last executing test programs: 9m11.728780963s ago: executing program 32 (id=126): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r0}, 0x18) io_setup(0x3, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f0000000440)="757d6f24a531fd053b4f426273e536ea5aa1c3916c1cb19dfcd9aa4370a76558185317ac9ece4d3c38df14798cc3703b312b924a8598d71205890de05e52129ea62e3b6edc1e96c71b3000612152e17b68b17a9968bb2cc264462746350c16039a386cc1837759eecc80a53ac53a564490c31c9a49b4273d3e6f5eca9a903fda32af3bf47ff376dc8a6ff6ad58956b312046bdaf618e4e627f", &(0x7f0000000500)=""/184, &(0x7f0000001140)="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", &(0x7f00000005c0)="92a8c143dd9f63e7689c7f336033c51371b859c51fbc55feb0da4eddfeaca80ea6d4007965a2df926b83621bcd2dce3ac827f45829877074549c22e9243a48268a76d4fff927117d06429f0cdcb0b47f69bd68acff78167186625b61ce5f89c465d5ae35cb67ba22011364e95ee1ee9e0ab48ff76c89a9824cf2", 0x5, 0x1, 0x4}, 0x38) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000000640), &(0x7f00000003c0)=0x80) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000040000000000000000008500000023000000"], &(0x7f0000000180)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8930, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00h \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) 9m7.999045873s ago: executing program 35 (id=153): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300030c00000000070000000000000300092080000000d245989c3ff09b16cdee67a9110c5d2a03000600000000000200100000000000000000000000000002000100000000000000060d00000000020013000600003c22972b0000000000"], 0x60}, 0x1, 0x7}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000380), r1) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd70e544dbdf2501000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) 8m37.348815204s ago: executing program 36 (id=663): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x0, 0x0, 0x10000000000001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32], 0x0}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000b00), 0x1e}, 0x21a52, 0x9, 0x0, 0x0, 0x2, 0x402}, 0x0, 0x0, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f0000000080)='syz0\x00', 0x1ff) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100a82, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup(r3, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r4, &(0x7f0000000340)='syz0\x00', 0x1ff) 7m38.774546334s ago: executing program 37 (id=1757): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)={[{@shortname_winnt}, {@utf8no}, {@fat=@sys_immutable}, {@fat=@time_offset={'time_offset', 0x3d, 0x161}}, {@shortname_winnt}, {@fat=@tz_utc}, {@uni_xlateno}, {@utf8no}, {@uni_xlate}]}, 0xfd, 0x2da, &(0x7f0000000780)="$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") 7m37.476642999s ago: executing program 38 (id=1768): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xb30, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r3}, 0x18) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x9d, &(0x7f0000000300)='trans=rdma,') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000020000f0000f901000000000002"], 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x1f, 0xffffffffffffffff, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}}, 0x40000c0) 7m35.236070971s ago: executing program 39 (id=1786): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x50, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x31}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x200000c4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x84) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x18) syz_io_uring_setup(0x112, &(0x7f00000002c0)={0x0, 0xf59b, 0x10000, 0x10003, 0x65}, &(0x7f0000000140), &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)={[{@shortname_winnt}, {@utf8no}, {@fat=@sys_immutable}, {@fat=@time_offset={'time_offset', 0x3d, 0x161}}, {@shortname_winnt}, {@fat=@tz_utc}, {@uni_xlateno}, {@utf8no}, {@uni_xlate}]}, 0xfd, 0x2da, &(0x7f0000000780)="$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") r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r6 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 6m34.500834738s ago: executing program 40 (id=1865): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r2, 0x0, 0x0) 6m32.240612322s ago: executing program 41 (id=1888): umount2(&(0x7f0000000040)='./file0\x00', 0x2) (fail_nth: 2) 6m23.668587535s ago: executing program 42 (id=1970): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r10 = open(&(0x7f0000000340)='./file1\x00', 0x4000, 0x0) preadv2(r10, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r12}, 0x10) r13 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r13, 0x4c80, 0x7000300) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) 6m20.522345995s ago: executing program 43 (id=1991): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) syz_clone3(&(0x7f0000000600)={0xa0202000, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1}, 0x58) 6m8.195908791s ago: executing program 44 (id=2061): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@jqfmt_vfsv1}, {}, {@quota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@discard}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000100)={0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3}, 0xe) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000140)={r3, 0x7, 0xb37, 0x6}, &(0x7f0000000300)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c"], 0x0, 0xfffffffffffffe3d}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00ecff00000000000000000000008000"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="ff761c383ff7c46e000000000000810018110000", @ANYBLOB="c56720913fb08194cf2c9370733fccaf1b10b481d737b9d7b8b76d", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085", @ANYRES8=r0, @ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x3}) 6m7.754721259s ago: executing program 45 (id=2071): sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x8094}, 0x90) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x47) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x2, [{0xa, 0x3, 0x20000000}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x61, 0x0, 0x30, 0x2e, 0x4f, 0x0, 0x61, 0x61, 0x0, 0x61]}}, 0x0, 0x58}, 0x28) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000200)='\f7', 0x2}, {&(0x7f0000000100)='0', 0x1}, {&(0x7f0000000380)="f8079ee78c9711b36402abae104bad8870fe4f0df779249a3b835b1dfa8185cf76e13098a89383752048eca6d982fdd1f5cbd3bcbd9b5378c19fd93cbcf71030f42ba10b00a855c96040c611cbeebd98dba27837a8250e31526931ae18ab4e4c3873e53a11c149ab513b0b74209c9b666f580dbd6c39a34457f344526327339089ef304365edc2acc854080791e92559f1194b750a9371ea4beeb93c211f74ca02039e33790b7db9e92e5d38c7ec65d9508143536d1414b2b1c06565df74a2af833dc041491d0df6ecf6c3fb151759b4bca6ef80d562ed1a", 0xd8}, {&(0x7f0000000040)="22f592132e3cada74e7e1f4b135308457258d18fa171adb0a07a3cbf882c6c104478e24a60c911906f3b26bad00049247ddd8eedc2d238c66d2ae2760547ca736d4a646e0200"/83, 0x53}], 0x4) 6m1.152859095s ago: executing program 46 (id=2121): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x10e, &(0x7f0000001cc0)={0x0, 0xf07d, 0x400, 0x40000, 0x105}, &(0x7f0000000400)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4004, @fd_index=0x1, 0x8, &(0x7f0000002a40)=[{&(0x7f0000000280)=""/221, 0xdd}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/4099, 0x1003}, {&(0x7f0000000440)=""/107, 0x6b}, {&(0x7f0000000500)=""/193, 0xc1}, {&(0x7f00000003c0)=""/18, 0x12}, {&(0x7f0000000700)=""/148, 0x94}, {&(0x7f0000002940)=""/226, 0xe2}], 0x8, 0x1d}) io_uring_enter(r2, 0x8aa, 0x0, 0x0, 0x0, 0x0) 5m52.442192721s ago: executing program 47 (id=2197): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0xe0f5, 0x2, 0x2, 0xf2}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r2, 0x12, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xee) r3 = socket$inet6(0xa, 0x80002, 0x0) listen(r3, 0xc98e) connect$inet6(r3, 0x0, 0x0) sendmmsg$inet6(r3, 0x0, 0x0, 0x4001c00) syz_read_part_table(0x1059, &(0x7f0000000000)="$eJzsz8FNw0AUBNDxYmRbogNa4Ewn7scHCuFMT0hUwDmX6EdeR0oHSQ7v3Uazs9IPD/WRlpxqfG+ZkyXJuWpK8nb0VdVakr+ehtuwP+q2ek3ycoRx2f/JsF3LVv+fa9/VsC++l6/5aH4zZf25150AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8MwuAQAA//9ZkRMF") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000240)={[{@nombcache}, {@debug}, {@norecovery}, {@grpid}, {@nodelalloc}]}, 0x9, 0x61b, &(0x7f0000000800)="$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") setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd25, 0x25dfdc01, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_virt_wifi\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4009010) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x26, 0x0, 0x1}, 0x28) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000000514010028bd7000fedbdf250800010000c613860521660393000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000ffb4000000000000000095000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r7) 5m50.879912691s ago: executing program 48 (id=2204): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x9, 0x0, 0x7ffc0002}]}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x100000000}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x1ffffffffffffc3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 5m50.879795461s ago: executing program 7 (id=2206): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000300) 5m50.857461971s ago: executing program 49 (id=2206): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000300) 5m42.143152128s ago: executing program 50 (id=2260): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x9, 0x0, 0x7ffc0002}]}) mkdir(0x0, 0x0) mount$9p_rdma(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x0]) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYRES16=r1, @ANYRES8=r0, @ANYRESOCT=0x0, @ANYRES32=r0, @ANYRESOCT, @ANYRESDEC=r0, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESDEC=r1, @ANYRESHEX], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000001400f686a11900000000bd0000e400000000"], &(0x7f0000000040)='GPL\x00'}, 0x80) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)=ANY=[@ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="110000000000000084"], 0x14) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000007680)={'ip6tnl0\x00', &(0x7f0000007640)=@ethtool_sset_info={0x37, 0x5, 0xfffffffffffff079}}) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x65, 0xfc, 0x5, 0x0, 0x0, 0x100007, 0x88008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x4, @perf_bp={0x0}, 0x212, 0xd, 0x7ffffefc, 0x3, 0x1, 0x0, 0x8, 0x0, 0xfc, 0x0, 0x1}, 0x0, 0x400000000007, 0xffffffffffffffff, 0x3) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r8, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x120) write$UHID_DESTROY(r8, &(0x7f0000000080), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x2, 0xd7, 0x8c, 0x1ff, 0x61, @local, @mcast2, 0x40, 0x1, 0xfffffff9, 0x80000003}}) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r9, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 5m34.646466581s ago: executing program 51 (id=2332): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) semctl$IPC_RMID(0x0, 0x0, 0x0) 5m32.533173181s ago: executing program 52 (id=2351): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x59, 0x0, 0x1, 0x1}, 0x28) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000100)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) read$qrtrtun(r1, 0x0, 0xeffd) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8001) ioctl$EVIOCREVOKE(r6, 0x40044591, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000200), 0x10000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000030a210200000000000000000a0000050900030073797a30000000000900010073797a3100000000080007006e6174001400048008000140000000030800024054dd5e5414000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 5m19.452931001s ago: executing program 53 (id=2534): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4, 0xf}}}, 0x24}}, 0x14000000) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'dummy0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xb4}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5m16.108875905s ago: executing program 54 (id=2573): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x9, 0x0, 0x7ffc0002}]}) mkdir(0x0, 0x0) mount$9p_rdma(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x0]) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYRES16=r1, @ANYRES8=r0, @ANYRESOCT=0x0, @ANYRES32=r0, @ANYRESOCT, @ANYRESDEC=r0, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESDEC=r1, @ANYRESHEX], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000001400f686a11900000000bd0000e400000000"], &(0x7f0000000040)='GPL\x00'}, 0x80) r4 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="110000000000000084"], 0x14) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000007680)={'ip6tnl0\x00', &(0x7f0000007640)=@ethtool_sset_info={0x37, 0x5, 0xfffffffffffff079}}) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x65, 0xfc, 0x5, 0x0, 0x0, 0x100007, 0x88008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x4, @perf_bp={0x0}, 0x212, 0xd, 0x7ffffefc, 0x3, 0x1, 0x0, 0x8, 0x0, 0xfc, 0x0, 0x1}, 0x0, 0x400000000007, 0xffffffffffffffff, 0x3) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r6, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x120) write$UHID_DESTROY(r6, &(0x7f0000000080), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x2, 0xd7, 0x8c, 0x1ff, 0x61, @local, @mcast2, 0x40, 0x1, 0xfffffff9, 0x80000003}}) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r8, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r7, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2e, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x330b9072}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r9}, 0x18) r10 = syz_open_procfs(0x0, &(0x7f0000000140)='net\x00') getdents64(r10, &(0x7f00000000c0)=""/59, 0x3b) 5m9.640731318s ago: executing program 7 (id=2574): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f0000000540), &(0x7f0000000600)}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_SET_MM(0x23, 0x4, &(0x7f00008e3000/0x3000)=nil) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 5m8.680588047s ago: executing program 7 (id=2651): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x20, 0x7ffc1ffb}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) gettid() socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000900000000004000000850000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300001c000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x38}}, 0x0) 5m8.461928151s ago: executing program 7 (id=2654): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@jqfmt_vfsv1}, {}, {@quota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@discard}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c"], 0x0, 0xfffffffffffffe3d}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x3}) 5m8.255249825s ago: executing program 7 (id=2655): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x9, 0x0, 0x7ffc0002}]}) mkdir(0x0, 0x0) mount$9p_rdma(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x0]) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYRES16=r1, @ANYRES8=r0, @ANYRESOCT=0x0, @ANYRES32=r0, @ANYRESOCT, @ANYRESDEC=r0, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESDEC=r1, @ANYRESHEX], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000001400f686a11900000000bd0000e400000000"], &(0x7f0000000040)='GPL\x00'}, 0x80) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)=ANY=[@ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="110000000000000084"], 0x14) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000007680)={'ip6tnl0\x00', &(0x7f0000007640)=@ethtool_sset_info={0x37, 0x5, 0xfffffffffffff079}}) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x65, 0xfc, 0x5, 0x0, 0x0, 0x100007, 0x88008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x4, @perf_bp={0x0}, 0x212, 0xd, 0x7ffffefc, 0x3, 0x1, 0x0, 0x8, 0x0, 0xfc, 0x0, 0x1}, 0x0, 0x400000000007, 0xffffffffffffffff, 0x3) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r8, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x120) write$UHID_DESTROY(r8, &(0x7f0000000080), 0x4) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r10 = socket$netlink(0x10, 0x3, 0x0) writev(r10, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r10, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r9, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2e, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x330b9072}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r11}, 0x18) getdents64(0xffffffffffffffff, &(0x7f00000000c0)=""/59, 0x3b) 5m7.343701052s ago: executing program 7 (id=2664): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xa1, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 5m7.308077232s ago: executing program 55 (id=2664): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xa1, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 4m42.548438286s ago: executing program 4 (id=3083): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) pipe2$9p(&(0x7f00000001c0), 0x0) fchdir(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x20000090) 4m42.503158957s ago: executing program 4 (id=3086): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), 0xffffffffffffffff) pipe2$9p(&(0x7f00000000c0), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000e000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) 4m41.846873839s ago: executing program 4 (id=3104): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x103) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = semget$private(0x0, 0x7, 0x1b1) semop(r0, &(0x7f0000000180)=[{0x4, 0xa7dd, 0x3000}], 0x1) semctl$GETNCNT(r0, 0x4, 0xe, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2801c2, 0xa335e29c6b19a76a, 0x28}, 0x18) 4m40.920977847s ago: executing program 4 (id=3120): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@jqfmt_vfsv1}, {}, {@quota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@discard}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c"], 0x0, 0xfffffffffffffe3d}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x3}) 4m40.71556268s ago: executing program 4 (id=3124): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x17) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 4m39.740909199s ago: executing program 4 (id=3136): r0 = creat(0x0, 0x109) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="9baeb5c408000000950288220e1b7ed08e5febd19432f36d139747220120de0501a2e295effe03268642caee3faabdcd0f4cbdefdbafbc23b90dc22aecde23fb594102806947dd99d5c1df7a58f2ddd7c30ff19b3689b129"]) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$PPPIOCCONNECT(r0, 0x4004743a, 0x0) openat$rtc(0xffffff9c, &(0x7f0000000080), 0x101280, 0x0) r3 = syz_io_uring_setup(0xc97, &(0x7f00000000c0)={0x0, 0x6015, 0x800, 0x1, 0x302}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x13, 0x0, r0, 0x80, &(0x7f0000000500)=@x25}) io_uring_enter(r3, 0x1cbb, 0x238c, 0x42, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18f7a368000000000008000000006f0b000000000018", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000180), r1) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_AIE_ON(r1, 0x7001) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r9}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r10}, &(0x7f0000000580), &(0x7f00000005c0)=r11}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) 4m39.740700709s ago: executing program 56 (id=3136): r0 = creat(0x0, 0x109) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="9baeb5c408000000950288220e1b7ed08e5febd19432f36d139747220120de0501a2e295effe03268642caee3faabdcd0f4cbdefdbafbc23b90dc22aecde23fb594102806947dd99d5c1df7a58f2ddd7c30ff19b3689b129"]) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$PPPIOCCONNECT(r0, 0x4004743a, 0x0) openat$rtc(0xffffff9c, &(0x7f0000000080), 0x101280, 0x0) r3 = syz_io_uring_setup(0xc97, &(0x7f00000000c0)={0x0, 0x6015, 0x800, 0x1, 0x302}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x13, 0x0, r0, 0x80, &(0x7f0000000500)=@x25}) io_uring_enter(r3, 0x1cbb, 0x238c, 0x42, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18f7a368000000000008000000006f0b000000000018", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000180), r1) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_AIE_ON(r1, 0x7001) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r9}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r10}, &(0x7f0000000580), &(0x7f00000005c0)=r11}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) 4m37.036842681s ago: executing program 3 (id=3179): poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 4m36.966764312s ago: executing program 3 (id=3183): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0xffff}}]}}]}, 0x48}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r6}, &(0x7f0000000280), &(0x7f00000002c0)=r7}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000080)=0x809, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @local}], 0x10) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000b40)=[@mask_fadd={0x58, 0x114, 0x8, {{0x401, 0x4}, &(0x7f00000004c0), 0x0, 0x9, 0x80000000, 0x8, 0x8, 0x13, 0x100000001}}, @mask_cswp={0x58, 0x114, 0x9, {{0x8, 0x5}, 0x0, 0x0, 0x402, 0x5, 0x7, 0x200000004, 0x10, 0x7}}], 0xb0}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)={'#! ', './file0', [{0x20, '&]}&&!)/!