee841d7c8 [ 970.003190][ T7290] [ 970.235188][ T7287] FAULT_INJECTION: forcing a failure. [ 970.235188][ T7287] name failslab, interval 1, probability 0, space 0, times 0 [ 970.250037][ T7287] CPU: 1 UID: 0 PID: 7287 Comm: syz.1.12317 Not tainted syzkaller #0 PREEMPT(voluntary) [ 970.250104][ T7287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 970.250119][ T7287] Call Trace: [ 970.250129][ T7287] [ 970.250161][ T7287] __dump_stack+0x1d/0x30 [ 970.250184][ T7287] dump_stack_lvl+0xe8/0x140 [ 970.250204][ T7287] dump_stack+0x15/0x1b [ 970.250236][ T7287] should_fail_ex+0x265/0x280 [ 970.250309][ T7287] should_failslab+0x8c/0xb0 [ 970.250338][ T7287] kmem_cache_alloc_noprof+0x50/0x480 [ 970.250429][ T7287] ? getname_flags+0x80/0x3b0 [ 970.250465][ T7287] ? fput+0x8f/0xc0 [ 970.250486][ T7287] getname_flags+0x80/0x3b0 [ 970.250524][ T7287] __x64_sys_mkdirat+0x40/0x60 [ 970.250599][ T7287] x64_sys_call+0x2b7/0x3000 [ 970.250627][ T7287] do_syscall_64+0xd2/0x200 [ 970.250649][ T7287] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 970.250683][ T7287] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 970.250752][ T7287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.250846][ T7287] RIP: 0033:0x7f650fb0d717 [ 970.250862][ T7287] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 970.250880][ T7287] RSP: 002b:00007f650e56ee68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 970.250899][ T7287] RAX: ffffffffffffffda RBX: 00007f650e56eef0 RCX: 00007f650fb0d717 [ 970.250915][ T7287] RDX: 00000000000001ff RSI: 0000200000000240 RDI: 00000000ffffff9c [ 970.250932][ T7287] RBP: 0000200000000200 R08: 00002000000000c0 R09: 0000000000000000 [ 970.250947][ T7287] R10: 0000200000000200 R11: 0000000000000246 R12: 0000200000000240 [ 970.251010][ T7287] R13: 00007f650e56eeb0 R14: 0000000000000000 R15: 0000000000000000 [ 970.251103][ T7287] [ 970.449889][ T7293] loop8: detected capacity change from 0 to 1024 [ 970.457108][ T7293] EXT4-fs: Ignoring removed nobh option [ 970.463161][ T7293] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 970.475879][ T7293] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #11: comm syz.8.12318: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 970.495790][ T7293] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.12318: couldn't read orphan inode 11 (err -117) [ 970.497026][ T7298] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 970.509247][ T7293] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 970.535309][ T7290] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.12318: Invalid block bitmap block 0 in block_group 0 [ 970.553259][ T7290] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.12318: Failed to acquire dquot type 0 [ 970.584244][ T7298] FAULT_INJECTION: forcing a failure. [ 970.584244][ T7298] name failslab, interval 1, probability 0, space 0, times 0 [ 970.597288][ T7298] CPU: 0 UID: 0 PID: 7298 Comm: syz.4.12319 Not tainted syzkaller #0 PREEMPT(voluntary) [ 970.597386][ T7298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 970.597452][ T7298] Call Trace: [ 970.597462][ T7298] [ 970.597512][ T7298] __dump_stack+0x1d/0x30 [ 970.597552][ T7298] dump_stack_lvl+0xe8/0x140 [ 970.597579][ T7298] dump_stack+0x15/0x1b [ 970.597678][ T7298] should_fail_ex+0x265/0x280 [ 970.597742][ T7298] should_failslab+0x8c/0xb0 [ 970.597778][ T7298] kmem_cache_alloc_noprof+0x50/0x480 [ 970.597851][ T7298] ? getname_flags+0x80/0x3b0 [ 970.597884][ T7298] ? fput+0x8f/0xc0 [ 970.597902][ T7298] getname_flags+0x80/0x3b0 [ 970.597968][ T7298] __x64_sys_mkdirat+0x40/0x60 [ 970.598018][ T7298] x64_sys_call+0x2b7/0x3000 [ 970.598046][ T7298] do_syscall_64+0xd2/0x200 [ 970.598069][ T7298] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 970.598117][ T7298] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 970.598154][ T7298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.598269][ T7298] RIP: 0033:0x7f864876efc9 [ 970.598318][ T7298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 970.598347][ T7298] RSP: 002b:00007f86471d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 970.598436][ T7298] RAX: ffffffffffffffda RBX: 00007f86489c5fa0 RCX: 00007f864876efc9 [ 970.598452][ T7298] RDX: 0000000000000000 RSI: 0000200000002040 RDI: ffffffffffffff9c [ 970.598510][ T7298] RBP: 00007f86471d7090 R08: 0000000000000000 R09: 0000000000000000 [ 970.598526][ T7298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 970.598541][ T7298] R13: 00007f86489c6038 R14: 00007f86489c5fa0 R15: 00007fff4b2a3ae8 [ 970.598561][ T7298] [ 970.902356][ T7311] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 970.939680][ T4093] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 970.941637][ T7315] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 970.949684][ T7311] FAULT_INJECTION: forcing a failure. [ 970.949684][ T7311] name failslab, interval 1, probability 0, space 0, times 0 [ 970.970259][ T7311] CPU: 0 UID: 0 PID: 7311 Comm: syz.4.12323 Not tainted syzkaller #0 PREEMPT(voluntary) [ 970.970335][ T7311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 970.970353][ T7311] Call Trace: [ 970.970362][ T7311] [ 970.970373][ T7311] __dump_stack+0x1d/0x30 [ 970.970400][ T7311] dump_stack_lvl+0xe8/0x140 [ 970.970426][ T7311] dump_stack+0x15/0x1b [ 970.970456][ T7311] should_fail_ex+0x265/0x280 [ 970.970495][ T7311] ? __se_sys_memfd_create+0x1cc/0x590 [ 970.970525][ T7311] should_failslab+0x8c/0xb0 [ 970.970576][ T7311] __kmalloc_cache_noprof+0x4c/0x4a0 [ 970.970608][ T7311] ? fput+0x8f/0xc0 [ 970.970626][ T7311] __se_sys_memfd_create+0x1cc/0x590 [ 970.970652][ T7311] __x64_sys_memfd_create+0x31/0x40 [ 970.970698][ T7311] x64_sys_call+0x2ac2/0x3000 [ 970.970724][ T7311] do_syscall_64+0xd2/0x200 [ 970.970790][ T7311] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 970.970825][ T7311] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 970.970861][ T7311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.970886][ T7311] RIP: 0033:0x7f864876efc9 [ 970.970906][ T7311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 970.970995][ T7311] RSP: 002b:00007f86471d6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 970.971015][ T7311] RAX: ffffffffffffffda RBX: 0000000000000655 RCX: 00007f864876efc9 [ 970.971028][ T7311] RDX: 00007f86471d6ef0 RSI: 0000000000000000 RDI: 00007f86487f2960 [ 970.971047][ T7311] RBP: 0000200000000d40 R08: 00007f86471d6bb7 R09: 00007f86471d6e40 [ 970.971061][ T7311] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000005c0 [ 970.971072][ T7311] R13: 00007f86471d6ef0 R14: 00007f86471d6eb0 R15: 0000200000000180 [ 970.971095][ T7311] [ 971.154022][ T5089] EXT4-fs error (device loop8): ext4_release_dquot:6981: comm kworker/u8:0: Failed to release dquot type 0 [ 971.184911][ T7322] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 971.243567][ T7322] loop8: detected capacity change from 0 to 1024 [ 971.250594][ T7322] EXT4-fs: Ignoring removed nobh option [ 971.257276][ T7322] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 971.269861][ T7322] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #11: comm syz.8.12325: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 971.292319][ T7322] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.12325: couldn't read orphan inode 11 (err -117) [ 971.305522][ T7322] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 971.320049][ T7322] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.12325: Invalid block bitmap block 0 in block_group 0 [ 971.338650][ T7322] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.12325: Failed to acquire dquot type 0 [ 971.391670][ T7335] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 971.508183][ T7343] syzkaller1: entered promiscuous mode [ 971.515653][ T7343] syzkaller1: entered allmulticast mode [ 971.523913][ T4093] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 971.538680][ T5089] EXT4-fs error (device loop8): ext4_release_dquot:6981: comm kworker/u8:0: Failed to release dquot type 0 [ 971.657832][ T7349] syzkaller1: entered promiscuous mode [ 971.663734][ T7349] syzkaller1: entered allmulticast mode [ 971.778434][ T7357] bridge0: port 3(syz_tun) entered blocking state [ 971.785444][ T7357] bridge0: port 3(syz_tun) entered disabled state [ 971.792931][ T7357] syz_tun: entered allmulticast mode [ 971.806444][ T7357] syz_tun: entered promiscuous mode [ 971.811949][ T7357] bridge0: port 3(syz_tun) entered blocking state [ 971.818927][ T7357] bridge0: port 3(syz_tun) entered forwarding state [ 972.061113][ T7369] FAULT_INJECTION: forcing a failure. [ 972.061113][ T7369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 972.076784][ T7369] CPU: 1 UID: 0 PID: 7369 Comm: syz.8.12341 Not tainted syzkaller #0 PREEMPT(voluntary) [ 972.076822][ T7369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 972.076839][ T7369] Call Trace: [ 972.076917][ T7369] [ 972.076928][ T7369] __dump_stack+0x1d/0x30 [ 972.076958][ T7369] dump_stack_lvl+0xe8/0x140 [ 972.076984][ T7369] dump_stack+0x15/0x1b [ 972.077006][ T7369] should_fail_ex+0x265/0x280 [ 972.077063][ T7369] should_fail+0xb/0x20 [ 972.077082][ T7369] should_fail_usercopy+0x1a/0x20 [ 972.077121][ T7369] _copy_to_user+0x20/0xa0 [ 972.077152][ T7369] simple_read_from_buffer+0xb5/0x130 [ 972.077182][ T7369] proc_fail_nth_read+0x10e/0x150 [ 972.077301][ T7369] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 972.077338][ T7369] vfs_read+0x1a8/0x770 [ 972.077379][ T7369] ksys_read+0xda/0x1a0 [ 972.077404][ T7369] __x64_sys_read+0x40/0x50 [ 972.077433][ T7369] x64_sys_call+0x27c0/0x3000 [ 972.077457][ T7369] do_syscall_64+0xd2/0x200 [ 972.077479][ T7369] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 972.077508][ T7369] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 972.077580][ T7369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.077649][ T7369] RIP: 0033:0x7f6a7f21d9dc [ 972.077700][ T7369] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 972.077721][ T7369] RSP: 002b:00007f6a7dc87030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 972.077785][ T7369] RAX: ffffffffffffffda RBX: 00007f6a7f475fa0 RCX: 00007f6a7f21d9dc [ 972.077800][ T7369] RDX: 000000000000000f RSI: 00007f6a7dc870a0 RDI: 0000000000000004 [ 972.077814][ T7369] RBP: 00007f6a7dc87090 R08: 0000000000000000 R09: 0000000000000000 [ 972.077828][ T7369] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 972.077841][ T7369] R13: 00007f6a7f476038 R14: 00007f6a7f475fa0 R15: 00007ffee841d7c8 [ 972.077988][ T7369] [ 972.417142][ T7377] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 972.530531][ T7392] hsr0: entered promiscuous mode [ 972.537214][ T7392] __nla_validate_parse: 4 callbacks suppressed [ 972.537232][ T7392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12348'. [ 972.556807][ T7392] hsr_slave_0: left promiscuous mode [ 972.565774][ T7392] hsr_slave_1: left promiscuous mode [ 972.595193][ T7392] hsr0 (unregistering): left promiscuous mode [ 972.609924][ T7397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12348'. [ 972.674984][ T7404] loop8: detected capacity change from 0 to 1024 [ 972.687217][ T7404] EXT4-fs (loop8): orphan cleanup on readonly fs [ 972.695806][ T7404] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.12353: Failed to acquire dquot type 0 [ 972.708439][ T7404] EXT4-fs (loop8): 1 truncate cleaned up [ 972.715792][ T7404] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 972.800595][ T4093] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 972.856079][ T7413] loop8: detected capacity change from 0 to 512 [ 972.856085][ T7410] syzkaller1: entered promiscuous mode [ 972.874326][ T7410] syzkaller1: entered allmulticast mode [ 972.883394][ T7413] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 972.903567][ T7413] EXT4-fs (loop8): 1 truncate cleaned up [ 972.911873][ T7413] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 972.963119][ T4093] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 973.002973][ T7411] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7411 comm=syz.4.12354 [ 973.041595][ T7420] loop8: detected capacity change from 0 to 512 [ 973.053819][ T7420] msdos: Unknown parameter 'cheQk' [ 973.129338][ T7434] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12362'. [ 973.163217][ T7434] netlink: 'syz.1.12362': attribute type 16 has an invalid length. [ 973.190644][ T7434] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 973.255059][ T7436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12363'. [ 973.307400][ T7438] FAULT_INJECTION: forcing a failure. [ 973.307400][ T7438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 973.321531][ T7438] CPU: 0 UID: 0 PID: 7438 Comm: syz.8.12364 Not tainted syzkaller #0 PREEMPT(voluntary) [ 973.321615][ T7438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 973.321631][ T7438] Call Trace: [ 973.321639][ T7438] [ 973.321649][ T7438] __dump_stack+0x1d/0x30 [ 973.321672][ T7438] dump_stack_lvl+0xe8/0x140 [ 973.321725][ T7438] dump_stack+0x15/0x1b [ 973.321747][ T7438] should_fail_ex+0x265/0x280 [ 973.321949][ T7438] should_fail+0xb/0x20 [ 973.322004][ T7438] should_fail_usercopy+0x1a/0x20 [ 973.322026][ T7438] _copy_from_user+0x1c/0xb0 [ 973.322052][ T7438] ___sys_sendmsg+0xc1/0x1d0 [ 973.322184][ T7438] __x64_sys_sendmsg+0xd4/0x160 [ 973.322241][ T7438] x64_sys_call+0x191e/0x3000 [ 973.322270][ T7438] do_syscall_64+0xd2/0x200 [ 973.322292][ T7438] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 973.322326][ T7438] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 973.322443][ T7438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.322471][ T7438] RIP: 0033:0x7f6a7f21efc9 [ 973.322568][ T7438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 973.322601][ T7438] RSP: 002b:00007f6a7dc87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 973.322621][ T7438] RAX: ffffffffffffffda RBX: 00007f6a7f475fa0 