last executing test programs: 3m42.820729797s ago: executing program 32 (id=54): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r2 = open(&(0x7f00000001c0)='./file1\x00', 0x16f07e, 0x88) copy_file_range(r2, 0x0, r2, 0x0, 0x39ea, 0x0) 3m41.507811812s ago: executing program 4 (id=67): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a70000000060a0b0400000000000000000200000044000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c61737400000000100001800a00010072656469720000000900010073797a30000000000900020073797a32000000"], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3m41.456132424s ago: executing program 4 (id=68): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000400), 0x2000011a) r2 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r2, &(0x7f0000000600)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x1}, 0x80, 0x0}}], 0x2, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m40.61729406s ago: executing program 4 (id=73): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x40, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) setfsgid(0xee00) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$inet6(0xa, 0x3, 0x38) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e26, 0x5, @loopback, 0x6c}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x8, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES8=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) r5 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='hsr0\x00', 0x10) sendmmsg$inet(r5, &(0x7f0000000240)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f0000000000)="17460081ba60ccbb9d000000000000", 0xf}], 0x2}}, {{&(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000780)="5825be06000000000000007ca2746314d1", 0x11}], 0x1}}], 0x2, 0x4004040) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01030000000000000000010000000800010014000000080003"], 0x30}}, 0x44) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) 3m40.534010662s ago: executing program 4 (id=74): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x55f, &(0x7f0000000d00)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f00000001c0), &(0x7f0000000180)=0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000954000000090a010400000000000000000a0000040900010073797a310000000008000540100000020900020073797a320000000008000a40ffffff78080008400000000108000c40000000050800034000000010140000001100010000000000000000000300000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$ARCH_SHSTK_ENABLE(0x1e, r2, 0x1, 0x5001) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') 3m40.272201467s ago: executing program 4 (id=75): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000feffffffffffffff0951000001000000090000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a000200700000000000100014000e"], 0x104}}, 0x0) 3m39.762938227s ago: executing program 4 (id=81): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000080)={0x0, 0x18, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x40000000) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x3}, 0x0) 3m39.762749487s ago: executing program 33 (id=81): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000080)={0x0, 0x18, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x40000000) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x3}, 0x0) 3m9.370830531s ago: executing program 5 (id=532): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0x77}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000080), 0xfe41) recvmsg$unix(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0xa4ff, &(0x7f0000000540)=[{&(0x7f0000000280)='=', 0x1}], 0x1, 0x0, 0x0, 0x20000084}, 0x40880) 3m9.114003276s ago: executing program 5 (id=534): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000580)={0x1, [0x0]}, &(0x7f00000005c0)=0x8) ppoll(&(0x7f0000000240)=[{r0, 0x4080}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_clone(0x8009080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000640)={0x3, &(0x7f0000000600)=[{0x2, 0x2, 0x7, 0x3}, {0x3add, 0x5, 0x5, 0x10000}, {0x1, 0x3, 0x1, 0x28000000}]}) shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f00000003c0)=""/199) rt_tgsigqueueinfo(0x0, 0x0, 0xbffffffd, &(0x7f00000009c0)={0x10, 0x3ff, 0x4}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@bh}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") r3 = shmget$private(0x0, 0x7000, 0x4, &(0x7f0000ff8000/0x7000)=nil) shmctl$SHM_LOCK(r3, 0xb) 3m8.88969364s ago: executing program 5 (id=541): r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x36, 0x0, @void}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[]) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x25, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20) r3 = syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x1, 0x24f}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r6}, 0x18) r7 = syz_io_uring_setup(0x69b7, &(0x7f0000000580)={0x0, 0xd736, 0x8, 0x3, 0xbffffffa}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_SYMLINKAT={0x26, 0x44, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000037c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) io_uring_enter(r7, 0x1c3a, 0x106a, 0x22, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x404, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000004, 0x4, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2, 0x1, 0x2, 0x2, 0x1000, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x42, &(0x7f00000004c0)={[{@dots}, {@fat=@errors_continue}, {@fat=@umask={'umask', 0x3d, 0x2}}, {@nodots}, {@nodots}, {@fat=@flush}, {@dots}, {@fat=@discard}, {@fat=@nfs_stale_rw}, {@dots}]}, 0x1, 0x25f, &(0x7f0000000140)="$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") faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x14, 0x0, @fd_index=0x4, 0x5, 0x0, 0x1}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c000280140003002000000000000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={&(0x7f00000000c0)='./file1\x00', 0x0, 0x4008, r0}, 0x0) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000f3c9defc97b1e4a8adc8899cd97776b650a7dabd6de997d956137166ae04116fcd4fa1721", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r11}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x47}, 0x94) 3m8.582721937s ago: executing program 5 (id=549): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_GET_ENDIAN(0x13, 0x0) r1 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") setxattr$trusted_overlay_upper(&(0x7f00000003c0)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000000)=ANY=[], 0x835, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8000000000000000, 0x5}, 0x4130, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfff4}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x5, 0x0, 0xfffffffc}, 0x0, 0x40000000000000, r0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10) dup(r4) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x2) r7 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000004c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffd}]}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000005, 0x13, r1, 0xe8cfd000) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8, 0xffffffffffffffff}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0x10) getrandom(0x0, 0x0, 0x0) r11 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r11, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r7}) keyctl$KEYCTL_MOVE(0x1e, r7, 0xffffffffffffffff, r11, 0x0) 3m8.107862506s ago: executing program 5 (id=553): io_setup(0x8f0, &(0x7f0000002400)) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x2292}], 0x1, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000005e002200850000006d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) setrlimit(0xe, &(0x7f0000000300)={0xd97, 0xbd9e}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x4, &(0x7f0000000040)=[{0xfe3b, 0x7c, 0x3, 0x5d2}, {0x1, 0x5, 0x38}, {0x9, 0x5, 0x9, 0x6}, {0x3, 0x1, 0xfc, 0x7f}]}) r3 = timerfd_create(0x8, 