$$-\\\vj@]\':+,\\\'-[$-*-)\\'}, {0x20, 'GPL\x00'}, {0x20, '\x00'}], 0xa, "8b7d8bb10065dd7c1a6b6d2d5403b671cd2fc79347c59a46596ee278cf3dd9862a1fc3454fd99b25389942c7b70d57255c3e2342627101e0555209beaef2c00947ea93b418ee59cecdb1a7f660144fd66cde5158ba2683a8205e9f897f632d686fd6ee81d08653cfabe91be451f086d8e0ecc0097e31ec6fd7"}, 0xab) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0xc044001}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sys_enter\x00', r10, 0x0, 0x8001}, 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0xc800) 4m36.668599208s ago: executing program 3 (id=3190): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_read_part_table(0x5be, &(0x7f00000005c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x453, 0x8, 0x70bd29, 0x25dfdbfc, "5789ed"}, 0x14}, 0x1, 0x0, 0x0, 0x4091}, 0x8004) 4m36.502152961s ago: executing program 3 (id=3195): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@jqfmt_vfsv1}, {}, {@quota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@discard}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[], 0x0, 0xfffffffffffffe3d}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x3}) 4m36.382297593s ago: executing program 3 (id=3196): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xdac, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x6}, 0x0, 0x10000, 0xda, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2d12e972}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x17) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 4m33.869473711s ago: executing program 3 (id=3244): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}], 0x1c) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9) 4m33.775945553s ago: executing program 57 (id=3244): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}], 0x1c) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9) 4m27.354559426s ago: executing program 5 (id=3368): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x17) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 4m27.333107036s ago: executing program 5 (id=3369): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 4m26.938561973s ago: executing program 5 (id=3376): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002600000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x34, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}]}, 0x34}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x44}}, 0x0) 4m26.868972055s ago: executing program 5 (id=3377): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@jqfmt_vfsv1}, {}, {@quota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@discard}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[], 0x0, 0xfffffffffffffe3d}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x3}) 4m26.760507657s ago: executing program 5 (id=3378): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x59, 0x0, 0x1, 0x1}, 0x28) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000100)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) read$qrtrtun(r1, 0x0, 0xeffd) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8001) 4m25.665037168s ago: executing program 5 (id=3400): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = memfd_create(&(0x7f0000000280)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r0, &(0x7f0000001880)={'#! ', './file0', [], 0xa, "cd7d"}, 0xd) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x56899130b459a9f4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0xe}, 0x18) open(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x64842, 0xab) 4m25.664852618s ago: executing program 58 (id=3400): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = memfd_create(&(0x7f0000000280)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r0, &(0x7f0000001880)={'#! ', './file0', [], 0xa, "cd7d"}, 0xd) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x56899130b459a9f4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0xe}, 0x18) open(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x64842, 0xab) 25.213037728s ago: executing program 9 (id=8714): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) r2 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x3}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r2, 0x48e9, 0x0, 0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000580)='cpu<-0||!') r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r7 = add_key(&(0x7f0000000200)='pkcs7_test\x00', 0x0, &(0x7f0000000840)="00081afe61ae000000000000", 0xc, 0xffffffffffffffff) r8 = add_key$keyring(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r7, &(0x7f0000000040)='trusted\x00', &(0x7f0000000100)={'syz', 0x2}, r8) 25.163710999s ago: executing program 9 (id=8715): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0xffff}}]}}]}, 0x48}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000080)=0x809, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @local}], 0x10) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000b40)=[@mask_fadd={0x58, 0x114, 0x8, {{0x401, 0x4}, &(0x7f00000004c0), 0x0, 0x9, 0x80000000, 0x8, 0x8, 0x13, 0x100000001}}, @mask_cswp={0x58, 0x114, 0x9, {{0x8, 0x5}, 0x0, 0x0, 0x402, 0x5, 0x7, 0x200000004, 0x10, 0x7}}], 0xb0}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)={'#! ', './file0', [{0x20, '&]}&&!)/!$$-\\\vj@]\':+,\\\'-[$-*-)\\'}, {0x20, 'GPL\x00'}, {0x20, '\x00'}], 0xa, "8b7d8bb10065dd7c1a6b6d2d5403b671cd2fc79347c59a46596ee278cf3dd9862a1fc3454fd99b25389942c7b70d57255c3e2342627101e0555209beaef2c00947ea93b418ee59cecdb1a7f660144fd66cde5158ba2683a8205e9f897f632d686fd6ee81d08653cfabe91be451f086d8e0ecc0097e31ec6fd7"}, 0xab) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0xc044001}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sys_enter\x00', r9, 0x0, 0x8001}, 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0xc800) 24.671617589s ago: executing program 9 (id=8726): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 24.017764261s ago: executing program 9 (id=8740): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@nombcache}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000440)={0xdfdb, 0x5, 0x5, 0x7f}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000540), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r10], 0x1c}}, 0x0) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000000c0)=0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r14) sendmsg$NFC_CMD_DEV_UP(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r12, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000e00)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000001040)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000002900)=0x0) sendmmsg$nfc_llcp(r3, &(0x7f00000032c0)=[{&(0x7f0000000200)={0x27, r4, 0x1, 0x4, 0x1, 0x2, "42765c14ca9b237802edb4ea7725389a79f9012f15599eba39246f5c4da76ab09547e02fcaa89409617613ee1586840e34f745688218c87c0d86413e0ec736", 0x19}, 0x60, &(0x7f0000000300)=[{&(0x7f0000000280)="6c8d6342704087", 0x7}], 0x1, &(0x7f0000004440)=ANY=[@ANYBLOB="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"], 0x50, 0x40801}, {&(0x7f00000004c0)={0x27, r10, 0x0, 0x5, 0x5, 0x33, "8f4260f656afe7934b7addcc4236b844fa0207a135d1918f6add59bfeab130d3e56d18b07bc6780885707f08a3144eebcea346ce7a96bc4c2f24c816763191", 0x26}, 0x60, &(0x7f0000000a40)=[{&(0x7f0000000540)="9c231da7117d736e60cd16f109e0d33ffee72e2df425814a522370e2092e17ac3722aed9f2f074bd9de618d1330101cfba863967bb51ab03fabc62984145b10a9d7fccb05a235803b7f5febf833995e34b37d51bcb918bad32c64c8b056452cab5b513d1b6aed660c1962fb477deb89deb094d33ddcdb9c663a1564edbfeca56c263371d1f5db99a42593adb0593f8e826d828ad4436495a65f4e2d155b21fec91a48a25dcb60814711613168c3c", 0xae}, {&(0x7f0000000600)="b8b5a58697d24941120360b49d1e53ba68d2a62fdc12b9a1b6e203f33129e0fac5fbf854b3bad0acc3dec91407d6af6708ce236783c64220f46babea52031f763a948d614b95d5ecd67c3d317307a76997a02f36477e8a892c174c62fd536d68a8e36d9c3256636b1ccc948ce2dd94c03d0f5210972e95a4ee56000bd6a3f5d748e589e46939c8e20c48762d35d31ce7a13904454fbcaa9481c47704a3d1cc83dd50703c4e2e4077f96d2231cd338f4bc1be9d5cbbd0a6fb8b3a1098735795e0aed85c5ac198d3a7a3b07494d0dbae3e6ddd92df772bb7f918d934ecd26f", 0xde}, {&(0x7f0000000700)="eddf3e53cfcf43a2bca47ddd0e5b3fd83fe033eeb6c25646847758e7b95bdb39e1845a3d17ade6d16efdc2df8eff24f47d5e41bef9bf413bed9f01aa5dda5a9ed31c8e8d6bb1ae8de848b153fa101165b9bbd304c442352747c1ed0892e9ccaf6c206959e5adb10380fb8f68ce8651428344", 0x72}, {&(0x7f0000000780)="d17eb8887d1de5e5adf622a32f71963dd43970c062c740ca95a320eddd70a3d38b35fdac3672e5a2c746f010f5bf2847aa5b1cf6dc708ade470a2534b32d2a38b35f9f58779af64c494e78764abebf374b22645ec57261526eefa08461edb0bc8e0e8eeb7703040d31767aeeb2c3dd0623c96b6e433eb0208eb88f87", 0x7c}, {&(0x7f0000000800)="7f35b9c074e37596a0963477d498e48b7a25745bb01b799ddd0c6e37224703965786c441613fde12c05a9315f30b72be9ce988a3d289dbabb26f10ee0a9732309ed8431685e6dc7b7d790872285b2bfa845c609889c99dcb00203e92bcf3794827ad0ae968eddca93b20e93912fdf21c5e293617f99c730df4238d57d449d6726d57c4c5190d386eb4ad3e07e80adbdb6dbee481183c1a3c399f16c9c8d30b8450de8b1c74b394f120c45b9e1942912b747f4f14c7c13e499509d014147879866a689ec6c8e12e74aa55819fb395", 0xce}, {&(0x7f00000003c0)}, {&(0x7f0000000900)="dd8aeba19eb5e1eea8ac913c49c0783ab1c0c3c5cfba17d30e2093441428abda237759e099ce6f86ccfe49f272aa12206b791ae1a6f7d79d186b34869762410236a21949b287386e7c1ae7a0350fa639d3b5be4b6a60e9bea85f9532d6cf803264920d11a10c1c52b250c643659775c3b36bfd3240921de84b6459cb04457cf38b19b6b729bbe6e60408d357b27d753acc769c0dba6b932b71fa4748176b4fc78de5caea057bf9281a46eca8dfb470bb8f52842d68cf5d6fdb2e87ee1f542832c3dcecc66ed8a2bc652ac8d59baffad2201ae77816933ee9e5576176", 0xdc}, {&(0x7f0000000a00)}], 0x8, &(0x7f0000000ac0)=ANY=[@ANYBLOB="58000000000000008400000003000000556ea9a796d5b4c9d13262b83d347dd15e341c6c1fc1574afdfafc9805e3bcba7c957edd1259fa6fd04f94d8851d1a43cf118231399d78008d5b72db04b17fc40101000058110000"], 0x58, 0x20000040}, {&(0x7f0000000b40)={0x27, r4, 0xffffffffffffffff, 0x5, 0x0, 0x5, "f5bf391db29132ff828b9bbafe3e72b40fb48ad7ee77fd2ef9ed298adc54ae08cc8269e767be09d37939c08c3220e9d43d3167f856031e4fe49a76322a104b", 0x1d}, 0x60, &(0x7f0000000a00)=[{&(0x7f0000000c80)="ac24b697dc52bc06d9f93fbb444610603fe1395e4231fc35a2f0a5a133c776387d2069dc879bc783d07833067bad788c2d30a29b1e7c6b4d", 0x38}, {&(0x7f0000003440)="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", 0x1000}], 0x2, &(0x7f00000045c0)=ANY=[@ANYBLOB="d0000000000000009c010000ffffffff385161e530083ba53e51e8a7face00e8b01b0b9775ea4294e2518aa16ed0c9fcbcf5ba2d7771480103c5f0e4a71f4ce10ae056dc68c18acb7802c411eecbf117bf06098e97a2f635d297c04a777bc6a3ff620450c267632793d63e08798389955807f7c9a026af823965ab873c8deba587a6d2e3ac44080261cc51a1814d18756e3ef129f5c8b0410a08488a13633f1f746b85a457c4e0187b051ab0b920d10e48327a19f97d52d57d63353c57cdb40905b0e48cba32e4571a246dba1230edf1a5f8e006071b6ad56f942b71f898b82149c3f07ed808895b7bce18a8d6317275519b346d24b6dd7190ad1d73d645d1324d12fe64d346e91d9d1c1c0b460424db15f8da3684e8ba81add4a3909df5e4159d76319afdd4c6e378f93fe558dc3b52ec36ad74360ea2427648aa131613a5f2e8b14920467991d614a9dadb"], 0xd0, 0x80}, {&(0x7f0000000e40)={0x27, r16, 0x1, 0x4, 0x4, 0xf7, "ce09112f64d4ec73cc6508397e72f14ee388a0f6ccc6d8f85c592e12938d667b4ac21a1b844dc48710bde5cd40c336a597cca37675fb12e18615a3bc9482fa", 0x5}, 0x60, &(0x7f0000001000)=[{&(0x7f0000000ec0)="bc2c4bc70d5610cb6c3361ed962b97e067ff", 0x12}, {&(0x7f0000000f00)="a769", 0x2}, {&(0x7f0000000f40)="0ec4c5eb46c58c547056d3ac6f5e86f8b84b52c9d0933370bf2b52cc7bccb26970ac065f33b5943bce7c244492e75d33604912781c7cc9c1f89a7531fa0ec5ca8c8d6d3378a942ee2446fd369b15839d1e447161b2781069954f062134c6552f730cd1d8244705ad0137226662213ae67290501a09250a030de811322c361dc264297e1b8d5c0e5bf62bfcb645d69412872ccf4e722b48eed2753fd5db950cfdb1a2ee0ae504633e42747a443c3c40af85a880b4d4662611834e86", 0xbb}, {&(0x7f0000001600)="8da81894fe35536dcdd7d377db89a4537ac67ec0bdb3ad8b6e738bacde15ed0d52fd97d964568dd6c31030727d63e2c9c8a9fed3307f54ccd60c949cfbc4507febb0c0e26bb0f6269f9f510f9032b0a41ddf0df66cbfba46ae3d707cee4896b2f2694942ecc09a9a90f0657a59ca3ec4ceb62f6091ad7f7f979e1c24598d061db3d635255a00430d9389c802290cd4f14497624dd7e4ae3e4c42512997bf9efe3d17745c4ceae43b0e69718d19a648e3488e951e930d66bf754ab0199acddbdf9f35f66b9d27abf5cb91aadfccbd7735397f8ef1a7653d71bc8432e755f17ff5189f1ad0b6e2b1b14bbd5a571a969abbae8702cc53a82bb713ac71bc8d74c2ad8bda406695f32ca6758b961ac0bf6efc07a672aa4a6ccdb236ffe56032d5ca08d1da13634b813e93896a799ffb410000e9b7bb3ac713b7adc953f0fe7c8e93469db51dcb3839b9d23ec75a77259cbb1d46c4a81c3c9ac289b3061b9bd2aa4e34f2e1661eb4518cfa0ae5e3074891be0cae044acf57907d2e1d8ae29b2c7ff7c9463699fa6906c03babe365297b6958735014c3cc50f2e1ab0c4133caaa928576ad525c27391eaa3b92bd9824d5061e25f6f562c6261d7e18acce94c3599573fb4db93a9b7dc6c3fafb43c7d55e2db43913ff7f08e4b9a474b6c32b1f11c6cb3cffc60cfc241f0f8060e1cb2f1ef007039336e38b31685bc21be10d60794e5defeb2193d4a578ef316415e39423ef95fc94fe6a91809e1837a98373a84decf68cbe6bcff1c6d8c8db0e2c2be11777ab5e1a5906e3b2bead87825bdfb875d7d70cfd9b5aaa45ad171bec0cc76a43b8cbd3f6235e9d7f0da0e0e4c216e107d1f348c55f58a75290088f61867df62577fdc8fb71a224d161dcfb6e9591c11c359e110a45deae26e466413e4dfd5fff0e49c0734509ca7abdd29647407f61eecce9442310f72f7c4718814a5e51c4fc5a37a255ba49c8e6f36459790239876d6cb8108f40374f87c1b70e091248ed8e985942b27d1acc48fc465a9817682062644a670f4925d90928c738fe7ec5552ce6b80fd46114e4e0d35e5bc2b20a62efbdef441a0793307616a46a2b8c6e2606c232a57e813f26e20b37657b152f7e61fecf35328a6a08b82b93e4c854623f65c4212f0b4d5c7757044a8460401481d3966dc3fd3529bcc5636ff844dcb3f94f109285930067ad5270642bc75dc955df056656ae368af390acb3156b7bddd6a176cefaee3809a3131f423e8f47e7b0ccef7fcfa20fd5eea510f56665e7358d031c3688c9c580a6c1dd9230942f4c79ee9254e775901142033490115da2b7a4fda9e92f08cc2c34c93fd0cb8765fa236e4a8e2a84bcd9fe1a72ee6f3e5c0a82182b796615d90f8fdf05f0d498ebad746d8562a0794c7783d20838f23dfe41e38abbd89a7cd31576cbebd3d47a32496fe7b15c656230884d028a0ff1195bd7e0690de3e6397dceb94df52f5038c050c8bb79be805eb91cbdeda50632a843ea8dab1638e235b1924ec25da04aa7f4737406310021f6174981966685aa652b703271da9900fae1c15b2521268bda513c2d47acff7ea626d40d2542a1c941aaf2ec457501fa5519c80a91a9e35c98df232ac297028c65be2ad07cdbfb516abb29fe28784e9a29a8f287ac529777c2449faa64da2933242370c553d9f87e3d5c9a8f32b9664a0ad42e904fa31475d47484be76f1f1af8e61737fc4d1ce3151055c1f9a6c13899b26e0aa60f76e5c04d01e26b8b73d83acf388367446462f22964bac82b746d5e68216f241a59e7f32bd602faf73fffbab730292bde36c1e32cbf645ca1f54b220acf86f4167e489f352e2444d211e722671cd557b0504396381aede6015bc71fd798565ba34009f4a11644df2f67d482b5a8b9c7789959fc86d49a05abe41d4820afb2955f4c2475c708e5ff0611eb4078d123772ca8b5217487843f07a527effe64db6185da71dde702854eb15aa3485bf228136258dacb0fb1f89eee4c70dd9c23582d5c6605b917e3cfc94953b4ccf5265b8eb1c4bdb53763deebaf760bc348cd1c235b705bfdc06b279949910158194c7be3d02b980f0b14a263445ebe0e79804869f070f5e7839b5280f1a3bb598701586bb555dd343395e2243ee4006492c9a4a130676db5e6e0f393fd69ebb66f7c51a26d2b7fc22ea625ed998a308c7d8a7ccd18daef3842cee64905849d86ef9aa12e22fd622e6fed5fb70c688334b3601ad5b6bda9d2510f51c64c3b535bd75fc586ef2263d9e8bf5ee08ca91f91b41d056874b5d0fd111dd3151b723a4050b57feb465e5dba33350f76dd3475831d647602da11bc412681033bdaffab1371ca43a5c1f905060c8fed46a24f7dfe6180ee4ded76f35a1247026baef05bd252344cce85a70c68702b1aed72e95362e90ad8bd911a7252d90a4859bba7607e30899f704d680466acef3f8ee9694652e499f5968205f525f13db0cbd37d2519f126980629a587a19a137dda05eb4655e8bf7c1d952cc2018e3e4c3fc6d226429b9f1ed230c85b438f8fd42f2a621a990948814be3a478b70a7a8d94fcb4732693a576c9da0bf00f9e04c89d0a4e2e4ff4fa40a09508bdbf304248db2ad4a3427d46c75f3a19afd3370bd77d3aa999cb8d4673efd0d7259fbfebaa46107c63c6d1ed48d3af46990dbc757a750a6694450fd7a986598eed92e85789d198b456ecaff2cc26631db7e45c14671497920f72abc815f6f5cbeda61c516f1cbe76c233a71b4856d737638a2ebc4cbe5fcc488c7204c99c1aaa2cd361561a10ff6e29dc340c81f556563bf6ea5d395ffed3875ee31bfb254acf45eb79322df0d99cb192451cad67ff6cd104e7f9dcaf18444ac14d5943e47c2f6eaf8569ecb73dcaa84b7c443e3de252e209755d19fba5d2a56f0fb7c27a429cc61bbea7192dc02bba23e5753c51778bb373cbbcddd1e3bac2fca6ec1f773adfe3839ae095ba30c597b5414d55f606724cf155126687cf2b49361c11e807c6a7cf86b43a9fd4e7266ff937dee8e10b40995435e5c943d05108e1414eaa61be9e8edbcc92be800997fd83dfb105cc83cbbd4d70381e864a1bf91a4cbac872e40ce008f3addab34feaede6d2714ef5196995c6556b31ebc5ce188650ac83cd0cb83474a801c168209a0c9931f1f01ffa7864501870dcf75574e14730ba0f5c1702976277ed99044f99e6f91926c1bd1e4fc5527b6688c040478b1313235a8aeee2b6e34bea658b9f74269cf58a17d99b7897eecaa0476f90912d915654f1df4854b5cb03bdb6c5930640e5f8af281fe246f3630aee260287068eaecddb1bbe676ca1b4b17c88a14f08d4b4234ef2392cb2718da708ca9ba5871b8064cd6aeb22c883cb2f91423d59e57de4d53ae418c011eb5f169859ca36f1bf6931b91adc9573f7a3cec37ac5f853779c96c818847dbe9e1cd0853fc8ce27e7e27e1061aad5317afd9fc913396aed6e76510409f28c93e01714cb2b155cd9a66b2d46512fcc4ef955b20fb152682994fa63a980330395b5e0fa2286dbcec4df1c70db8859aed80b4ca7925265abac518139fce06279def6f376eef220965f1c82c13f1db778fbf5e1a3da733747028b323e6b8a31c2427ce59f9898b547d7f0a8a1cf262273b85c0944d4c146ddca6d61add85a5825844b90183d0da5992a6523f1f3c462df28327c9538ef0f9f3898c3bb6b430b1b387189ae9e1b90f599ca120d67236e688b6206e793c008665dd297c4a30b4d3e04c1f918498cf8000f548d9c97a536a5963d99f62fc619f5e12594de6e0a925848f7c3509ca56e70bb401e78a63f43545132390d764f608e65dd393fd406682d1232c00ff650d264a4237a88391bd0aa5c1a9441b490123bbcc2ee3a16275c6065933f3b7b4391a3610ae6490e0b4ec182718283b8b28063bc48aecd86a80c156c258b84c6289c81a4b69e4bf26fc47f59e7eaa15192321b7435eef4103437111ec25b5cd5c639056f88ebeeb22886ea06c724e760f0c94f5471229a91df10aae808648a11dc16cbbf01ae1bad34616accf6c37da1315d4f80238e5ab3a0d2b2a47abdd31e092f472a5bbbf715f621edd22bbd740419bb052c36cf9c2530cee7007a2ca73ef3609993ef28ecc67253a1f3cfc5a6df0f200e50e55d2cb4a7878da8f948882c225d20749fe37fea2c61fef9fda94fd94df477456f735d6aef5c05d5eee941d801e4f7a9e631f69abf3920a0dd52615233bac7e28908a57c51ebe285ab313cab8ed713eb16049754e2bcd068196202b6413be51afda1be518278fd6faf5217b37180a84baeb6bf3f218d4d9059b55497ff8389f01b17a245f4fc585f70fca5cc76ff1bc1ef5335453000861a64746b1e282e62aa59fc857ee53c2cafe7c1477e3ccf8e1e70e20e12eb7de8a634b006dc8787b31d403baafc1fae4051b07db26fd1d7ac6c02f4cd786b19deb8962e9856555031d25c8a177147c8746ab7cb561cc96192f5c4e88eb257b4773309bf016875c13af6f58d01371ea7d7fd83e802b474a85a7384d740f12786afc0259e71772bc195b9485b5ec2e547aa6083ac376b7a438e41677cea80c957e767dcd67d11d07832ca31bad501e7fd3df299f59bfe5a43ba1c6015905aa2f772202fa15102c574c8398ff472a1e73af5c83b7a0ea814b1f735397647fd94e6da3f98acc857240fe68574de9ac5974e9f706069bba56a6427bd7aa340be169f5872f3c2a145eea2abeea019696ca1a0762959afffaeafcb8f6d8092fa90bda6ce9e227b79f9fea08bd6bd4e68b61f00ea1e31b9762f79192c79bb9c3e1ac09f08283c51df54a1ed5bd25b0704f1bf8c38a103f2f45e9f5acfbabe4b4c400831cf4b8faf2c56d608b604285f8a5dd2f2ac7f9783c0dd8f31803ca5113a35a88964deb0f1994401c4287e01ef8ae1d3da2b2a7e08bc8aa672ebe1754f6144e4d319c62e07b051168f6fc500f3a22b4fa0585184840570826a0c21e32e81575589e10dc840c4ab2e68a49f799cda47d230a07b68b7dd835fe5f9581cffee9f13e634f3717b534cac9c0756a896d137599abcc918da74da4c1bb9dcb77b7949feb7ff7cc2c1cbef602246b0b6201f929a0924f3a4306e202cf29db1e3477e4c2972188f8b6c5630ea84e68d1f3ee48d19bb166de03a2eeb7aa6fc3a9d7c7d9a335c9133c3964175a2f30947916de2230718fe7914e22e4643cdaf3b25805c44f235a69d256f012c7cf1f519a743ba218c24d1b71cc71d6916642726f6267265dbbba8d13fae605855325ed068400d59e3e8db254c73616b1bae203b62cf57f60bb292c149065f11dad855487b8cb0a91d694dc181741479b2a97524ad8fb5f9dfc6e3621085fc7b31bd60f1aef4559fff2d7774e5caf5495378dc2966ca8df1ce81f0c619ea2ef954e5af31b37bb2c3d6ce56c89fa8d6dd802add7ed38317aa8f3102999f85ec55428ee5eb979c8d51473cba89726ec016331a4eb6d6567ac29a1c2944a5053333a4e53c1db655f965871f3a44098a147af2d1ca1ff3573c8973f3eaaf1ab89152fb612c7119284204e8d2dd019d7f3bbbe9daa073ead22bf8b25f8be23bc6381ce8efac5f549eecfde5685ef03d151da0f80c6f85bca1d467d84ab3042286c10c09a23ad4655edc9176b5c9ea8ab5cdd96181bc1a6c965acde8ec0117771bc8134867708b3277c10782345396b44d54ee7c9a930383b7dcc8eadcb4cd70bddafa7268bdad8427dd88ec7c468af5e1537bbcc1ea0602e92a0e29540c28667f0ef71d7bf6de08f", 0x1000}], 0x4, &(0x7f0000002600)={0x60, 0x10e, 0xffff1f5e, "0a7a6f09484c04009fd5cefefde7275ae675ae792872d94f66ebf4ea0d90a18e3d2db384a72da4709ee7ed7a9c843a09e4d034a8791fc729893299e4d591d94f50d5bbc12abcf6cd6b1070"}, 0x60, 0x4000000}, {&(0x7f0000002680)={0x27, r17, 0x1, 0x3, 0x40, 0x3b, "b16700df7ea5c93560835de897ec4a13eee12eeb8a33e41724bb305dcc850d2f91ffe17f99d70dc2b70cc7ac95d784ec961e6d7552609a5620be0f7a2a60b8", 0x39}, 0x60, &(0x7f0000002880)=[{&(0x7f0000002700)="44a573dd958edcc83c1948e16f16e999fa3c3f69db944954d76295", 0x1b}, {&(0x7f0000002740)="e1ba2524610331de6f48948abd7ea2aa54db769ad60f7b8146eaaf5752de84f9dc18942a141cdce10e4c21608e4b9bca6c2148d5e286f8e3e3e49a31d2a10382c10405fcd6fb8e30052ad204dcf906d574b011082c1a25cdef400917c2b7bed78c8dff0c4d068dbdba284a254a63a56dbd4791bf5ce7f1dc726da4c8975e4c55c5490d57079e3b98d7761c", 0x8b}, {&(0x7f00000003c0)="fa1b62cd761bd1edd0ed23b2bf83565dd9b5a4ba457f580386225ba520174610e58e9fffe8cd5f13aa2e20d9dc35bcf946dbcdf76f5f0a", 0x37}, {&(0x7f0000002840)="2cb19871cac88054b7cfea42f94477bc172c990ec41b24afb8d470734f88", 0x1e}], 0x4, &(0x7f00000028c0)={0x20, 0x0, 0x4c, "c2ba5b193a0c0a658659a2093a97e0"}, 0x20, 0x8000}, {&(0x7f0000002940)={0x27, r18, 0xffffffffffffffff, 0x4, 0x0, 0x5, "e0aa8aad5b232d3d3ef3c25546f98b53bb15c0a74b93f947095dd0a06165338f76dd2370c8b13af4cc6add95e291a122f237e468b52ef67e0e0e82e5fed511", 0x3a}, 0x60, &(0x7f00000030c0)=[{&(0x7f00000029c0)="746cba2eb81a435da0569bdf7e18fe494140d2daaee644ccef1c7ea3c191871ee796fe51b125b6bd04959cd286acdf8f7399794b1fcfa9d8", 0x38}, {&(0x7f0000002a00)="6116e4b1205632262955164875ed39f011752eead0312fab3637862f394aa326aece08b486635e6e392bea45a595314a2ec3ad2a6c1d1ad2cddda100efca0238685a1e42bac3067becc222b19c8a04c53fef7caa14d267071dee7fbb0861c68bbe0a45757fc25f3c7ae6db202c4f35f1e15a5c67fdc1a34cbd4789e21b5a2dde0fb14acabf", 0x85}, {&(0x7f0000002ac0)="b2c4ad3c6e8653e9746c0fac54dd5b4f8338f42e505e157ead295ce2953e8ac586c636c0554d6b05526eb89777beb90b7c67b19e737dcf170d80d50308eb9a7928e92d34398f49e8630399c1b4a495b590113f12264085f1ccb1201b800b4545cfb0aa7474d11aef8280ba975d9397a8067ecb4a83ac459fb4943d6bb71c00998598255c66936a2eabac798a1fde9ec3e6853d0824e85adeb8a9d37b40957a3c033dd6c2c711c1bf46980502cfe830d4890a18bb33c848f0ce842186df10d7605226e027234a702350af6b04d05ac3ef484cd5cddfbc63e1fbfce9c385e2c9d666281cfcda3413", 0xe7}, {&(0x7f0000002bc0)="d2c5ca37914a7f732a53dd437cceffa5768117b69613c00dcf5305d61dbec7f1e8b1e8a3cce2f6757e0956a9925e4efac5b1b68e743ca0ae417475424612016c9b57963ce1ebb511d41880f4ce2b0b99ad6bc0991a47a9934e393e3afd250b3a229a52abf8eb49d0c9d8bfe6ea6c15a1418d8309eb8f40e3cd55d3cd8c18ea13bb7dec206dab785e27", 0x89}, {&(0x7f0000002c80)="99cb2a774d2475f27528492971022feb62739633a24ced9c1bd6aaddf0a6592c97df7cd196b1fe8c99cc7c00c99aa87a833a5cd0a71dbc806854ebe982a2b1e38f6480d81f23e966e68285afc1d5c0c8651a777b64b0f9798a237f21cfb96907d0d13934608c5a0280ec445e944abb19ad755729e6b9f4b58e000eec5756477d5ac22c043d582928a5ca7569b9d0e90e8dab92adcfe29e328863f0610dbe1e080f8519e533a275ef1fb8a419271b935a6ed24dcba5da841d96922a1f6a4ad63cce041d47e11a19f5785bd290320068b5e6af866800aa2d63e6d78e32756a946b180dd75605", 0xe5}, {&(0x7f0000002d80)="93abaff60c385e12d05fd8244e966adf596fc834121eb4e84c3a4146f650bc76e6f471af1e7dd404eaeb3ae30ec4e32efdf290fbc7e580ff036ff46b36ab37871544bfd8122935a214fbe216924a56944229debc13efdb2d6b4fec7cec272802c63705955ef774ccd312e53a707db7810eed0151f9448205681aaeb5e61bcdfa1210bba57e364cd3367c7db2be806af8c667728267b83215f7651e2aa4264f6ef1913ee4ae1e67083da15a32070d415afd2fd58d24ec9931ff5b2fb3", 0xbc}, {&(0x7f0000002e40)="7692db89d18831088e2b5f3485ea04fd38de670479e606d8f63c69ce378e2bbc4ef4fcba461c447eea9aca8def0cac51aa3ff7cffde40f43e484e554fcea1860c377a6e45d857a40b229dfffc007ee85339f8a202eff62e1f1711f5a9ed60425df1bf91d09a98861fafb4ea6dd9e8c8c9d629b0545c89f71a230f685e84ece5efd75a685df35061f7e240faa1705885730725e1489b0d210200f2a9c24a316544223830dac11e6bc68465563a7fad84896ad3f952c1cf6dc0e97fd8a335fe56f2caa581673532930e479fe4d5101d3b7e9d0bdeeac4bd862e3b2b24d1464bd0d03c543673b1d0f33b6505436c54861a6b8c3dc", 0xf3}, {&(0x7f0000002f40)="6002f76dbe7a7a55f07327dd83de9763e4b5ff4b77d794642e277e9912fc598af239d9606493951144077d2423c699c4a11f856c9392b4f182e04b4e02e8129c64c1d9acc7cfcb4836d4f775b46189cdcd1dd18f179224df894ae9276807f21ca4824f3743c532627ddda5ec43a3474992bd4fc4beea00795b21bb714619885480c42fff189587", 0x87}, {&(0x7f0000003000)="05f8342c374630555752b65e86937c3244d504d9fa49ca71388bfc65aff96c45eadb225521c20fe5e080e84feaba0ef5aeb2ebb81fcbc6ce09a2889c59f7b64f2e8a1feeb4a9f1fbc6fad2e099f742136d1f3a53de58d42833546e6a84fc395bcd2d909500d6807a77de95c9e05ebb514f2da4ff7a2af93d9e053cd122ed71636cf0", 0x82}], 0x9, &(0x7f0000003180)={0x108, 0x107, 0x8, "0c728114ded4d8dbe5ea1e19f92cbdaf32283a8e55b77b8fd7c56f55de1752167c3dcde597a62d51f7b717ea8abe37db41f1d2dc8de79730046dff7b07f9d6d98990d2264b42857667fe1d2dbfcac6d3d2ffddc4b13990242532aeae6cc8af3760b5bc0df1bc894e2189f9b992f6792b35a916b72c8d36ccd26a5ffa8d08a2344962c1fcc83110468914d93da7b2499ef43fa9eaba625e758a7c9b178abc6d9d7ea0e474fc505484a3015600da8626efdfed11a8d0f561a82cc1c95748653ae68453b2ca8f64b6531b942bbd7fbb2f6756408914a51989e478524d42fe856f0c5369ce2c421946d3e6a18aa27bb96cf6b2fd74d23a5011"}, 0x108, 0x20000880}], 0x6, 0x20048405) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 23.340043594s ago: executing program 9 (id=8753): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x723, 0x10000, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000001040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, 0x0, 0x0, 0x0, 0x0) 22.660710387s ago: executing program 9 (id=8764): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_complete(0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x52, 0x1, 0x70bd30, 0x25dfdbff, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x20044884) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f00000007c0)}, 0x20) 22.639432198s ago: executing program 59 (id=8764): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_complete(0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x52, 0x1, 0x70bd30, 0x25dfdbff, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x20044884) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f00000007c0)}, 0x20) 2.772281146s ago: executing program 0 (id=9099): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x40000000) close(0xffffffffffffffff) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) 2.720309948s ago: executing program 0 (id=9102): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0xffff}}]}}]}, 0x48}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r6}, 0x0, &(0x7f00000002c0)=r7}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$inet(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000080)=0x809, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @local}], 0x10) r10 = socket$rds(0x15, 0x5, 0x0) bind$rds(r10, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r10, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000b40)=[@mask_fadd={0x58, 0x114, 0x8, {{0x401, 0x4}, &(0x7f00000004c0), 0x0, 0x9, 0x80000000, 0x8, 0x8, 0x13, 0x100000001}}, @mask_cswp={0x58, 0x114, 0x9, {{0x8, 0x5}, 0x0, 0x0, 0x402, 0x5, 0x7, 0x200000004, 0x10, 0x7}}], 0xb0}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)={'#! ', './file0', [{0x20, '&]}&&!)