RCX: 00007f6a7f21efc9 [ 973.322637][ T7438] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 973.322652][ T7438] RBP: 00007f6a7dc87090 R08: 0000000000000000 R09: 0000000000000000 [ 973.322667][ T7438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 973.322681][ T7438] R13: 00007f6a7f476038 R14: 00007f6a7f475fa0 R15: 00007ffee841d7c8 [ 973.322708][ T7438] [ 973.583776][ T29] kauditd_printk_skb: 500 callbacks suppressed [ 973.583816][ T29] audit: type=1326 audit(1761162001.477:77631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7439 comm="syz.8.12365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7f21efc9 code=0x7ffc0000 [ 973.615637][ T29] audit: type=1326 audit(1761162001.477:77632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7439 comm="syz.8.12365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7f21efc9 code=0x7ffc0000 [ 973.645287][ T29] audit: type=1326 audit(1761162001.477:77633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7439 comm="syz.8.12365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f6a7f21efc9 code=0x7ffc0000 [ 973.677661][ T29] audit: type=1326 audit(1761162001.477:77634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7439 comm="syz.8.12365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7f21efc9 code=0x7ffc0000 [ 973.703398][ T29] audit: type=1326 audit(1761162001.477:77635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7439 comm="syz.8.12365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7f21efc9 code=0x7ffc0000 [ 973.728242][ T29] audit: type=1326 audit(1761162001.477:77636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7439 comm="syz.8.12365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f6a7f21efc9 code=0x7ffc0000 [ 973.754396][ T29] audit: type=1326 audit(1761162001.477:77637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7439 comm="syz.8.12365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7f21efc9 code=0x7ffc0000 [ 973.780713][ T29] audit: type=1326 audit(1761162001.477:77638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7439 comm="syz.8.12365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7f21efc9 code=0x7ffc0000 [ 973.809777][ T29] audit: type=1326 audit(1761162001.477:77639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7439 comm="syz.8.12365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f6a7f21efc9 code=0x7ffc0000 [ 973.835162][ T29] audit: type=1326 audit(1761162001.477:77640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7439 comm="syz.8.12365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7f21efc9 code=0x7ffc0000 [ 974.184990][ T7485] macvtap0: entered promiscuous mode [ 974.195621][ T7485] macvtap0: left promiscuous mode [ 974.218600][ T7486] netlink: 'syz.1.12382': attribute type 2 has an invalid length. [ 974.243943][ T7487] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 974.408816][ T7496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12387'. [ 974.448454][ T7495] loop8: detected capacity change from 0 to 512 [ 974.457555][ T7495] msdos: Unknown parameter 'cheQk' [ 974.541055][T26823] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 974.549166][T26823] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 974.557023][T26823] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 974.565199][T26823] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 974.573482][T26823] hid-generic 0000:0000:0000.0012: unknown main item tag 0x2 [ 974.583472][T26823] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 974.593470][T26823] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 974.603421][T26823] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 974.611938][T26823] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 974.620678][T26823] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 974.673924][T26823] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz1 [ 974.697548][ T7504] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.745241][ T7515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12389'. [ 974.787911][ T7504] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.859759][ T7504] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.865322][ T7517] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12394'. [ 974.938033][ T7504] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.031855][ T5089] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.063931][ T5089] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.088281][ T5089] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.100819][ T5089] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.177173][ T7544] tmpfs: Bad value for 'mpol' [ 975.227914][ T7543] syzkaller1: entered promiscuous mode [ 975.235924][ T7543] syzkaller1: entered allmulticast mode [ 975.431662][ T7565] loop8: detected capacity change from 0 to 128 [ 975.441091][ T7565] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 975.455861][ T7565] ext4 filesystem being mounted at /221/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 975.535671][ T4093] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 975.638026][ T7573] loop8: detected capacity change from 0 to 512 [ 975.648190][ T7573] msdos: Unknown parameter 'cheQk' [ 975.760962][ T7579] netlink: 148 bytes leftover after parsing attributes in process `syz.4.12406'. [ 975.871659][ T7579] lo speed is unknown, defaulting to 1000 [ 975.942679][ T7579] lo speed is unknown, defaulting to 1000 [ 976.590306][ T7587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12414'. [ 976.710906][ T7594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12415'. [ 976.846598][ T7606] loop8: detected capacity change from 0 to 512 [ 976.859147][ T7606] msdos: Unknown parameter 'cheQk' [ 976.884094][ T7614] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7614 comm=syz.1.12421 [ 976.940420][ T7596] lo speed is unknown, defaulting to 1000 [ 976.992671][ T7618] loop8: detected capacity change from 0 to 128 [ 977.002153][ T7596] lo speed is unknown, defaulting to 1000 [ 977.045413][ T7621] loop8: detected capacity change from 0 to 512 [ 977.054896][ T7622] syzkaller1: entered promiscuous mode [ 977.061039][ T7622] syzkaller1: entered allmulticast mode [ 977.098992][ T7621] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 977.125120][ T7621] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 977.162091][ T7621] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7621 comm=syz.8.12424 [ 977.196173][ T4093] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 977.257685][ T7596] chnl_net:caif_netlink_parms(): no params data found [ 977.312057][ T7596] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.319493][ T7596] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.327511][ T7596] bridge_slave_0: entered allmulticast mode [ 977.334887][ T7596] bridge_slave_0: entered promiscuous mode [ 977.342371][ T7596] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.349632][ T7596] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.357286][ T7596] bridge_slave_1: entered allmulticast mode [ 977.364215][ T7596] bridge_slave_1: entered promiscuous mode [ 977.385919][ T7596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 977.398314][ T7596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 977.425704][ T7596] team0: Port device team_slave_0 added [ 977.433469][ T7596] team0: Port device team_slave_1 added [ 977.452887][ T7596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 977.460103][ T7596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 977.486798][ T7596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 977.499471][ T7596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 977.506642][ T7596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 977.533215][ T7596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 977.582319][ T7596] hsr_slave_0: entered promiscuous mode [ 977.589953][ T7596] hsr_slave_1: entered promiscuous mode [ 977.597051][ T7596] debugfs: 'hsr0' already exists in 'hsr' [ 977.603021][ T7596] Cannot create hsr debugfs directory [ 977.697479][ T7647] __nla_validate_parse: 2 callbacks suppressed [ 977.697499][ T7647] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 977.714366][ T7647] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 977.735095][ T7596] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.817132][ T7596] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.839542][ T7658] 9pnet_fd: Insufficient options for proto=fd [ 977.880855][ T7596] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.903601][ T7663] vlan2: entered allmulticast mode [ 977.954226][ T7648] lo speed is unknown, defaulting to 1000 [ 977.966935][ T7596] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.997570][ T7648] lo speed is unknown, defaulting to 1000 [ 978.046812][ T7596] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 978.056630][ T7596] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 978.066692][ T7596] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 978.078573][ T7596] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 978.191765][ T7682] loop8: detected capacity change from 0 to 1024 [ 978.199889][ T7682] EXT4-fs: Ignoring removed oldalloc option [ 978.206614][ T7682] EXT4-fs: Ignoring removed bh option [ 978.225769][ T7682] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 978.227015][ T7596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 978.252628][ T7682] EXT4-fs error (device loop8): ext4_search_dir:1474: inode #12: block 7: comm syz.8.12436: bad entry in directory: inode out of bounds - offset=0, inode=1073741837, rec_len=16, size=56 fake=0 [ 978.259799][ T7596] 8021q: adding VLAN 0 to HW filter on device team0 [ 978.295086][ T7648] chnl_net:caif_netlink_parms(): no params data found [ 978.316216][ T4105] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.323668][ T4105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 978.357670][ T4105] bridge0: port 2(bridge_slave_1) entered blocking state [ 978.364895][ T4105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 978.610505][ T7648] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.617980][ T7648] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.626068][ T7648] bridge_slave_0: entered allmulticast mode [ 978.637519][ T7648] bridge_slave_0: entered promiscuous mode [ 978.649076][ T7648] bridge0: port 2(bridge_slave_1) entered blocking state [ 978.656859][ T7648] bridge0: port 2(bridge_slave_1) entered disabled state [ 978.667393][ T7648] bridge_slave_1: entered allmulticast mode [ 978.675583][ T7648] bridge_slave_1: entered promiscuous mode [ 978.735047][ T7648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 978.749327][ T7596] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 978.760087][ T7596] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 978.800039][ T7648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 978.831133][ T7648] team0: Port device team_slave_0 added [ 978.840312][ T7648] team0: Port device team_slave_1 added [ 978.861672][ T7648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 978.868847][ T7648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 978.897886][ T7648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 978.919589][ T7648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 978.927014][ T7648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 978.953835][ T7648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 978.991750][ T7648] hsr_slave_0: entered promiscuous mode [ 978.999660][ T7648] hsr_slave_1: entered promiscuous mode [ 979.006297][ T7648] debugfs: 'hsr0' already exists in 'hsr' [ 979.012782][ T7648] Cannot create hsr debugfs directory [ 979.038094][ T7596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 979.074224][ T4093] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 979.232169][ T7596] veth0_vlan: entered promiscuous mode [ 979.242276][ T7596] veth1_vlan: entered promiscuous mode [ 979.262456][ T7596] veth0_macvtap: entered promiscuous mode [ 979.271415][ T7596] veth1_macvtap: entered promiscuous mode [ 979.284046][ T7596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 979.300216][ T7596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 979.308863][ T7722] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12440'. [ 979.328494][ T5089] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.339853][ T5089] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.359121][ T5089] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.371825][ T4131] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.401002][ T7727] loop8: detected capacity change from 0 to 164 [ 979.409630][ T7727] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 979.412070][ T7648] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 979.432159][ T7727] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 979.441855][ T7648] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 979.449395][ T7727] Symlink component flag not implemented [ 979.455924][ T7727] Symlink component flag not implemented [ 979.462177][ T7727] Symlink component flag not implemented (7) [ 979.468601][ T7727] Symlink component flag not implemented (116) [ 979.479241][ T7729] loop6: detected capacity change from 0 to 128 [ 979.487171][ T7648] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 979.501203][ T29] kauditd_printk_skb: 500 callbacks suppressed [ 979.501223][ T29] audit: type=1326 audit(1761162007.388:78141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7728 comm="syz.6.12413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f6fdefc9 code=0x7ffc0000 [ 979.532605][ T29] audit: type=1326 audit(1761162007.388:78142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7728 comm="syz.6.12413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f6fdefc9 code=0x7ffc0000 [ 979.557696][ T29] audit: type=1326 