0x80800) timerfd_gettime(r3, &(0x7f0000000180)) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[@ANYBLOB="98000000", @ANYBLOB="00022dbd7000fddbdf250a0000004000038008000300030000000800010002000000080001000000000005000800040000000800030003000000140002007665746830000000000000000000000044000280080008020000ffffffff05000a00000008000800ff07550006000b000a00000008000800ffffff7f080009000af20000080003000400000008000900090000000afe5448306e9f39187cc17751e5933c80c02c4cdc918b5146a1c91d501a15941de1a63173c457ffb4604394c020444ce7a79eb09c9102cd2c44ec1bc8d77367e9678c01800000612c8e746c2fd0a0066b356ec08920818f82"], 0x98}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x22, &(0x7f0000000440)={&(0x7f00000001c0)={0x54, r7, 0x1, 0x0, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000a00)=ANY=[@ANYBLOB="8fe1369e9e0e097f12ebfaa2cc66a51bffa14a0ae4bbc50f3f3d7f85d3ec3b65c890f4d08f154f942ca7701caa80d6fb589f66c594081025739a3a865c863f4ba53697f743e24b26fffa709efd14c8e8beeea305dc515ef8b944817b1d16fcd0cc38f0487a0f0faffb33548a5512a0025e1c1d8048300bf81bd67fc63f28340b3695a95f5d86f91128feb2aac962ec907c8c99fd39fff4a94bdb660221addfa943253efddd09f3e5e9700d1213862c2923e48c7196ed6d8b07118aefa375a8a663864fedb9d05843dd79dc32d92ec3ec4aabeabfff457032722d1b0695fd66f2b6e0f44279194aa21276147e2c1577d4c3153dfc", @ANYRES16=r7, @ANYBLOB="000026bd7000fedbdf250c000000200007800c000400feffffffffffffff080002000002000008000200ffffff7f3c0009800800010040000000080002000800000008000100010000000800010006000000080001005e7b00000800010008000000080002000100000050000180080003000200000044000400200001000a004e2300000006fc00000000000000000000000000000005000000200002000a004e200000000400000000000000000000000000000000030000001400098008000100090000000800010006000000180007800c000300010000000000000008000200ff7f0000"], 0xec}, 0x1, 0x0, 0x0, 0x40}, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017000000"], 0x38}}, 0x0) 3m7.301676792s ago: executing program 5 (id=568): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000580)={0x1, [0x0]}, &(0x7f00000005c0)=0x8) ppoll(&(0x7f0000000240)=[{r0, 0x4080}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) unshare(0x22020400) syz_clone(0x8009080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000640)={0x3, &(0x7f0000000600)=[{0x2, 0x2, 0x7, 0x3}, {0x3add, 0x5, 0x5, 0x10000}, {0x1, 0x3, 0x1, 0x28000000}]}) shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f00000003c0)=""/199) rt_tgsigqueueinfo(0x0, 0x0, 0xbffffffd, &(0x7f00000009c0)={0x10, 0x3ff, 0x4}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@bh}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9GajdN4o8KgvUiiBYLeq9LMg0lm27JbkoTC20P9uJFiiBiQfwDvHss/gP+FQUtFClBD14is5lNt81ukqYbN3U+H5j2vZnZvPnum+/bNzu7bACFNZL9U4p4OSK+SSIOt20bjHzjyOp+yw+vTWVLEisrn/2ZRJKva+2f5P8fzCsvRcSvX0WcKK1vt764NFupVtP5vD7WmLs8Vl9cOnlxrjKTzqSXJiYnT781OfHuO2/3LNbXz/39/ad3Pzr99fHl736+f+R2EmfiUL6tPY5ncKO9MhIj+XMyFGee2HG8B43tJkm/D4BtGcjzfCiyMeBwDORZD/z/XY+IFaCgEvkPBdWaB7Su7Xt0HfzcePDB6gXQ+vgHV98biX3Na6MDy8ljV0bZ9e5wD9rP2vjljzu3syU2eR/ieg/aA2i5cTMiTg0Orh//knz8275TzTePN/ZkG0V7/YF+upvNf97oNP8prc1/osP852CH3N2OzfO/dL8HzXSVzf/e6zj/XRu6hgfy2gvNOd9QcuFiNT0VES9GxGgM7c3qG93POb18b6Xbtvb5X7Zk7bfmgvlx3B/c+/hjpiuNyrPE3O7BzYhXOs5/k7X+Tzr0f/Z8nNtiG8fSO69227Z5/Dtr5aeI1zr2/6M7WsnG9yfHmufDWOusWO+vW8d+69b+6If9jT/r/wMbxz+ctN+vrT99Gz/u+yfttm275/+e5PNmeU++7mql0Zgfj9iTfLJ+/cSjx7bqrf2z+EePbzz+dTr/90fEF1uM/9bRW1137ff5n8U//VT9//SFex9/+UO39rfW/282S6P5mq2Mf1s9wGd57gAAAAAAAGC3KUXEoUhK5bVyqVQur36+42gcKFVr9caJC7WFS9PR/K7scAyVWne6D7d9HmI8/zxsqz7xRH0yIo5ExLcD+5v18lStOt3v4AEAAAAAAAAAAAAAAAAAAGCXONjl+/+Z3wf6fXTAjvOT31Bcm+Z/L37pCdiVvP5Dccl/KC75D8Ul/6G45D8Ul/yH4pL/UFzyHwAAAAAAAAAAAAAAAAAAAAAAAAAAAHrq3Nmz2bKy/PDaVFafvrK4MFu7cnI6rc+W5xamylO1+cvlmVptppqWp2pzm/29aq12eXwiFq6ONdJ6Y6y+uHR+rrZwqXH+4lxlJj2fDv0nUQEAAAAAAAAAAAAAAAAAAMDzpb64NFupVtN5ha6F92NXHMZOBrhqWw8f3C1RKHQt7NtG5/Z5YAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACANv8GAAD//04mM/E=") r1 = shmget$private(0x0, 0x7000, 0x4, &(0x7f0000ff8000/0x7000)=nil) shmctl$SHM_LOCK(r1, 0xb) 3m7.187582524s ago: executing program 34 (id=568): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000580)={0x1, [0x0]}, &(0x7f00000005c0)=0x8) ppoll(&(0x7f0000000240)=[{r0, 0x4080}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) unshare(0x22020400) syz_clone(0x8009080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000640)={0x3, &(0x7f0000000600)=[{0x2, 0x2, 0x7, 0x3}, {0x3add, 0x5, 0x5, 0x10000}, {0x1, 0x3, 0x1, 0x28000000}]}) shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f00000003c0)=""/199) rt_tgsigqueueinfo(0x0, 0x0, 0xbffffffd, &(0x7f00000009c0)={0x10, 0x3ff, 0x4}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@bh}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9GajdN4o8KgvUiiBYLeq9LMg0lm27JbkoTC20P9uJFiiBiQfwDvHss/gP+FQUtFClBD14is5lNt81ukqYbN3U+H5j2vZnZvPnum+/bNzu7bACFNZL9U4p4OSK+SSIOt20bjHzjyOp+yw+vTWVLEisrn/2ZRJKva+2f5P8fzCsvRcSvX0WcKK1vt764NFupVtP5vD7WmLs8Vl9cOnlxrjKTzqSXJiYnT781OfHuO2/3LNbXz/39/ad3Pzr99fHl736+f+R2EmfiUL6tPY5ncKO9MhIj+XMyFGee2HG8B43tJkm/D4BtGcjzfCiyMeBwDORZD/z/XY+IFaCgEvkPBdWaB7Su7Xt0HfzcePDB6gXQ+vgHV98biX3Na6MDy8ljV0bZ9e5wD9rP2vjljzu3syU2eR/ieg/aA2i5cTMiTg0Orh//knz8275TzTePN/ZkG0V7/YF+upvNf97oNP8prc1/osP852CH3N2OzfO/dL8HzXSVzf/e6zj/XRu6hgfy2gvNOd9QcuFiNT0VES9GxGgM7c3qG93POb18b6Xbtvb5X7Zk7bfmgvlx3B/c+/hjpiuNyrPE3O7BzYhXOs5/k7X+Tzr0f/Z8nNtiG8fSO69227Z5/Dtr5aeI1zr2/6M7WsnG9yfHmufDWOusWO+vW8d+69b+6If9jT/r/wMbxz+ctN+vrT99Gz/u+yfttm275/+e5PNmeU++7mql0Zgfj9iTfLJ+/cSjx7bqrf2z+EePbzz+dTr/90fEF1uM/9bRW1137ff5n8U//VT9//SFex9/+UO39rfW/282S6P5mq2Mf1s9wGd57gAAAAAAAGC3KUXEoUhK5bVyqVQur36+42gcKFVr9caJC7WFS9PR/K7scAyVWne6D7d9HmI8/zxsqz7xRH0yIo5ExLcD+5v18lStOt3v4AEAAAAAAAAAAAAAAAAAAGCXONjl+/+Z3wf6fXTAjvOT31Bcm+Z/L37pCdiVvP5Dccl/KC75D8Ul/6G45D8Ul/yH4pL/UFzyHwAAAAAAAAAAAAAAAAAAAAAAAAAAAHrq3Nmz2bKy/PDaVFafvrK4MFu7cnI6rc+W5xamylO1+cvlmVptppqWp2pzm/29aq12eXwiFq6ONdJ6Y6y+uHR+rrZwqXH+4lxlJj2fDv0nUQEAAAAAAAAAAAAAAAAAAMDzpb64NFupVtN5ha6F92NXHMZOBrhqWw8f3C1RKHQt7NtG5/Z5YAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACANv8GAAD//04mM/E=") r1 = shmget$private(0x0, 0x7000, 0x4, &(0x7f0000ff8000/0x7000)=nil) shmctl$SHM_LOCK(r1, 0xb) 2m50.496272646s ago: executing program 6 (id=753): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) getrusage(0x1, &(0x7f0000001080)) 2m50.385096457s ago: executing program 6 (id=755): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000080000000010100"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1, @in=@remote, 0x0, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}}, [@tmpl={0x84, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x34ff, 0x0, 0x2}, {{@in=@local, 0x0, 0x3c}, 0xa, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x2, 0x7, 0x0, 0x0, 0x800, 0x800, 0xfffffffc}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4c080}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x7, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="ba85f7e8d011fad6cc", @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\xac\xed\x00\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x60}, {0x16, 0x0, 0x1, 0xf3}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') r6 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) readv(r6, &(0x7f0000000400)=[{0x0}, {&(0x7f0000001940)=""/4082, 0xff2}], 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0), 0x6, 0x623, &(0x7f0000001fc0)="$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") gettid() umount2(&(0x7f00000002c0)='./file0\x00', 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) 2m50.142750712s ago: executing program 6 (id=758): bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a320000000014000480080001400000000008000240000000002c000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xb4}, 0x1, 0x0, 0x0, 0x400c0d1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) r2 = syz_open_procfs$pagemap(0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r4}, 0x10) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB="c4000000190001050000000000000000fc000000000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000066cb9e4596b72f849484857f63096f81124f4f53dc359ef222094c74aac5eab5fae20010313a362b524b05ced65b9e67c1b6b5e5ecbadf9c5481a711aa6b014304bc882e007fa5512bb57134c95743c056ccaaa3397cdc9f19584575f70893853289ccac5979b64a6"], 0xc4}}, 0x200048c4) mkdir(&(0x7f0000000040)='./bus\x00', 