/!$$-\\\vj@]\':+,\\\'-[$-*-)\\'}, {0x20, 'GPL\x00'}, {0x20, '\x00'}], 0xa, "8b7d8bb10065dd7c1a6b6d2d5403b671cd2fc79347c59a46596ee278cf3dd9862a1fc3454fd99b25389942c7b70d57255c3e2342627101e0555209beaef2c00947ea93b418ee59cecdb1a7f660144fd66cde5158ba2683a8205e9f897f632d686fd6ee81d08653cfabe91be451f086d8e0ecc0097e31ec6fd7"}, 0xab) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0xc044001}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0xc800) 2.311647895s ago: executing program 0 (id=9109): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x26) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, 0x0, 0x0) (fail_nth: 3) 2.013907231s ago: executing program 0 (id=9111): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0xffff}}]}}]}, 0x48}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000080)=0x809, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @local}], 0x10) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000b40)=[@mask_fadd={0x58, 0x114, 0x8, {{0x401, 0x4}, &(0x7f00000004c0), 0x0, 0x9, 0x80000000, 0x8, 0x8, 0x13, 0x100000001}}, @mask_cswp={0x58, 0x114, 0x9, {{0x8, 0x5}, 0x0, 0x0, 0x402, 0x5, 0x7, 0x200000004, 0x10, 0x7}}], 0xb0}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)={'#! ', './file0', [{0x20, '&]}&&!)/!$$-\\\vj@]\':+,\\\'-[$-*-)\\'}, {0x20, 'GPL\x00'}, {0x20, '\x00'}], 0xa, "8b7d8bb10065dd7c1a6b6d2d5403b671cd2fc79347c59a46596ee278cf3dd9862a1fc3454fd99b25389942c7b70d57255c3e2342627101e0555209beaef2c00947ea93b418ee59cecdb1a7f660144fd66cde5158ba2683a8205e9f897f632d686fd6ee81d08653cfabe91be451f086d8e0ecc0097e31ec6fd7"}, 0xab) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0xc044001}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sys_enter\x00', r9, 0x0, 0x8001}, 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0xc800) 1.687197307s ago: executing program 6 (id=9119): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0xffff}}]}}]}, 0x48}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r6}, 0x0, &(0x7f00000002c0)=r7}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$inet(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000080)=0x809, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @local}], 0x10) r10 = socket$rds(0x15, 0x5, 0x0) bind$rds(r10, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r10, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000b40)=[@mask_fadd={0x58, 0x114, 0x8, {{0x401, 0x4}, &(0x7f00000004c0), 0x0, 0x9, 0x80000000, 0x8, 0x8, 0x13, 0x100000001}}, @mask_cswp={0x58, 0x114, 0x9, {{0x8, 0x5}, 0x0, 0x0, 0x402, 0x5, 0x7, 0x200000004, 0x10, 0x7}}], 0xb0}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)={'#! ', './file0', [{0x20, '&]}&&!)/!$$-\\\vj@]\':+,\\\'-[$-*-)\\'}, {0x20, 'GPL\x00'}, {0x20, '\x00'}], 0xa, "8b7d8bb10065dd7c1a6b6d2d5403b671cd2fc79347c59a46596ee278cf3dd9862a1fc3454fd99b25389942c7b70d57255c3e2342627101e0555209beaef2c00947ea93b418ee59cecdb1a7f660144fd66cde5158ba2683a8205e9f897f632d686fd6ee81d08653cfabe91be451f086d8e0ecc0097e31ec6fd7"}, 0xab) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0xc044001}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0xc800) 1.334884224s ago: executing program 8 (id=9128): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000300)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r1}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000000)={0x0, 'gre0\x00', {}, 0x2}) r5 = perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x103a10, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x10000006, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000240)=ANY=[@ANYBLOB="0400"/24]) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TCSETSW2(r6, 0x5453, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0xf) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0xfff, 0x0, 0x3, 0x8, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x64f1}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100000000000000000000000050000030500010007"], 0x58}, 0x1, 0x0, 0x0, 0x8840}, 0x4004010) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xb, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000a8ffffff00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) 1.287879265s ago: executing program 8 (id=9129): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x1, 0x0, 0x0, 0x0, 0x8, 0x40}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') writev(r4, &(0x7f0000000240)=[{&(0x7f0000000080)='=', 0x1}], 0x1) r5 = socket(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1, 0x4000002}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000300)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @mcast1, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x8001, {0x2, 0x6, "081331", 0x9, 0xff, 0x0, @private0, @local, [], "b99c34cb563fb43f"}}}}}}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r9}, 0x10) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x200809) mount$9p_tcp(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x800000, &(0x7f0000000140)={'trans=tcp,', {'port', 0x3d, 0x20000004e23}}) 1.226628506s ago: executing program 0 (id=9131): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000007100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000001600)='rpc_socket_nospace\x00', r0, 0x0, 0x4}, 0x18) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r4, &(0x7f00000008c0)="3bf58d7d45", 0x5) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7fffeffd) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) prctl$PR_SET_NAME(0xf, &(0x7f00000014c0)='w\xde\xa1\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd\xde\xad\xf5\x1eM\x11[\xb6\x98\xda\xd2y\xbd\xad\x87P\xd8\xb2\xe5\xd2\xe7\xf6\xa1\xc8\'\x1e\xbc\xf4\xa0\xe6\xcf*(\xfb_\x9fL\xa2\x86\f\xcd\x1b\xd1\xe7\x11\xe8\xe1-\x0f\x1b:\xff\x11~') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x122}, 0x1, 0x0, 0x0, 0x8840}, 0x8010) write(r5, 0x0, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x3ffff) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r2, r1, 0x25, 0x0, @val=@iter={&(0x7f0000000240)=@cgroup={0x4, 0xffffffffffffffff, 0x9}, 0x10}}, 0x20) r8 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x6e) syz_open_dev$evdev(&(0x7f0000000500), 0x8, 0x1) sendmsg$inet(r8, &(0x7f00000004c0)={&(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)="643e51191ec805062d125515c774f6295ed60d6b2c29beb3793116ef5d88e7cc9d2ceaed7da45acb1d3b88e0edeb8948d6cb7833681a5374cd2a585ece5c54365b4fb8619df7f7fe47feb2d5fb225286d0945b90455d2df31438f4505808e34135a5dc78b765779c21fdd8429f270388190c0ee3827ec1a7f223469b9d9a4c772b8fb0a8fc1371413b3afba875031a68fb7ec830f59c9287129568384eb7b4d0d5d41850b9b63d8ea8205a997a1fe694cb2c867d53721ad7e3e7b3690ecdd8c470c03c3bc35b3c5eb4034d45cfa277b7ddc7d2fa09ea19bed3848cc7cef57676cb33ce19f6184afc3bc617aa6e019825c9ab01eaa78bdef042ac63719bca", 0xfe}, {&(0x7f0000000180)="5e74f0e3f675a3b756f302865dfb796a44f3534c45bff192e7329bd0b30e", 0x1e}, {&(0x7f00000001c0)="13c03826699178b3aa3361ea1b87858e64890ac8c0d002e1c17c1db3599312fabc862f7309f3d1292d196b31a08e55af4265a55af44f4690b77c2205a7beb2a4e12088122a4240f96bb27dcdaacfe0a1eb31e82442035e3a8c28bb50e0", 0x5d}], 0x3, &(0x7f0000000480)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x30}, 0x8800) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) 1.171463767s ago: executing program 8 (id=9133): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x2003, 0xc, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 1.170753907s ago: executing program 6 (id=9134): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 1.143832158s ago: executing program 2 (id=9136): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) move_mount(0xffffffffffffffff, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x110) 1.118442228s ago: executing program 8 (id=9137): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f0000000080)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) move_mount(0xffffffffffffffff, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x110) 1.101768438s ago: executing program 2 (id=9138): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) bind$packet(r1, 0x0, 0x0) 1.101363768s ago: executing program 1 (id=9139): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="05000000040000000320bb1de6abba3223e700007eeefbac69b877803e34cc61b7aa4ae72a3022fd3eeba44a861eb14b537e992d9f868b7db1a1450933d5d10c8c867506af38604845ef81baf891102eb95e6fb2fcaa96867020db0e687e38b42ae41e14879a25e9cbf1ab422ab3463c8b77de522980b6df657d0ade36aa912d7918f7a6faa05e97499d608caf3da5d86a135b4fc36aa20a33836c5fa00dc6610e56351109616aedcb", @ANYRES32, @ANYRESOCT, @ANYRES32=0x0, @ANYRES16, @ANYBLOB='\x00'/28], 0x50) r1 = socket(0x11, 0x2, 0x0) setsockopt(r1, 0x107, 0x8, &(0x7f00000001c0)="11000000", 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20044090) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400010221bd7000fbdbdf2511"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x24008010) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r0], 0x0, 0x94e, 0x0, 0x0, 0x0, 0x3e, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = io_uring_setup(0x77da, &(0x7f0000000240)={0x0, 0xdb5e, 0x40, 0x0, 0x12f}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="580000000002010200000000000000000a000000040003803c0002802c00018014000300fc00000000000000000000000000000014000400ff0000000000000000010c000280050001000000000004000180000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRESHEX=r4], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r4, 0xb, &(0x7f0000000480)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x11}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100006ad7ce9a4b32e53cd5e339d4a863b90ad077f3e7d3a555f540f5f10f14d7aefca564d07b7c9db9073d67e6ddfa76dbbe5c72ddb7e155747b4930ae4596d4acd93cba9bec2183bd2688e151b1ed7be0001f714a59", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) mmap(&(0x7f00003a6000/0x2000)=nil, 0x2000, 0x2000000, 0x10, r3, 0x769f000) getsockopt$bt_hci(r10, 0x84, 0x81, &(0x7f00000022c0)=""/4108, &(0x7f00000000c0)=0x100c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r11 = getpid() sched_setscheduler(r11, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x40010, r8, 0x0) 994.07325ms ago: executing program 2 (id=9140): unshare(0x600) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="523b009500000000000000000000000030"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1ae98752ffffff00", 0x8) close_range(r1, 0xffffffffffffffff, 0x0) 990.862171ms ago: executing program 2 (id=9141): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0xffff}}]}}]}, 0x48}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000080)=0x809, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @local}], 0x10) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000b40)=[@mask_fadd={0x58, 0x114, 0x8, {{0x401, 0x4}, &(0x7f00000004c0), 0x0, 0x9, 0x80000000, 0x8, 0x8, 0x13, 0x100000001}}, @mask_cswp={0x58, 0x114, 0x9, {{0x8, 0x5}, 0x0, 0x0, 0x402, 0x5, 0x7, 0x200000004, 0x10, 0x7}}], 0xb0}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)={'#! ', './file0', [{0x20, '&]}&&!)/!$$-\\\vj@]\':+,\\\'-[$-*-)\\'}, {0x20, 'GPL\x00'}, {0x20, '\x00'}], 0xa, "8b7d8bb10065dd7c1a6b6d2d5403b671cd2fc79347c59a46596ee278cf3dd9862a1fc3454fd99b25389942c7b70d57255c3e2342627101e0555209beaef2c00947ea93b418ee59cecdb1a7f660144fd66cde5158ba2683a8205e9f897f632d686fd6ee81d08653cfabe91be451f086d8e0ecc0097e31ec6fd7"}, 0xab) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0xc044001}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sys_enter\x00', r9, 0x0, 0x8001}, 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0xc800) 614.491768ms ago: executing program 1 (id=9142): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x800002, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000002, 0x20000001, 0x4, 0x2}, 0x1, r3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0x88}}, 0x0) 568.635609ms ago: executing program 6 (id=9143): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, 0x0, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) sysinfo(&(0x7f0000000f80)=""/154) 546.570109ms ago: executing program 6 (id=9144): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x800002, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000002, 0x20000001, 0x4, 0x2}, 0x1, r3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0x88}}, 0x0) 421.038041ms ago: executing program 8 (id=9145): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x4, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x0) close(0xffffffffffffffff) 420.611421ms ago: executing program 8 (id=9146): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r5 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) 399.350322ms ago: executing program 2 (id=9147): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x4d, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x67, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000180)={0x2, 0x0, 0x1a, 0x13, 0x11a, &(0x7f0000000a00)="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"}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) 304.720074ms ago: executing program 6 (id=9148): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) move_mount(0xffffffffffffffff, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x110) 298.133124ms ago: executing program 1 (id=9149): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xaf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = mq_open(&(0x7f0000001600)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r2, &(0x7f0000000600)="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", 0xbdd, 0x6, 0x0) mq_timedreceive(r2, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0) 178.674616ms ago: executing program 1 (id=9150): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000009c0)='rpm_return_int\x00', r0}, 0x18) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xffffff01, 0xb7c56ad10922c48a, 0x1}}}}, @TCA_RATE={0x6, 0x5, {0x1, 0x5}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x40, 0x8000, 0xb4f0000, 0x8, {{0x10, 0x4, 0x2, 0x31, 0x40, 0x3, 0x0, 0xb, 0x4, 0x0, @loopback, @local, {[@ra={0x94, 0x4, 0x1}, @noop, @timestamp={0x44, 0x20, 0xa, 0x0, 0x8, [0x93, 0x9, 0x3, 0x101, 0x3, 0x8, 0x7]}, @ra={0x94, 0x4, 0x1}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={0x9c, r2, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 133.291937ms ago: executing program 6 (id=9151): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES64=0x0, @ANYRES8=r0, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES16=r0, @ANYRESHEX=r0], 0x0, 0xfdfffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r6, &(0x7f00000039c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="39000000140081ae00002c000500015601618575e285af0180fffffdef0000883795c04a31ba377a1b2cc32b38d37400"/57, 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5b8, 0x0, 0x230, 0x140, 0x0, 0x418, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, &(0x7f00000007c0), {[{{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@remote, 0x6, 0x13, 0x1}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @remote}, [0xff, 0x0, 0xff, 0xff000000], [0x0, 0xffffffff, 0x0, 0xffffffff], 'netpci0\x00', 'macvlan0\x00', {}, {}, 0xff, 0xd5, 0x1, 0x7d}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@mcast2, 0x12, 0x13, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@private1, 0x13, 0x23, 0x2}}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xff, 0xff000000, 0xff000000], [0xffffffff, 0xff000000, 0xff000000, 0xff000000], 'pim6reg\x00', 'netpci0\x00', {0xff}, {}, 0x0, 0x5, 0x5, 0x36}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@empty, @empty, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xffffffff, 0xff000000], 'tunl0\x00', 'ip_vti0\x00', {0xff}, {}, 0x0, 0x5, 0x3, 0x2}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x37}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r8, 0x0) connect$unix(r7, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r8, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair(0x1, 0x1, 0xffff67b4, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="12000000060000000400000002000000000000005be0bf54477ee26aca80c03a3f60edfb013b3e1093b2d253c204aa48137784cfb7970418d804c630976c3f0560bf3b87c8222991229c3ddff9dc5c3506f9a36b7d0e6acb18451d1f628f94fccbdbac5306296eae6a19701f8eca10edb5efd11bc5c48dab57a2533037a254a565cc9a2f87e870a6edfc8afae8d535ab5b2edded658bfa373032dded0dec2626c149d0f2e24e55dab8d4019693cfe49323aab1287273efedd12cb12cb75532c45669089373fcca771b4486de486998449d40331a5dafc258edd18c42fcf8da1998fb64930e231973ef04d2407f4f4d81d0d19d45ee", @ANYRES64=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r10}, &(0x7f0000000040), &(0x7f0000000140)=r9}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000003c0)='bcache_btree_gc_coalesce\x00', r11, 0x0, 0x1}, 0x18) r12 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x38159f4e, 0x4d257, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000001c0), 0x1}, 0x100882, 0x7fc, 0x9, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r12, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r10}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r9}, 0x20) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x12, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r13, 0x0, 0xfffffffffffffffc}, 0x18) 127.984927ms ago: executing program 2 (id=9152): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000007100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000001600)='rpc_socket_nospace\x00', r0, 0x0, 0x4}, 0x18) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r4, &(0x7f00000008c0)="3bf58d7d45", 0x5) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7fffeffd) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) prctl$PR_SET_NAME(0xf, &(0x7f00000014c0)='w\xde\xa1\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd\xde\xad\xf5\x1eM\x11[\xb6\x98\xda\xd2y\xbd\xad\x87P\xd8\xb2\xe5\xd2\xe7\xf6\xa1\xc8\'\x1e\xbc\xf4\xa0\xe6\xcf*(\xfb_\x9fL\xa2\x86\f\xcd\x1b\xd1\xe7\x11\xe8\xe1-\x0f\x1b:\xff\x11~') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000050000000200000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2eb2b00048008000240172af2e40800014000000003080002401cfa7e06af706a0e13854f4fe7f9bdef1d791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001400000003008000240000000f7278b4d23460308000140"], 0x122}, 0x1, 0x0, 0x0, 0x8840}, 0x8010) write(r5, 0x0, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x3ffff) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r2, r1, 0x25, 0x0, @val=@iter={&(0x7f0000000240)=@cgroup={0x4, 0xffffffffffffffff, 0x9}, 0x10}}, 0x20) r8 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x6e) syz_open_dev$evdev(&(0x7f0000000500), 0x8, 0x1) sendmsg$inet(r8, &(0x7f00000004c0)={&(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)="643e51191ec805062d125515c774f6295ed60d6b2c29beb3793116ef5d88e7cc9d2ceaed7da45acb1d3b88e0edeb8948d6cb7833681a5374cd2a585ece5c54365b4fb8619df7f7fe47feb2d5fb225286d0945b90455d2df31438f4505808e34135a5dc78b765779c21fdd8429f270388190c0ee3827ec1a7f223469b9d9a4c772b8fb0a8fc1371413b3afba875031a68fb7ec830f59c9287129568384eb7b4d0d5d41850b9b63d8ea8205a997a1fe694cb2c867d53721ad7e3e7b3690ecdd8c470c03c3bc35b3c5eb4034d45cfa277b7ddc7d2fa09ea19bed3848cc7cef57676cb33ce19f6184afc3bc617aa6e019825c9ab01eaa78bdef042ac63719bca", 0xfe}, {&(0x7f0000000180)="5e74f0e3f675a3b756f302865dfb796a44f3534c45bff192e7329bd0b30e", 0x1e}, {&(0x7f00000001c0)="13c03826699178b3aa3361ea1b87858e64890ac8c0d002e1c17c1db3599312fabc862f7309f3d1292d196b31a08e55af4265a55af44f4690b77c2205a7beb2a4e12088122a4240f96bb27dcdaacfe0a1eb31e82442035e3a8c28bb50e0", 0x5d}], 0x3, &(0x7f0000000480)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x30}, 0x8800) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) 58.016039ms ago: executing program 1 (id=9153): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") 10.40161ms ago: executing program 0 (id=9154): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0xffff}}]}}]}, 0x48}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r6}, &(0x7f0000000280), &(0x7f00000002c0)=r7}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$inet(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840) setsockopt$inet_int(r0, 0x0, 0x18, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @local}], 0x10) r10 = socket$rds(0x15, 0x5, 0x0) bind$rds(r10, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r10, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000b40)=[@mask_fadd={0x58, 0x114, 0x8, {{0x401, 0x4}, &(0x7f00000004c0), 0x0, 0x9, 0x80000000, 0x8, 0x8, 0x13, 0x100000001}}, @mask_cswp={0x58, 0x114, 0x9, {{0x8, 0x5}, 0x0, 0x0, 0x402, 0x5, 0x7, 0x200000004, 0x10, 0x7}}], 0xb0}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)={'#! ', './file0', [{0x20, '&]}&&!)