audit(1761162007.388:78143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7728 comm="syz.6.12413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f80f6fdefc9 code=0x7ffc0000 [ 979.583005][ T29] audit: type=1326 audit(1761162007.388:78144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7728 comm="syz.6.12413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f6fdefc9 code=0x7ffc0000 [ 979.604775][ T7648] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 979.607749][ T29] audit: type=1326 audit(1761162007.388:78145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7728 comm="syz.6.12413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f6fdefc9 code=0x7ffc0000 [ 979.671615][ T7732] loop8: detected capacity change from 0 to 512 [ 979.679611][ T7732] msdos: Unknown parameter 'cheQk' [ 979.746062][ T7744] loop8: detected capacity change from 0 to 128 [ 979.758659][ T29] audit: type=1326 audit(1761162007.638:78146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7743 comm="syz.8.12446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7f21efc9 code=0x7ffc0000 [ 979.783544][ T29] audit: type=1326 audit(1761162007.638:78147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7743 comm="syz.8.12446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7f21efc9 code=0x7ffc0000 [ 979.809031][ T29] audit: type=1326 audit(1761162007.638:78148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7743 comm="syz.8.12446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f6a7f21efc9 code=0x7ffc0000 [ 979.834048][ T29] audit: type=1326 audit(1761162007.638:78149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7743 comm="syz.8.12446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7f21efc9 code=0x7ffc0000 [ 979.859365][ T29] audit: type=1326 audit(1761162007.638:78150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7743 comm="syz.8.12446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7f21efc9 code=0x7ffc0000 [ 980.018984][ T7648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 980.044341][ T7751] wireguard0: entered promiscuous mode [ 980.051040][ T7751] wireguard0: entered allmulticast mode [ 980.075020][ T7755] loop8: detected capacity change from 0 to 512 [ 980.077544][ T7648] 8021q: adding VLAN 0 to HW filter on device team0 [ 980.104430][ T7755] msdos: Unknown parameter 'cheQk' [ 980.104781][ T4105] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.118573][ T4105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 980.154878][ T4105] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.162386][ T4105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 980.231377][ T7648] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 980.243926][ T7648] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 980.280106][ T7764] loop8: detected capacity change from 0 to 512 [ 980.289622][ T7764] msdos: Unknown parameter 'cheQk' [ 980.311315][ T7768] loop6: detected capacity change from 0 to 512 [ 980.314030][ T7768] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 980.333349][ T7768] EXT4-fs (loop6): 1 truncate cleaned up [ 980.333740][ T7768] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 980.372492][ T7773] loop8: detected capacity change from 0 to 128 [ 980.394286][ T7596] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 980.528941][ T7753] lo speed is unknown, defaulting to 1000 [ 980.548915][ T7784] loop6: detected capacity change from 0 to 256 [ 980.574343][ T7784] FAT-fs (loop6): bogus number of FAT sectors [ 980.582693][ T7784] FAT-fs (loop6): Can't find a valid FAT filesystem [ 980.610920][ T7648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 980.656671][ T7792] loop8: detected capacity change from 0 to 512 [ 980.673021][ T7792] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 980.695885][ T7792] EXT4-fs (loop8): 1 truncate cleaned up [ 980.704540][ T7792] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 980.782135][ T4093] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 980.793237][ T7785] lo speed is unknown, defaulting to 1000 [ 980.793246][ T7753] lo speed is unknown, defaulting to 1000 [ 980.903815][ T7785] lo speed is unknown, defaulting to 1000 [ 980.919065][ T7806] loop8: detected capacity change from 0 to 256 [ 980.965477][ T7648] veth0_vlan: entered promiscuous mode [ 980.970891][ T7806] FAT-fs (loop8): bogus number of FAT sectors [ 980.975922][ T7648] veth1_vlan: entered promiscuous mode [ 980.977848][ T7806] FAT-fs (loop8): Can't find a valid FAT filesystem [ 980.998648][ T7648] veth0_macvtap: entered promiscuous mode [ 981.011357][ T7648] veth1_macvtap: entered promiscuous mode [ 981.039559][ T7648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 981.069812][ T7648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 981.092843][ T4106] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.163231][ T4106] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.228050][ T4106] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.246165][ T7813] 9pnet_fd: Insufficient options for proto=fd [ 981.263126][ T7816] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12468'. [ 981.277919][ T7818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12427'. [ 981.289253][ T4106] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.327737][ T7820] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 981.392640][ T7820] loop8: detected capacity change from 0 to 1024 [ 981.411662][ T7820] EXT4-fs: Ignoring removed nobh option [ 981.430635][ T7820] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 981.444973][ T7820] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #11: comm syz.8.12469: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 981.466461][ T7820] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.12469: couldn't read orphan inode 11 (err -117) [ 981.481354][ T7829] 9pnet_fd: Insufficient options for proto=fd [ 981.491485][ T7820] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 981.510770][ T7820] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.12469: Invalid block bitmap block 0 in block_group 0 [ 981.526863][ T7820] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.12469: Failed to acquire dquot type 0 [ 981.658194][ T7841] netlink: 36 bytes leftover after parsing attributes in process `syz.6.12475'. [ 981.771241][ T4093] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 981.774527][ T7850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12478'. [ 981.791316][ T5089] EXT4-fs error (device loop8): ext4_release_dquot:6981: comm kworker/u8:0: Failed to release dquot type 0 [ 981.837610][ T7841] loop6: detected capacity change from 0 to 512 [ 981.852922][ T7853] netlink: 24 bytes leftover after parsing attributes in process `syz.8.12479'. [ 981.927172][ T7862] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 981.952626][ T7853] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12479'. [ 981.990484][ T7853] vlan2: entered allmulticast mode [ 981.996175][ T7853] bridge0: entered allmulticast mode [ 982.006391][ T7874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12486'. [ 982.271151][ T7900] tmpfs: Bad value for 'mpol' [ 982.303642][ T7900] 9pnet_fd: Insufficient options for proto=fd [ 982.630299][ T7924] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 982.735402][ T7935] syzkaller1: entered promiscuous mode [ 982.741020][ T7935] syzkaller1: entered allmulticast mode [ 983.101968][ T7951] loop6: detected capacity change from 0 to 256 [ 983.111791][ T7951] FAT-fs (loop6): bogus number of FAT sectors [ 983.118210][ T7951] FAT-fs (loop6): Can't find a valid FAT filesystem [ 983.223824][ T7958] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 983.411993][ T7974] loop8: detected capacity change from 0 to 512 [ 983.424302][ T7954] lo speed is unknown, defaulting to 1000 [ 983.431605][ T7974] msdos: Unknown parameter 'cheQk' [ 983.539678][ T7954] lo speed is unknown, defaulting to 1000 [ 983.718026][ T8001] __nla_validate_parse: 7 callbacks suppressed [ 983.718045][ T8001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12537'. [ 983.731332][ T8002] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12536'. [ 983.822772][ T8009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12540'. [ 983.869824][ T8012] vlan2: entered allmulticast mode [ 983.875431][ T8012] bridge0: entered allmulticast mode [ 983.912162][ T8002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12536'. [ 983.959895][ T8014] loop6: detected capacity change from 0 to 512 [ 983.978881][ T8014] msdos: Unknown parameter 'cheQk' [ 984.025645][ T8021] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12545'. [ 984.095511][ T8026] netlink: 68 bytes leftover after parsing attributes in process `syz.8.12548'. [ 984.164672][ T8035] vlan2: entered allmulticast mode [ 984.371401][ T8049] netlink: 'syz.4.12552': attribute type 16 has an invalid length. [ 984.420954][ T8049] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 984.499933][ T8053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12554'. [ 984.641313][ T29] kauditd_printk_skb: 857 callbacks suppressed [ 984.641332][ T29] audit: type=1326 audit(1761162012.518:79005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8059 comm="syz.4.12557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864876efc9 code=0x7ffc0000 [ 984.672935][ T29] audit: type=1326 audit(1761162012.518:79006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8059 comm="syz.4.12557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864876efc9 code=0x7ffc0000 [ 984.697440][ T29] audit: type=1326 audit(1761162012.518:79007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8059 comm="syz.4.12557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f864876efc9 code=0x7ffc0000 [ 984.722120][ T29] audit: type=1326 audit(1761162012.518:79008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8059 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864876efc9 code=0x7ffc0000 [ 984.745236][ T29] audit: type=1326 audit(1761162012.518:79009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8059 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864876efc9 code=0x7ffc0000 [ 984.769126][ T29] audit: type=1326 audit(1761162012.518:79010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8059 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f864876efc9 code=0x7ffc0000 [ 984.792358][ T29] audit: type=1326 audit(1761162012.518:79011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8059 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864876efc9 code=0x7ffc0000 [ 984.816578][ T29] audit: type=1326 audit(1761162012.518:79012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8059 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864876efc9 code=0x7ffc0000 [ 984.840068][ T29] audit: type=1326 audit(1761162012.518:79013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8059 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f864876efc9 code=0x7ffc0000 [ 984.863616][ T29] audit: type=1326 audit(1761162012.518:79014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8059 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864876efc9 code=0x7ffc0000 [ 984.945670][ T8067] netlink: 68 bytes leftover after parsing attributes in process `syz.4.12560'. [ 984.956859][ T8069] loop6: detected capacity change from 0 to 512 [ 984.964057][ T8069] msdos: Unknown parameter 'cheQk' [ 985.054213][ T8082] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12567'. [ 985.100921][ T8091] syzkaller1: entered promiscuous mode [ 985.107611][ T8091] syzkaller1: entered allmulticast mode [ 985.162433][ T8082] vlan2: entered allmulticast mode [ 985.168532][ T8082] bridge0: entered allmulticast mode [ 985.267161][ T8099] loop6: detected capacity change from 0 to 164 [ 985.275415][ T8099] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 985.285356][ T8099] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 985.293940][ T8099] Symlink component flag not implemented [ 985.299638][ T8099] Symlink component flag not implemented [ 985.306089][ T8099] Symlink component flag not implemented (7) [ 985.312545][ T8099] Symlink component flag not implemented (116) [ 985.357202][ T8105] loop6: detected capacity change from 0 to 512 [ 985.365287][ T8105] msdos: Unknown parameter 'cheQk' [ 985.374145][ T8108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12575'. [ 985.415251][ T8110] loop6: detected capacity change from 0 to 164 [ 985.423405][ T8110] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 985.433305][ T8110] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 985.442054][ T8110] Symlink component flag not implemented [ 985.448356][ T8110] Symlink component flag not implemented [ 985.454359][ T8110] Symlink component flag not implemented (7) [ 985.460554][ T8110] Symlink component flag not implemented (116) [ 986.258772][ T8134] FAULT_INJECTION: forcing a failure. [ 986.258772][ T8134] name failslab, interval 1, probability 0, space 0, times 0 [ 986.271723][ T8134] CPU: 0 UID: 0 PID: 8134 Comm: syz.4.12584 Not tainted syzkaller #0 PREEMPT(voluntary) [ 986.271823][ T8134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 986.271838][ T8134] Call Trace: [ 986.271847][ T8134] [ 986.271857][ T8134] __dump_stack+0x1d/0x30 [ 986.271882][ T8134] dump_stack_lvl+0xe8/0x140 [ 986.271906][ T8134] dump_stack+0x15/0x1b [ 986.271926][ T8134] should_fail_ex+0x265/0x280 [ 986.272107][ T8134] should_failslab+0x8c/0xb0 [ 986.272143][ T8134] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 986.272207][ T8134] ? __alloc_skb+0x101/0x320 [ 986.272245][ T8134] __alloc_skb+0x101/0x320 [ 986.272282][ T8134] netlink_alloc_large_skb+0xbf/0xf0 [ 986.272348][ T8134] netlink_sendmsg+0x3cf/0x6b0 [ 986.272389][ T8134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 986.272436][ T8134] __sock_sendmsg+0x145/0x180 [ 986.272465][ T8134] ____sys_sendmsg+0x31e/0x4e0 [ 