0x40) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000140)='./file0\x00', r5, &(0x7f0000000200)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="61129a000000000061134c0000000000bf2000000000000015000500511b48013d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7ec0c8c25e072194ddd83aa155a537e15c0d91f502deef03f83e826718705c9aef9613ac4a325a428d147c1749196e94226671fd9573ab0d079d44b13b56f793e98ab571c58e98e022f18a3be3f318e0690fff93f44f22473dc8004fc758218349bd3f0516a72a7ea913bfa7603063ed3118b2d680cbc"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000300)=[{&(0x7f00000002c0)="3900000013000318680907070000001f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) newfstatat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0/file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) keyctl$chown(0x4, 0x0, 0x0, r7) socket$key(0xf, 0x3, 0x2) lsm_get_self_attr(0x69, &(0x7f0000000400)={0x0, 0x0, 0x56, 0x36, ""/54}, &(0x7f0000000480)=0x56, 0x0) dup(r2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0xc854) 2m49.438137796s ago: executing program 6 (id=766): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000400, &(0x7f00000005c0)={[{@abort}, {@errors_remount}]}, 0x3, 0x44f, &(0x7f0000000600)="$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") mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) (async) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r1, 0x400, 0x1) fremovexattr(r1, &(0x7f0000000040)=@known='system.posix_acl_default\x00') (async) fremovexattr(r1, &(0x7f0000000040)=@known='system.posix_acl_default\x00') chroot(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f00000000c0)) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) (async) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x80) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) (async) sendto$inet6(r2, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') 2m49.149941292s ago: executing program 6 (id=770): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000feffffffffffffff0951000001000000090000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a000200700000000000"], 0x104}}, 0x0) 2m48.846587788s ago: executing program 6 (id=773): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffa}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES8=r2, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) r7 = openat$cgroup_ro(r4, &(0x7f0000000380)='memory.stat\x00', 0x275a, 0x0) read(r7, &(0x7f0000000040)=""/190, 0xbe) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r8, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r8, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10007, @loopback, 0x7}, 0x1c) getsockopt$inet_sctp6_SCTP_STATUS(r8, 0x84, 0xe, &(0x7f0000000400)={0x0, 0xa35, 0x3fc, 0x2002, 0x4, 0x3, 0xb05, 0x2, {0x0, @in6={{0xa, 0x4e21, 0x80, @empty, 0x2032}}, 0x8, 0xc, 0x7, 0x5, 0x1b8}}, &(0x7f0000000380)=0xb0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="10030600e0fc020004004788aa96a13bb100001100007fca1a00", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000001240)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000001280)={'wg1\x00', 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000580)="897bca4d364d7d5a480b438e5ddd45de7cf089e907333c910fa1a1fd6a1e513339201fdc2a3f4d4d93b54511caaa690135e22afcfd991ed960db972ad7f546314c4185f3ef53746f422d86b47d1e6701cef6f19a945f2cea529a56fcc8464cd5f70abc45291ad17206e22acd0482f01265e55cc266445f551fc0cf91d6753a0444a3a0849764fc1d2e8b8acf74535f24c3eade1a9ee2971db783e02e33d9bd588a598b0b7ab8f5c50a1577b63a48d4ad24128d2945bfdbf654dc8c7b60ab56", 0xbf}, {&(0x7f0000000240)="e565f151", 0x4}, {&(0x7f0000000740)="7e1293df05984f4c0fa74852c0456999b8839f392397d572df2ca398ad2fd3bcc08ea49ec90613cba95809aa2ffdd0296fc0365150036f23e2d5be4b1b99ffdbcf42b6b6dcc87abd27f17056300878cb899e73bb875b48b89cda3b12d9b61619298405a060756e61ffdc0fa59163c43243eff616f11753bb9d5e6eb2ae72a82d5374d8b579992c24726221f028afe0f0807b7aa56be8fa767054fbe2f06b981e8d1ac74e26e5720f2673a5cb367de68e9aea82ccd426cee19eb3d304802d9b2f", 0xc0}, {&(0x7f0000000300)="029c5e06459387c734cbea78ae7b001aff395ac95189b0eaca7fc371b28cee745e2c5807047481c24a3792d8cc6eeff35af3", 0x32}, {&(0x7f0000000340)="397bb40d4692b15e6a4830b39d6be88f966b4377bfa1fc4fb382bf93d30f179d", 0x20}], 0x5, &(0x7f0000000880)=[@pktinfo={{0x24, 0x29, 0x32, {@local, r9}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @dstopts={{0xe8, 0x29, 0x37, {0xff, 0x1a, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @generic={0x0, 0xac, "4eef1ccabce5ec687ac6196c618e1a78506897e1e2c7f85ebd5e38d3942a9b147b157cd4182af28a31b4ee67af85da64707cc356796a35cb8499a59b2d54cf8bfaa17134e53e8425ffc03217d204d074b8413a7dc43eb9d3647be78ac77b388d6b06abea96c7c32a072543bd4ddfce0846f8ca53fda1330253919bba0335ffbc2d1cd37914ca6a7a6ed02d049f2e2dbc8f45d8428adc87d37d1061cb684c8ed3a322ce4af65e783453a13cb3"}, @ra={0x5, 0x2, 0xfffa}, @pad1, @hao={0xc9, 0x10, @mcast1}, @pad1]}}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x8, 0x2, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x7}}], 0x170}}, {{&(0x7f0000000a00)={0xa, 0x4e21, 0xd, @dev={0xfe, 0x80, '\x00', 0xd}, 0x1000}, 0x1c, &(0x7f0000000c80)=[{&(0x7f0000000a40)="2e0d765f3ec3631536", 0x9}, {&(0x7f0000000ac0)="caa60f9f329e1c6855d6f8d535d14d083c0ad9b1a8ac9dbe4b584ab3d8fc263571d403730b9738e6d570095b822e02", 0x2f}, {&(0x7f0000000b00)="d25ab28939e946a320cb35f304bdeac37901833ed743e1356413dd0ae614878208a26e4ed2d389f32dce5d15ab80078bc57dc544bd80589d5f8131bb394853c3bde53b608d1dd7ef06419e4e5151b4ccca46891930784863e167f2b16c42c7c14f337fce581e899b81e75ac4b6be3ef737ed16d7ab0d72d464fae0b989236b96a1664e2ade4c9283a073241389a4", 0x8e}, {&(0x7f0000000c00)="844e", 0x2}, {&(0x7f0000000c40)="07f23e6eafa44c2c6c4d74070000000000000059683f0dc1493c5ee051bebdbcc66436", 0x23}], 0x5}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000d00)="a00618a2a8087ca8e0dcdd2a5158ba891c4871e15799774d4489394b8c2951379d71f81061324be8e27ef9a6f0786bfc5f52a909bc6f515b342941bd521c6f4e78b8c4969dbb06ffdffac31c2de57527e6b69b6ddd80d68125824a820056b6cc67fa74", 0x63}, {&(0x7f0000000d80)="9fec39edfd0b1a9dc1f054b013bbc590719974ec54973e9425183a802779907997812757e8804fdba299ab0830342880053f1c7c5020ee8aad3b9fdc4c9cbe3605e762eea4020ac9fa90be81bf6b", 0x4e}, {&(0x7f0000000e00)="f156ca3cbe8a90ed47ef99a3b4b31d050bf65d1d9edb95e5f77c1967374f1aafe8643ce252567236f55aefdfa2b1f7dec82751a9c44c05eec58d813cc4e3aedeef4ddc8d0d0e4e03958083417b99ec5a272f9f9c6d257fe93cae976591d7fba9b85c4c56cefc541043f7365aea2b1429a7190bc3070a", 0x76}, {&(0x7f0000000e80)="e0dd0daba33d2119f9f28cb689762b7d2fe36ed708c637aebec10b04ba0305c6fb25ded247b365a8f5e928d0938c24388afced980e0d4a7d90c4b5e99f68ab8cc53d3045e4048ba9c6ea96a9a8d9e8193a07890fe1fb02459de7f8ebcf246a96229602567c7f252654810971ba392246b9773d2438e66bc8b91dff8ef8326be2a0b3b95683d3bd87ef055df3d4de53edbe8cded517ffcb02b6d39080", 0x9c}, {&(0x7f0000000f40)="8ba771cb5fedfc71c9c8db997d2bf86dd4fdbeb7b688a1ce7cb3aac6fc83cfba99d6c1e2910ef4bf9f185ad0781d6a8f8a4775db017aa2edd5263bf264b81bc0d8fa7b63fa05bc57f0c995edc64b71126ddd21bc781b7ba299bbe09a820b275b038265e6fe375880771cdd9a9bd9fd553f0e3a464db965865e78da444b7445b424e224a9dd21ce2a6dfd9c13e7cb2867a5cd14c886dac35c4584d2137a294d154081fbde4431865b8e06ca0f4112f0a049febd4d927730ed6d27c091862213d6486ce310457e3357366fdea44a073f73e24fe72c9f11837f0520179e3757306009fd55e41ba40f6790", 0xe9}], 0x5, &(0x7f00000010c0)=ANY=[@ANYBLOB="1400000000000000290000003e00000003000000000000001400000000000000290000003e0000000100000000000000880000000000000029000000390000002c0e000800000000fc02000000000000000000000000000100000000000000000000ffff640101000000000000000000000000000000000000000000000000000000ffffe0000002000000000000000000000000000000010000b302000000000000000000000001fe8000000000000000000000d5f6e12d"], 0xb8}}, {{&(0x7f0000001180)={0xa, 0x4e22, 0x3ff, @loopback, 0x4}, 0x1c, &(0x7f0000001200)=[{&(0x7f00000011c0)="07e05ac5f09343a063f97df4", 0xc}], 0x1, &(0x7f0000001a80)=ANY=[@ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="0000000024000000000000002900000032000000fc020000000000000000000000000001", @ANYRES32=r11, @ANYBLOB="00000000780000000000000029000000360000003a0b00000000000007580000000114020600ff000000000000000104000000000000000040000000000002000000000000000a00000000000000010000000000000003000000000000000100000000000000ffffffffffffffffae00000000000000040109000000"], 