/!$$-\\\vj@]\':+,\\\'-[$-*-)\\'}, {0x20, 'GPL\x00'}, {0x20, '\x00'}], 0xa, "8b7d8bb10065dd7c1a6b6d2d5403b671cd2fc79347c59a46596ee278cf3dd9862a1fc3454fd99b25389942c7b70d57255c3e2342627101e0555209beaef2c00947ea93b418ee59cecdb1a7f660144fd66cde5158ba2683a8205e9f897f632d686fd6ee81d08653cfabe91be451f086d8e0ecc0097e31ec6fd7"}, 0xab) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0xc044001}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sys_enter\x00', r11, 0x0, 0x8001}, 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0xc800) 0s ago: executing program 1 (id=9155): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000040000000400000006"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000800000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) (async) syncfs(r2) shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ffb000/0x3000)=nil) (async) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3008056, &(0x7f00000001c0), 0x1, 0x55b, &(0x7f0000001600)="$eJzs3d9rW+UbAPDnpO1+f7/rYAwVkcIunMyla+uPCV7MS9HhQO9naM/KaLqMJh1rHbhduBtvZAgiDsR7vfdy+A/4Vwx0MGQUvfAmctKTLluTJuuypVs+HzjlffOe5D1PznnevifnhAQwtCayP4WIlyPimyTiYEQkedto5I0T6+ut3b86my1J1Ouf/pU01svqzddqPm9/XnkpIn77KuJ4YXO/1ZXVhVK5nC7l9cna4qXJ6srqiQuLpfl0Pr04PTNz6u2Z6ffefadvsb5x9p/vP7n94amvj65998vdQzeTOB0H8rbWOJ7AtdbKREzk78lYnH5kxak+dLaTJIPeALZlJM/zscjGgIMxkmc98OL7MiLqW0u6tAPPraRb/gMvqOY8oHlu36fz4OfGvQ/WT4A2xz+6/tlI7GmcG+1bSx46M8rOd8f70H/Wx69/3rqZLdG/zyEAurp2PSJOjo5uHv+SfPzbvpM9rPNoH8Y/eHZuZ/OfN9vNfwob859oM//Z3yZ3t6N7/hfu9qGbjrL53/tt578bF63GR/La/xpzvrHk/IVymo1t/4+IYzG2O6tvdT3n1Nqdeqe21vlftmT9N+eC+XbcHd398HPmSrXSk8Tc6t71iFfazn+Tjf2ftNn/2ftxtsc+jqS3XuvU1j3+p6v+U8Trbff/gytaydbXJycbx8Nk86jY7O8bR37v1P+g48/2/76t4x9PWq/XVh+/jx/3/Jt2anso/uj9+N+VfNYo78ofu1Kq1ZamInYlH29+fPrBc5v15vpZ/MeObj3+tTv+90bE5z3Gf+Pwz6/2FP+A9v/cY+3/xy/c+eiLHzr139v491ajdCx/pJfxr9cNfJL3DgAAAAAAAHaaQkQciKRQ3CgXCsXi+v0dh2NfoVyp1o6fryxfnIvGd2XHY6zQvNJ9sOV+iKn8fthmffqR+kxEHIqIb0f2NurF2Up5btDBAwAAAAAAAAAAAAAAAAAAwA6xv8P3/zN/jAx664Cnzk9+w/Dqmv/9+KUnYEfy/x+Gl/yH4SX/YXjJfxhe8h+Gl/yH4SX/YXjJfwAAAAAAAAAAAAAAAAAAAAAAAAAAAOirs2fOZEt97f7V2aw+d3lleaFy+cRcWl0oLi7PFmcrS5eK85XKfDktzlYWu71euVK5NDUdy1cma2m1NlldWT23WFm+WDt3YbE0n55Lx55JVAAAAAAAAAAAAAAAAAAAAPB8qa6sLpTK5XRJQWFbhdGdsRkKfS4MemQCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAf+CwAA//98ZDaz") (async) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000004200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r5}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r3, 0x2007ffc) sendfile(r3, r3, 0x0, 0x800000009) gettid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) kernel console output (not intermixed with test programs): T722] __nla_validate_parse: 1 callbacks suppressed [ 564.136541][ T722] netlink: 100 bytes leftover after parsing attributes in process `syz.6.8526'. [ 564.202737][ T731] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.240046][ T731] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.328685][ T743] bridge0: port 1(batadv0) entered disabled state [ 564.347400][ T743] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 564.348509][ T746] loop0: detected capacity change from 0 to 2048 [ 564.371452][ T731] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.398915][ T746] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 564.412805][ T746] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.413790][ T743] validate_nla: 9 callbacks suppressed [ 564.413809][ T743] netlink: 'syz.9.8535': attribute type 10 has an invalid length. [ 564.436855][ T743] netlink: 40 bytes leftover after parsing attributes in process `syz.9.8535'. [ 564.448273][ T731] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.463277][ T743] netlink: 'syz.9.8535': attribute type 10 has an invalid length. [ 564.471965][ T743] batadv0: left promiscuous mode [ 564.477370][ T743] batadv0: left allmulticast mode [ 564.484150][ T743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.492842][ T743] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 564.503123][ T743] netlink: 'syz.9.8535': attribute type 10 has an invalid length. [ 564.511370][ T743] netlink: 40 bytes leftover after parsing attributes in process `syz.9.8535'. [ 564.520951][ T743] batadv0: entered promiscuous mode [ 564.523412][ T753] loop0: detected capacity change from 0 to 2048 [ 564.526221][ T743] batadv0: entered allmulticast mode [ 564.539790][ T743] bond0: (slave batadv0): Releasing backup interface [ 564.550184][ T743] bridge0: port 1(batadv0) entered blocking state [ 564.556700][ T743] bridge0: port 1(batadv0) entered disabled state [ 564.559026][ T753] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 564.579422][ T753] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.605745][ T757] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8538'. [ 564.620046][ T757] netlink: 19 bytes leftover after parsing attributes in process `syz.9.8538'. [ 564.690490][ T761] loop0: detected capacity change from 0 to 2048 [ 564.708540][ T761] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 564.721662][ T761] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.825567][ T782] loop9: detected capacity change from 0 to 512 [ 564.838886][ T782] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 564.850511][ T782] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.8548: bg 0: block 104: invalid block bitmap [ 564.863818][ T782] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 564.874664][ T782] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.8548: invalid indirect mapped block 1 (level 1) [ 564.888343][ T782] EXT4-fs (loop9): 1 truncate cleaned up [ 564.894596][ T782] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 564.907489][ T786] loop0: detected capacity change from 0 to 2048 [ 564.916687][ T782] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8548'. [ 564.926456][ T782] netlink: 32 bytes leftover after parsing attributes in process `syz.9.8548'. [ 564.937818][ T786] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 564.950913][ T786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.002164][T31848] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.014722][ T792] lo speed is unknown, defaulting to 1000 [ 565.287615][ T825] loop9: detected capacity change from 0 to 512 [ 565.298468][ T827] netlink: 'syz.0.8564': attribute type 10 has an invalid length. [ 565.304640][ T825] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 565.322632][ T825] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 565.350786][T31848] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.382345][ T832] bridge0: port 1(batadv0) entered disabled state [ 565.404792][ T832] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 565.497416][ T832] netlink: 'syz.9.8565': attribute type 10 has an invalid length. [ 565.505379][ T832] netlink: 40 bytes leftover after parsing attributes in process `syz.9.8565'. [ 565.515623][ T832] netlink: 'syz.9.8565': attribute type 10 has an invalid length. [ 565.523831][ T832] batadv0: left promiscuous mode [ 565.528842][ T832] batadv0: left allmulticast mode [ 565.535372][ T832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 565.544661][ T832] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 565.555173][ T832] netlink: 'syz.9.8565': attribute type 10 has an invalid length. [ 565.563296][ T832] netlink: 40 bytes leftover after parsing attributes in process `syz.9.8565'. [ 565.572850][ T832] batadv0: entered promiscuous mode [ 565.578404][ T832] batadv0: entered allmulticast mode [ 565.585397][ T832] bond0: (slave batadv0): Releasing backup interface [ 565.595779][ T832] bridge0: port 1(batadv0) entered blocking state [ 565.602599][ T832] bridge0: port 1(batadv0) entered disabled state [ 565.706202][ T843] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 565.758209][ T9452] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.790471][ T9452] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.806485][ T861] netlink: 52 bytes leftover after parsing attributes in process `syz.9.8574'. [ 565.822107][ T861] FAULT_INJECTION: forcing a failure. [ 565.822107][ T861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 565.835818][ T861] CPU: 1 UID: 0 PID: 861 Comm: syz.9.8574 Not tainted syzkaller #0 PREEMPT(voluntary) [ 565.835852][ T861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 565.835867][ T861] Call Trace: [ 565.835876][ T861] [ 565.835886][ T861] __dump_stack+0x1d/0x30 [ 565.835932][ T861] dump_stack_lvl+0xe8/0x140 [ 565.836001][ T861] dump_stack+0x15/0x1b [ 565.836042][ T861] should_fail_ex+0x265/0x280 [ 565.836082][ T861] should_fail+0xb/0x20 [ 565.836118][ T861] should_fail_usercopy+0x1a/0x20 [ 565.836207][ T861] _copy_to_user+0x20/0xa0 [ 565.836237][ T861] simple_read_from_buffer+0xb5/0x130 [ 565.836270][ T861] proc_fail_nth_read+0x10e/0x150 [ 565.836316][ T861] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 565.836355][ T861] vfs_read+0x1a8/0x770 [ 565.836426][ T861] ? __rcu_read_unlock+0x4f/0x70 [ 565.836457][ T861] ? __fget_files+0x184/0x1c0 [ 565.836497][ T861] ksys_read+0xda/0x1a0 [ 565.836547][ T861] __x64_sys_read+0x40/0x50 [ 565.836578][ T861] x64_sys_call+0x27c0/0x3000 [ 565.836604][ T861] do_syscall_64+0xd2/0x200 [ 565.836631][ T861] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 565.836745][ T861] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 565.836789][ T861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.836816][ T861] RIP: 0033:0x7f5e6319d8dc [ 565.836832][ T861] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 565.836848][ T9452] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.836933][ T861] RSP: 002b:00007f5e61c07030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 565.836962][ T861] RAX: ffffffffffffffda RBX: 00007f5e633f5fa0 RCX: 00007f5e6319d8dc [ 565.836981][ T861] RDX: 000000000000000f RSI: 00007f5e61c070a0 RDI: 0000000000000003 [ 565.837002][ T861] RBP: 00007f5e61c07090 R08: 0000000000000000 R09: 0000000000000000 [ 565.837021][ T861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.837040][ T861] R13: 00007f5e633f6038 R14: 00007f5e633f5fa0 R15: 00007fff95c170a8 [ 565.837070][ T861] [ 566.056286][ T871] netlink: 'syz.6.8579': attribute type 21 has an invalid length. [ 566.066233][ T866] bridge0: port 1(batadv0) entered disabled state [ 566.087079][ T866] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 566.094389][ T866] batman_adv: batadv0: Removing interface: veth1_vlan [ 566.110081][ T886] netlink: 'syz.8.8577': attribute type 10 has an invalid length. [ 566.121577][ T886] batman_adv: batadv0: Adding interface: veth1_vlan [ 566.128543][ T886] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.157663][ T886] batman_adv: batadv0: Interface activated: veth1_vlan [ 566.158214][ T864] netlink: 'syz.2.8576': attribute type 10 has an invalid length. [ 566.291060][ T873] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 566.309352][ T9452] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.326986][ T866] batadv0: left promiscuous mode [ 566.332017][ T866] batadv0: left allmulticast mode [ 566.339776][ T866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 566.348858][ T866] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 566.358203][ T864] batadv0: left allmulticast mode [ 566.363415][ T864] batadv0: left promiscuous mode [ 566.368554][ T864] bridge0: port 3(batadv0) entered disabled state [ 566.376947][ T864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 566.397310][ T867] batadv0: entered promiscuous mode [ 566.402656][ T867] batadv0: entered allmulticast mode [ 566.414018][ T867] bond0: (slave batadv0): Releasing backup interface [ 566.424373][ T867] bridge0: port 1(batadv0) entered blocking state [ 566.431002][ T867] bridge0: port 1(batadv0) entered disabled state [ 566.495628][ T893] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 566.590655][ T905] FAULT_INJECTION: forcing a failure. [ 566.590655][ T905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 566.604100][ T905] CPU: 0 UID: 0 PID: 905 Comm: syz.2.8587 Not tainted syzkaller #0 PREEMPT(voluntary) [ 566.604135][ T905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 566.604153][ T905] Call Trace: [ 566.604160][ T905] [ 566.604194][ T905] __dump_stack+0x1d/0x30 [ 566.604240][ T905] dump_stack_lvl+0xe8/0x140 [ 566.604355][ T905] dump_stack+0x15/0x1b [ 566.604399][ T905] should_fail_ex+0x265/0x280 [ 566.604442][ T905] should_fail+0xb/0x20 [ 566.604474][ T905] should_fail_usercopy+0x1a/0x20 [ 566.604574][ T905] _copy_from_user+0x1c/0xb0 [ 566.604666][ T905] ___sys_sendmsg+0xc1/0x1d0 [ 566.604730][ T905] __x64_sys_sendmsg+0xd4/0x160 [ 566.604793][ T905] x64_sys_call+0x191e/0x3000 [ 566.604893][ T905] do_syscall_64+0xd2/0x200 [ 566.604915][ T905] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 566.604944][ T905] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 566.604981][ T905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.605062][ T905] RIP: 0033:0x7fbf7e24eec9 [ 566.605135][ T905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 566.605155][ T905] RSP: 002b:00007fbf7ccb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 566.605214][ T905] RAX: ffffffffffffffda RBX: 00007fbf7e4a5fa0 RCX: 00007fbf7e24eec9 [ 566.605228][ T905] RDX: 00000000000400c0 RSI: 0000200000000140 RDI: 0000000000000004 [ 566.605242][ T905] RBP: 00007fbf7ccb7090 R08: 0000000000000000 R09: 0000000000000000 [ 566.605255][ T905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 566.605288][ T905] R13: 00007fbf7e4a6038 R14: 00007fbf7e4a5fa0 R15: 00007ffefbe3f4b8 [ 566.605312][ T905] [ 566.614042][ T898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.798231][ T898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.817267][ T9452] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 566.827077][ T9452] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 566.983882][ T915] loop2: detected capacity change from 0 to 2048 [ 566.999748][ T915] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 567.033891][ T29] kauditd_printk_skb: 669 callbacks suppressed [ 567.033911][ T29] audit: type=1326 audit(1759544773.856:36384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=920 comm="syz.9.8593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e6319eec9 code=0x7ffc0000 [ 567.041814][ T915] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.076564][ T29] audit: type=1326 audit(1759544773.906:36385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=920 comm="syz.9.8593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5e6319eec9 code=0x7ffc0000 [ 567.102673][ T29] audit: type=1326 audit(1759544773.906:36386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=920 comm="syz.9.8593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e6319eec9 code=0x7ffc0000 [ 567.127582][ T29] audit: type=1326 audit(1759544773.906:36387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=920 comm="syz.9.8593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e6319eec9 code=0x7ffc0000 [ 567.153596][ T29] audit: type=1326 audit(1759544773.906:36388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=920 comm="syz.9.8593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e6319eec9 code=0x7ffc0000 [ 567.179016][ T29] audit: type=1326 audit(1759544773.906:36389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=920 comm="syz.9.8593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e6319eec9 code=0x7ffc0000 [ 567.203469][ T29] audit: type=1326 audit(1759544773.906:36390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=920 comm="syz.9.8593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e6319eec9 code=0x7ffc0000 [ 567.227837][ T29] audit: type=1326 audit(1759544773.906:36391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=920 comm="syz.9.8593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e6319eec9 code=0x7ffc0000 [ 567.252617][ T29] audit: type=1326 audit(1759544773.906:36392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=920 comm="syz.9.8593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e6319eec9 code=0x7ffc0000 [ 567.276810][ T29] audit: type=1326 audit(1759544773.906:36393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=920 comm="syz.9.8593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e6319eec9 code=0x7ffc0000 [ 567.414990][ T934] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.460864][ T934] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.499699][ T940] loop6: detected capacity change from 0 to 1024 [ 567.515023][ T943] 9pnet_fd: Insufficient options for proto=fd [ 567.563479][ T940] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 567.696686][ T934] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.756062][ T955] loop2: detected capacity change from 0 to 1024 [ 567.767620][ T934] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.783047][ T955] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 72 [ 567.836999][ T9452] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.854705][ T9452] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.870645][ T9452] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.898274][ T9452] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.912912][ T959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 567.989808][ T963] loop9: detected capacity change from 0 to 8192 [ 568.010160][ T951] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 568.026301][ T951] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 568.039033][ T951] EXT4-fs (loop6): This should not happen!! Data will be lost [ 568.039033][ T951] [ 568.048755][ T951] EXT4-fs (loop6): Total free blocks count 0 [ 568.054866][ T951] EXT4-fs (loop6): Free/Dirty block details [ 568.061261][ T951] EXT4-fs (loop6): free_blocks=68451041280 [ 568.067477][ T951] EXT4-fs (loop6): dirty_blocks=16400 [ 568.072969][ T951] EXT4-fs (loop6): Block reservation details [ 568.079195][ T951] EXT4-fs (loop6): i_reserved_data_blocks=1025 [ 568.121969][ T973] 9pnet_fd: Insufficient options for proto=fd [ 568.161196][ T9455] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 568.342447][ T987] loop2: detected capacity change from 0 to 1024 [ 568.355880][ T987] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 72 [ 568.385213][ T989] loop9: detected capacity change from 0 to 1024 [ 568.399044][ T989] EXT4-fs: Ignoring removed orlov option [ 568.428629][ T989] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 568.443744][ T993] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.491473][ T991] bridge0: port 1(batadv0) entered disabled state [ 568.513182][ T991] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 568.538922][ T993] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.588262][ T991] batadv0: left promiscuous mode [ 568.593606][ T991] batadv0: left allmulticast mode [ 568.633923][ T991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.662346][ T991] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 568.680277][ T993] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.708799][ T995] batadv0: entered promiscuous mode [ 568.714358][ T995] batadv0: entered allmulticast mode [ 568.723740][ T995] bond0: (slave batadv0): Releasing backup interface [ 568.742955][ T995] bridge0: port 1(batadv0) entered blocking state [ 568.749905][ T995] bridge0: port 1(batadv0) entered disabled state [ 568.788742][ T993] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.804161][T31848] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.819545][ T999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.829636][ T999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.898492][ T9455] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.920322][ T9455] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.933924][ T9455] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.942536][ T9455] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.232742][ T1008] loop2: detected capacity change from 0 to 512 [ 569.284206][ T1008] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.8624: error while reading EA inode 32 err=-116 [ 569.303574][ T1006] lo speed is unknown, defaulting to 1000 [ 569.336512][ T1008] EXT4-fs (loop2): Remounting filesystem read-only [ 569.345012][ T1008] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 569.356534][ T1008] EXT4-fs (loop2): 1 orphan inode deleted [ 569.363316][ T1008] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 569.408726][ T1008] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.471583][ T1017] validate_nla: 8 callbacks suppressed [ 569.471601][ T1017] netlink: 'syz.6.8627': attribute type 10 has an invalid length. [ 569.525476][ T1017] batadv0: left allmulticast mode [ 569.532196][ T1017] batadv0: left promiscuous mode [ 569.537086][ T1020] netlink: 'syz.6.8627': attribute type 10 has an invalid length. [ 569.537668][ T1017] bridge0: port 1(batadv0) entered disabled state [ 569.546207][ T1020] __nla_validate_parse: 15 callbacks suppressed [ 569.546264][ T1020] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8627'. [ 569.611723][ T1017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 569.623897][ T1017] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 569.643553][ T1014] netlink: 'syz.8.8626': attribute type 10 has an invalid length. [ 569.683826][ T1020] batadv0: entered promiscuous mode [ 569.689574][ T1020] batadv0: entered allmulticast mode [ 569.705679][ T1020] bond0: (slave batadv0): Releasing backup interface [ 569.728652][ T1020] bridge0: port 1(batadv0) entered blocking state [ 569.736515][ T1020] bridge0: port 1(batadv0) entered disabled state [ 569.773808][ T1036] loop0: detected capacity change from 0 to 2048 [ 569.782071][ T1014] batadv0: left allmulticast mode [ 569.787208][ T1014] batadv0: left promiscuous mode [ 569.791332][ T1036] EXT4-fs: Ignoring removed bh option [ 569.792341][ T1014] bridge0: port 1(batadv0) entered disabled state [ 569.804915][ T1036] ext4: Unknown parameter 'fowner' [ 569.820363][ T1038] loop2: detected capacity change from 0 to 1024 [ 569.845161][ T1036] netlink: 'syz.0.8630': attribute type 2 has an invalid length. [ 569.856693][ T1038] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 72 [ 569.881093][ T1014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 569.904685][ T1014] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 569.969576][ T1040] bridge_slave_0: left allmulticast mode [ 569.975494][ T1040] bridge_slave_0: left promiscuous mode [ 569.981512][ T1040] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.998150][ T1040] bridge_slave_1: left allmulticast mode [ 570.004364][ T1040] bridge_slave_1: left promiscuous mode [ 570.010691][ T1040] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.030647][ T1040] bond0: (slave bond_slave_0): Releasing backup interface [ 570.045604][ T1040] bond0: (slave bond_slave_1): Releasing