986.272509][ T8134] ___sys_sendmsg+0x17b/0x1d0 [ 986.272609][ T8134] __x64_sys_sendmsg+0xd4/0x160 [ 986.272780][ T8134] x64_sys_call+0x191e/0x3000 [ 986.272815][ T8134] do_syscall_64+0xd2/0x200 [ 986.272898][ T8134] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 986.272934][ T8134] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 986.273045][ T8134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.273072][ T8134] RIP: 0033:0x7f864876efc9 [ 986.273091][ T8134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 986.273189][ T8134] RSP: 002b:00007f86471d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 986.273211][ T8134] RAX: ffffffffffffffda RBX: 00007f86489c5fa0 RCX: 00007f864876efc9 [ 986.273225][ T8134] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 986.273236][ T8134] RBP: 00007f86471d7090 R08: 0000000000000000 R09: 0000000000000000 [ 986.273248][ T8134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 986.273311][ T8134] R13: 00007f86489c6038 R14: 00007f86489c5fa0 R15: 00007fff4b2a3ae8 [ 986.273338][ T8134] [ 986.502225][ T8140] loop8: detected capacity change from 0 to 512 [ 986.509363][ T8140] msdos: Unknown parameter 'cheQk' [ 986.824591][ T8170] syzkaller1: entered promiscuous mode [ 986.830452][ T8170] syzkaller1: entered allmulticast mode [ 987.069196][ T8179] syzkaller1: entered promiscuous mode [ 987.076714][ T8179] syzkaller1: entered allmulticast mode [ 987.545305][ T8210] loop6: detected capacity change from 0 to 512 [ 987.553527][ T8210] msdos: Unknown parameter 'cheQk' [ 987.605248][ T8221] loop6: detected capacity change from 0 to 164 [ 987.613384][ T8221] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 987.624203][ T8221] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 987.633188][ T8221] Symlink component flag not implemented [ 987.639404][ T8221] Symlink component flag not implemented [ 987.645925][ T8221] Symlink component flag not implemented (7) [ 987.652097][ T8221] Symlink component flag not implemented (116) [ 987.684754][ T8224] netlink: 'syz.6.12622': attribute type 4 has an invalid length. [ 987.759397][ T8228] loop6: detected capacity change from 0 to 512 [ 987.767064][ T8228] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 987.779145][ T8228] EXT4-fs (loop6): 1 truncate cleaned up [ 987.785592][ T8228] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 987.809324][ T7596] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 987.937416][ T8243] vlan2: entered allmulticast mode [ 987.943017][ T8243] bridge1: port 1(vlan2) entered blocking state [ 987.949327][ T8243] bridge1: port 1(vlan2) entered disabled state [ 987.957030][ T8243] vlan2: entered promiscuous mode [ 987.962089][ T8243] bridge0: entered promiscuous mode [ 988.141802][ T8258] loop6: detected capacity change from 0 to 164 [ 988.150793][ T8258] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 988.160696][ T8258] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 988.170340][ T8258] Symlink component flag not implemented [ 988.176435][ T8258] Symlink component flag not implemented [ 988.182463][ T8258] Symlink component flag not implemented (7) [ 988.188500][ T8258] Symlink component flag not implemented (116) [ 988.515130][ T8282] loop8: detected capacity change from 0 to 512 [ 988.523850][ T8282] msdos: Unknown parameter 'cheQk' [ 988.556606][ T8285] loop8: detected capacity change from 0 to 512 [ 988.563994][ T8285] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 988.575650][ T8285] EXT4-fs (loop8): 1 truncate cleaned up [ 988.581975][ T8285] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 988.609944][ T4093] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 989.050319][ T8309] __nla_validate_parse: 18 callbacks suppressed [ 989.050394][ T8309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12657'. [ 989.083837][ T8311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12658'. [ 989.093909][ T8311] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12658'. [ 989.119693][ T8313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12659'. [ 989.276639][ T8336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12669'. [ 989.288608][ T8336] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12669'. [ 989.317462][ T8342] netlink: 'syz.4.12672': attribute type 4 has an invalid length. [ 989.348520][ T8345] netlink: 'syz.4.12673': attribute type 4 has an invalid length. [ 989.385941][ T8348] netlink: 7 bytes leftover after parsing attributes in process `syz.6.12671'. [ 989.396138][ T8348] netlink: 7 bytes leftover after parsing attributes in process `syz.6.12671'. [ 989.658635][ T8362] syzkaller1: entered promiscuous mode [ 989.667436][ T8362] syzkaller1: entered allmulticast mode [ 989.690512][ T29] kauditd_printk_skb: 658 callbacks suppressed [ 989.690532][ T29] audit: type=1326 audit(1761162017.568:79673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8361 comm="syz.8.12681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7f21efc9 code=0x7ffc0000 [ 989.723899][ T29] audit: type=1326 audit(1761162017.568:79674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8361 comm="syz.8.12681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7f21efc9 code=0x7ffc0000 [ 989.748977][ T29] audit: type=1326 audit(1761162017.578:79675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8361 comm="syz.8.12681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f6a7f21efc9 code=0x7ffc0000 [ 989.774335][ T29] audit: type=1326 audit(1761162017.578:79676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8361 comm="syz.8.12681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7f21efc9 code=0x7ffc0000 [ 989.800037][ T29] audit: type=1326 audit(1761162017.588:79677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8361 comm="syz.8.12681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f6a7f21efc9 code=0x7ffc0000 [ 989.825041][ T29] audit: type=1326 audit(1761162017.588:79678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8361 comm="syz.8.12681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7f21efc9 code=0x7ffc0000 [ 989.849497][ T29] audit: type=1326 audit(1761162017.588:79679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8361 comm="syz.8.12681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f6a7f21efc9 code=0x7ffc0000 [ 989.873999][ T29] audit: type=1326 audit(1761162017.588:79680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8361 comm="syz.8.12681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7f21efc9 code=0x7ffc0000 [ 989.899368][ T29] audit: type=1326 audit(1761162017.598:79681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8361 comm="syz.8.12681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6a7f21efc9 code=0x7ffc0000 [ 989.924140][ T29] audit: type=1326 audit(1761162017.598:79682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8361 comm="syz.8.12681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7f21efc9 code=0x7ffc0000 [ 990.057194][ T8367] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12683'. [ 990.073611][ T8367] veth0_vlan: entered allmulticast mode [ 990.213337][ T8383] loop6: detected capacity change from 0 to 512 [ 990.221450][ T8383] msdos: Unknown parameter 'cheQk' [ 990.255980][ T8390] netlink: 'syz.6.12692': attribute type 4 has an invalid length. [ 990.407469][ T8415] loop6: detected capacity change from 0 to 512 [ 990.415075][ T8415] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 990.440268][ T8415] EXT4-fs (loop6): 1 truncate cleaned up [ 990.451582][ T8415] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 990.472379][ T8412] syzkaller1: entered promiscuous mode [ 990.479278][ T8412] syzkaller1: entered allmulticast mode [ 990.508775][ T7596] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 990.540911][ T8427] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12706'. [ 990.632249][ T8438] vlan2: entered allmulticast mode [ 990.793656][ T8457] loop8: detected capacity change from 0 to 512 [ 990.801317][ T8457] msdos: Unknown parameter 'cheQk' [ 990.852047][ T8466] vlan2: entered allmulticast mode [ 990.859235][ T8466] bridge2: port 1(vlan2) entered blocking state [ 990.866260][ T8466] bridge2: port 1(vlan2) entered disabled state [ 990.875522][ T8466] vlan2: entered promiscuous mode [ 990.882647][ T8466] bridge0: entered promiscuous mode [ 992.324361][ T8512] lo speed is unknown, defaulting to 1000 [ 992.372660][ T8514] syzkaller1: entered promiscuous mode [ 992.379359][ T8514] syzkaller1: entered allmulticast mode [ 992.618330][ T8512] lo speed is unknown, defaulting to 1000 [ 993.007336][ T8534] loop6: detected capacity change from 0 to 512 [ 993.015126][ T8534] msdos: Unknown parameter 'cheQk' [ 994.329420][ T8573] lo speed is unknown, defaulting to 1000 [ 994.407629][ T8573] lo speed is unknown, defaulting to 1000 [ 995.183326][ T8586] __nla_validate_parse: 12 callbacks suppressed [ 995.183344][ T8586] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12763'. [ 995.243836][ T8586] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12763'. [ 995.281786][ T8591] netlink: 260 bytes leftover after parsing attributes in process `syz.4.12760'. [ 995.291137][ T8591] netlink: 260 bytes leftover after parsing attributes in process `syz.4.12760'. [ 995.309084][ T8591] netlink: 92 bytes leftover after parsing attributes in process `'. [ 995.317380][ T8591] netlink: 32 bytes leftover after parsing attributes in process `'. [ 995.352360][ T8594] macsec1: entered promiscuous mode [ 995.359207][ T8594] bridge0: port 3(macsec1) entered blocking state [ 995.366055][ T8594] bridge0: port 3(macsec1) entered disabled state [ 995.373490][ T8594] macsec1: entered allmulticast mode [ 995.379694][ T8594] macsec1: left allmulticast mode [ 995.516429][ T8600] syzkaller1: entered promiscuous mode [ 995.523600][ T8600] syzkaller1: entered allmulticast mode [ 995.572398][ T29] kauditd_printk_skb: 665 callbacks suppressed [ 995.572414][ T29] audit: type=1326 audit(1761162023.439:80348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8601 comm="syz.6.12768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f6fdefc9 code=0x7ffc0000 [ 995.603228][ T29] audit: type=1326 audit(1761162023.439:80349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8601 comm="syz.6.12768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f6fdefc9 code=0x7ffc0000 [ 995.628168][ T29] audit: type=1326 audit(1761162023.439:80350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8601 comm="syz.6.12768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f80f6fdefc9 code=0x7ffc0000 [ 995.652865][ T29] audit: type=1326 audit(1761162023.439:80351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8601 comm="syz.6.12768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f6fdefc9 code=0x7ffc0000 [ 995.677853][ T29] audit: type=1326 audit(1761162023.439:80352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8601 comm="syz.6.12768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f6fdefc9 code=0x7ffc0000 [ 995.772106][ T29] audit: type=1326 audit(1761162023.569:80353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8599 comm="syz.8.12767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7f21efc9 code=0x7ffc0000 [ 995.795914][ T29] audit: type=1326 audit(1761162023.569:80354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8599 comm="syz.8.12767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7f21efc9 code=0x7ffc0000 [ 995.820518][ T29] audit: type=1326 audit(1761162023.569:80355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8599 comm="syz.8.12767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f6a7f21efc9 code=0x7ffc0000 [ 995.844342][ T29] audit: type=1326 audit(1761162023.569:80356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8599 comm="syz.8.12767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7f21efc9 code=0x7ffc0000 [ 995.868605][ T29] audit: type=1326 audit(1761162023.569:80357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8599 comm="syz.8.12767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7f21efc9 code=0x7ffc0000 [ 995.916916][ T8614] netlink: 'syz.4.12772': attribute type 4 has an invalid length. [ 995.967741][ T8616] loop8: detected capacity change from 0 to 512 [ 995.975289][ T8616] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 995.987236][ T8616] EXT4-fs (loop8): 1 truncate cleaned up [ 995.993961][ T8616] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 996.019391][ T4093] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 996.051970][ T8626] macvtap0: refused to change device tx_queue_len [ 996.061241][ T8626] netlink: 'syz.8.12776': attribute type 16 has an invalid length. [ 996.214082][ T8633] netlink: 'syz.8.12780': attribute type 4 has an invalid length. [ 996.413515][ T8640] lo speed is unknown, defaulting to 1000 [ 996.481990][ T8640] lo speed is unknown, defaulting to 1000 [ 996.657482][ T8645] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12783'. [ 996.716142][ T8645] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12783'. [ 996.851015][ T8652] loop6: detected capacity change from 0 to 512 [ 996.861202][ T8652] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 996.876144][ T8652] EXT4-fs (loop6): 1 truncate cleaned up [ 996.882592][ T8652] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 996.909674][ T7596] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 996.953937][ T8657] loop6: detected capacity change from 0 to 512 [ 996.964572][ T8657] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 996.977767][ T8657] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 996.982537][ T8661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12788'. [ 996.999534][ T8661] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12788'. [ 997.026626][ T8663] netlink: 'syz.4.12789': attribute type 4 has an invalid length. [ 997.144885][ T8674] loop8: detected capacity change from 0 to 512 [ 997.152549][ T8674] msdos: Unknown parameter 'cheQk' [ 997.275196][ T8684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 997.283040][ T8684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 997.292935][ T8684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 997.300413][ T8684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 997.427629][ T8689] 9pnet_fd: Insufficient options for proto=fd [ 997.476132][ T8693] loop8: detected capacity change from 0 to 512 [ 997.483850][ T8693] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 997.495400][ T8693] EXT4-fs (loop8): 1 truncate cleaned up [ 997.501732][ T8693] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 997.529143][ T4093] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 997.853177][ T7596] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 998.134489][ T8705] lo speed is unknown, defaulting to 1000 [ 998.166467][ T8705] lo speed is unknown, defaulting to 1000 [ 998.289084][ T8705] chnl_net:caif_netlink_parms(): no params data found [ 998.334737][ T8705] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.341994][ T8705] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.349626][ T8705] bridge_slave_0: entered allmulticast mode [ 998.356937][ T8705] bridge_slave_0: entered promiscuous mode [ 998.364729][ T8705] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.372242][ T8705] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.379936][ T8705] bridge_slave_1: entered allmulticast mode [ 998.387141][ T8705] bridge_slave_1: entered promiscuous mode [ 998.409358][ T8705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 998.420919][ T8705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 998.445262][ T8705] team0: Port device team_slave_0 added [ 998.453643][ T8705] team0: Port device team_slave_1 added [ 998.475877][ T8705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 998.482986][ T8705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 998.509122][ T8705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 998.527364][ T8705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 998.534476][ T8705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 998.561209][ T8705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 998.594854][ T8705] hsr_slave_0: entered promiscuous mode [ 998.608385][ T8734] loop8: detected capacity change from 0 to 512 [ 998.608661][ T8705] hsr_slave_1: entered promiscuous mode [ 998.616057][ T8734] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 998.622256][ T8705] debugfs: 'hsr0' already exists in 'hsr' [ 998.632702][ T8734] EXT4-fs (loop8): 1 truncate cleaned up [ 998.636974][ T8705] Cannot create hsr debugfs directory [ 998.643618][ T8734] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 998.676938][ T4093] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 998.729652][ T8740] loop8: detected capacity change from 0 to 1024 [ 998.737334][ T8740] EXT4-fs: Ignoring removed orlov option [ 998.759535][ T8705] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.760176][ T8743] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 998.774236][ T8740] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 998.811471][ T8743] loop6: detected capacity change from 0 to 1024 [ 998.818503][ T4093] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 998.820248][ T8743] EXT4-fs: Ignoring removed nobh option [ 998.833945][ T8743] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 998.849615][ T8705] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.861932][ T8743] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #11: comm syz.6.12816: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 998.882580][ T8743] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.12816: couldn't read orphan inode 11 (err -117) [ 998.896359][ T8743] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 998.913723][ T8743] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.12816: Invalid block bitmap block 0 in block_group 0 [ 998.929268][ T8743] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.12816: Failed to acquire dquot type 0 [ 998.947645][ T8749] syzkaller1: entered promiscuous mode [ 998.953736][ T8749] syzkaller1: entered allmulticast mode [ 998.965347][ T8705] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.069067][ T8705] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.206143][ T8705] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 999.219257][ T7596] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 999.231483][ T8705] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 999.239151][ T8760] loop8: detected capacity change from 0 to 512 [ 999.246225][ T5089] EXT4-fs error (device loop6): ext4_release_dquot:6981: comm kworker/u8:0: Failed to release dquot type 0 [ 999.262308][ T8760] msdos: Unknown parameter 'cheQk' [ 999.275100][ T8705] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 999.292834][ T8705] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 999.519270][ T8705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 999.552162][ T8705] 8021q: adding VLAN 0 to HW filter on device team0 [ 999.563797][ T5089] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.571248][ T5089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 999.582978][ T8764] lo speed is unknown, defaulting to 1000 [ 999.584199][ T5089] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.596159][ T5089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 999.618468][ T8705] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 999.628937][ T8705] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 999.693175][ T8764] lo speed is unknown, defaulting to 1000 [ 999.728155][ T8705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 999.977132][ T8705] veth0_vlan: entered promiscuous mode [ 999.999664][ T8705] veth1_vlan: entered promiscuous mode [ 1000.017076][ T8764] chnl_net:caif_netlink_parms(): no params data found [ 1000.100747][ T8705] veth0_macvtap: entered promiscuous mode [ 1000.124580][ T8764] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.132109][ T8764] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.147873][ T8764] bridge_slave_0: entered allmulticast mode [ 1000.161265][ T8764] bridge_slave_0: entered promiscuous mode [ 1000.177165][ T8764] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.184972][ T8764] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.193066][ T8764] bridge_slave_1: entered allmulticast mode [ 1000.200848][ T8764] bridge_slave_1: entered promiscuous mode [ 1000.211579][ T8705] veth1_macvtap: entered promiscuous mode [ 1000.242934][ T8837] __nla_validate_parse: 8 callbacks suppressed [ 1000.242955][ T8837] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12837'. [ 1000.245780][ T8764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1000.250228][ T8837] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12837'. [ 1000.261996][ T8705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1000.293064][ T8764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1000.312429][ T8705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1000.338081][ T8764] team0: Port device team_slave_0 added [ 1000.347209][ T5089] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.362373][ T8764] team0: Port device team_slave_1 added [ 1000.375646][ T8841] 9pnet_fd: Insufficient options for proto=fd [ 1000.396612][ T5089] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.415344][ T8764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1000.422821][ T8764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1000.450138][ T8764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1000.466732][ T5089] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.477079][ T8843] syzkaller0: entered allmulticast mode [ 1000.482845][ T5089] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.493245][ T8764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1000.500501][ T8764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1000.526943][ T8764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1000.543014][ T8843] syzkaller0: entered promiscuous mode [ 1000.550864][ T8850] syzkaller0 (unregistering): left allmulticast mode [ 1000.557824][ T8850] syzkaller0 (unregistering): left promiscuous mode [ 1000.595367][ T29] kauditd_printk_skb: 897 callbacks suppressed [ 1000.595384][ T29] audit: type=1326 audit(1761162028.479:81252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8853 comm="syz.5.12842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44657efc9 code=0x7ffc0000 [ 1000.640863][ T29] audit: type=1326 audit(1761162028.479:81253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8853 comm="syz.5.12842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44657efc9 code=0x7ffc0000 [ 1000.666253][ T29] audit: type=1326 audit(1761162028.479:81254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8853 comm="syz.5.12842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7fd44657efc9 code=0x7ffc0000 [ 1000.692321][ T29] audit: type=1326 audit(1761162028.479:81255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8853 comm="syz.5.12842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44657efc9 code=0x7ffc0000 [ 1000.728490][ T8764] hsr_slave_0: entered promiscuous mode [ 1000.740032][ T8858] 9pnet_fd: Insufficient options for proto=fd [ 1000.743851][ T8764] hsr_slave_1: entered promiscuous mode [ 1000.769476][ T8764] debugfs: 'hsr0' already exists in 'hsr' [ 1000.775459][ T8764] Cannot create hsr debugfs directory [ 1000.783625][ T29] audit: type=1326 audit(1761162028.669:81256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8861 comm="syz.6.12846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f6fdefc9 code=0x7ffc0000 [ 1000.786072][ T8860] netlink: 'syz.5.12845': attribute type 4 has an invalid length. [ 1000.808290][ T29] audit: type=1326 audit(1761162028.669:81257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8861 comm="syz.6.12846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f6fdefc9 code=0x7ffc0000 [ 1000.808369][ T29] audit: type=1326 audit(1761162028.669:81258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8861 comm="syz.6.12846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f80f6fdefc9 code=0x7ffc0000 [ 1000.864957][ T29] audit: type=1326 audit(1761162028.669:81259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8861 comm="syz.6.12846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f6fdefc9 code=0x7ffc0000 [ 1000.890041][ T29] audit: type=1326 audit(1761162028.669:81260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8861 comm="syz.6.12846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f6fdefc9 code=0x7ffc0000 [ 1000.979854][ T8864] macvtap1: entered allmulticast mode [ 1000.979885][ T8867] loop8: detected capacity change from 0 to 512 [ 1000.986874][ T8864] veth0_macvtap: entered allmulticast mode [ 1000.997256][ T8867] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1001.004096][ T8869] 9pnet_virtio: no channels available for device [ 1001.022953][ T8867] EXT4-fs (loop8): 1 truncate cleaned up [ 1001.029506][ T8867] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1001.102923][ T8764] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.115059][ T4093] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1001.130455][ T8877] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12853'. [ 1001.155118][ T8764] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.203033][ T8887] netlink: 24 bytes leftover after parsing attributes in process `syz.8.12856'. [ 1001.237449][ T8764] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.269582][ T29] audit: type=1326 audit(1761162029.149:81261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8890 comm="syz.8.12858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7f21efc9 code=0x7ffc0000 [ 1001.345243][ T8896] loop6: detected capacity change from 0 to 512 [ 1001.365033][ T8764] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.377711][ T8897] blktrace: Concurrent blktraces are not allowed on loop10 [ 1001.391675][ T8896] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1001.435354][ T8902] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1001.451527][ T8896] EXT4-fs (loop6): 1 truncate cleaned up [ 1001.457932][ T8896] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1001.509744][ T7596] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1001.549363][ T8764] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1001.559082][ T8910] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12865'. [ 1001.560039][ T8912] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1001.582771][ T8764] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1001.593016][ T8764] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1001.612954][ T8764] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1001.629443][ T8912] loop6: detected capacity change from 0 to 1024 [ 1001.638372][ T8912] EXT4-fs: Ignoring removed nobh option [ 1001.646097][ T8912] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1001.663228][ T8908] lo speed is unknown, defaulting to 1000 [ 1001.672121][ T8912] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #11: comm syz.6.12864: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1001.712412][ T8908] lo speed is unknown, defaulting to 1000 [ 1001.729332][ T8912] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.12864: couldn't read orphan inode 11 (err -117) [ 1001.753743][ T8912] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1001.772940][ T8764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1001.789799][ T8912] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.12864: Invalid block bitmap block 0 in block_group 0 [ 1001.808373][ T8764] 8021q: adding VLAN 0 to HW filter on device team0 [ 1001.816811][ T8912] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.12864: Failed to acquire dquot type 0 [ 1001.831378][ T5089] bridge0: port 1(bridge_slave_0) entered blocking state [ 1001.839171][ T5089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1001.855193][ T8930] loop8: detected capacity change from 0 to 1024 [ 1001.870594][ T5089] bridge0: port 2(bridge_slave_1) entered blocking state [ 1001.870863][ T8930] EXT4-fs: Ignoring removed orlov option [ 1001.877798][ T5089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1001.895141][ T8930] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1002.166093][ T8764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1002.235411][ T7596] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1002.251851][ T4122] EXT4-fs error (device loop6): ext4_release_dquot:6981: comm kworker/u8:31: Failed to release dquot type 0 [ 1002.345917][ T8951] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12872'. [ 1002.359154][ T4093] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1002.423669][ T8946] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1002.451870][ T8961] 9pnet_virtio: no channels available for device [ 1002.533192][ T8966] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12876'. [ 1002.570348][ T8970] 9pnet_fd: Insufficient options for proto=fd [ 1002.591936][ T8764] veth0_vlan: entered promiscuous mode [ 1002.623985][ T8764] veth1_vlan: entered promiscuous mode [ 1002.686634][ T8764] veth0_macvtap: entered promiscuous mode [ 1002.745820][ T8980] syzkaller0: entered allmulticast mode [ 1002.752949][ T8764] veth1_macvtap: entered promiscuous mode [ 1002.760781][ T8980] syzkaller0: entered promiscuous mode [ 1002.793035][ T8764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1002.814455][ T8980] syzkaller0 (unregistering): left allmulticast mode [ 1002.821616][ T8980] syzkaller0 (unregistering): left promiscuous mode [ 1002.881847][ T8984] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12884'. [ 1002.923702][ T8764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1002.992363][ T5089] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.017451][ T5089] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.050967][ T5089] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.085351][ T5089] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.102749][ T8993] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1003.134746][ T8999] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1003.273839][ T9002] loop6: detected capacity change from 0 to 1024 [ 1003.326478][ T9002] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1003.389810][ T9002] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #11: comm syz.6.12889: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1003.480262][ T9002] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.12889: couldn't read orphan inode 11 (err -117) [ 1003.511335][ T9002] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1003.534847][ T8999] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.12889: Invalid block bitmap block 0 in block_group 0 [ 1003.625559][ T8999] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.12889: Failed to acquire dquot type 0 [ 1003.650199][ T9029] netlink: 24 bytes leftover after parsing attributes in process `syz.8.12897'. [ 1003.719109][ T9027] lo speed is unknown, defaulting to 1000 [ 1003.726075][ T7596] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1003.741573][ T5089] EXT4-fs error (device loop6): ext4_release_dquot:6981: comm kworker/u8:0: Failed to release dquot type 0 [ 1003.780128][ T9027] lo speed is unknown, defaulting to 1000 [ 1003.875649][ T9043] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12903'. [ 1003.996618][ T9047] loop6: detected capacity change from 0 to 512 [ 1004.012428][ T9047] msdos: Unknown parameter 'cheQk' [ 1004.018220][ T9052] pimreg: tun_chr_ioctl cmd 35111 [ 1004.150487][ T9060] loop8: detected capacity change from 0 to 512 [ 1004.162598][ T9060] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1004.188816][ T9060] EXT4-fs (loop8): 1 truncate cleaned up [ 1004.195192][ T9060] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1004.256989][ T4093] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1004.621735][ T9097] syzkaller0: entered allmulticast mode [ 1004.632001][ T9097] syzkaller0: entered promiscuous mode [ 1004.646767][ T9097] syzkaller0 (unregistering): left allmulticast mode [ 1004.654196][ T9097] syzkaller0 (unregistering): left promiscuous mode [ 1004.816904][ T9109] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1004.897384][ T9113] loop8: detected capacity change from 0 to 1024 [ 1004.915737][ T9113] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1004.942274][ T9113] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #11: comm syz.8.12930: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1004.957368][ T9116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1004.970940][ T9116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1004.980881][ T9113] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.12930: couldn't read orphan inode 11 (err -117) [ 1005.006079][ T9113] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1005.026297][ T9109] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.12930: Invalid block bitmap block 0 in block_group 0 [ 1005.041430][ T9109] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.12930: Failed to acquire dquot type 0 [ 1005.184002][ T9136] vlan2: entered allmulticast mode [ 1005.189664][ T9136] bridge0: entered allmulticast mode [ 1005.217697][ T9136] batman_adv: batadv0: Adding interface: vlan2 [ 1005.224516][ T9136] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1005.251626][ T9136] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 1005.265233][ T9139] __nla_validate_parse: 5 callbacks suppressed [ 1005.265251][ T9139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12941'. [ 1005.353680][ T9143] loop9: detected capacity change from 0 to 512 [ 1005.381108][ T9143] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1005.395478][ T4093] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1005.406021][ T4122] EXT4-fs error (device loop8): ext4_release_dquot:6981: comm kworker/u8:31: Failed to release dquot type 0 [ 1005.419663][ T9143] EXT4-fs (loop9): 1 truncate cleaned up [ 1005.426885][ T9143] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1005.479960][ T9146] lo speed is unknown, defaulting to 1000 [ 1005.493697][ T9145] loop6: detected capacity change from 0 to 1024 [ 1005.516160][ T9145] EXT4-fs: Ignoring removed nobh option [ 1005.535070][ T8764] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1005.559518][ T9145] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1005.572659][ T9154] netlink: 'syz.8.12946': attribute type 4 has an invalid length. [ 1005.610639][ T9146] lo speed is unknown, defaulting to 1000 [ 1005.646318][ T9145] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #11: comm syz.6.12940: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1005.667408][ T9145] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.12940: couldn't read orphan inode 11 (err -117) [ 1005.804744][ T9161] dvmrp7: entered allmulticast mode [ 1005.874837][ T9145] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1005.895067][ T9162] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1006.095935][ T9166] loop8: detected capacity change from 0 to 256 [ 1006.138667][ T9162] loop9: detected capacity change from 0 to 1024 [ 1006.165182][ T9134] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12940'. [ 1006.184872][ T9166] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1006.439250][ T9162] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1006.461063][ T9166] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1006.472016][ T29] kauditd_printk_skb: 370 callbacks suppressed [ 1006.472040][ T29] audit: type=1326 audit(1761162034.309:81623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9133 comm="syz.6.12940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f6fdefc9 code=0x7ffc0000 [ 1006.503683][ T29] audit: type=1326 audit(1761162034.309:81624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9133 comm="syz.6.12940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f6fdefc9 code=0x7ffc0000 [ 1006.528886][ T29] audit: type=1326 audit(1761162034.319:81625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9133 comm="syz.6.12940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f80f6fdefc9 code=0x7ffc0000 [ 1006.552812][ T29] audit: type=1326 audit(1761162034.339:81626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9170 comm="syz.5.12951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44657efc9 code=0x7ffc0000 [ 1006.576989][ T29] audit: type=1326 audit(1761162034.339:81627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9170 comm="syz.5.12951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44657efc9 code=0x7ffc0000 [ 1006.601787][ T29] audit: type=1326 audit(1761162034.339:81628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9170 comm="syz.5.12951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fd44657efc9 code=0x7ffc0000 [ 1006.625962][ T29] audit: type=1326 audit(1761162034.339:81629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9170 comm="syz.5.12951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44657efc9 code=0x7ffc0000 [ 1006.650896][ T29] audit: type=1326 audit(1761162034.339:81630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9170 comm="syz.5.12951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44657efc9 code=0x7ffc0000 [ 1006.691973][ T9166] ÿÿÿÿÿÿ: renamed from vlan1 [ 1006.703630][ T9162] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #11: comm syz.9.12948: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1006.725388][ T9162] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.12948: couldn't read orphan inode 11 (err -117) [ 1006.741177][ T9162] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1006.808105][ T9162] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.12948: Invalid block bitmap block 0 in block_group 0 [ 1006.822552][ T9162] Quota error (device loop9): write_blk: dquota write failed [ 1006.830297][ T9162] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 1006.852335][ T9162] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.12948: Failed to acquire dquot type 0 [ 1007.040242][ T9187] netlink: 'syz.8.12959': attribute type 4 has an invalid length. [ 1007.203429][ T9192] loop8: detected capacity change from 0 to 512 [ 1007.220639][ T9192] msdos: Unknown parameter 'cheQk' [ 1007.460527][ T8764] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1007.474006][ T4152] EXT4-fs error (device loop9): ext4_release_dquot:6981: comm kworker/u8:58: Failed to release dquot type 0 [ 1007.496970][ T9206] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1007.505963][ T7596] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1007.726037][ T9215] loop8: detected capacity change from 0 to 1024 [ 1007.753884][ T9215] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1007.766634][ T9219] loop9: detected capacity change from 0 to 512 [ 1007.776640][ T9222] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12972'. [ 1008.258549][ T9219] msdos: Unknown parameter 'cheQk' [ 1008.282811][ T9215] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #11: comm syz.8.12968: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1008.302596][ T9215] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.12968: couldn't read orphan inode 11 (err -117) [ 1008.325866][ T9215] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1008.340734][ T9206] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.12968: Invalid block bitmap block 0 in block_group 0 [ 1008.364884][ T9206] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.12968: Failed to acquire dquot type 0 [ 1008.432071][ T9239] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12978'. [ 1008.576398][ T4093] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1008.589245][ T5089] EXT4-fs error (device loop8): ext4_release_dquot:6981: comm kworker/u8:0: Failed to release dquot type 0 [ 1008.612738][ T9249] netlink: 'syz.5.12983': attribute type 4 has an invalid length. [ 1008.696323][ T9247] lo speed is unknown, defaulting to 1000 [ 1008.713199][ T9261] syzkaller0: entered allmulticast mode [ 1008.734375][ T9261] syzkaller0: entered promiscuous mode [ 1008.750467][ T9261] syzkaller0 (unregistering): left allmulticast mode [ 1008.757543][ T9261] syzkaller0 (unregistering): left promiscuous mode [ 1008.862325][ T9247] lo speed is unknown, defaulting to 1000 [ 1009.011485][ T9271] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12990'. [ 1009.774125][ T9283] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1009.859431][ T9286] loop8: detected capacity change from 0 to 1024 [ 1009.892121][ T9286] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1009.909367][ T9286] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #11: comm syz.8.12994: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1009.981469][ T9286] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.12994: couldn't read orphan inode 11 (err -117) [ 1010.014843][ T9286] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1010.055528][ T9290] geneve2: entered promiscuous mode [ 1010.084997][ T9283] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.12994: Invalid block bitmap block 0 in block_group 0 [ 1010.115136][ T9283] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.12994: Failed to acquire dquot type 0 [ 1010.175879][ T9292] netlink: 'syz.6.12996': attribute type 4 has an invalid length. [ 1010.249489][ T9294] loop6: detected capacity change from 0 to 512 [ 1010.319568][ T9294] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1010.363572][ T4093] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1010.381244][ T9294] ext4 filesystem being mounted at /139/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1010.384300][ T5089] EXT4-fs error (device loop8): ext4_release_dquot:6981: comm kworker/u8:0: Failed to release dquot type 0 [ 1010.418267][ T9294] netlink: 'syz.6.12997': attribute type 16 has an invalid length. [ 1010.452637][ T9294] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1010.489400][ T7596] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1010.627023][ T9306] netlink: 'syz.8.13001': attribute type 16 has an invalid length. [ 1010.641218][ T9308] syzkaller0: entered allmulticast mode [ 1010.647425][ T9308] syzkaller0: entered promiscuous mode [ 1010.683345][ T9308] syzkaller0 (unregistering): left allmulticast mode [ 1010.690273][ T9308] syzkaller0 (unregistering): left promiscuous mode [ 1010.992354][ T9306] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1011.157931][ T9320] syzkaller0: entered allmulticast mode [ 1011.168591][ T9320] syzkaller0: entered promiscuous mode [ 1011.211801][ T9320] syzkaller0 (unregistering): left allmulticast mode [ 1011.218818][ T9320] syzkaller0 (unregistering): left promiscuous mode [ 1011.312591][ T9333] netlink: 12 bytes leftover after parsing attributes in process `syz.9.13011'. [ 1011.334203][ T9334] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13012'. [ 1011.351252][ T9334] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13012'. [ 1011.382363][ T9340] netlink: 12 bytes leftover after parsing attributes in process `syz.9.13015'. [ 1011.390672][ T9338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13013'. [ 1011.458706][ T9338] vlan2: entered allmulticast mode [ 1011.471624][ T9338] bridge1: port 1(vlan2) entered blocking state [ 1011.478517][ T9338] bridge1: port 1(vlan2) entered disabled state [ 1011.485857][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 1011.485874][ T29] audit: type=1326 audit(1761162039.369:81767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9348 comm="syz.6.13019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80f6fdefc9 code=0x7ffc0000 [ 1011.487723][ T9338] vlan2: entered promiscuous mode [ 1011.493035][ T29] audit: type=1326 audit(1761162039.369:81768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9348 comm="syz.6.13019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f6fdefc9 code=0x7ffc0000 [ 1011.517777][ T9338] bridge0: entered promiscuous mode [ 1011.523051][ T29] audit: type=1326 audit(1761162039.369:81769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9348 comm="syz.6.13019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f6fdefc9 code=0x7ffc0000 [ 1011.580218][ T29] audit: type=1326 audit(1761162039.449:81770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9348 comm="syz.6.13019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80f6fdefc9 code=0x7ffc0000 [ 1011.604948][ T29] audit: type=1326 audit(1761162039.449:81771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9348 comm="syz.6.13019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f6fdefc9 code=0x7ffc0000 [ 1011.617086][ T9349] loop6: detected capacity change from 0 to 1024 [ 1011.629109][ T29] audit: type=1326 audit(1761162039.449:81772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9348 comm="syz.6.13019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f6fdefc9 code=0x7ffc0000 [ 1011.651321][ T9355] netlink: 180 bytes leftover after parsing attributes in process `syz.9.13020'. [ 1011.661700][ T29] audit: type=1326 audit(1761162039.449:81773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9350 comm="syz.9.13020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a3ecefc9 code=0x7ffc0000 [ 1011.661739][ T29] audit: type=1326 audit(1761162039.449:81774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9350 comm="syz.9.13020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a3ecefc9 code=0x7ffc0000 [ 1011.661780][ T29] audit: type=1326 audit(1761162039.449:81775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9350 comm="syz.9.13020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fe7a3ecefc9 code=0x7ffc0000 [ 1011.661882][ T29] audit: type=1326 audit(1761162039.449:81776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9350 comm="syz.9.13020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a3ecefc9 code=0x7ffc0000 [ 1011.696668][ T9349] EXT4-fs: Ignoring removed orlov option [ 1011.777139][ T9355] xt_time: unknown flags 0xf4 [ 1011.795030][ T9349] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1011.896447][ T9369] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13027'. [ 1011.911378][ T9369] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13027'. [ 1012.131482][ T7596] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1012.185944][ T9390] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1012.249265][ T9387] syzkaller1: entered promiscuous mode [ 1012.256025][ T9387] syzkaller1: entered allmulticast mode [ 1012.266243][ T9395] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1012.384937][ T9395] loop8: detected capacity change from 0 to 1024 [ 1012.392586][ T9395] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1012.414652][ T9395] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #11: comm syz.8.13037: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1012.438874][ T9395] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.13037: couldn't read orphan inode 11 (err -117) [ 1012.453633][ T9395] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1012.501134][ T9395] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.13037: Invalid block bitmap block 0 in block_group 0 [ 1012.516788][ T9395] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.13037: Failed to acquire dquot type 0 [ 1012.563316][ T4093] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1012.581334][ T4152] EXT4-fs error (device loop8): ext4_release_dquot:6981: comm kworker/u8:58: Failed to release dquot type 0 [ 1012.624296][ T9420] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13043'. [ 1012.790171][ T9439] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1012.860472][ T9444] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1012.888100][ T9442] syzkaller1: entered promiscuous mode [ 1012.893791][ T9442] syzkaller1: entered allmulticast mode [ 1012.965386][ T9451] loop6: detected capacity change from 0 to 1024 [ 1012.977784][ T9451] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1012.991266][ T9451] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #11: comm syz.6.13053: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1013.024166][ T9451] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.13053: couldn't read orphan inode 11 (err -117) [ 1013.037455][ T9451] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1013.060295][ T9444] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.13053: Invalid block bitmap block 0 in block_group 0 [ 1013.076236][ T9444] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.13053: Failed to acquire dquot type 0 [ 1013.117594][ T7596] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1013.295954][ T9470] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13056'. [ 1014.122558][ T9490] syzkaller1: entered promiscuous mode [ 1014.128545][ T9490] syzkaller1: entered allmulticast mode [ 1014.195264][ T9494] 9pnet_fd: Insufficient options for proto=fd [ 1014.247019][ T9501] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1014.650955][ T9529] bridge0: port 3(syz_tun) entered disabled state [ 1014.671586][ T9529] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.679362][ T9529] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.111572][ T9529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1015.123856][ T9529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1015.225419][ T4137] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.265510][ T4137] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.299274][ T4137] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.310665][ T4137] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.479998][ T9565] loop8: detected capacity change from 0 to 512 [ 1015.505720][ T9565] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1015.554664][ T9572] syzkaller1: entered promiscuous mode [ 1015.560387][ T9572] syzkaller1: entered allmulticast mode [ 1015.581037][ T9565] EXT4-fs (loop8): 1 truncate cleaned up [ 1015.631096][ T9565] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1015.811844][ T4093] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1015.965054][ T9593] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1016.183360][ T9613] syzkaller1: entered promiscuous mode [ 1016.189298][ T9613] syzkaller1: entered allmulticast mode [ 1016.650563][ T9632] __nla_validate_parse: 6 callbacks suppressed [ 1016.650582][ T9632] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13115'. [ 1016.771579][ T9639] 9pnet_fd: p9_fd_create_unix (9639): problem connecting socket: ./file0: -2 [ 1016.812062][ T9639] netlink: 'syz.4.13117': attribute type 4 has an invalid length. [ 1016.861226][ T9639] bridge4: entered promiscuous mode [ 1016.889886][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 1016.889900][ T29] audit: type=1400 audit(1761162044.770:81960): avc: denied { create } for pid=9638 comm="syz.4.13117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1017.082942][ T9659] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1017.091323][ T9660] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1017.396787][ T9670] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13129'. [ 1017.480780][ T9679] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13131'. [ 1017.531399][ T9679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13131'. [ 1017.575704][ T9687] 9pnet_fd: Insufficient options for proto=fd [ 1017.634277][ T29] audit: type=1326 audit(1761162045.520:81961): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9692 comm="syz.9.13137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a3ecefc9 code=0x7ffc0000 [ 1017.659828][ T29] audit: type=1326 audit(1761162045.520:81962): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9692 comm="syz.9.13137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a3ecefc9 code=0x7ffc0000 [ 1017.684266][ T29] audit: type=1326 audit(1761162045.520:81963): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9692 comm="syz.9.13137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7a3ecefc9 code=0x7ffc0000 [ 1017.708827][ T29] audit: type=1326 audit(1761162045.520:81964): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9692 comm="syz.9.13137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a3ecefc9 code=0x7ffc0000 [ 1017.734023][ T29] audit: type=1326 audit(1761162045.520:81965): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9692 comm="syz.9.13137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a3ecefc9 code=0x7ffc0000 [ 1017.761639][ T9693] loop9: detected capacity change from 0 to 512 [ 1017.769163][ T9693] msdos: Unknown parameter 'cheQk' [ 1017.869473][ T29] audit: type=1326 audit(1761162045.600:81966): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9692 comm="syz.9.13137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe7a3ecefc9 code=0x7ffc0000 [ 1017.893722][ T29] audit: type=1326 audit(1761162045.600:81967): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9692 comm="syz.9.13137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a3ecefc9 code=0x7ffc0000 [ 1017.918052][ T29] audit: type=1326 audit(1761162045.600:81968): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9692 comm="syz.9.13137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a3ecefc9 code=0x7ffc0000 [ 1017.942959][ T29] audit: type=1326 audit(1761162045.650:81969): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9692 comm="syz.9.13137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe7a3ecefc9 code=0x7ffc0000 [ 1017.998017][ T9713] netlink: 24 bytes leftover after parsing attributes in process `syz.9.13145'. [ 1018.156895][ T9725] netlink: 12 bytes leftover after parsing attributes in process `syz.9.13145'. [ 1018.528709][ T9729] loop9: detected capacity change from 0 to 1024 [ 1018.575103][ T9729] EXT4-fs: Ignoring removed orlov option [ 1018.623661][ T9729] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1018.763762][ T9738] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1019.072397][ T8764] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1019.138958][ T9752] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13155'. [ 1019.219138][ T9757] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1019.295985][ T9761] netlink: 12 bytes leftover after parsing attributes in process `syz.9.13159'. [ 1019.342328][ T9754] lo speed is unknown, defaulting to 1000 [ 1019.400391][ T9767] 9pnet_fd: Insufficient options for proto=fd [ 1019.554308][ T9782] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13167'. [ 1019.567650][ T9754] lo speed is unknown, defaulting to 1000 [ 1019.574888][ T9781] syzkaller1: entered promiscuous mode [ 1019.580638][ T9781] syzkaller1: entered allmulticast mode [ 1019.699377][ T9782] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13167'. [ 1019.910830][ T9810] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1019.995201][ T9819] 9pnet_fd: Insufficient options for proto=fd [ 1020.041333][ T9818] loop6: detected capacity change from 0 to 512 [ 1020.049392][ T9818] msdos: Unknown parameter 'cheQk' [ 1020.087126][ T9824] 9pnet_fd: p9_fd_create_unix (9824): problem connecting socket: ./file0: -2 [ 1020.104395][ T9824] netlink: 'syz.6.13182': attribute type 4 has an invalid length. [ 1020.130334][ T9824] bridge9: entered promiscuous mode [ 1020.191605][ T9832] team0: Port device team_slave_1 removed [ 1020.268483][ T9844] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1020.397434][ T9857] loop9: detected capacity change from 0 to 1024 [ 1020.417581][ T9857] EXT4-fs: Ignoring removed orlov option [ 1020.433560][ T9857] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1020.453018][ T9864] SELinux: policydb version -2036594179 does not match my version range 15-35 [ 1020.483312][ T9864] SELinux: failed to load policy [ 1020.865797][ T9881] loop8: detected capacity change from 0 to 512 [ 1020.896951][ T9881] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.13205: couldn't read orphan inode 26 (err -116) [ 1020.948170][ T9881] EXT4-fs (loop8): Remounting filesystem read-only [ 1020.992395][ T9881] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1021.076352][ T9881] ext4 filesystem being mounted at /454/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1021.115969][ T9886] lo speed is unknown, defaulting to 1000 [ 1021.143994][ T4093] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1021.218711][ T9886] lo speed is unknown, defaulting to 1000 [ 1021.251831][ T8764] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1021.709975][ T9925] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1022.269403][ T9951] 9pnet_fd: Insufficient options for proto=fd [ 1022.297925][ T9955] __nla_validate_parse: 12 callbacks suppressed [ 1022.297943][ T9955] netlink: 24 bytes leftover after parsing attributes in process `syz.8.13231'. [ 1022.410200][ T29] kauditd_printk_skb: 299 callbacks suppressed [ 1022.410219][ T29] audit: type=1326 audit(1761162050.290:82269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9974 comm="syz.5.13237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44657efc9 code=0x7ffc0000 [ 1022.471689][ T29] audit: type=1326 audit(1761162050.290:82270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9974 comm="syz.5.13237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44657efc9 code=0x7ffc0000 [ 1022.498107][ T29] audit: type=1326 audit(1761162050.300:82271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9974 comm="syz.5.13237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd44657efc9 code=0x7ffc0000 [ 1022.524016][ T29] audit: type=1326 audit(1761162050.300:82272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9974 comm="syz.5.13237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44657efc9 code=0x7ffc0000 [ 1022.548332][ T29] audit: type=1326 audit(1761162050.300:82273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9974 comm="syz.5.13237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44657efc9 code=0x7ffc0000 [ 1022.574928][ T29] audit: type=1326 audit(1761162050.300:82274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9974 comm="syz.5.13237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd44657efc9 code=0x7ffc0000 [ 1022.600319][ T29] audit: type=1326 audit(1761162050.300:82275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9974 comm="syz.5.13237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44657efc9 code=0x7ffc0000 [ 1022.625259][ T29] audit: type=1326 audit(1761162050.300:82276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9974 comm="syz.5.13237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44657efc9 code=0x7ffc0000 [ 1022.629852][ T9979] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1022.650827][ T29] audit: type=1326 audit(1761162050.300:82277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9974 comm="syz.5.13237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd44657efc9 code=0x7ffc0000 [ 1022.684955][ T29] audit: type=1326 audit(1761162050.300:82278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9974 comm="syz.5.13237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44657efc9 code=0x7ffc0000 [ 1022.907068][ T9993] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1022.996723][ T9999] netlink: 40 bytes leftover after parsing attributes in process `syz.8.13247'. [ 1023.018387][ T9999] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13247'. [ 1023.158352][T10009] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1023.289211][T10025] netlink: 24 bytes leftover after parsing attributes in process `syz.9.13259'. [ 1023.335576][T10028] netlink: 'syz.6.13260': attribute type 21 has an invalid length. [ 1023.368856][T10028] loop6: detected capacity change from 0 to 1024 [ 1023.378400][T10025] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13259'. [ 1023.389133][T10028] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1023.428268][T10028] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1023.475170][ T7596] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1023.519763][T10047] netlink: 12 bytes leftover after parsing attributes in process `syz.9.13268'. [ 1023.528446][T10049] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1023.571513][T10057] 9pnet_fd: Insufficient options for proto=fd [ 1023.583771][T10056] netlink: 12 bytes leftover after parsing attributes in process `syz.9.13271'. [ 1023.588350][T10053] loop6: detected capacity change from 0 to 1024 [ 1023.602140][T10053] EXT4-fs: Ignoring removed orlov option [ 1023.612751][T10053] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1023.713809][T10076] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1023.835349][T10091] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13282'. [ 1023.957872][T10100] netlink: 12 bytes leftover after parsing attributes in process `syz.9.13286'. [ 1024.042295][ T7596] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1024.183781][T10110] netlink: 'syz.6.13290': attribute type 4 has an invalid length. [ 1024.470888][T10124] syzkaller0: entered allmulticast mode [ 1024.487053][T10124] syzkaller0: entered promiscuous mode [ 1024.509599][T10124] syzkaller0 (unregistering): left allmulticast mode [ 1024.517322][T10124] syzkaller0 (unregistering): left promiscuous mode [ 1025.070465][T10174] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1025.149927][T10176] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13313'. [ 1025.567899][T10195] 9pnet_fd: Insufficient options for proto=fd [ 1025.700698][T10196] loop8: detected capacity change from 0 to 128 [ 1025.710732][T10201] loop9: detected capacity change from 0 to 256 [ 1025.730075][T10196] loop8: detected capacity change from 0 to 512 [ 1025.738643][T10201] FAT-fs (loop9): bogus number of FAT sectors [ 1025.744966][T10201] FAT-fs (loop9): Can't find a valid FAT filesystem [ 1025.756297][T10196] ------------[ cut here ]------------ [ 1025.762148][T10196] EA inode 11 i_nlink=2 [ 1025.762525][T10196] WARNING: CPU: 0 PID: 10196 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x36a/0x380 [ 1025.777643][T10196] Modules linked in: [ 1025.781796][T10196] CPU: 0 UID: 0 PID: 10196 Comm: syz.8.13318 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1025.792010][T10196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1025.802384][T10196] RIP: 0010:ext4_xattr_inode_update_ref+0x36a/0x380 [ 1025.809199][T10196] Code: 90 49 8d 7e 40 e8 c6 fe b8 ff 4d 8b 6e 40 4c 89 e7 e8 da f9 b8 ff 41 8b 56 48 48 c7 c7 4f c6 55 86 4c 89 ee e8 17 fd 67 ff 90 <0f> 0b 90 90 e9 ff fe ff ff e8 98 ca b5 03 0f 1f 84 00 00 00 00 00 [ 1025.829607][T10196] RSP: 0018:ffffc9000920f5a0 EFLAGS: 00010246 [ 1025.835794][T10196] RAX: 7f94684532e43100 RBX: ffff8881075df5c8 RCX: 0000000000080000 [ 1025.844234][T10196] RDX: ffffc9003f515000 RSI: 00000000000040bc RDI: 00000000000040bd [ 1025.852491][T10196] RBP: 0000000000000002 R08: 0001c9000920f427 R09: 0000000000000000 [ 1025.860805][T10196] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff8881075df578 [ 1025.869758][T10196] R13: 000000000000000b R14: ffff8881075df530 R15: 0000000000000001 [ 1025.879076][T10196] FS: 00007f6a7dc876c0(0000) GS:ffff8882aee13000(0000) knlGS:0000000000000000 [ 1025.888288][T10196] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1025.895048][T10196] CR2: 000020000090f000 CR3: 0000000155d4a000 CR4: 00000000003506f0 [ 1025.903326][T10196] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000006 [ 1025.911633][T10196] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1025.919643][T10196] Call Trace: [ 1025.923167][T10196] [ 1025.926263][T10196] ext4_xattr_set_entry+0x77f/0x1020 [ 1025.931964][T10196] ext4_xattr_ibody_set+0x184/0x3c0 [ 1025.937535][T10196] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 1025.943564][T10196] __ext4_expand_extra_isize+0x246/0x280 [ 1025.949572][T10196] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 1025.955356][T10196] ext4_evict_inode+0x80e/0xd90 [ 1025.960699][T10196] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1025.966162][T10196] evict+0x2e3/0x550 [ 1025.970251][T10196] ? __dquot_initialize+0x146/0x7c0 [ 1025.975677][T10196] iput+0x4ed/0x650 [ 1025.979837][T10196] ext4_process_orphan+0x1a9/0x1c0 [ 1025.985391][T10196] ext4_orphan_cleanup+0x6a8/0xa00 [ 1025.990715][T10196] ext4_fill_super+0x3483/0x3810 [ 1025.994423][T10209] loop9: detected capacity change from 0 to 1024 [ 1025.995796][T10196] ? snprintf+0x86/0xb0 [ 1026.003969][T10209] EXT4-fs: Ignoring removed orlov option [ 1026.006517][T10196] ? set_blocksize+0x1a8/0x310 [ 1026.015416][T10209] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1026.017030][T10196] ? sb_set_blocksize+0xe3/0x100 [ 1026.034853][T10196] ? setup_bdev_super+0x30e/0x370 [ 1026.040021][T10196] ? __pfx_ext4_fill_super+0x10/0x10 [ 1026.045849][T10196] get_tree_bdev_flags+0x291/0x300 [ 1026.051284][T10196] ? __pfx_ext4_fill_super+0x10/0x10 [ 1026.056771][T10196] get_tree_bdev+0x1f/0x30 [ 1026.061361][T10196] ext4_get_tree+0x1c/0x30 [ 1026.065921][T10196] vfs_get_tree+0x57/0x1d0 [ 1026.070598][T10196] do_new_mount+0x24d/0x660 [ 1026.075668][T10196] path_mount+0x4a5/0xb70 [ 1026.080110][T10196] ? user_path_at+0x109/0x130 [ 1026.084871][T10196] __se_sys_mount+0x28c/0x2e0 [ 1026.089735][T10196] __x64_sys_mount+0x67/0x80 [ 1026.094440][T10196] x64_sys_call+0x2b51/0x3000 [ 1026.099399][T10196] do_syscall_64+0xd2/0x200 [ 1026.104119][T10196] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1026.110308][T10196] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1026.116339][T10196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.122426][T10196] RIP: 0033:0x7f6a7f22076a [ 1026.127232][T10196] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1026.148081][T10196] RSP: 002b:00007f6a7dc86e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1026.157077][T10196] RAX: ffffffffffffffda RBX: 00007f6a7dc86ef0 RCX: 00007f6a7f22076a [ 1026.165814][T10196] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f6a7dc86eb0 [ 1026.173932][T10196] RBP: 0000200000000180 R08: 00007f6a7dc86ef0 R09: 0000000001a08700 [ 1026.182303][T10196] R10: 0000000001a08700 R11: 0000000000000246 R12: 00002000000001c0 [ 1026.190398][T10196] R13: 00007f6a7dc86eb0 R14: 0000000000000470 R15: 0000200000000700 [ 1026.198662][T10196] [ 1026.201776][T10196] ---[ end trace 0000000000000000 ]--- [ 1026.211646][T10196] EXT4-fs (loop8): 1 orphan inode deleted [ 1026.219110][T10196] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1026.244818][T10209] ================================================================== [ 1026.253220][T10209] BUG: KCSAN: data-race in __writeback_single_inode / generic_buffers_fsync_noflush [ 1026.262977][T10209] [ 1026.265337][T10209] read-write to 0xffff8881e786ba18 of 4 bytes by task 10211 on cpu 0: [ 1026.273515][T10209] __writeback_single_inode+0x1e3/0x7c0 [ 1026.279080][T10209] writeback_single_inode+0x16d/0x3f0 [ 1026.284479][T10209] sync_inode_metadata+0x5b/0x90 [ 1026.289440][T10209] generic_buffers_fsync_noflush+0xd9/0x120 [ 1026.295531][T10209] ext4_sync_file+0x1ab/0x690 [ 1026.300394][T10209] vfs_fsync_range+0x10d/0x130 [ 1026.305316][T10209] ext4_buffered_write_iter+0x34f/0x3c0 [ 1026.310987][T10209] ext4_file_write_iter+0x387/0xf60 [ 1026.316474][T10209] iter_file_splice_write+0x666/0xa60 [ 1026.322068][T10209] direct_splice_actor+0x156/0x2a0 [ 1026.327816][T10209] splice_direct_to_actor+0x312/0x680 [ 1026.333486][T10209] do_splice_direct+0xda/0x150 [ 1026.338292][T10209] do_sendfile+0x380/0x650 [ 1026.342740][T10209] __x64_sys_sendfile64+0x105/0x150 [ 1026.348151][T10209] x64_sys_call+0x2bb4/0x3000 [ 1026.352946][T10209] do_syscall_64+0xd2/0x200 [ 1026.358349][T10209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.364268][T10209] [ 1026.366879][T10209] read to 0xffff8881e786ba18 of 4 bytes by task 10209 on cpu 1: [ 1026.375148][T10209] generic_buffers_fsync_noflush+0x80/0x120 [ 1026.381445][T10209] ext4_sync_file+0x1ab/0x690 [ 1026.386314][T10209] vfs_fsync_range+0x10d/0x130 [ 1026.391096][T10209] ext4_buffered_write_iter+0x34f/0x3c0 [ 1026.396744][T10209] ext4_file_write_iter+0x387/0xf60 [ 1026.402360][T10209] iter_file_splice_write+0x666/0xa60 [ 1026.408276][T10209] direct_splice_actor+0x156/0x2a0 [ 1026.413492][T10209] splice_direct_to_actor+0x312/0x680 [ 1026.418886][T10209] do_splice_direct+0xda/0x150 [ 1026.423676][T10209] do_sendfile+0x380/0x650 [ 1026.428471][T10209] __x64_sys_sendfile64+0x105/0x150 [ 1026.433803][T10209] x64_sys_call+0x2bb4/0x3000 [ 1026.438848][T10209] do_syscall_64+0xd2/0x200 [ 1026.443628][T10209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.449548][T10209] [ 1026.451967][T10209] value changed: 0x00000072 -> 0x00000002 [ 1026.457698][T10209] [ 1026.460030][T10209] Reported by Kernel Concurrency Sanitizer on: [ 1026.466382][T10209] CPU: 1 UID: 0 PID: 10209 Comm: syz.9.13322 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1026.478659][T10209] Tainted: [W]=WARN [ 1026.482543][T10209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1026.493098][T10209] ================================================================== [ 1026.551441][ T4093] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1026.590335][ T8764] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.