0x268}}, {{&(0x7f0000001540)={0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000001740)=[{&(0x7f0000001580)="ad013cd90b98d6a29121f44186cfbe2e54e3e1953f1f", 0x16}, {&(0x7f00000015c0)="4d3f1b7d5120e7cb095014d776bc2a68d744f55e7481d64d7e5e1138f711695f2c0dde09aa5f47d209c073e02236b0c86fbaa723c3bd861407a88890053e8b7f2bf3d4cd1d52ee53e1307779f6d13482819b10f31b0773dbbae6e7b99655b9a92b33c9a8f798623be81a96ca188159dd903079bc45ca63eccaf00627703518b2674d8be813914c11e734c5cded", 0x8d}, {&(0x7f0000001680)="f7175d947fc4e6bd8a0045ea4e6f6ba98dfda7bc8f8f075d2fedf7a8d879163e0d96baf82b7f0a81d46bb5e858ffad16cff414d1ea26f6b06e8afc90685de7c62788a28ce86207aea9d6fd19869e4dd1b8601c4ff0b5ba7790ebcb6c4c30ab512af8c949bdf2784ef4ba49fe7374d54e633b1f639df23943a073fbe96ae6d5c5285637ae413712fa7715808db9e942c634fe2fa68f2e16dc065849ee3151a25ca8423dc17f333d78", 0xa8}], 0x3, &(0x7f0000001780)=[@rthdrdstopts={{0xf8, 0x29, 0x37, {0x2b, 0x1b, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x28}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0xf7, 0xc9, "4559056b908286eabb84354eb26d38c5e512833332623e26253b60334a66f1b1109925b47018a2c59d802bd912ef43842f02eab1e88b5a35ea007ae9954abc89255a92a0eb4f614ff2494bc440989c0c59456c9f0ca4c5636c4ea1a6a7ef4179d059c2af85bfb03a1dbfa21da6b234bd55563c697c8fae69c716f7d7e36a00b39a556e2bb0e2e06459eaede48d186ce1e82a349debe545ebc4fdd4ae09bcde7c947dab39cca928499040c5fa463858dbd623a0f6355ecedb1a4cf481dde575bf5542e830e1a5150867"}]}}}, @tclass={{0x14, 0x29, 0x43, 0x8}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0x400}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x3b, 0x2, '\x00', [@pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}], 0x188}}], 0x5, 0x90) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfd}]}, 0x10) bind$bt_hci(r12, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x1, 0x7ffc1ffb}]}) semget$private(0x0, 0x0, 0x0) 2m48.846076308s ago: executing program 35 (id=773): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffa}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES8=r2, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) r7 = openat$cgroup_ro(r4, &(0x7f0000000380)='memory.stat\x00', 0x275a, 0x0) read(r7, &(0x7f0000000040)=""/190, 0xbe) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r8, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r8, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10007, @loopback, 0x7}, 0x1c) getsockopt$inet_sctp6_SCTP_STATUS(r8, 0x84, 0xe, &(0x7f0000000400)={0x0, 0xa35, 0x3fc, 0x2002, 0x4, 0x3, 0xb05, 0x2, {0x0, @in6={{0xa, 0x4e21, 0x80, @empty, 0x2032}}, 0x8, 0xc, 0x7, 0x5, 0x1b8}}, &(0x7f0000000380)=0xb0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="10030600e0fc020004004788aa96a13bb100001100007fca1a00", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000001240)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000001280)={'wg1\x00', 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000580)="897bca4d364d7d5a480b438e5ddd45de7cf089e907333c910fa1a1fd6a1e513339201fdc2a3f4d4d93b54511caaa690135e22afcfd991ed960db972ad7f546314c4185f3ef53746f422d86b47d1e6701cef6f19a945f2cea529a56fcc8464cd5f70abc45291ad17206e22acd0482f01265e55cc266445f551fc0cf91d6753a0444a3a0849764fc1d2e8b8acf74535f24c3eade1a9ee2971db783e02e33d9bd588a598b0b7ab8f5c50a1577b63a48d4ad24128d2945bfdbf654dc8c7b60ab56", 0xbf}, {&(0x7f0000000240)="e565f151", 0x4}, {&(0x7f0000000740)="7e1293df05984f4c0fa74852c0456999b8839f392397d572df2ca398ad2fd3bcc08ea49ec90613cba95809aa2ffdd0296fc0365150036f23e2d5be4b1b99ffdbcf42b6b6dcc87abd27f17056300878cb899e73bb875b48b89cda3b12d9b61619298405a060756e61ffdc0fa59163c43243eff616f11753bb9d5e6eb2ae72a82d5374d8b579992c24726221f028afe0f0807b7aa56be8fa767054fbe2f06b981e8d1ac74e26e5720f2673a5cb367de68e9aea82ccd426cee19eb3d304802d9b2f", 0xc0}, {&(0x7f0000000300)="029c5e06459387c734cbea78ae7b001aff395ac95189b0eaca7fc371b28cee745e2c5807047481c24a3792d8cc6eeff35af3", 0x32}, {&(0x7f0000000340)="397bb40d4692b15e6a4830b39d6be88f966b4377bfa1fc4fb382bf93d30f179d", 0x20}], 0x5, &(0x7f0000000880)=[@pktinfo={{0x24, 0x29, 0x32, {@local, r9}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @dstopts={{0xe8, 0x29, 0x37, {0xff, 0x1a, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @generic={0x0, 0xac, "4eef1ccabce5ec687ac6196c618e1a78506897e1e2c7f85ebd5e38d3942a9b147b157cd4182af28a31b4ee67af85da64707cc356796a35cb8499a59b2d54cf8bfaa17134e53e8425ffc03217d204d074b8413a7dc43eb9d3647be78ac77b388d6b06abea96c7c32a072543bd4ddfce0846f8ca53fda1330253919bba0335ffbc2d1cd37914ca6a7a6ed02d049f2e2dbc8f45d8428adc87d37d1061cb684c8ed3a322ce4af65e783453a13cb3"}, @ra={0x5, 0x2, 0xfffa}, @pad1, @hao={0xc9, 0x10, @mcast1}, @pad1]}}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x8, 0x2, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x7}}], 0x170}}, {{&(0x7f0000000a00)={0xa, 0x4e21, 0xd, @dev={0xfe, 0x80, '\x00', 0xd}, 0x1000}, 0x1c, &(0x7f0000000c80)=[{&(0x7f0000000a40)="2e0d765f3ec3631536", 0x9}, {&(0x7f0000000ac0)="caa60f9f329e1c6855d6f8d535d14d083c0ad9b1a8ac9dbe4b584ab3d8fc263571d403730b9738e6d570095b822e02", 0x2f}, {&(0x7f0000000b00)="d25ab28939e946a320cb35f304bdeac37901833ed743e1356413dd0ae614878208a26e4ed2d389f32dce5d15ab80078bc57dc544bd80589d5f8131bb394853c3bde53b608d1dd7ef06419e4e5151b4ccca46891930784863e167f2b16c42c7c14f337fce581e899b81e75ac4b6be3ef737ed16d7ab0d72d464fae0b989236b96a1664e2ade4c9283a073241389a4", 0x8e}, {&(0x7f0000000c00)="844e", 0x2}, {&(0x7f0000000c40)="07f23e6eafa44c2c6c4d74070000000000000059683f0dc1493c5ee051bebdbcc66436", 0x23}], 0x5}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000d00)="a00618a2a8087ca8e0dcdd2a5158ba891c4871e15799774d4489394b8c2951379d71f81061324be8e27ef9a6f0786bfc5f52a909bc6f515b342941bd521c6f4e78b8c4969dbb06ffdffac31c2de57527e6b69b6ddd80d68125824a820056b6cc67fa74", 0x63}, {&(0x7f0000000d80)="9fec39edfd0b1a9dc1f054b013bbc590719974ec54973e9425183a802779907997812757e8804fdba299ab0830342880053f1c7c5020ee8aad3b9fdc4c9cbe3605e762eea4020ac9fa90be81bf6b", 0x4e}, {&(0x7f0000000e00)="f156ca3cbe8a90ed47ef99a3b4b31d050bf65d1d9edb95e5f77c1967374f1aafe8643ce252567236f55aefdfa2b1f7dec82751a9c44c05eec58d813cc4e3aedeef4ddc8d0d0e4e03958083417b99ec5a272f9f9c6d257fe93cae976591d7fba9b85c4c56cefc541043f7365aea2b1429a7190bc3070a", 0x76}, {&(0x7f0000000e80)="e0dd0daba33d2119f9f28cb689762b7d2fe36ed708c637aebec10b04ba0305c6fb25ded247b365a8f5e928d0938c24388afced980e0d4a7d90c4b5e99f68ab8cc53d3045e4048ba9c6ea96a9a8d9e8193a07890fe1fb02459de7f8ebcf246a96229602567c7f252654810971ba392246b9773d2438e66bc8b91dff8ef8326be2a0b3b95683d3bd87ef055df3d4de53edbe8cded517ffcb02b6d39080", 0x9c}, {&(0x7f0000000f40)="8ba771cb5fedfc71c9c8db997d2bf86dd4fdbeb7b688a1ce7cb3aac6fc83cfba99d6c1e2910ef4bf9f185ad0781d6a8f8a4775db017aa2edd5263bf264b81bc0d8fa7b63fa05bc57f0c995edc64b71126ddd21bc781b7ba299bbe09a820b275b038265e6fe375880771cdd9a9bd9fd553f0e3a464db965865e78da444b7445b424e224a9dd21ce2a6dfd9c13e7cb2867a5cd14c886dac35c4584d2137a294d154081fbde4431865b8e06ca0f4112f0a049febd4d927730ed6d27c091862213d6486ce310457e3357366fdea44a073f73e24fe72c9f11837f0520179e3757306009fd55e41ba40f6790", 0xe9}], 0x5, &(0x7f00000010c0)=ANY=[@ANYBLOB="1400000000000000290000003e00000003000000000000001400000000000000290000003e0000000100000000000000880000000000000029000000390000002c0e000800000000fc02000000000000000000000000000100000000000000000000ffff640101000000000000000000000000000000000000000000000000000000ffffe0000002000000000000000000000000000000010000b302000000000000000000000001fe8000000000000000000000d5f6e12d"], 0xb8}}, {{&(0x7f0000001180)={0xa, 0x4e22, 0x3ff, @loopback, 0x4}, 0x1c, &(0x7f0000001200)=[{&(0x7f00000011c0)="07e05ac5f09343a063f97df4", 0xc}], 0x1, &(0x7f0000001a80)=ANY=[@ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="0000000024000000000000002900000032000000fc020000000000000000000000000001", @ANYRES32=r11, @ANYBLOB="00000000780000000000000029000000360000003a0b00000000000007580000000114020600ff000000000000000104000000000000000040000000000002000000000000000a00000000000000010000000000000003000000000000000100000000000000ffffffffffffffffae00000000000000040109000000"], 0x268}}, {{&(0x7f0000001540)={0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000001740)=[{&(0x7f0000001580)="ad013cd90b98d6a29121f44186cfbe2e54e3e1953f1f", 