backup interface [ 570.061254][ T1040] team0: Port device team_slave_0 removed [ 570.077971][ T1040] team0: Port device team_slave_1 removed [ 570.086021][ T1040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.095590][ T1040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 570.110872][ T1040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 570.121290][ T1040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 570.133484][ T1040] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 570.254456][ T1045] netlink: 'syz.2.8632': attribute type 10 has an invalid length. [ 570.262900][ T1045] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8632'. [ 570.293469][ T1058] loop6: detected capacity change from 0 to 512 [ 570.312508][ T1058] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.8634: error while reading EA inode 32 err=-116 [ 570.326910][ T1050] netlink: 'syz.2.8632': attribute type 10 has an invalid length. [ 570.336899][ T1058] EXT4-fs (loop6): Remounting filesystem read-only [ 570.347157][ T1062] netlink: 'syz.9.8635': attribute type 10 has an invalid length. [ 570.355204][ T1062] netlink: 40 bytes leftover after parsing attributes in process `syz.9.8635'. [ 570.370907][ T1058] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 570.379474][ T1063] netlink: 'syz.2.8632': attribute type 10 has an invalid length. [ 570.382817][ T1058] EXT4-fs (loop6): 1 orphan inode deleted [ 570.389175][ T1063] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8632'. [ 570.395875][ T1058] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 570.419081][ T1064] netlink: 'syz.9.8635': attribute type 10 has an invalid length. [ 570.443923][ T1058] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.472666][ T1067] netlink: 'syz.9.8635': attribute type 10 has an invalid length. [ 570.480784][ T1067] netlink: 40 bytes leftover after parsing attributes in process `syz.9.8635'. [ 570.547996][ T1042] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 570.581893][ T1048] bridge0: port 1(batadv0) entered disabled state [ 570.606585][ T1048] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 570.630214][ T1045] batman_adv: batadv0: Adding interface: veth1_vlan [ 570.637316][ T1045] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.663296][ T1045] batman_adv: batadv0: Interface activated: veth1_vlan [ 570.664152][ T1076] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8640'. [ 570.673714][ T1050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.691376][ T1064] batadv0: left promiscuous mode [ 570.696672][ T1064] batadv0: left allmulticast mode [ 570.705541][ T1064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.714277][ T1064] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 570.723185][ T1063] batadv0: entered promiscuous mode [ 570.728628][ T1063] batadv0: entered allmulticast mode [ 570.734230][ T1063] bridge0: port 1(batadv0) entered blocking state [ 570.740953][ T1063] bridge0: port 1(batadv0) entered disabled state [ 570.748989][ T1067] batadv0: entered promiscuous mode [ 570.754282][ T1067] batadv0: entered allmulticast mode [ 570.768004][ T1067] bond0: (slave batadv0): Releasing backup interface [ 570.779281][ T1067] bridge0: port 1(batadv0) entered blocking state [ 570.785895][ T1067] bridge0: port 1(batadv0) entered disabled state [ 570.855211][ T1085] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.888197][ T1044] lo speed is unknown, defaulting to 1000 [ 570.900917][ T1087] loop9: detected capacity change from 0 to 2048 [ 570.914309][ T1085] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.928944][ T1087] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 570.932654][ T1075] lo speed is unknown, defaulting to 1000 [ 570.953320][ T1087] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.967073][ T3489] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 570.976845][ T3489] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 571.025788][ T1085] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.049977][ T1094] batadv0: left allmulticast mode [ 571.055190][ T1094] batadv0: left promiscuous mode [ 571.061118][ T1094] bridge0: port 1(batadv0) entered disabled state [ 571.084076][ T1094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.096635][ T1094] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 571.123404][ T1085] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.128879][ T1101] loop9: detected capacity change from 0 to 2048 [ 571.149738][ T1101] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 571.163342][ T1101] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.181966][ T35] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.193595][ T35] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.205216][ T35] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.218933][ T35] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.356047][ T1121] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8656'. [ 571.365720][ T1123] loop9: detected capacity change from 0 to 1024 [ 571.548339][ T1123] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 571.647593][ T1146] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8665'. [ 571.657691][ T1146] batadv0: entered promiscuous mode [ 571.663134][ T1146] batadv0: entered allmulticast mode [ 571.669388][ T1146] bond0: (slave batadv0): Releasing backup interface [ 571.678558][ T1146] bridge0: port 1(batadv0) entered blocking state [ 571.685365][ T1146] bridge0: port 1(batadv0) entered disabled state [ 571.701994][ T1154] batadv0: left allmulticast mode [ 571.707554][ T1154] batadv0: left promiscuous mode [ 571.712983][ T1154] bridge0: port 1(batadv0) entered disabled state [ 571.722776][ T1154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.889846][ T1160] loop2: detected capacity change from 0 to 8192 [ 571.956857][ T9452] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 571.966301][ T9452] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 572.038233][ T1165] lo speed is unknown, defaulting to 1000 [ 572.059299][ T1167] siw: device registration error -23 [ 572.098538][ T1165] loop2: detected capacity change from 0 to 512 [ 572.115035][ T1165] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.8668: error while reading EA inode 32 err=-116 [ 572.135557][ T1165] EXT4-fs (loop2): Remounting filesystem read-only [ 572.142834][ T1165] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 572.153324][ T1165] EXT4-fs (loop2): 1 orphan inode deleted [ 572.188412][ T1180] loop9: detected capacity change from 0 to 1024 [ 572.195544][ T1180] EXT4-fs warning (device loop9): read_mmp_block:115: Error -117 while reading MMP block 72 [ 572.341057][ T1187] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8677'. [ 572.350285][ T1187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8677'. [ 572.429141][ T1194] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 572.466617][ T29] kauditd_printk_skb: 297 callbacks suppressed [ 572.466636][ T29] audit: type=1326 audit(1759544779.286:36691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1197 comm="syz.6.8682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0773eec9 code=0x7ffc0000 [ 572.504694][ T29] audit: type=1326 audit(1759544779.296:36692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1197 comm="syz.6.8682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb0773eec9 code=0x7ffc0000 [ 572.528664][ T29] audit: type=1326 audit(1759544779.296:36693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1197 comm="syz.6.8682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0773eec9 code=0x7ffc0000 [ 572.552380][ T29] audit: type=1326 audit(1759544779.296:36694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1197 comm="syz.6.8682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb0773eec9 code=0x7ffc0000 [ 572.576413][ T29] audit: type=1326 audit(1759544779.296:36695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1197 comm="syz.6.8682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0773eec9 code=0x7ffc0000 [ 572.602622][ T29] audit: type=1326 audit(1759544779.296:36696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1197 comm="syz.6.8682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fbb0773eec9 code=0x7ffc0000 [ 572.627322][ T29] audit: type=1326 audit(1759544779.296:36697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1197 comm="syz.6.8682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0773eec9 code=0x7ffc0000 [ 572.652113][ T29] audit: type=1326 audit(1759544779.296:36698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1197 comm="syz.6.8682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbb0773eec9 code=0x7ffc0000 [ 572.677117][ T29] audit: type=1326 audit(1759544779.296:36699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1197 comm="syz.6.8682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0773eec9 code=0x7ffc0000 [ 572.701303][ T29] audit: type=1326 audit(1759544779.296:36700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1197 comm="syz.6.8682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fbb0773eec9 code=0x7ffc0000 [ 572.778469][ T1194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 572.789343][ T1215] FAULT_INJECTION: forcing a failure. [ 572.789343][ T1215] name failslab, interval 1, probability 0, space 0, times 0 [ 572.802545][ T1215] CPU: 0 UID: 0 PID: 1215 Comm: syz.2.8688 Not tainted syzkaller #0 PREEMPT(voluntary) [ 572.802579][ T1215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 572.802748][ T1215] Call Trace: [ 572.802817][ T1215] [ 572.802826][ T1215] __dump_stack+0x1d/0x30 [ 572.802865][ T1215] dump_stack_lvl+0xe8/0x140 [ 572.802903][ T1215] dump_stack+0x15/0x1b [ 572.802952][ T1215] should_fail_ex+0x265/0x280 [ 572.803105][ T1215] should_failslab+0x8c/0xb0 [ 572.803134][ T1215] __kvmalloc_node_noprof+0x12e/0x670 [ 572.803166][ T1215] ? fanout_add+0x5e4/0xad0 [ 572.803233][ T1215] ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0 [ 572.803263][ T1215] fanout_add+0x5e4/0xad0 [ 572.803296][ T1215] ? _copy_from_user+0x89/0xb0 [ 572.803332][ T1215] packet_setsockopt+0x981/0xfd0 [ 572.803363][ T1215] ? __pfx_packet_setsockopt+0x10/0x10 [ 572.803394][ T1215] __sys_setsockopt+0x181/0x200 [ 572.803444][ T1215] __x64_sys_setsockopt+0x64/0x80 [ 572.803481][ T1215] x64_sys_call+0x20ec/0x3000 [ 572.803503][ T1215] do_syscall_64+0xd2/0x200 [ 572.803526][ T1215] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 572.803601][ T1215] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 572.803640][ T1215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.803664][ T1215] RIP: 0033:0x7fbf7e24eec9 [ 572.803738][ T1215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 572.803758][ T1215] RSP: 002b:00007fbf7ccb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 572.803780][ T1215] RAX: ffffffffffffffda RBX: 00007fbf7e4a5fa0 RCX: 00007fbf7e24eec9 [ 572.803794][ T1215] RDX: 0000000000000012 RSI: 0000000000000107 RDI: 0000000000000004 [ 572.803808][ T1215] RBP: 00007fbf7ccb7090 R08: 0000000000000004 R09: 0000000000000000 [ 572.803900][ T1215] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.803915][ T1215] R13: 00007fbf7e4a6038 R14: 00007fbf7e4a5fa0 R15: 00007ffefbe3f4b8 [ 572.803943][ T1215] [ 572.807731][ T1194] batadv0: entered promiscuous mode [ 573.014506][ T1194] batadv0: entered allmulticast mode [ 573.020759][ T1194] bridge0: port 1(batadv0) entered blocking state [ 573.027423][ T1194] bridge0: port 1(batadv0) entered disabled state [ 573.180724][ T1242] bond0: (slave batadv0): Releasing backup interface [ 573.202677][ T1242] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 573.264526][ T1242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 573.277350][ T1242] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 573.288711][ T1242] batadv0: entered promiscuous mode [ 573.293988][ T1242] batadv0: entered allmulticast mode [ 573.301385][ T1242] bond0: (slave batadv0): Releasing backup interface [ 573.322184][ T1242] bridge0: port 1(batadv0) entered blocking state [ 573.329098][ T1242] bridge0: port 1(batadv0) entered disabled state [ 573.516827][ T9452] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 573.526352][ T9452] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 573.539526][ T9452] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 573.548903][ T9452] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 573.573858][ T1273] loop0: detected capacity change from 0 to 1024 [ 573.581430][ T1273] EXT4-fs: Ignoring removed orlov option [ 573.979561][ T1288] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 574.012298][ T1294] bridge0: port 1(batadv0) entered disabled state [ 574.038062][ T1294] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 574.069522][ T1303] batadv0: left allmulticast mode [ 574.075192][ T1303] batadv0: left promiscuous mode [ 574.081262][ T1303] bridge0: port 1(batadv0) entered disabled state [ 574.113980][ T1303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 574.143578][ T1309] batadv0: entered promiscuous mode [ 574.149371][ T1309] batadv0: entered allmulticast mode [ 574.157459][ T1309] bridge0: port 1(batadv0) entered blocking state [ 574.164024][ T1309] bridge0: port 1(batadv0) entered disabled state [ 574.175470][ T1294] batadv0: left promiscuous mode [ 574.180569][ T1294] batadv0: left allmulticast mode [ 574.199336][ T1294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 574.227713][ T1297] batadv0: entered promiscuous mode [ 574.233252][ T1297] batadv0: entered allmulticast mode [ 574.239756][ T1297] bridge0: port 1(batadv0) entered blocking state [ 574.246858][ T1297] bridge0: port 1(batadv0) entered disabled state [ 574.261417][ T1321] loop0: detected capacity change from 0 to 512 [ 574.279380][ T1321] EXT4-fs (loop0): too many log groups per flexible block group [ 574.288260][ T1321] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 574.295222][ T1321] EXT4-fs (loop0): mount failed [ 574.474087][ T1329] loop2: detected capacity change from 0 to 8192 [ 574.590531][ T1344] __nla_validate_parse: 14 callbacks suppressed [ 574.590559][ T1344] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8728'. [ 574.607224][ T9452] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 574.616764][ T9452] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 574.690053][ T1346] loop0: detected capacity change from 0 to 2048 [ 575.155874][ T1383] loop9: detected capacity change from 0 to 1024 [ 575.163215][ T1383] EXT4-fs: inline encryption not supported [ 575.248808][ T1357] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 575.268243][ T1363] syzkaller0: entered promiscuous mode [ 575.273880][ T1363] syzkaller0: entered allmulticast mode [ 575.297399][ T1379] siw: device registration error -23 [ 575.359824][ T1401] validate_nla: 20 callbacks suppressed [ 575.359844][ T1401] netlink: 'syz.0.8742': attribute type 21 has an invalid length. [ 575.422314][ T1401] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8742'. [ 575.431774][ T1401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8742'. [ 575.444037][ T1383] lo speed is unknown, defaulting to 1000 [ 575.454510][ T1411] syzkaller1: entered promiscuous mode [ 575.460244][ T1411] syzkaller1: entered allmulticast mode [ 575.483575][ T1411] FAULT_INJECTION: forcing a failure. [ 575.483575][ T1411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 575.497148][ T1411] CPU: 1 UID: 0 PID: 1411 Comm: syz.2.8747 Not tainted syzkaller #0 PREEMPT(voluntary) [ 575.497257][ T1411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 575.497270][ T1411] Call Trace: [ 575.497276][ T1411] [ 575.497283][ T1411] __dump_stack+0x1d/0x30 [ 575.497322][ T1411] dump_stack_lvl+0xe8/0x140 [ 575.497410][ T1411] dump_stack+0x15/0x1b [ 575.497443][ T1411] should_fail_ex+0x265/0x280 [ 575.497544][ T1411] should_fail+0xb/0x20 [ 575.497579][ T1411] should_fail_usercopy+0x1a/0x20 [ 575.497621][ T1411] _copy_from_iter+0xd2/0xe80 [ 575.497742][ T1411] ? selinux_file_open+0x2df/0x330 [ 575.497775][ T1411] ? should_fail_ex+0xdb/0x280 [ 575.497805][ T1411] ? skb_set_owner_w+0x16a/0x1c0 [ 575.497843][ T1411] ? sock_alloc_send_pskb+0x44c/0x4e0 [ 575.497912][ T1411] skb_copy_datagram_from_iter+0xb1/0x490 [ 575.497948][ T1411] ? skb_put+0xa9/0xf0 [ 575.497996][ T1411] tun_get_user+0xafa/0x26e0 [ 575.498070][ T1411] ? ref_tracker_alloc+0x1f2/0x2f0 [ 575.498117][ T1411] ? selinux_file_permission+0x1e4/0x320 [ 575.498144][ T1411] tun_chr_write_iter+0x15e/0x210 [ 575.498235][ T1411] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 575.498273][ T1411] vfs_write+0x52a/0x960 [ 575.498314][ T1411] ksys_write+0xda/0x1a0 [ 575.498345][ T1411] __x64_sys_write+0x40/0x50 [ 575.498433][ T1411] x64_sys_call+0x2802/0x3000 [ 575.498501][ T1411] do_syscall_64+0xd2/0x200 [ 575.498525][ T1411] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 575.498556][ T1411] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 575.498600][ T1411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.498686][ T1411] RIP: 0033:0x7fbf7e24eec9 [ 575.498703][ T1411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.498724][ T1411] RSP: 002b:00007fbf7ccb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 575.498827][ T1411] RAX: ffffffffffffffda RBX: 00007fbf7e4a5fa0 RCX: 00007fbf7e24eec9 [ 575.498840][ T1411] RDX: 0000000000000036 RSI: 0000200000000240 RDI: 0000000000000003 [ 575.498853][ T1411] RBP: 00007fbf7ccb7090 R08: 0000000000000000 R09: 0000000000000000 [ 575.498867][ T1411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.498882][ T1411] R13: 00007fbf7e4a6038 R14: 00007fbf7e4a5fa0 R15: 00007ffefbe3f4b8 [ 575.498910][ T1411] [ 575.822210][T31848] EXT4-fs error (device loop9): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 575.860615][T31848] EXT4-fs (loop9): Remounting filesystem read-only [ 576.064034][ T1437] netlink: 'syz.6.8756': attribute type 10 has an invalid length. [ 576.076632][ T1439] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8758'. [ 576.118586][ T1446] netlink: 'syz.6.8756': attribute type 10 has an invalid length. [ 576.126660][ T1446] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8756'. [ 576.317493][ T1424] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 576.331632][ T1459] netlink: 'syz.8.8761': attribute type 10 has an invalid length. [ 576.355573][ T1437] batadv0: left allmulticast mode [ 576.360739][ T1437] batadv0: left promiscuous mode [ 576.366043][ T1437] bridge0: port 1(batadv0) entered disabled state [ 576.375317][ T1437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.388196][ T1446] batadv0: entered promiscuous mode [ 576.393650][ T1446] batadv0: entered allmulticast mode [ 576.399941][ T1446] bridge0: port 1(batadv0) entered blocking state [ 576.406921][ T1446] bridge0: port 1(batadv0) entered disabled state [ 576.423636][ T1459] batadv0: left allmulticast mode [ 576.428820][ T1459] batadv0: left promiscuous mode [ 576.434247][ T1459] bridge0: port 1(batadv0) entered disabled state [ 576.443045][ T1459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.451775][ T1459] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 576.477397][ T1465] netlink: 'syz.0.8763': attribute type 10 has an invalid length. [ 576.609222][ T9455] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.635090][ T1472] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.660436][ T9455] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.703377][ T1472] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.743862][ T1473] lo speed is unknown, defaulting to 1000 [ 576.761073][ T9455] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.808805][ T1487] loop2: detected capacity change from 0 to 2048 [ 576.942739][ T1485] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 576.964101][ T1472] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.977851][ T9455] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.028233][ T1492] bridge0: port 1(batadv0) entered disabled state [ 577.051328][ T1492] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 577.070056][ T1472] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.099796][ T1492] netlink: 'syz.2.8770': attribute type 10 has an invalid length. [ 577.108330][ T1492] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8770'. [ 577.148003][ T1492] netlink: 'syz.2.8770': attribute type 10 has an invalid length. [ 577.158753][ T1492] batadv0: left promiscuous mode [ 577.163898][ T1492] batadv0: left allmulticast mode [ 577.170947][ T1492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.200236][ T1493] netlink: 'syz.2.8770': attribute type 10 has an invalid length. [ 577.208303][ T1493] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8770'. [ 577.234646][ T1513] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8774'. [ 577.259689][ T1493] batadv0: entered promiscuous mode [ 577.265081][ T1493] batadv0: entered allmulticast mode [ 577.270828][ T1493] bridge0: port 1(batadv0) entered blocking state [ 577.277548][ T1493] bridge0: port 1(batadv0) entered disabled state [ 577.287883][ T1473] chnl_net:caif_netlink_parms(): no params data found [ 577.311656][ T1513] netlink: 19 bytes leftover after parsing attributes in process `syz.8.8774'. [ 577.371849][ T35] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.384290][ T9455] bridge0: port 1(batadv0) entered disabled state [ 577.541185][ T1524] FAULT_INJECTION: forcing a failure. [ 577.541185][ T1524] name failslab, interval 1, probability 0, space 0, times 0 [ 577.554056][ T1524] CPU: 1 UID: 0 PID: 1524 Comm: syz.2.8776 Not tainted syzkaller #0 PREEMPT(voluntary) [ 577.554094][ T1524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 577.554111][ T1524] Call Trace: [ 577.554117][ T1524] [ 577.554207][ T1524] __dump_stack+0x1d/0x30 [ 577.554253][ T1524] dump_stack_lvl+0xe8/0x140 [ 577.554334][ T1524] dump_stack+0x15/0x1b [ 577.554375][ T1524] should_fail_ex+0x265/0x280 [ 577.554423][ T1524] should_failslab+0x8c/0xb0 [ 577.554449][ T1524] __kmalloc_noprof+0xa5/0x570 [ 577.554485][ T1524] ? io_cache_alloc_new+0x2a/0xb0 [ 577.554512][ T1524] ? io_sqe_buffer_register+0x13c4/0x1430 [ 577.554597][ T1524] io_cache_alloc_new+0x2a/0xb0 [ 577.554641][ T1524] io_sqe_buffer_register+0x337/0x1430 [ 577.554677][ T1524] ? _parse_integer+0x27/0x40 [ 577.554713][ T1524] ? kstrtoull+0x111/0x140 [ 577.554754][ T1524] __io_register_rsrc_update+0x31b/0xac0 [ 577.554789][ T1524] ? get_pid_task+0x96/0xd0 [ 577.554818][ T1524] ? should_fail_ex+0xdb/0x280 [ 577.554940][ T1524] io_register_rsrc_update+0x10a/0x120 [ 577.554975][ T1524] __se_sys_io_uring_register+0x9bf/0xf30 [ 577.555129][ T1524] ? fput+0x8f/0xc0 [ 577.555231][ T1524] ? ksys_write+0x192/0x1a0 [ 577.555435][ T1524] __x64_sys_io_uring_register+0x55/0x70 [ 577.555487][ T1524] x64_sys_call+0x18a3/0x3000 [ 577.555536][ T1524] do_syscall_64+0xd2/0x200 [ 577.555562][ T1524] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 577.555590][ T1524] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 577.555707][ T1524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.555740][ T1524] RIP: 0033:0x7fbf7e24eec9 [ 577.555757][ T1524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 577.555795][ T1524] RSP: 002b:00007fbf7cc96038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 577.555822][ T1524] RAX: ffffffffffffffda RBX: 00007fbf7e4a6090 RCX: 00007fbf7e24eec9 [ 577.555886][ T1524] RDX: 0000200000000240 RSI: 0000000000000010 RDI: 0000000000000004 [ 577.555978][ T1524] RBP: 00007fbf7cc96090 R08: 0000000000000000 R09: 0000000000000000 [ 577.555995][ T1524] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 577.556012][ T1524] R13: 00007fbf7e4a6128 R14: 00007fbf7e4a6090 R15: 00007ffefbe3f4b8 [ 577.556041][ T1524] [ 577.840267][ T1529] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8777'. [ 578.194124][ T1539] loop2: detected capacity change from 0 to 2048 [ 578.202813][ T9455] bond0 (unregistering): Released all slaves [ 578.295836][ T1531] lo speed is unknown, defaulting to 1000 [ 578.327690][ T35] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.351896][ T2075] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.399334][ T9452] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.408742][ T1473] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.415977][ T1473] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.425082][ T1473] bridge_slave_0: entered allmulticast mode [ 578.442525][ T1473] bridge_slave_0: entered promiscuous mode [ 578.463734][ T1555] bridge0: port 1(batadv0) entered disabled state [ 578.482531][ T1555] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 578.507990][ T9455] hsr_slave_0: left promiscuous mode [ 578.515204][ T9455] hsr_slave_1: left promiscuous mode [ 578.524282][ T9455] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 578.532533][ T9455] batman_adv: batadv0: Removing interface: veth1_vlan [ 578.542432][ T29] kauditd_printk_skb: 279 callbacks suppressed [ 578.542451][ T29] audit: type=1326 audit(1759544785.366:36980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1566 comm="syz.8.8784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb201eec9 code=0x7ffc0000 [ 578.576222][ T9455] veth1_macvtap: left promiscuous mode [ 578.582133][ T29] audit: type=1326 audit(1759544785.366:36981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1566 comm="syz.8.8784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb201eec9 code=0x7ffc0000 [ 578.608136][ T29] audit: type=1326 audit(1759544785.366:36982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1566 comm="syz.8.8784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6eb201eec9 code=0x7ffc0000 [ 578.608725][ T9455] veth0_macvtap: left promiscuous mode [ 578.636677][ T29] audit: type=1326 audit(1759544785.366:36983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1566 comm="syz.8.8784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb201eec9 code=0x7ffc0000 [ 578.668752][ T29] audit: type=1326 audit(1759544785.366:36984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1566 comm="syz.8.8784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6eb201eec9 code=0x7ffc0000 [ 578.669726][ T9455] veth1_vlan: left promiscuous mode [ 578.697007][ T29] audit: type=1326 audit(1759544785.366:36985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1566 comm="syz.8.8784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb201eec9 code=0x7ffc0000 [ 578.719477][ T9455] veth0_vlan: left promiscuous mode [ 578.730196][ T29] audit: type=1326 audit(1759544785.366:36986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1566 comm="syz.8.8784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6eb201eec9 code=0x7ffc0000 [ 578.760386][ T29] audit: type=1326 audit(1759544785.366:36987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1566 comm="syz.8.8784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb201eec9 code=0x7ffc0000 [ 578.764972][ T1572] netlink: 'syz.2.8781': attribute type 10 has an invalid length. [ 578.784834][ T29] audit: type=1326 audit(1759544785.366:36988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1566 comm="syz.8.8784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6eb201eec9 code=0x7ffc0000 [ 578.817232][ T29] audit: type=1326 audit(1759544785.366:36989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1566 comm="syz.8.8784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb201eec9 code=0x7ffc0000 [ 578.900436][ T1555] netlink: 'syz.6.8782': attribute type 10 has an invalid length. [ 578.968504][ T1473] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.975958][ T1473] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.983544][ T1473] bridge_slave_1: entered allmulticast mode [ 578.990317][ T1473] bridge_slave_1: entered promiscuous mode [ 579.016189][ T1473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 579.025671][ T1572] batadv0: left allmulticast mode [ 579.030898][ T1572] batadv0: left promiscuous mode [ 579.036164][ T1572] bridge0: port 1(batadv0) entered disabled state [ 579.045099][ T1572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.063632][ T1579] dummy0: entered promiscuous mode [ 579.072315][ T1579] bridge0: port 1(dummy0) entered blocking state [ 579.079933][ T1579] bridge0: port 1(dummy0) entered disabled state [ 579.087870][ T1579] dummy0: entered allmulticast mode [ 579.098558][ T1579] bridge0: port 1(dummy0) entered blocking state [ 579.105446][ T1579] bridge0: port 1(dummy0) entered forwarding state [ 579.117221][ T1583] batadv0: left promiscuous mode [ 579.122690][ T1583] batadv0: left allmulticast mode [ 579.129509][ T1583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.142920][ T1473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 579.157822][ T1560] batadv0: entered promiscuous mode [ 579.163204][ T1560] batadv0: entered allmulticast mode [ 579.169548][ T1560] bridge0: port 1(batadv0) entered blocking state [ 579.176062][ T1560] bridge0: port 1(batadv0) entered disabled state [ 579.233583][ T1591] loop6: detected capacity change from 0 to 1024 [ 579.241039][ T1591] EXT4-fs: Ignoring removed orlov option [ 579.357181][ T418] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 579.366797][ T418] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 579.427442][ T1589] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 579.445364][ T1473] team0: Port device team_slave_0 added [ 579.452464][ T1473] team0: Port device team_slave_1 added [ 579.501893][ T1595] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 579.519732][ T1571] lo speed is unknown, defaulting to 1000 [ 579.559176][ T1473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 579.566280][ T1473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 579.592858][ T1473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 579.605063][ T1473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 579.612492][ T1473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 579.639278][ T1473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 579.660791][ T1602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.682748][ T1595] batadv0: entered promiscuous mode [ 579.688160][ T1595] batadv0: entered allmulticast mode [ 579.693831][ T1595] bridge0: port 1(batadv0) entered blocking state [ 579.700645][ T1595] bridge0: port 1(batadv0) entered disabled state [ 579.748852][ T1473] hsr_slave_0: entered promiscuous mode [ 579.755888][ T1473] hsr_slave_1: entered promiscuous mode [ 579.765373][ T1611] __nla_validate_parse: 7 callbacks suppressed [ 579.765394][ T1611] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8794'. [ 579.784106][ T1611] netlink: 19 bytes leftover after parsing attributes in process `syz.2.8794'. [ 579.886809][ T418] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 579.896234][ T418] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 579.988731][ T1624] batadv0: left allmulticast mode [ 579.994414][ T1624] batadv0: left promiscuous mode [ 579.999814][ T1624] bridge0: port 1(batadv0) entered disabled state [ 580.010083][ T1624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 580.054963][ T1632] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8801'. [ 580.156069][ T1643] netlink: 156 bytes leftover after parsing attributes in process `syz.6.8805'. [ 580.165275][ T1643] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8805'. [ 580.275141][ T1473] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 580.289209][ T1473] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 580.311287][ T1473] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 580.327323][ T1473] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 580.328982][ T1667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8812'. [ 580.357635][ T1667] dummy0: left allmulticast mode [ 580.362889][ T1667] bridge0: port 1(dummy0) entered disabled state [ 580.409968][ T1691] validate_nla: 9 callbacks suppressed [ 580.409982][ T1691] netlink: 'syz.8.8819': attribute type 21 has an invalid length. [ 580.424907][ T1689] syzkaller0: entered allmulticast mode [ 580.431296][ T1691] netlink: 156 bytes leftover after parsing attributes in process `syz.8.8819'. [ 580.442083][ T1691] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8819'. [ 580.442389][ T1659] loop0: detected capacity change from 0 to 1024 [ 580.478807][ T1659] EXT4-fs: dax option not supported [ 580.489695][ T1672] syzkaller0: entered promiscuous mode [ 580.498725][ T1659] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 580.501127][ T1672] syzkaller0 (unregistering): left allmulticast mode [ 580.601615][ T1672] syzkaller0 (unregistering): left promiscuous mode [ 580.609628][ T1689] siw: device registration error -23 [ 580.632314][ T1696] loop0: detected capacity change from 0 to 1024 [ 580.639692][ T1696] EXT4-fs: Ignoring removed orlov option [ 580.665511][ T1473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.679542][ T1473] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.696525][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.703697][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.720810][ T418] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.728078][ T418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 580.864544][ T1473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 580.873886][ T1714] loop6: detected capacity change from 0 to 1024 [ 580.895408][ T1705] netlink: 'wÞ¡ÿ': attribute type 2 has an invalid length. [ 580.898902][ T1714] EXT4-fs: Ignoring removed orlov option [ 581.039770][ T1716] netlink: 'syz.8.8826': attribute type 10 has an invalid length. [ 581.138514][ T1724] netlink: 'wÞ¡ÿ': attribute type 2 has an invalid length. [ 581.154450][ T1473] veth0_vlan: entered promiscuous mode [ 581.179277][ T1473] veth1_vlan: entered promiscuous mode [ 581.219742][ T1473] veth0_macvtap: entered promiscuous mode [ 581.238638][ T1473] veth1_macvtap: entered promiscuous mode [ 581.254560][ T1473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 581.269059][ T1473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 581.283790][ T2075] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.297655][ T2075] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.316806][ T2075] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.328813][ T2075] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.619665][ T1747] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 581.701828][ T1747] netlink: 'syz.2.8831': attribute type 10 has an invalid length. [ 581.709876][ T1747] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8831'. [ 581.739145][ T1747] netlink: 'syz.2.8831': attribute type 10 has an invalid length. [ 581.778691][ T1747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 581.787881][ T1748] netlink: 'syz.2.8831': attribute type 10 has an invalid length. [ 581.796083][ T1748] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8831'. [ 581.818781][ T1748] batadv0: entered promiscuous mode [ 581.824324][ T1748] batadv0: entered allmulticast mode [ 581.842269][ T1748] bridge0: port 1(batadv0) entered blocking state [ 581.848936][ T1748] bridge0: port 1(batadv0) entered disabled state [ 581.856360][ T1767] loop6: detected capacity change from 0 to 2048 [ 581.946667][ T9452] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 581.956090][ T9452] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 582.006952][ T1782] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5132 sclass=netlink_route_socket pid=1782 comm=syz.0.8843 [ 582.028484][ T1782] loop0: detected capacity change from 0 to 164 [ 582.128534][ T1798] veth0: entered promiscuous mode [ 582.251924][ T1805] netlink: 'syz.6.8852': attribute type 21 has an invalid length. [ 582.351159][ T1810] tipc: Started in network mode [ 582.356121][ T1810] tipc: Node identity 82d42695669d, cluster identity 4711 [ 582.363640][ T1810] tipc: Enabled bearer , priority 0 [ 582.576175][ T1810] syzkaller0: entered promiscuous mode [ 582.581756][ T1810] syzkaller0: entered allmulticast mode [ 582.643789][ T1810] tipc: Resetting bearer [ 582.672440][ T1809] tipc: Resetting bearer [ 582.690248][ T1809] tipc: Disabling bearer [ 582.760100][ T1835] FAULT_INJECTION: forcing a failure. [ 582.760100][ T1835] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 582.773575][ T1835] CPU: 0 UID: 0 PID: 1835 Comm: syz.1.8864 Not tainted syzkaller #0 PREEMPT(voluntary) [ 582.773609][ T1835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 582.773633][ T1835] Call Trace: [ 582.773641][ T1835] [ 582.773674][ T1835] __dump_stack+0x1d/0x30 [ 582.773720][ T1835] dump_stack_lvl+0xe8/0x140 [ 582.773825][ T1835] dump_stack+0x15/0x1b [ 582.773871][ T1835] should_fail_ex+0x265/0x280 [ 582.773942][ T1835] should_fail_alloc_page+0xf2/0x100 [ 582.773974][ T1835] __alloc_frozen_pages_noprof+0xff/0x360 [ 582.774155][ T1835] alloc_pages_mpol+0xb3/0x260 [ 582.774198][ T1835] alloc_pages_noprof+0x90/0x130 [ 582.774243][ T1835] pgd_alloc+0x40/0x290 [ 582.774289][ T1835] mm_init+0x385/0x7f0 [ 582.774377][ T1835] ? kmem_cache_alloc_noprof+0x2b8/0x480 [ 582.774415][ T1835] copy_mm+0x101/0x370 [ 582.774453][ T1835] copy_process+0xd08/0x2000 [ 582.774509][ T1835] kernel_clone+0x16c/0x5c0 [ 582.774538][ T1835] ? vfs_write+0x7e8/0x960 [ 582.774565][ T1835] __x64_sys_clone+0xe6/0x120 [ 582.774653][ T1835] x64_sys_call+0x119c/0x3000 [ 582.774681][ T1835] do_syscall_64+0xd2/0x200 [ 582.774761][ T1835] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 582.774790][ T1835] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 582.774834][ T1835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.774898][ T1835] RIP: 0033:0x7f9be68feec9 [ 582.774916][ T1835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 582.774940][ T1835] RSP: 002b:00007f9be5366fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 582.775004][ T1835] RAX: ffffffffffffffda RBX: 00007f9be6b55fa0 RCX: 00007f9be68feec9 [ 582.775022][ T1835] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000400 [ 582.775053][ T1835] RBP: 00007f9be5367090 R08: 0000000000000000 R09: 0000000000000000 [ 582.775114][ T1835] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 582.775128][ T1835] R13: 00007f9be6b56038 R14: 00007f9be6b55fa0 R15: 00007fffe1296a68 [ 582.775157][ T1835] [ 583.228921][ T1862] bridge_slave_0: left allmulticast mode [ 583.234710][ T1862] bridge_slave_0: left promiscuous mode [ 583.240629][ T1862] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.255622][ T1862] bridge_slave_1: left allmulticast mode [ 583.261359][ T1862] bridge_slave_1: left promiscuous mode [ 583.267081][ T1862] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.277819][ T1862] bond0: (slave bond_slave_0): Releasing backup interface [ 583.289028][ T1862] bond0: (slave bond_slave_1): Releasing backup interface [ 583.320290][ T1862] team0: Port device team_slave_0 removed [ 583.346226][ T1862] team0: Port device team_slave_1 removed [ 583.353638][ T1862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 583.361224][ T1862] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 583.388977][ T1862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 583.396949][ T1862] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.419612][ T1862] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 583.453827][ T1862] netlink: 'syz.1.8874': attribute type 10 has an invalid length. [ 583.464943][ T1862] batman_adv: batadv0: Adding interface: veth1_vlan [ 583.472088][ T1862] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.498458][ T1862] batman_adv: batadv0: Interface activated: veth1_vlan [ 583.505742][ T1864] netlink: 'syz.1.8874': attribute type 10 has an invalid length. [ 583.529414][ T1864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 583.538788][ T1864] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 583.552699][ T1862] batadv0: entered promiscuous mode [ 583.555230][ T29] kauditd_printk_skb: 430 callbacks suppressed [ 583.555250][ T29] audit: type=1400 audit(1759544790.376:37420): avc: denied { map_create } for pid=1888 comm="syz.8.8881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 583.557997][ T1862] batadv0: entered allmulticast mode [ 583.590106][ T29] audit: type=1400 audit(1759544790.376:37421): avc: denied { map_read map_write } for pid=1888 comm="syz.8.8881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 583.610954][ T29] audit: type=1400 audit(1759544790.376:37422): avc: denied { prog_run } for pid=1888 comm="syz.8.8881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 583.631600][ T1862] bond0: (slave batadv0): Releasing backup interface [ 583.642160][ T1862] bridge0: port 1(batadv0) entered blocking state [ 583.649139][ T1862] bridge0: port 1(batadv0) entered disabled state [ 583.659835][ T1901] batadv0: entered promiscuous mode [ 583.665200][ T1901] batadv0: entered allmulticast mode [ 583.674085][ T1901] bond0: (slave batadv0): Releasing backup interface [ 583.688091][ T1901] bridge0: port 1(batadv0) entered blocking state [ 583.694896][ T1901] bridge0: port 1(batadv0) entered disabled state [ 583.705816][ T1898] batadv0: left allmulticast mode [ 583.711179][ T1898] batadv0: left promiscuous mode [ 583.716379][ T1898] bridge0: port 1(batadv0) entered disabled state [ 583.722103][ T29] audit: type=1326 audit(1759544790.546:37423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1907 comm="syz.1.8885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be68feec9 code=0x7ffc0000 [ 583.747111][ T29] audit: type=1326 audit(1759544790.546:37424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1907 comm="syz.1.8885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be68feec9 code=0x7ffc0000 [ 583.772343][ T29] audit: type=1326 audit(1759544790.546:37425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1907 comm="syz.1.8885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9be68feec9 code=0x7ffc0000 [ 583.796070][ T29] audit: type=1326 audit(1759544790.546:37426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1907 comm="syz.1.8885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be68feec9 code=0x7ffc0000 [ 583.820287][ T29] audit: type=1326 audit(1759544790.546:37427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1907 comm="syz.1.8885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be68feec9 code=0x7ffc0000 [ 583.844423][ T29] audit: type=1326 audit(1759544790.546:37428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1907 comm="syz.1.8885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9be68feec9 code=0x7ffc0000 [ 583.868826][ T29] audit: type=1326 audit(1759544790.546:37429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1907 comm="syz.1.8885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be68feec9 code=0x7ffc0000 [ 583.907711][ T1898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 583.992519][ T1900] batadv0: entered promiscuous mode [ 583.997879][ T1900] batadv0: entered allmulticast mode [ 584.020408][ T1900] bridge0: port 1(batadv0) entered blocking state [ 584.027280][ T1900] bridge0: port 1(batadv0) entered disabled state [ 584.096823][ T2075] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 584.106476][ T2075] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 584.144310][ T2075] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 584.153798][ T2075] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 584.171712][ T1932] tipc: Started in network mode [ 584.176693][ T1932] tipc: Node identity 26c36398ab98, cluster identity 4711 [ 584.183969][ T1932] tipc: Enabled bearer , priority 0 [ 584.190929][ T1936] loop0: detected capacity change from 0 to 1024 [ 584.198940][ T1936] EXT4-fs: Ignoring removed orlov option [ 584.211621][ T1936] EXT4-fs mount: 22 callbacks suppressed [ 584.211644][ T1936] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 584.250820][ T1933] tipc: Disabling bearer [ 584.279432][ T1945] bridge0: port 1(batadv0) entered disabled state [ 584.300532][ T1945] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 584.357688][ T1951] batadv0: left allmulticast mode [ 584.362981][ T1951] batadv0: left promiscuous mode [ 584.368266][ T1951] bridge0: port 1(batadv0) entered disabled state [ 584.395323][ T1951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 584.414675][ T1962] batadv0: entered promiscuous mode [ 584.420121][ T1962] batadv0: entered allmulticast mode [ 584.430358][ T1962] bridge0: port 1(batadv0) entered blocking state [ 584.437067][ T1962] bridge0: port 1(batadv0) entered disabled state [ 584.459205][ T1946] batadv0: left allmulticast mode [ 584.464398][ T1946] batadv0: left promiscuous mode [ 584.469600][ T1946] bridge0: port 1(batadv0) entered disabled state [ 584.480665][ T1969] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51994 sclass=netlink_route_socket pid=1969 comm=syz.8.8901 [ 584.500493][ T1946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 584.541803][ T1945] batadv0: left promiscuous mode [ 584.547811][ T1945] batadv0: left allmulticast mode [ 584.567672][ T1945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 584.579671][ T1945] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 584.593858][ T1945] batadv0: entered promiscuous mode [ 584.599278][ T1945] batadv0: entered allmulticast mode [ 584.606390][T30516] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.609232][ T1945] bond0: (slave batadv0): Releasing backup interface [ 584.637270][ T1945] bridge0: port 1(batadv0) entered blocking state [ 584.644181][ T1945] bridge0: port 1(batadv0) entered disabled state [ 584.719781][ T1980] veth0_vlan: entered allmulticast mode [ 584.792920][ T1984] loop6: detected capacity change from 0 to 2048 [ 584.808501][ T1984] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 584.822251][ T1984] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.884247][ T1988] __nla_validate_parse: 15 callbacks suppressed [ 584.884267][ T1988] netlink: 4276 bytes leftover after parsing attributes in process `syz.1.8908'. [ 584.909268][ T1988] netlink: 4276 bytes leftover after parsing attributes in process `syz.1.8908'. [ 584.918977][ T1988] netlink: 380 bytes leftover after parsing attributes in process `syz.1.8908'. [ 585.127635][ T9452] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 585.137050][ T9452] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 585.257110][ T2020] pim6reg1: entered promiscuous mode [ 585.263028][ T2020] pim6reg1: entered allmulticast mode [ 585.278657][ T2013] batadv0: left allmulticast mode [ 585.284224][ T2013] batadv0: left promiscuous mode [ 585.290209][ T2013] bridge0: port 1(batadv0) entered disabled state [ 585.314812][ T2013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.322554][ T2018] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8917'. [ 585.324295][ T2013] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 585.478569][ T2018] batadv0: entered promiscuous mode [ 585.483939][ T2018] batadv0: entered allmulticast mode [ 585.492016][ T2018] bond0: (slave batadv0): Releasing backup interface [ 585.502854][ T2018] bridge0: port 1(batadv0) entered blocking state [ 585.509656][ T2018] bridge0: port 1(batadv0) entered disabled state [ 585.518296][ T2010] lo speed is unknown, defaulting to 1000 [ 585.595222][ T2051] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 585.705639][ T2051] lo speed is unknown, defaulting to 1000 [ 585.857343][ T2051] loop0: detected capacity change from 0 to 256 [ 585.864490][ T2051] vfat: Unknown parameter 'shortnˆ#“‚%ame' [ 585.964270][ T2054] validate_nla: 14 callbacks suppressed [ 585.964293][ T2054] netlink: 'syz.2.8921': attribute type 10 has an invalid length. [ 586.078801][ T2054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 586.105597][ T2054] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 586.392486][ T2080] loop6: detected capacity change from 0 to 512 [ 586.401863][ T2080] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.8927: error while reading EA inode 32 err=-116 [ 586.414877][ T2080] EXT4-fs (loop6): Remounting filesystem read-only [ 586.421699][ T2080] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 586.432820][ T2080] EXT4-fs (loop6): 1 orphan inode deleted [ 586.439521][ T2080] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 586.452846][ T2080] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.603365][ T2087] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8934'. [ 586.648575][ T2092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8936'. [ 586.678331][ T2071] lo speed is unknown, defaulting to 1000 [ 586.735592][ T2101] netlink: 'syz.8.8935': attribute type 10 has an invalid length. [ 586.767615][ T2101] batadv0: left allmulticast mode [ 586.772764][ T2101] batadv0: left promiscuous mode [ 586.778106][ T2101] bridge0: port 1(batadv0) entered disabled state [ 586.800237][ T2101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 586.809592][ T2101] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 586.933207][ T2113] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8941'. [ 587.001568][ T2118] FAULT_INJECTION: forcing a failure. [ 587.001568][ T2118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 587.014882][ T2118] CPU: 1 UID: 0 PID: 2118 Comm: syz.2.8943 Not tainted syzkaller #0 PREEMPT(voluntary) [ 587.014918][ T2118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 587.014933][ T2118] Call Trace: [ 587.014941][ T2118] [ 587.014950][ T2118] __dump_stack+0x1d/0x30 [ 587.014987][ T2118] dump_stack_lvl+0xe8/0x140 [ 587.015104][ T2118] dump_stack+0x15/0x1b [ 587.015138][ T2118] should_fail_ex+0x265/0x280 [ 587.015251][ T2118] should_fail+0xb/0x20 [ 587.015285][ T2118] should_fail_usercopy+0x1a/0x20 [ 587.015361][ T2118] _copy_to_user+0x20/0xa0 [ 587.015384][ T2118] simple_read_from_buffer+0xb5/0x130 [ 587.015411][ T2118] proc_fail_nth_read+0x10e/0x150 [ 587.015485][ T2118] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 587.015524][ T2118] vfs_read+0x1a8/0x770 [ 587.015552][ T2118] ? __rcu_read_unlock+0x4f/0x70 [ 587.015586][ T2118] ? __fget_files+0x184/0x1c0 [ 587.015661][ T2118] ksys_read+0xda/0x1a0 [ 587.015740][ T2118] __x64_sys_read+0x40/0x50 [ 587.015772][ T2118] x64_sys_call+0x27c0/0x3000 [ 587.015800][ T2118] do_syscall_64+0xd2/0x200 [ 587.015825][ T2118] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 587.015887][ T2118] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 587.015928][ T2118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.016015][ T2118] RIP: 0033:0x7fbf7e24d8dc [ 587.016032][ T2118] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 587.016050][ T2118] RSP: 002b:00007fbf7ccb7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 587.016072][ T2118] RAX: ffffffffffffffda RBX: 00007fbf7e4a5fa0 RCX: 00007fbf7e24d8dc [ 587.016089][ T2118] RDX: 000000000000000f RSI: 00007fbf7ccb70a0 RDI: 0000000000000004 [ 587.016106][ T2118] RBP: 00007fbf7ccb7090 R08: 0000000000000000 R09: 0000000000000000 [ 587.016122][ T2118] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 587.016138][ T2118] R13: 00007fbf7e4a6038 R14: 00007fbf7e4a5fa0 R15: 00007ffefbe3f4b8 [ 587.016178][ T2118] [ 587.284214][ T2116] bridge0: entered promiscuous mode [ 587.294155][ T2116] macvtap1: entered allmulticast mode [ 587.299798][ T2116] bridge0: entered allmulticast mode [ 587.306349][ T2116] bridge0: port 2(macvtap1) entered blocking state [ 587.313197][ T2116] bridge0: port 2(macvtap1) entered disabled state [ 587.323536][ T2116] bridge0: left allmulticast mode [ 587.328788][ T2116] bridge0: left promiscuous mode [ 587.390473][ T2129] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8947'. [ 587.406279][ T2129] netlink: 19 bytes leftover after parsing attributes in process `syz.1.8947'. [ 587.481802][ T2136] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.543959][ T2149] netlink: 'syz.6.8948': attribute type 10 has an invalid length. [ 587.554490][ T2149] batadv0: left allmulticast mode [ 587.560238][ T2149] batadv0: left promiscuous mode [ 587.565626][ T2149] bridge0: port 1(batadv0) entered disabled state [ 587.594407][ T2149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.627300][ T2152] vlan2: entered allmulticast mode [ 587.632588][ T2152] bridge_slave_0: entered allmulticast mode [ 587.691524][ T2136] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.770177][ T2136] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.778647][ T2167] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8958'. [ 587.822579][ T2136] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.897422][ T3489] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.913962][ T3489] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.934540][ T3489] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.943080][ T3489] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.975014][ T2170] siw: device registration error -23 [ 588.003525][ T2181] netlink: 'syz.8.8962': attribute type 10 has an invalid length. [ 588.035821][ T2190] bond0: (slave batadv0): Releasing backup interface [ 588.056082][ T2184] netlink: 'syz.8.8962': attribute type 10 has an invalid length. [ 588.064380][ T2188] loop6: detected capacity change from 0 to 2048 [ 588.096967][ T2190] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 588.116954][ T2188] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 588.161309][ T2188] EXT4-fs error (device loop6): ext4_find_inline_data_nolock:169: inode #12: comm syz.6.8963: inline data xattr refers to an external xattr inode [ 588.263586][ T2198] netlink: 'syz.2.8964': attribute type 10 has an invalid length. [ 588.315547][ T2205] netlink: 'syz.2.8964': attribute type 10 has an invalid length. [ 588.372089][ T2212] netlink: 'syz.2.8964': attribute type 10 has an invalid length. [ 588.420749][ T2201] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 588.463829][ T2197] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 588.481710][ T2184] batadv0: entered promiscuous mode [ 588.487583][ T2184] batadv0: entered allmulticast mode [ 588.497332][ T2184] bond0: (slave batadv0): Releasing backup interface [ 588.506646][ T2184] bridge0: port 1(batadv0) entered blocking state [ 588.513565][ T2184] bridge0: port 1(batadv0) entered disabled state [ 588.527273][ T2205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.536421][ T2205] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 588.545757][ T2212] batadv0: entered promiscuous mode [ 588.551573][ T2212] batadv0: entered allmulticast mode [ 588.558975][ T2212] bond0: (slave batadv0): Releasing backup interface [ 588.580787][ T2212] bridge0: port 1(batadv0) entered blocking state [ 588.587399][ T2212] bridge0: port 1(batadv0) entered disabled state [ 588.625931][ T29] kauditd_printk_skb: 399 callbacks suppressed [ 588.625947][ T29] audit: type=1326 audit(1759544795.446:37829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2226 comm="syz.2.8972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf7e24eec9 code=0x7ffc0000 [ 588.643322][ T2222] netlink: 'syz.0.8971': attribute type 10 has an invalid length. [ 588.670616][ T29] audit: type=1326 audit(1759544795.496:37830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2226 comm="syz.2.8972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fbf7e24eec9 code=0x7ffc0000 [ 588.681317][ T2222] netlink: 'syz.0.8971': attribute type 10 has an invalid length. [ 588.724349][T31319] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 588.733914][ T29] audit: type=1326 audit(1759544795.546:37831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2226 comm="syz.2.8972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf7e24eec9 code=0x7ffc0000 [ 588.760858][ T29] audit: type=1326 audit(1759544795.546:37832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2226 comm="syz.2.8972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf7e24eec9 code=0x7ffc0000 [ 588.790008][ T2075] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 588.799548][ T2075] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 588.849612][ T29] audit: type=1326 audit(1759544795.676:37833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2240 comm="syz.8.8977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb201eec9 code=0x7ffc0000 [ 588.873922][ T29] audit: type=1326 audit(1759544795.676:37834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2240 comm="syz.8.8977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb201eec9 code=0x7ffc0000 [ 588.909784][ T29] audit: type=1326 audit(1759544795.736:37835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2240 comm="syz.8.8977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6eb201eec9 code=0x7ffc0000 [ 588.947642][ T2075] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 588.957052][ T2075] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 588.980328][ T29] audit: type=1326 audit(1759544795.766:37836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2240 comm="syz.8.8977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb201eec9 code=0x7ffc0000 [ 589.004207][ T29] audit: type=1326 audit(1759544795.766:37837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2240 comm="syz.8.8977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb201eec9 code=0x7ffc0000 [ 589.028870][ T29] audit: type=1326 audit(1759544795.766:37838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2240 comm="syz.8.8977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6eb201eec9 code=0x7ffc0000 [ 589.192757][ T2250] lo speed is unknown, defaulting to 1000 [ 589.778075][ T2298] siw: device registration error -23 [ 589.807533][ T2306] FAULT_INJECTION: forcing a failure. [ 589.807533][ T2306] name failslab, interval 1, probability 0, space 0, times 0 [ 589.823746][ T2306] CPU: 1 UID: 0 PID: 2306 Comm: syz.1.8994 Not tainted syzkaller #0 PREEMPT(voluntary) [ 589.823789][ T2306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 589.823806][ T2306] Call Trace: [ 589.823815][ T2306] [ 589.823827][ T2306] __dump_stack+0x1d/0x30 [ 589.823871][ T2306] dump_stack_lvl+0xe8/0x140 [ 589.823914][ T2306] dump_stack+0x15/0x1b [ 589.824077][ T2306] should_fail_ex+0x265/0x280 [ 589.824117][ T2306] should_failslab+0x8c/0xb0 [ 589.824148][ T2306] kmem_cache_alloc_noprof+0x50/0x480 [ 589.824181][ T2306] ? getname_kernel+0x3c/0x1f0 [ 589.824273][ T2306] getname_kernel+0x3c/0x1f0 [ 589.824304][ T2306] kern_path+0x23/0x130 [ 589.824354][ T2306] autofs_dev_ioctl_ismountpoint+0x163/0x4c0 [ 589.824451][ T2306] ? __pfx_autofs_dev_ioctl_ismountpoint+0x10/0x10 [ 589.824564][ T2306] ? __pfx_autofs_dev_ioctl_ismountpoint+0x10/0x10 [ 589.824605][ T2306] autofs_dev_ioctl+0x351/0x6a0 [ 589.824648][ T2306] ? __pfx_autofs_dev_ioctl+0x10/0x10 [ 589.824811][ T2306] __se_sys_ioctl+0xcb/0x140 [ 589.824838][ T2306] __x64_sys_ioctl+0x43/0x50 [ 589.824940][ T2306] x64_sys_call+0x1816/0x3000 [ 589.825033][ T2306] do_syscall_64+0xd2/0x200 [ 589.825059][ T2306] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 589.825151][ T2306] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 589.825226][ T2306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.825290][ T2306] RIP: 0033:0x7f9be68feec9 [ 589.825354][ T2306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 589.825373][ T2306] RSP: 002b:00007f9be5367038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 589.825397][ T2306] RAX: ffffffffffffffda RBX: 00007f9be6b55fa0 RCX: 00007f9be68feec9 [ 589.825414][ T2306] RDX: 0000200000000200 RSI: 00000000c018937e RDI: 0000000000000005 [ 589.825431][ T2306] RBP: 00007f9be5367090 R08: 0000000000000000 R09: 0000000000000000 [ 589.825447][ T2306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 589.825495][ T2306] R13: 00007f9be6b56038 R14: 00007f9be6b55fa0 R15: 00007fffe1296a68 [ 589.825523][ T2306] [ 590.105815][ T2316] __nla_validate_parse: 10 callbacks suppressed [ 590.105836][ T2316] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8998'. [ 590.142205][ T2313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8997'. [ 590.183664][ T2328] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9003'. [ 590.196969][ T2328] netlink: 19 bytes leftover after parsing attributes in process `syz.6.9003'. [ 590.260436][ T2339] loop6: detected capacity change from 0 to 128 [ 590.270797][ T2339] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 590.983630][ T2368] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9011'. [ 591.121759][ T2376] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9012'. [ 591.242106][ T2355] lo speed is unknown, defaulting to 1000 [ 591.250106][ T2382] loop2: detected capacity change from 0 to 2048 [ 591.306861][ T2387] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9016'. [ 591.351262][ T2382] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 591.374915][ T2382] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.376035][ T2387] netlink: 19 bytes leftover after parsing attributes in process `syz.0.9016'. [ 591.489347][ T2407] loop1: detected capacity change from 0 to 2048 [ 591.500372][ T2409] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9022'. [ 591.539712][ T2407] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 591.560550][ T2407] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.686513][ T2416] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 591.704350][ T2422] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9025'. [ 591.801484][ T2428] validate_nla: 3 callbacks suppressed [ 591.801520][ T2428] netlink: 'syz.1.9026': attribute type 10 has an invalid length. [ 591.838742][ T2428] batadv0: left allmulticast mode [ 591.843957][ T2428] batadv0: left promiscuous mode [ 591.849228][ T2428] bridge0: port 1(batadv0) entered disabled state [ 591.864605][ T2429] netlink: 'syz.1.9026': attribute type 10 has an invalid length. [ 591.911937][ T2428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 591.970787][ T2437] netlink: 'syz.0.9024': attribute type 10 has an invalid length. [ 592.001755][ T2439] siw: device registration error -23 [ 592.034253][ T2441] netlink: 'syz.0.9024': attribute type 10 has an invalid length. [ 592.055986][ T2428] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 592.065145][ T2429] batadv0: entered promiscuous mode [ 592.071170][ T2429] batadv0: entered allmulticast mode [ 592.103695][ T2445] netlink: 'syz.0.9024': attribute type 10 has an invalid length. [ 592.139865][ T2429] bond0: (slave batadv0): Releasing backup interface [ 592.163609][ T2429] bridge0: port 1(batadv0) entered blocking state [ 592.171234][ T2429] bridge0: port 1(batadv0) entered disabled state [ 592.221772][ T2437] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 592.387992][ T3489] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 592.397474][ T3489] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 592.498543][ T2466] SELinux: ebitmap start bit (285213504) is beyond the end of the bitmap (1088) [ 592.510645][ T2466] SELinux: failed to load policy [ 592.518114][ T2456] siw: device registration error -23 [ 592.532593][ T2466] ------------[ cut here ]------------ [ 592.538399][ T2466] verifier bug: REG INVARIANTS VIOLATION (true_reg2): range bounds violation u64=[0x17, 0x10] s64=[0x17, 0x10] u32=[0x17, 0x10] s32=[0x17, 0x10] var_off=(0x10, 0x0) [ 592.555209][ T2466] WARNING: CPU: 0 PID: 2466 at kernel/bpf/verifier.c:2721 reg_bounds_sanity_check+0x673/0x680 [ 592.565748][ T2466] Modules linked in: [ 592.569941][ T2466] CPU: 0 UID: 0 PID: 2466 Comm: syz.6.9035 Not tainted syzkaller #0 PREEMPT(voluntary) [ 592.580316][ T2466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 592.590574][ T2466] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 592.597524][ T2466] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 62 06 bb ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 592.618092][ T2466] RSP: 0018:ffffc9000127f408 EFLAGS: 00010282 [ 592.624284][ T2466] RAX: c62ad87204742600 RBX: ffff8881099590b0 RCX: 0000000000080000 [ 592.632543][ T2466] RDX: ffffc9000fe07000 RSI: 00000000000095fc RDI: 00000000000095fd [ 592.640676][ T2466] RBP: 0000000000000010 R08: 0001c9000127f257 R09: 0000000000000000 [ 592.648873][ T2466] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff888109959070 [ 592.656935][ T2466] R13: ffff8881101e0000 R14: ffff8881101e0000 R15: ffff8881099590a8 [ 592.664942][ T2466] FS: 00007fbb061a76c0(0000) GS:ffff8882aee4d000(0000) knlGS:0000000000000000 [ 592.674014][ T2466] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 592.680747][ T2466] CR2: 0000001b32013ff8 CR3: 0000000187f9a000 CR4: 00000000003506f0 [ 592.689027][ T2466] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 592.697425][ T2466] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 592.705582][ T2466] Call Trace: [ 592.708908][ T2466] [ 592.711893][ T2466] reg_set_min_max+0x1eb/0x260 [ 592.717006][ T2466] check_cond_jmp_op+0x1370/0x19e0 [ 592.722745][ T2466] do_check+0x3321/0x83b0 [ 592.727823][ T2466] do_check_common+0xc5e/0x12b0 [ 592.734046][ T2466] bpf_check+0xaaae/0xd9d0 [ 592.738930][ T2466] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 592.745207][ T2466] ? __vmap_pages_range_noflush+0xbc4/0xcf0 [ 592.751776][ T2466] ? css_rstat_updated+0xb7/0x240 [ 592.757000][ T2466] ? css_rstat_updated+0xb7/0x240 [ 592.762110][ T2466] ? _find_next_zero_bit+0x64/0xa0 [ 592.767316][ T2466] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 592.773528][ T2466] ? _find_next_zero_bit+0x29/0xa0 [ 592.778816][ T2466] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 592.784989][ T2466] ? css_rstat_updated+0xb7/0x240 [ 592.790165][ T2466] ? __rcu_read_unlock+0x4f/0x70 [ 592.795199][ T2466] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 592.801095][ T2466] ? bpf_prog_alloc+0x5b/0x150 [ 592.805915][ T2466] ? pcpu_alloc_noprof+0xd29/0x1250 [ 592.811373][ T2466] ? should_fail_ex+0x30/0x280 [ 592.816223][ T2466] ? should_failslab+0x8c/0xb0 [ 592.821077][ T2466] ? __kmalloc_noprof+0x2a2/0x570 [ 592.826237][ T2466] ? security_bpf_prog_load+0x60/0x140 [ 592.831927][ T2466] ? selinux_bpf_prog_load+0xad/0xd0 [ 592.837312][ T2466] ? security_bpf_prog_load+0x9e/0x140 [ 592.842932][ T2466] bpf_prog_load+0xf6e/0x1100 [ 592.847703][ T2466] ? security_bpf+0x2b/0x90 [ 592.852247][ T2466] __sys_bpf+0x469/0x7c0 [ 592.856594][ T2466] __x64_sys_bpf+0x41/0x50 [ 592.861259][ T2466] x64_sys_call+0x2aee/0x3000 [ 592.866088][ T2466] do_syscall_64+0xd2/0x200 [ 592.870750][ T2466] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 592.876996][ T2466] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 592.882885][ T2466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.889046][ T2466] RIP: 0033:0x7fbb0773eec9 [ 592.893814][ T2466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.914785][ T2466] RSP: 002b:00007fbb061a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 592.923463][ T2466] RAX: ffffffffffffffda RBX: 00007fbb07995fa0 RCX: 00007fbb0773eec9 [ 592.931651][ T2466] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 592.939811][ T2466] RBP: 00007fbb077c1f91 R08: 0000000000000000 R09: 0000000000000000 [ 592.948087][ T2466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 592.956218][ T2466] R13: 00007fbb07996038 R14: 00007fbb07995fa0 R15: 00007ffdd23bb6b8 [ 592.964324][ T2466] [ 592.967590][ T2466] ---[ end trace 0000000000000000 ]--- [ 592.984512][ T2477] netlink: 'syz.1.9040': attribute type 21 has an invalid length. [ 593.109812][ T2482] netlink: 'syz.8.9041': attribute type 10 has an invalid length. [ 593.163086][ T2483] netlink: 'syz.8.9041': attribute type 10 has an invalid length. [ 593.538750][ T2470] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 593.560806][ T2482] batadv0: left allmulticast mode [ 593.566128][ T2482] batadv0: left promiscuous mode [ 593.571426][ T2482] bridge0: port 1(batadv0) entered disabled state [ 593.582075][ T2482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 593.592247][ T2482] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 593.602048][ T2483] batadv0: entered promiscuous mode [ 593.607303][ T2483] batadv0: entered allmulticast mode [ 593.614443][ T2483] bond0: (slave batadv0): Releasing backup interface [ 593.641024][ T2483] bridge0: port 1(batadv0) entered blocking state [ 593.647578][ T2483] bridge0: port 1(batadv0) entered disabled state [ 593.758135][ T2504] loop0: detected capacity change from 0 to 1024 [ 593.765059][ T2504] EXT4-fs: Ignoring removed orlov option [ 593.773180][ T2504] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 593.821739][ T2510] bridge0: port 1(batadv0) entered disabled state [ 593.847866][ T2510] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 593.907600][ T2510] netlink: 'syz.2.9051': attribute type 10 has an invalid length. [ 593.935644][ T2510] netlink: 'syz.2.9051': attribute type 10 has an invalid length. [ 593.964983][ T2522] bridge0: port 1(batadv0) entered disabled state [ 594.000111][ T2522] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 594.007370][ T2522] batman_adv: batadv0: Removing interface: veth1_vlan [ 594.122794][ T2510] batadv0: left promiscuous mode [ 594.127869][ T2510] batadv0: left allmulticast mode [ 594.150324][ T2510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 