0x16}, {&(0x7f00000015c0)="4d3f1b7d5120e7cb095014d776bc2a68d744f55e7481d64d7e5e1138f711695f2c0dde09aa5f47d209c073e02236b0c86fbaa723c3bd861407a88890053e8b7f2bf3d4cd1d52ee53e1307779f6d13482819b10f31b0773dbbae6e7b99655b9a92b33c9a8f798623be81a96ca188159dd903079bc45ca63eccaf00627703518b2674d8be813914c11e734c5cded", 0x8d}, {&(0x7f0000001680)="f7175d947fc4e6bd8a0045ea4e6f6ba98dfda7bc8f8f075d2fedf7a8d879163e0d96baf82b7f0a81d46bb5e858ffad16cff414d1ea26f6b06e8afc90685de7c62788a28ce86207aea9d6fd19869e4dd1b8601c4ff0b5ba7790ebcb6c4c30ab512af8c949bdf2784ef4ba49fe7374d54e633b1f639df23943a073fbe96ae6d5c5285637ae413712fa7715808db9e942c634fe2fa68f2e16dc065849ee3151a25ca8423dc17f333d78", 0xa8}], 0x3, &(0x7f0000001780)=[@rthdrdstopts={{0xf8, 0x29, 0x37, {0x2b, 0x1b, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x28}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0xf7, 0xc9, "4559056b908286eabb84354eb26d38c5e512833332623e26253b60334a66f1b1109925b47018a2c59d802bd912ef43842f02eab1e88b5a35ea007ae9954abc89255a92a0eb4f614ff2494bc440989c0c59456c9f0ca4c5636c4ea1a6a7ef4179d059c2af85bfb03a1dbfa21da6b234bd55563c697c8fae69c716f7d7e36a00b39a556e2bb0e2e06459eaede48d186ce1e82a349debe545ebc4fdd4ae09bcde7c947dab39cca928499040c5fa463858dbd623a0f6355ecedb1a4cf481dde575bf5542e830e1a5150867"}]}}}, @tclass={{0x14, 0x29, 0x43, 0x8}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0x400}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x3b, 0x2, '\x00', [@pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}], 0x188}}], 0x5, 0x90) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfd}]}, 0x10) bind$bt_hci(r12, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x1, 0x7ffc1ffb}]}) semget$private(0x0, 0x0, 0x0) 2m41.383331766s ago: executing program 8 (id=890): syz_open_dev$sg(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x572, &(0x7f0000001600)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20042, 0x1) fallocate(r2, 0x0, 0x0, 0x8000c62) 2m41.149349871s ago: executing program 8 (id=893): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1b2fd2c5}]}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 2m41.016254514s ago: executing program 8 (id=897): sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x12, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0) r4 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r6, 0x0, 0x8}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004a80)={0x20, r8, 0x105, 0x70bd25, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40006) r11 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r12 = fcntl$dupfd(r11, 0x406, r11) sendmsg$IPVS_CMD_GET_CONFIG(r12, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xac, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd000}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010100}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xe44}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1ff}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1c}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}]}, 0xac}, 0x1, 0x0, 0x0, 0xa4}, 0x60000) ioctl$SG_IO(r12, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x1, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x1, 0x0}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYRESOCT=r4, @ANYBLOB="302b87477a64a9d7df01849a5d38f68d2dfa498bff4ddc3ae8b8a0e633b0ffbf974a8871d6bea5c318faf9f5b289ca87f279aa875d2c7eb5acc06390e833d087bd81c466671861c54cccbfc413679d78dcbb7be195dbbdb922aeda3d67be74a3bca88e09a3d2462a236f226a0482916f1dbdec8bb6565ce1d3fed97b06915eac8e54d537db6b230c3a7e571504f4c6d7be347dc2d34ce64eec2c9220f976a81afe152d466511b21c0f102c786ec92e725abd4533a17625cc93d5731dfd81c493658c084a78bd0ed8d098395cdf162b9ca1d17c2feb3fd66ed8328b", @ANYBLOB="2e1df1f4378eeee5532708ae3dc07fe8629b504f74f38e43dab8890d84bb907cded222f80009fd499ea46a323c84a70a8c2b962b333db84eb28286067a8aabd72fe9c85a62873e24787e51fdcfb18fa885c31dab0d141ff6dc150504646b7894c3b1352e5502c3616f649e8c49c20289902f80d55349a121a326af95c8c17dca04ea4acd899679042f7e950f491dd6a67ec9f773d0423d355135f05529709c2701c40c315c7658a98949f2db51cf4980e5eaf0b5ac046688516304dcfe6431f4f9318df606371011b9ffe4906c1be81e713ecd8bd945fc55ba9b83966378cb074f27283413d53e8b9274771d321624c6ca50af0e", @ANYRESHEX=r1, @ANYRESDEC=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r13, @ANYRES32=0x0, @ANYRES16=r11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) 2m40.554735673s ago: executing program 8 (id=904): signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x7]}, 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x3, 0x0}, 0x8) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = epoll_create1(0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x1, 0x0, &(0x7f0000000000), 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1000850, &(0x7f0000000040)={[{@errors_remount}, {@discard}]}, 0x1, 0x512, &(0x7f0000000380)="$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") epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000c40)={0x2000000b}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10) r6 = gettid() r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x0) ppoll(&(0x7f0000000000)=[{r7}], 0x1, 0x0, 0x0, 0x0) tkill(r6, 0x7) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="000100005304"], 0x100}, 0x1, 0x0, 0x0, 0x1}, 0x20080000) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r10}, 0x10) r11 = getpgrp(0xffffffffffffffff) r12 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r11, r12, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x300}, @generic={0x9, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8000000}, @exit]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 2m39.976298225s ago: executing program 8 (id=909): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000001740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="174a22f8d1f9469d73ac743315e677901e287ae25343290dc6ab451ebe7c30ef07da48f33282008d4a24897ffc740f034a7f91b11439f6962db65ec972a183efa8262c5f1aa993add7aafa7a2ceeebe2ef227ab4b38358d82539d194b01adfda448090b643d7518c9f6fc7a09bd3ec76a224fa27dd29295479c98e69b9b47b65a6730e2f45154bc3d364aee1dbd0d157e8f4cd87f8df03c6428a008c05d0c72412cbaba0bc691049c19fa3c1625d338ebda14d6614952dee5b98efabd575393f7a9273620edd6eb10dcf6b97a403b7e2ca20834275e5852014b4584c44", @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) (async) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async, rerun: 32) io_setup(0x81, &(0x7f0000000080)=0x0) (rerun: 32) io_submit(r3, 0x1, &(0x7f00000001c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x8, r2, &(0x7f00000005c0)="30db", 0x2, 0x3, 0x0, 0x2}]) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1818110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000040b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x10007ffffffff}, 0x18) r7 = syz_io_uring_setup(0x4909, &(0x7f0000000580)={0x0, 0x7f6e, 0x8, 0x3, 0x32d}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) (async, rerun: 64) syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80, 0x6000}) (async, rerun: 64) io_uring_enter(r7, 0x41c3a, 0xe176, 0x22, 0x0, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000003e000701fcfffffff6dbdf25017c0000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) process_vm_readv(0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/74, 0x4a}, {&(0x7f0000000740)=""/4096, 0x1000}], 0x2, &(0x7f0000000340)=[{&(0x7f0000000280)=""/63, 0x3f}], 0x1, 0x0) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r10}, 0x10) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async) r11 = request_key(&(0x7f0000002cc0)='user\x00', &(0x7f0000002d00)={'syz', 0x2}, &(0x7f0000002d40)='user.incfs.metadata\x00', 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r11, &(0x7f0000002d80)='blacklist\x00', &(0x7f0000002ec0)=@chain) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002c80)={r10, 0xe0, &(0x7f0000002b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000002980)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa, &(0x7f0000002f00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x71, &(0x7f0000002a40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000002ac0), &(0x7f0000002b00), 0x8, 0x800c9, 0x8, 0x8, &(0x7f0000002b40)}}, 0x10) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000002840)={0xe, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r12}, 0x94) (async) setuid(0xee00) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000014000103f7000000010000000b"], 0x14}}, 0x4014) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 2m39.67878106s ago: executing program 8 (id=916): r0 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 2m39.67853248s ago: executing program 36 (id=916): r0 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 1m5.48421737s ago: executing program 2 (id=3135): socket$nl_route(0x10, 0x3, 0x0) unshare(0x26020480) socket$netlink(0x10, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[], 0x0, 0x29}, 0x28) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x5) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noauto_da_alloc}, {@norecovery}, {}]}, 0x1, 0x4be, &(0x7f0000000540)="$eJzs3ctrW1caAPBPUvyMZ/KYYUgyMAlkIPMglh8MsWdmM6uZWQSGCXTTQuraiutatowlp7EJ1Gl3WXRRWlooXXRZ6D/QbppVQ6F03e5LFiWlTV1oCwUVXUmO/JArGjsC398PbnTuOTf6zrH4jq+OrnUDSK1ztX8yEUMR8UlEHKvvbj3gXP1h48HN6dqWiWr1yleZ5LjafvPQ5v87GhHrEdEfEf//d8QzmZ1xy6tr81PFYmG5sZ+vLCzly6trF+cWpmYLs4XF0YlLk5MTI+Njk/s21tsvP3f78vv/7X33u5fu333lww9q3RpqtLWOYz/Vh94TJ1rqjkTEPw8iWBfkGuMZ6HZH+EVqr99vIuJ8kv/HIpe8mkAaVKvV6o/VvnbN61Xg0Mom58CZ7HBE1MvZ7PBw/Rz+tzGYLZbKlb9eK60sztTPlY9HT/baXLEw0nivcDx6MrX90aT8cH9s2/54RHIO/GpuINkfni4VZx7vVAdsc3Rb/n+bq+c/kBLe8kN6yX9IL/kP6SX/Ib3kP6SX/If0kv+QXvIf0kv+Q3rJf0gv+Q+p9L/Ll2tbtfn37zPXV1fmS9cvzhTK88MLK9PD06XlGJ4t9b3X2fMVS6Wl0b/Fyo18pVCu5Mura1cXSiuLlatzC1OzvVHoOeDxAJ07cfbOZ5mIWP/7QLLV9Dba5CocbtUX6t8BAKRPrtsTENA1lv4gvbzHB3b5it4t+ts1LD1S1J8LCxygbLc7AHTNhdM+/4O0sv4P6WX9H9Jr6zm+swFIo+6s/wPdZP0f0muo5f4/mZb7f/2q5d5dIxHx64j4NNfT17zXF3AYZL/INHL/wrE/Dm1v7c18nywK9EbE829eef3GVKWyPFqr/3qzvvJGvb63G90HOpbk71jj0S9yAEi1jQc3p5vbZuXxg4/75b/qFyHsjH+ksTbZn3xGObiR2XKtQmafrl1YvxURp3aLn2nc77z+ycfgRm5H/JONx0z9KZL+Hknum/4o8e+902n80y3x/9AS/8wj/1QgHe7U5p+R3fI/m+R0bObf1vlnaJ+uj24//2U3579cm/nvbIcxnn3rxXtt49+KOLNr/Ga8/iTW9vi1vl3oMP79p574Xbu26tv159ktflOtlK8sLOXLq2sX5xamZguzhcXRiUuTkxMj42OT+WSNOt9cqd7pH6c+vrvX+AfbxN9r/LW6P3c4/h9+/9GT5/aI/6fzu7/+J/eIPxARf+kw/jdjnz/drq0Wf6bN+LPb47cs8NXqxjuMX37tP30dHgoAPAbl1bX5qWKxsKygoKCwWej2zAQctIdJ3+2eAAAAAAAAAAAAAJ16HJcTd3uMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACHwU8BAAD//zAx0oQ=") syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000f7ffffff9c00"], 0x50) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r1, &(0x7f0000000380)={'#! ', './file0', [{}, {0x20, 'sched_switch\x00'}, {0x20, 'GPL\x00'}, {0x20, '\x00'}, {0x20, '}'}], 0xa, "ce595585acac4e9fbdf4e6d525350bfa76f662f2f868e4e5b0efe161ad6232cac33b8c2239929ac248d7c13ecd"}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sysinfo(0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(0xffffffffffffffff, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b700000018000000bfa30000000000000703000028feffff7a0af0fff8ffffff61a4f0ff0000000015040000000002000f040000000000003404ffc101ed0a0065040000170000801f400000000000007b0a00fe000000002c04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d0cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931481747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9"], 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0700000004000000800000000100000028000000", @ANYRES32, @ANYBLOB="feefffff00000000000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000b3d4b2981ca2a46c1e4b8952a380d71cc0762fe22033d1e71e2f0533a8f4e2e809042a2bf7939278aa1f2d2013894c58405e55e7cfdd32de"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) 1m5.349276943s ago: executing program 2 (id=3138): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0xf, 0x0, 0x15, [{0x5, 0x5, 0x11}]}]}, {0x0, [0x30, 0x0, 0x2e, 0x0, 0x61]}}, &(0x7f0000005bc0)=""/255, 0x37, 0xff, 0x9, 0x1000}, 0x28) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000500)="d694", 0x2}], 0x1) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0xc5) close(r1) r2 = inotify_init1(0x800) fcntl$setstatus(r1, 0x4, 0x2c00) r3 = gettid() fcntl$setown(r1, 0x8, r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r4}, &(0x7f0000000800), &(0x7f0000000840)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r6}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r2, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000740)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0x2}}, 0x20) 1m5.271176444s ago: executing program 2 (id=3142): bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a320000000014000480080001400000000008000240000000002c000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xb4}, 0x1, 0x0, 0x0, 0x400c0d1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) r3 = syz_open_procfs$pagemap(0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r5}, 0x10) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB="c4000000190001050000000000000000fc000000000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000066cb9e4596b72f849484857f63096f81124f4f53dc359ef222094c74aac5eab5fae20010313a362b524b05ced65b9e67c1b6b5e5ecbadf9c5481a711aa6b014304bc882e007fa5512bb57134c95743c056ccaaa3397cdc9f19584575f70893853289ccac5979b64a6"], 0xc4}}, 0x200048c4) mkdir(&(0x7f0000000040)='./bus\x00', 0x40) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000140)='./file0\x00', r6, &(0x7f0000000200)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000300)=[{&(0x7f00000002c0)="3900000013000318680907070000001f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) newfstatat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0/file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) keyctl$chown(0x4, 0x0, 0x0, r8) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000"], 0x58}, 0x1, 0x7}, 0x0) lsm_get_self_attr(0x69, &(0x7f0000000400)={0x0, 0x0, 0x56, 0x36, ""/54}, &(0x7f0000000480)=0x56, 0x0) dup(r3) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0xc854) 1m4.097282788s ago: executing program 2 (id=3150): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b000000000010e3ffffffe40023c5767db0bd4e19ab09533df3d97aad142552ed446ee025a5851e187d65786753744b3831de3e26ccd855490251278aacf56ca9d55796b3706e4689a089c2490d4d4cb1c568f130cd7ba7c3b215f4c9edf19a1dbe295d68ff0237f8abb73aaba0304e31f84ca313554fef04e11ba7dd0f421e7480d95a383ad518344b02fb0d6b79e622308a60fe61037b4463", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000200e8fe55a1180015000600142603600e120900210000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7ce", 0x6c}, {&(0x7f0000000ec0)="c9df04cd8ce4f37656ffabb858c02ee95c69ff108ad5b76475bf8916734cbd57c84685f29a99074838097ed28b3d45bd4f24b1ad5ed7661fcf04c5f4e9fbfcebef046540294bb08de607993d1594343d19b89e6da0c4d2f7d7b92a2222268aa59e3113070d539092c09406c9", 0x6c}], 0x2}, 0x24004880) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a48500000004000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0xc}, 0x18) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x1c0) r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r5, @ANYRES16=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x2125099, 0x0) mount$cgroup2(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000000), 0x81, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f00000006c0), &(0x7f00000001c0)=r7}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) 1m3.719710385s ago: executing program 2 (id=3154): syz_clone(0x2096b11, 0x0, 0x11, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) kexec_load(0x0, 0x0, 0x0, 0x0) 1m2.878956432s ago: executing program 2 (id=3160): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x4a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x8, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='afs_receive_data\x00', r2, 0x0, 0x7}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00'}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000300035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 1m2.878664132s ago: executing program 37 (id=3160): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x4a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x8, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='afs_receive_data\x00', r2, 0x0, 