594.163424][ T2510] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 594.172494][ T2525] batadv0: entered promiscuous mode [ 594.177837][ T2525] batadv0: entered allmulticast mode [ 594.185484][ T2525] bond0: (slave batadv0): Releasing backup interface [ 594.205407][ T2525] bridge0: port 1(batadv0) entered blocking state [ 594.212158][ T2525] bridge0: port 1(batadv0) entered disabled state [ 594.225467][ T2524] siw: device registration error -23 [ 594.232502][ T2522] batman_adv: batadv0: Adding interface: veth1_vlan [ 594.239339][ T2522] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 594.265883][ T2522] batman_adv: batadv0: Interface activated: veth1_vlan [ 594.283455][ T2526] batadv0: left promiscuous mode [ 594.288765][ T2526] batadv0: left allmulticast mode [ 594.297989][ T2526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 594.307297][ T2526] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 594.326366][ T2544] batadv0: left allmulticast mode [ 594.331671][ T2544] batadv0: left promiscuous mode [ 594.337076][ T2544] bridge0: port 1(batadv0) entered disabled state [ 594.351846][ T2544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 594.364897][ T2544] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 594.374127][ T2522] batadv0: entered promiscuous mode [ 594.379481][ T2522] batadv0: entered allmulticast mode [ 594.386041][ T2522] bond0: (slave batadv0): Releasing backup interface [ 594.396205][ T2522] bridge0: port 1(batadv0) entered blocking state [ 594.403015][ T2522] bridge0: port 1(batadv0) entered disabled state [ 594.413938][ T2544] batadv0: entered promiscuous mode [ 594.419678][ T2544] batadv0: entered allmulticast mode [ 594.427227][ T2544] bond0: (slave batadv0): Releasing backup interface [ 594.443088][ T2544] bridge0: port 1(batadv0) entered blocking state [ 594.449751][ T2544] bridge0: port 1(batadv0) entered disabled state [ 594.535865][ T2560] loop6: detected capacity change from 0 to 512 [ 594.542850][ T2560] journal_path: Non-blockdev passed as './bus' [ 594.549343][ T2560] EXT4-fs: error: could not find journal device path [ 594.557732][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 594.557751][ T29] audit: type=1326 audit(1759544801.376:38015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2558 comm="syz.1.9068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be68feec9 code=0x7ffc0000 [ 594.567924][ T3489] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 594.587806][ T29] audit: type=1326 audit(1759544801.376:38016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2558 comm="syz.1.9068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9be68feec9 code=0x7ffc0000 [ 594.597351][ T3489] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 594.630179][ T29] audit: type=1326 audit(1759544801.386:38017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2558 comm="syz.1.9068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be68feec9 code=0x7ffc0000 [ 594.663140][ T29] audit: type=1326 audit(1759544801.386:38018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2558 comm="syz.1.9068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9be68feec9 code=0x7ffc0000 [ 594.687250][ T29] audit: type=1326 audit(1759544801.386:38019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2558 comm="syz.1.9068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be68feec9 code=0x7ffc0000 [ 594.688819][ T9484] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 594.711085][ T29] audit: type=1326 audit(1759544801.386:38020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2558 comm="syz.1.9068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be68feec9 code=0x7ffc0000 [ 594.711132][ T29] audit: type=1326 audit(1759544801.386:38021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2558 comm="syz.1.9068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9be68feec9 code=0x7ffc0000 [ 594.720610][ T9484] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 594.744334][ T29] audit: type=1326 audit(1759544801.386:38022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2558 comm="syz.1.9068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be68feec9 code=0x7ffc0000 [ 594.801384][ T29] audit: type=1326 audit(1759544801.386:38023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2558 comm="syz.1.9068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be68feec9 code=0x7ffc0000 [ 594.825321][ T29] audit: type=1326 audit(1759544801.386:38024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2558 comm="syz.1.9068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9be68feec9 code=0x7ffc0000 [ 594.855716][ T2561] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.884808][ T2568] loop6: detected capacity change from 0 to 128 [ 594.894248][T30516] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.923896][ T2561] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.959366][ T2571] siw: device registration error -23 [ 594.995932][ T2561] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.007660][ T2584] loop0: detected capacity change from 0 to 512 [ 595.018274][ T2584] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 595.028141][ T2584] EXT4-fs (loop0): group descriptors corrupted! [ 595.059766][ T2584] loop0: detected capacity change from 0 to 512 [ 595.075363][ T2584] journal_path: Non-blockdev passed as './bus' [ 595.081996][ T2584] EXT4-fs: error: could not find journal device path [ 595.101482][ T2561] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.151987][ T2605] FAULT_INJECTION: forcing a failure. [ 595.151987][ T2605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 595.165585][ T2605] CPU: 1 UID: 0 PID: 2605 Comm: syz.6.9084 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 595.165720][ T2605] Tainted: [W]=WARN [ 595.165727][ T2605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 595.165742][ T2605] Call Trace: [ 595.165749][ T2605] [ 595.165758][ T2605] __dump_stack+0x1d/0x30 [ 595.165799][ T2605] dump_stack_lvl+0xe8/0x140 [ 595.165837][ T2605] dump_stack+0x15/0x1b [ 595.165901][ T2605] should_fail_ex+0x265/0x280 [ 595.165935][ T2605] should_fail+0xb/0x20 [ 595.165965][ T2605] should_fail_usercopy+0x1a/0x20 [ 595.165999][ T2605] _copy_from_user+0x1c/0xb0 [ 595.166082][ T2605] ucma_join_multicast+0x52/0xe0 [ 595.166122][ T2605] ucma_write+0x1b3/0x250 [ 595.166148][ T2605] ? __pfx_ucma_write+0x10/0x10 [ 595.166233][ T2605] vfs_write+0x269/0x960 [ 595.166259][ T2605] ? __rcu_read_unlock+0x4f/0x70 [ 595.166287][ T2605] ? __fget_files+0x184/0x1c0 [ 595.166320][ T2605] ksys_write+0xda/0x1a0 [ 595.166390][ T2605] __x64_sys_write+0x40/0x50 [ 595.166417][ T2605] x64_sys_call+0x2802/0x3000 [ 595.166440][ T2605] do_syscall_64+0xd2/0x200 [ 595.166470][ T2605] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 595.166514][ T2605] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 595.166622][ T2605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.166643][ T2605] RIP: 0033:0x7fbb0773eec9 [ 595.166693][ T2605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 595.166717][ T2605] RSP: 002b:00007fbb061a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 595.166743][ T2605] RAX: ffffffffffffffda RBX: 00007fbb07995fa0 RCX: 00007fbb0773eec9 [ 595.166760][ T2605] RDX: 00000000000000a0 RSI: 0000200000000d40 RDI: 0000000000000003 [ 595.166783][ T2605] RBP: 00007fbb061a7090 R08: 0000000000000000 R09: 0000000000000000 [ 595.166799][ T2605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 595.166863][ T2605] R13: 00007fbb07996038 R14: 00007fbb07995fa0 R15: 00007ffdd23bb6b8 [ 595.166887][ T2605] [ 595.430411][ T2608] bond1: entered promiscuous mode [ 595.435900][ T2608] 8021q: adding VLAN 0 to HW filter on device bond1 [ 595.479119][ T2592] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 595.486396][ T2592] IPv6: NLM_F_CREATE should be set when creating new route [ 595.493849][ T2592] IPv6: NLM_F_CREATE should be set when creating new route [ 595.501964][ T2592] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 595.517657][ T2607] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 595.553242][ T2609] 8021q: adding VLAN 0 to HW filter on device bond1 [ 595.569877][ T2609] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 595.580658][ T2609] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 595.593808][ T2609] bond1: (slave wireguard0): making interface the new active one [ 595.601716][ T2609] wireguard0: entered promiscuous mode [ 595.609640][ T2609] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 595.629190][ T2592] bond1: (slave wireguard1): The slave device specified does not support setting the MAC address [ 595.643639][ T2592] bond1: (slave wireguard1): Enslaving as a backup interface with an up link [ 595.660310][ T2610] __nla_validate_parse: 18 callbacks suppressed [ 595.660407][ T2610] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9085'. [ 595.666589][ T2630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 595.696903][ T3489] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.698504][ T2630] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9091'. [ 595.706499][ T3489] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.723538][ T2610] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 595.744509][ T2630] batadv0: entered promiscuous mode [ 595.749834][ T2630] batadv0: entered allmulticast mode [ 595.764865][ T2630] bridge0: port 1(batadv0) entered blocking state [ 595.771660][ T2630] bridge0: port 1(batadv0) entered disabled state [ 595.786870][ T2610] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9085'. [ 595.796304][ T9484] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.806830][ T2600] lo speed is unknown, defaulting to 1000 [ 595.815991][ T2636] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9092'. [ 595.817009][ T9484] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.847302][ T2623] siw: device registration error -23 [ 595.850960][ T2636] netlink: 19 bytes leftover after parsing attributes in process `syz.1.9092'. [ 596.005090][ T2645] FAULT_INJECTION: forcing a failure. [ 596.005090][ T2645] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 596.018617][ T2645] CPU: 0 UID: 0 PID: 2645 Comm: syz.1.9096 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 596.018711][ T2645] Tainted: [W]=WARN [ 596.018718][ T2645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 596.018736][ T2645] Call Trace: [ 596.018745][ T2645] [ 596.018755][ T2645] __dump_stack+0x1d/0x30 [ 596.018792][ T2645] dump_stack_lvl+0xe8/0x140 [ 596.018845][ T2645] dump_stack+0x15/0x1b [ 596.018877][ T2645] should_fail_ex+0x265/0x280 [ 596.018918][ T2645] should_fail_alloc_page+0xf2/0x100 [ 596.018948][ T2645] __alloc_frozen_pages_noprof+0xff/0x360 [ 596.019099][ T2645] alloc_pages_mpol+0xb3/0x260 [ 596.019145][ T2645] alloc_pages_noprof+0x90/0x130 [ 596.019189][ T2645] pte_alloc_one+0x1e/0xd0 [ 596.019213][ T2645] handle_mm_fault+0x12e3/0x2be0 [ 596.019259][ T2645] ? mt_find+0x208/0x320 [ 596.019302][ T2645] do_user_addr_fault+0x3fe/0x1080 [ 596.019328][ T2645] exc_page_fault+0x62/0xa0 [ 596.019368][ T2645] asm_exc_page_fault+0x26/0x30 [ 596.019473][ T2645] RIP: 0010:strnlen_user+0x4e/0x190 [ 596.019499][ T2645] Code: fe e8 46 40 5c ff 4d 85 ff 0f 8e 2c 01 00 00 48 b8 00 f0 ff ff ff 7f 00 00 49 39 c6 4c 0f 47 f0 0f 01 cb 4c 89 f0 48 83 e0 f8 <48> 8b 28 45 89 f4 41 83 e4 07 42 8d 0c e5 00 00 00 00 48 c7 c0 ff [ 596.019517][ T2645] RSP: 0018:ffffc90001497df0 EFLAGS: 00050206 [ 596.019535][ T2645] RAX: 00002000000002c0 RBX: 00002000000002c0 RCX: ffff88810431e300 [ 596.019550][ T2645] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000000000001 [ 596.019566][ T2645] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 596.019582][ T2645] R10: 0000000000000000 R11: 0000000000000000 R12: 00002000000002c0 [ 596.019645][ T2645] R13: 0000000000000000 R14: 00002000000002c0 R15: 0000000000001000 [ 596.019724][ T2645] ? __rcu_read_unlock+0x4f/0x70 [ 596.019757][ T2645] strndup_user+0x1f/0xb0 [ 596.019842][ T2645] __se_sys_mount+0x4d/0x2e0 [ 596.019868][ T2645] ? fput+0x8f/0xc0 [ 596.019910][ T2645] ? ksys_write+0x192/0x1a0 [ 596.019982][ T2645] __x64_sys_mount+0x67/0x80 [ 596.020048][ T2645] x64_sys_call+0x2b51/0x3000 [ 596.020122][ T2645] do_syscall_64+0xd2/0x200 [ 596.020147][ T2645] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 596.020244][ T2645] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 596.020338][ T2645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.020360][ T2645] RIP: 0033:0x7f9be68feec9 [ 596.020378][ T2645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 596.020402][ T2645] RSP: 002b:00007f9be5367038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 596.020426][ T2645] RAX: ffffffffffffffda RBX: 00007f9be6b55fa0 RCX: 00007f9be68feec9 [ 596.020443][ T2645] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 596.020537][ T2645] RBP: 00007f9be5367090 R08: 0000000000000000 R09: 0000000000000000 [ 596.020554][ T2645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 596.020569][ T2645] R13: 00007f9be6b56038 R14: 00007f9be6b55fa0 R15: 00007fffe1296a68 [ 596.020598][ T2645] [ 596.336513][ T9484] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 596.345883][ T9484] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 596.554619][ T2658] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9102'. [ 596.564752][ T2674] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9104'. [ 596.574813][ T2656] lo speed is unknown, defaulting to 1000 [ 596.641638][ T2672] loop2: detected capacity change from 0 to 512 [ 596.708576][ T2672] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.9098: error while reading EA inode 32 err=-116 [ 596.726756][ T2672] EXT4-fs (loop2): Remounting filesystem read-only [ 596.733460][ T2672] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 596.743944][ T2672] EXT4-fs (loop2): 1 orphan inode deleted [ 596.750612][ T2672] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 596.778372][ T2672] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.793673][ T2690] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 596.804031][ T2690] gretap1: entered allmulticast mode [ 596.864460][ T2698] FAULT_INJECTION: forcing a failure. [ 596.864460][ T2698] name failslab, interval 1, probability 0, space 0, times 0 [ 596.877338][ T2698] CPU: 1 UID: 0 PID: 2698 Comm: syz.0.9109 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 596.877377][ T2698] Tainted: [W]=WARN [ 596.877384][ T2698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 596.877464][ T2698] Call Trace: [ 596.877470][ T2698] [ 596.877478][ T2698] __dump_stack+0x1d/0x30 [ 596.877580][ T2698] dump_stack_lvl+0xe8/0x140 [ 596.877616][ T2698] dump_stack+0x15/0x1b [ 596.877706][ T2698] should_fail_ex+0x265/0x280 [ 596.877739][ T2698] should_failslab+0x8c/0xb0 [ 596.877767][ T2698] __kmalloc_noprof+0xa5/0x570 [ 596.877871][ T2698] ? security_prepare_creds+0x52/0x120 [ 596.877899][ T2698] security_prepare_creds+0x52/0x120 [ 596.877967][ T2698] prepare_creds+0x34a/0x4c0 [ 596.877996][ T2698] selinux_lsm_setattr+0x1a4/0x660 [ 596.878027][ T2698] selinux_setprocattr+0x4f/0x70 [ 596.878084][ T2698] security_setprocattr+0x1a7/0x1d0 [ 596.878156][ T2698] proc_pid_attr_write+0x1eb/0x220 [ 596.878187][ T2698] ? __pfx_proc_pid_attr_write+0x10/0x10 [ 596.878237][ T2698] vfs_write+0x269/0x960 [ 596.878262][ T2698] ? __rcu_read_unlock+0x4f/0x70 [ 596.878287][ T2698] ? __fget_files+0x184/0x1c0 [ 596.878320][ T2698] ksys_write+0xda/0x1a0 [ 596.878414][ T2698] __x64_sys_write+0x40/0x50 [ 596.878443][ T2698] x64_sys_call+0x2802/0x3000 [ 596.878465][ T2698] do_syscall_64+0xd2/0x200 [ 596.878535][ T2698] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 596.878564][ T2698] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 596.878601][ T2698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.878624][ T2698] RIP: 0033:0x7f299cfceec9 [ 596.878687][ T2698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 596.878783][ T2698] RSP: 002b:00007f299ba37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 596.878803][ T2698] RAX: ffffffffffffffda RBX: 00007f299d225fa0 RCX: 00007f299cfceec9 [ 596.878817][ T2698] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 596.878829][ T2698] RBP: 00007f299ba37090 R08: 0000000000000000 R09: 0000000000000000 [ 596.878869][ T2698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 596.878882][ T2698] R13: 00007f299d226038 R14: 00007f299d225fa0 R15: 00007ffea933e4d8 [ 596.878929][ T2698] [ 597.429658][ T2724] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9118'. [ 597.440911][ T2706] validate_nla: 14 callbacks suppressed [ 597.440932][ T2706] netlink: 'syz.0.9111': attribute type 10 has an invalid length. [ 597.501902][ T2729] netlink: 'syz.0.9111': attribute type 10 has an invalid length. [ 597.509873][ T2729] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9111'. [ 597.631954][ T2741] netlink: 'syz.6.9119': attribute type 10 has an invalid length. [ 597.658011][ T2719] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 597.673079][ T2741] batadv0: left allmulticast mode [ 597.678487][ T2741] batadv0: left promiscuous mode [ 597.683762][ T2741] bridge0: port 1(batadv0) entered disabled state [ 597.692444][ T2726] netlink: 'syz.6.9119': attribute type 10 has an invalid length. [ 597.700692][ T2726] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9119'. [ 597.715762][ T2741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 597.736269][ T2726] batadv0: entered promiscuous mode [ 597.741875][ T2726] batadv0: entered allmulticast mode [ 597.753271][ T2726] bridge0: port 1(batadv0) entered blocking state [ 597.760461][ T2726] bridge0: port 1(batadv0) entered disabled state [ 597.841004][ T2756] 8021q: VLANs not supported on gre0 [ 598.022582][ T2766] loop0: detected capacity change from 0 to 1024 [ 598.047295][ T2766] EXT4-fs: Ignoring removed orlov option [ 598.070395][ T2766] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 598.266493][ T2792] netlink: 'wÞ¡ÿ': attribute type 2 has an invalid length. [ 598.360555][ T2796] netlink: 'syz.2.9141': attribute type 10 has an invalid length. [ 598.414420][ T2797] netlink: 'syz.2.9141': attribute type 10 has an invalid length. [ 598.483002][ T2770] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 598.514418][ T2796] batadv0: left allmulticast mode [ 598.519649][ T2796] batadv0: left promiscuous mode [ 598.525102][ T2796] bridge0: port 1(batadv0) entered disabled state [ 598.558740][ T2796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 598.568070][ T2796] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 598.577277][ T2797] batadv0: entered promiscuous mode [ 598.582567][ T2797] batadv0: entered allmulticast mode [ 598.618309][ T2797] bond0: (slave batadv0): Releasing backup interface [ 598.638265][ T2797] bridge0: port 1(batadv0) entered blocking state [ 598.644889][ T2797] bridge0: port 1(batadv0) entered disabled state [ 598.733369][ T2813] veth0_vlan: left promiscuous mode [ 598.742016][ T2813] veth0_vlan: entered promiscuous mode [ 599.009835][ T2823] hub 8-0:1.0: USB hub found [ 599.027139][ T2823] hub 8-0:1.0: 8 ports detected [ 599.055708][ T2827] loop2: detected capacity change from 0 to 1024 [ 599.065946][ T2827] EXT4-fs: Ignoring removed orlov option [ 599.076360][ T2829] loop1: detected capacity change from 0 to 512 [ 599.089988][ T2827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 599.108240][ T2829] EXT4-fs (loop1): too many log groups per flexible block group [ 599.116574][ T2829] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 599.123887][ T2829] EXT4-fs (loop1): mount failed [ 599.150861][T30516] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.191710][ T2841] netlink: 'syz.0.9154': attribute type 10 has an invalid length. [ 599.200260][ T2841] netlink: 'syz.0.9154': attribute type 10 has an invalid length. [ 599.222627][ T2839] ================================================================== [ 599.231362][ T2839] BUG: KCSAN: data-race in filemap_write_and_wait_range / xas_set_mark [ 599.239625][ T2839] [ 599.242043][ T2839] write to 0xffff88811cd18b3c of 4 bytes by task 2827 on cpu 0: [ 599.249687][ T2839] xas_set_mark+0x12b/0x140 [ 599.254236][ T2839] __folio_start_writeback+0x161/0x3d0 [ 599.259706][ T2839] ext4_bio_write_folio+0x5ad/0x9f0 [ 599.265019][ T2839] mpage_process_page_bufs+0x4a1/0x620 [ 599.270781][ T2839] mpage_prepare_extent_to_map+0x786/0xc00 [ 599.276618][ T2839] ext4_do_writepages+0xa05/0x2750 [ 599.281895][ T2839] ext4_writepages+0x176/0x300 [ 599.286893][ T2839] do_writepages+0x1c6/0x310 [ 599.291621][ T2839] file_write_and_wait_range+0x156/0x2c0 [ 599.297821][ T2839] generic_buffers_fsync_noflush+0x45/0x120 [ 599.304029][ T2839] ext4_sync_file+0x1ab/0x690 [ 599.309004][ T2839] vfs_fsync_range+0x10a/0x130 [ 599.313917][ T2839] ext4_buffered_write_iter+0x34f/0x3c0 [ 599.319524][ T2839] ext4_file_write_iter+0xdbf/0xf00 [ 599.324919][ T2839] iter_file_splice_write+0x666/0xa60 [ 599.330502][ T2839] direct_splice_actor+0x153/0x2a0 [ 599.335838][ T2839] splice_direct_to_actor+0x30f/0x680 [ 599.341253][ T2839] do_splice_direct+0xda/0x150 [ 599.346144][ T2839] do_sendfile+0x380/0x650 [ 599.350964][ T2839] __x64_sys_sendfile64+0x105/0x150 [ 599.356237][ T2839] x64_sys_call+0x2bb4/0x3000 [ 599.361129][ T2839] do_syscall_64+0xd2/0x200 [ 599.365672][ T2839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.371605][ T2839] [ 599.373949][ T2839] read to 0xffff88811cd18b3c of 4 bytes by task 2839 on cpu 1: [ 599.381593][ T2839] filemap_write_and_wait_range+0xfc/0x340 [ 599.387436][ T2839] filemap_invalidate_pages+0xa4/0x1a0 [ 599.393105][ T2839] kiocb_invalidate_pages+0x6e/0x80 [ 599.398387][ T2839] __iomap_dio_rw+0x5d1/0x1240 [ 599.403696][ T2839] iomap_dio_rw+0x40/0x90 [ 599.408147][ T2839] ext4_file_write_iter+0xad9/0xf00 [ 599.413360][ T2839] iter_file_splice_write+0x666/0xa60 [ 599.418856][ T2839] direct_splice_actor+0x153/0x2a0 [ 599.424223][ T2839] splice_direct_to_actor+0x30f/0x680 [ 599.430242][ T2839] do_splice_direct+0xda/0x150 [ 599.435109][ T2839] do_sendfile+0x380/0x650 [ 599.439646][ T2839] __x64_sys_sendfile64+0x105/0x150 [ 599.444869][ T2839] x64_sys_call+0x2bb4/0x3000 [ 599.449574][ T2839] do_syscall_64+0xd2/0x200 [ 599.454187][ T2839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.460175][ T2839] [ 599.462516][ T2839] value changed: 0x0a000021 -> 0x04000021 [ 599.468362][ T2839] [ 599.470705][ T2839] Reported by Kernel Concurrency Sanitizer on: [ 599.476864][ T2839] CPU: 1 UID: 0 PID: 2839 Comm: syz.2.9152 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 599.488170][ T2839] Tainted: [W]=WARN [ 599.491981][ T2839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 599.502050][ T2839] ================================================================== [ 599.587605][ T2827] netlink: 'syz.2.9152': attribute type 2 has an invalid length. [ 599.915053][T32232] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.