0x7}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00'}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000300035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 1.575222569s ago: executing program 0 (id=4178): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019200)={0x18, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r0, 0x0, 0x1000000000000}, 0x18) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000005304"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) r3 = syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x0, 0x10100, 0x200}, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1.313405164s ago: executing program 3 (id=4183): unshare(0x66000080) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000100000009000000ae00000000000000", @ANYRES32, @ANYBLOB="00000000000600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/16], 0x50) bpf$MAP_CREATE(0xc00000000000000, &(0x7f00000007c0)=ANY=[@ANYBLOB="0d00000002000000040000000240000000000000", @ANYRES32=r3, @ANYBLOB="1e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000011"], 0x48) r4 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, 0x8040, 0x7, 0x3, 0x6, {{0x26, 0x4, 0x2, 0x8, 0x98, 0x68, 0x0, 0x5, 0x29, 0x0, @private=0xa010101, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0x2c, 0xae, 0x3, 0x3, [{@broadcast, 0x68fc}, {@local, 0xf}, {@empty, 0x5}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x5}, {@empty, 0xe}]}, @generic={0x82, 0x10, "81a4227cc2b5a072089bd2579bcc"}, @end, @noop, @ssrr={0x89, 0xf, 0x5d, [@private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x43}]}, @timestamp={0x44, 0x10, 0x7, 0x0, 0x0, [0x3, 0x7fffffff, 0x5]}, @ssrr={0x89, 0x27, 0x7f, [@loopback, @local, @broadcast, @dev={0xac, 0x14, 0x14, 0x1b}, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000580)={'gretap0\x00', &(0x7f0000000cc0)={'syztnl0\x00', r6, 0x80, 0x8, 0x98, 0x7f, {{0x18, 0x4, 0x2, 0x4, 0x60, 0x68, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @dev={0xac, 0x14, 0x14, 0x1e}, {[@ssrr={0x89, 0x13, 0xaa, [@empty, @remote, @dev={0xac, 0x14, 0x14, 0x36}, @loopback]}, @timestamp_prespec={0x44, 0x24, 0x25, 0x3, 0x2, [{@multicast1, 0xa0e}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x1}, {@loopback, 0x7f}, {@multicast1}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0xc5, 0x0, 0x3, [0x7, 0x88, 0x6]}]}}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x18) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x111, 0x9}}, 0x20) close(r7) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4, 0x3fc, @empty, 0x1}, 0x1c) 563.819939ms ago: executing program 1 (id=4197): r0 = socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x17) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x80, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7040000000000008500000001000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000003c0), 0x200044, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x10001, @local, 0x5}, 0x1c) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2, 0x0) 563.201999ms ago: executing program 7 (id=4198): bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000011643eca6b1ac8a6780cb92a0276b04ef040f086c30745dee7b0eb6b04908ee9273ad6ca485ac3f89439a27204a677711341e773460dc9a5afcb3e79df176af71aa3c010a6ebfc44ebc299d59d8ea15cdddfa024e372e68d56e6071246b93ca71a990097f70d6fb0a628203faaf1a6"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000010000"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x200, 0x70bd2d, 0x25dfdbfb, {0x60, 0x0, 0x0, 0x0, {0x0, 0x1}, {0x3, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x44080) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) r7 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r9}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r7, 0x0, 0x20) syz_read_part_table(0x5dc, &(0x7f0000000600)="$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") symlinkat(&(0x7f0000000000)='.\x00', r10, &(0x7f0000000140)='./file0\x00') 546.97524ms ago: executing program 0 (id=4199): bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000011643eca6b1ac8a6780cb92a0276b04ef040f086c30745dee7b0eb6b04908ee9273ad6ca485ac3f89439a27204a677711341e773460dc9a5afcb3e79df176af71aa3c010a6ebfc44ebc299d59d8ea15cdddfa024e372e68d56e6071246b93ca71a990097f70d6fb0a628203faaf1a6"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001000000"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x200, 0x70bd2d, 0x25dfdbfb, {0x60, 0x0, 0x0, 0x0, {0x0, 0x1}, {0x3, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x44080) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) r7 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r9}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r7, 0x0, 0x20) syz_read_part_table(0x5dc, &(0x7f0000000600)="$eJzs0s9rXFUUAODzZqZ9U7BMEdFFN4UGF9KqpAtddBYSpsNsbChVRFwXs6hCwUUXY4Y2bhP8BwzRCJJNcCc4y5AoIcJkFbKUAdcGN0MWT2beG3+MCYIJpoHvW9x337333HMv9wTnWvLpZ0UvS6OS99JjV3ci4rmI2Fgd/VbeWWvcaV2bfeve/YcvTuw7bC79udm3EdXh926az7bS6d7K9szB2pWd67tbUxfHcd3SKEvSiagdcYCLEZ0k4jDLnezunH/r9c306cKj5uLj+txes92/9eBm4+pS46PP3/jy9vy7L91+r5Sv65YmArOjyus/5a/l+Stze9Xx3of/KM8byd/jyqeSnbP2x/vPR0Sz3V9+4cn+k8HbL3/zyWs3nt/feP9yse63ZDJysiABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOZr2+WXu68Ki5+Lg+t9ds9289uNm4OsgKtQvliPg4IrqlahFRHrXVU8t/qejl+ad6b379U3b31y8uv3phqzeY/mE09/qPx4Qnp3QMzshf66/SbPeXh4U1GL9rUYbzkaUR341jPjzD8wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz76lO61rs6V79yOS+CAiZkpXVofjWZrPJ6O2nP/8EhHFeCud7q1szxysxc713a2pr2aL8W4pohMRD39erUW88n02UiSr/N+349/8HgAA//87IZG5") symlinkat(&(0x7f0000000000)='.\x00', r10, &(0x7f0000000140)='./file0\x00') 524.80936ms ago: executing program 1 (id=4200): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) (async) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) epoll_create1(0x0) (async) memfd_create(&(0x7f0000000000)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\x00\x00\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049\r\x197|\x7f\x03%\x9c\x88\xf8f\xf4b\x97\xb5\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8', 0x4) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) waitid(0x0, 0x0, 0x0, 0xe, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x18800000000000, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x7, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x2800000000000, 0x9, 0x3, 0x0, 0x7fffffff}, 0x0, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) (async) r5 = socket$inet(0x2, 0x3, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x7, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2}, 0x94) (async) r7 = socket(0x10, 0x3, 0x0) unshare(0x400) (async) write(r7, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) (async) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r9 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) (async) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}}}, 0x24}}, 0x0) 485.003841ms ago: executing program 9 (id=4201): bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a320000000014000480080001400000000008000240000000002c000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xb4}, 0x1, 0x0, 0x0, 0x400c0d1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) r3 = syz_open_procfs$pagemap(0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r5}, 0x10) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB="c4000000190001050000000000000000fc000000000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000066cb9e4596b72f849484857f63096f81124f4f53dc359ef222094c74aac5eab5fae20010313a362b524b05ced65b9e67c1b6b5e5ecbadf9c5481a711aa6b014304bc882e007fa5512bb57134c95743c056ccaaa3397cdc9f19584575f70893853289ccac5979b64a6"], 0xc4}}, 0x200048c4) mkdir(&(0x7f0000000040)='./bus\x00', 0x40) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000140)='./file0\x00', r6, &(0x7f0000000200)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000300)=[{&(0x7f00000002c0)="3900000013000318680907070000001f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) newfstatat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0/file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) keyctl$chown(0x4, 0x0, 0x0, r8) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000"], 0x58}, 0x1, 0x7}, 0x0) lsm_get_self_attr(0x69, &(0x7f0000000400)={0x0, 0x0, 0x56, 0x36, ""/54}, &(0x7f0000000480)=0x56, 0x0) dup(r3) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0xc854) 434.835092ms ago: executing program 1 (id=4202): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000001ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x58}, 0x2160) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x18, 0x7, 0x7f}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 427.011872ms ago: executing program 3 (id=4203): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x4b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) r0 = socket$netlink(0x10, 0x3, 0x1) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @private=0xa010100}, 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000100)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000400)="31db0b9b", 0x4}], 0x1, 0x0, 0x0, 0x804c080}, 0x4000891) 327.668764ms ago: executing program 1 (id=4204): syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 325.221164ms ago: executing program 3 (id=4205): bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a320000000014000480080001400000000008000240000000002c000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xb4}, 0x1, 0x0, 0x0, 0x400c0d1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) r2 = syz_open_procfs$pagemap(0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r4}, 0x10) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB="c4000000190001050000000000000000fc000000000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000066cb9e4596b72f849484857f63096f81124f4f53dc359ef222094c74aac5eab5fae20010313a362b524b05ced65b9e67c1b6b5e5ecbadf9c5481a711aa6b014304bc882e007fa5512bb57134c95743c056ccaaa3397cdc9f19584575f70893853289ccac5979b64a6"], 0xc4}}, 0x200048c4) mkdir(&(0x7f0000000040)='./bus\x00', 0x40) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000140)='./file0\x00', r5, &(0x7f0000000200)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000300)=[{&(0x7f00000002c0)="3900000013000318680907070000001f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) newfstatat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0/file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) keyctl$chown(0x4, 0x0, 0x0, r7) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000"], 0x58}, 0x1, 0x7}, 0x0) lsm_get_self_attr(0x69, &(0x7f0000000400)={0x0, 0x0, 0x56, 0x36, ""/54}, &(0x7f0000000480)=0x56, 0x0) dup(r2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0xc854) 308.085754ms ago: executing program 9 (id=4206): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000080000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000000600000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) 286.855914ms ago: executing program 1 (id=4207): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002540), r0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, @perf_bp={0x0, 0x224ef61b12363fa4}, 0x0, 0x4, 0x5, 0xffffffffffffffff, 0x8, 0x2, 0x1, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x17, &(0x7f0000000000)=0xd5, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0xfffd, 0x5, 0x7, 0x8}, {0x3ff, 0x7, 0xa, 0x3}, {0x2, 0x9, 0xff, 0x4}, {0x4, 0x9, 0x9, 0xac7d}]}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f0000002840)=ANY=[@ANYBLOB="ffcc2ab4", @ANYRES16=r1, @ANYBLOB="010029bd7000ffdbdf25280000000a0001007770616e3000000005002b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x30) 218.821976ms ago: executing program 9 (id=4208): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffa}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) write$P9_RMKNOD(r2, &(0x7f0000000280)={0x14, 0x13, 0x2, {0x4, 0x2}}, 0xfffffe5c) shutdown(r2, 0x1) sendmsg$inet6(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)="a036f1778b236c098e00c2cd1db7607d3f1f26d36f8fc010d526f804d8b20e7cc6639e488c62d4fabb570d146cde9069ebbf75a69acb98b979d21399ad7dc7c6e5efd7fa0bd8244bab0f2749d3920805933a9c29d8c5b4991ecb40087ce09c8d13347356b9b937be6e49b4cbe9c14d4ac49bdc230c924f39ee94a9df9a88a427a9bf2d4ad8f922c9d12e4a9aab392b54d1d38899d8c4dcbc2947c4c5802f7747f7670c50f93031", 0xa7}, {&(0x7f0000000640)="260dcb034a66e13660b3eb9ff23d9fb1c76898729680d7bcf96ae0be8f01f6fa6057c8fa19111efde1e44267670f40e80df59d8608b0b31bf507ac67a5f9cd1441200b7e0ae293d9e9323fc5803f9ef8dfb36b402a81d969912fc8035db456b31dfd200181a98af51aa7cc9200200b45a3798376fe07f9ab4561d8883289639ce7cc28c36cff9442aefc2d14f570b7d62048386a74f0124aa1996376495db6d1d83c534c53a2bfc744ba0e9ca4cdc47f10dffdcae8c43fb17f5be5bf87ff20da2dab2dff1e6863128303184a987d50039d5d0b180e136e5f43ab1e1ab8532a7d379de211d365b6e4aa448c50c99cf7", 0xef}], 0x2, &(0x7f0000000cc0)=[@hopopts={{0xa0, 0x29, 0x36, {0x87, 0x10, '\x00', [@hao={0xc9, 0x10, @mcast2}, @calipso={0x7, 0x38, {0x0, 0xc, 0x4, 0x5, [0x800, 0x0, 0x401, 0x200, 0x0, 0x7]}}, @calipso={0x7, 0x38, {0x0, 0xc, 0x6, 0x6b7a, [0x6, 0x35c, 0x9, 0x2, 0x0, 0xfffffffffffffc00]}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x5cf}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}, @hopopts={{0x28, 0x29, 0x36, {0x2, 0x1, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x3ff}]}}}, @hoplimit_2292={{0x14}}, @rthdr={{0x68, 0x29, 0x39, {0x2, 0xa, 0x1, 0x5, 0x0, [@mcast2, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @rand_addr=' \x01\x00']}}}, @rthdr={{0x48, 0x29, 0x39, {0x2e, 0x6, 0x1, 0x8, 0x0, [@local, @private1, @dev={0xfe, 0x80, '\x00', 0x3a}]}}}], 0x1c0}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) 204.803606ms ago: executing program 3 (id=4209): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000200000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x18) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xff00000000000000, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 184.879677ms ago: executing program 0 (id=4210): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x1007, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) perf_event_open(0x0, 0x0, 0x0, r1, 0xa) 178.108756ms ago: executing program 7 (id=4211): r0 = socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x17) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x80, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000003c0), 0x200044, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x10001, @local, 0x5}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000b80)='syzkaller\x00', 0x0, 0xfffffef4, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2, 0x0) r4 = socket(0x2b, 0x80801, 0x1) syz_read_part_table(0x593, &(0x7f00000005c0)="$eJzs0r1LK2kUB+A3A5c0e4lcLli4hWCwigqx0CIpRGJIY0RcsbAWLLQQLCwkEq39+AcUv0BsxD6lGEEUYiUpxXpBsUmVZdfZxmplUdnleZrhPefMHF5+E/hPi8Lv7XY7EUJoJ9//9m+nhbFS98TI5FQIiTAbQij8+stfnUQ88fdXz+NzOT6XktnG/vXo82nHTc9dPX0Yxf1aFMJaCGHh4Sj1b+/G/99Z/jK1vrFU3FzJz98XVx8H5/oKXVuFxZ2hg1xlujM3E/9Ytehz9qcbw8e37fLT7vf+b/VGK3sVz2USH7Ofr/U2/72f1Wa1Nd57sjyQ+dG8qGzHub/IHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+GBn+cvU+sZScXMlP39fXH0cnOsrdG0VFneGDnKV6c7cTPQ6V4s+Z3+6MXx82y4/7X7v/1ZvtLJX8Vwm8TH7+Vpv89/7WW1WW+O9J8sDmR/Ni8p2nPuL/AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf6gwVuqeGJmcCiERZkMIo1HH0Z/1dvK1n4jnzuNnOa6XktnG/vXo82nHTc9dPX04EddrUQhrIYSFh6PUp1+Gd/sjAAD///tch0s=") r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000400)={'tunl0\x00', &(0x7f0000000c00)={'syztnl2\x00', 0x0, 0x8040, 0x7, 0x3, 0x6, {{0x26, 0x4, 0x2, 0x8, 0x98, 0x68, 0x0, 0x5, 0x29, 0x0, @private=0xa010101, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0x2c, 0xae, 0x3, 0x3, [{@broadcast, 0x68fc}, {@local, 0xf}, {@empty, 0x5}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x5}, {@empty, 0xe}]}, @generic={0x82, 0x10, "81a4227cc2b5a072089bd2579bcc"}, @end, @noop, @ssrr={0x89, 0xf, 0x5d, [@private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x43}]}, @timestamp={0x44, 0x10, 0x7, 0x0, 0x0, [0x3, 0x7fffffff, 0x5]}, @ssrr={0x89, 0x27, 0x7f, [@loopback, @local, @broadcast, @dev={0xac, 0x14, 0x14, 0x1b}, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000580)={'gretap0\x00', &(0x7f0000000cc0)={'syztnl0\x00', r6, 0x80, 0x8, 0x98, 0x7f, {{0x18, 0x4, 0x2, 0x4, 0x60, 0x68, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @dev={0xac, 0x14, 0x14, 0x1e}, {[@ssrr={0x89, 0x13, 0xaa, [@empty, @remote, @dev={0xac, 0x14, 0x14, 0x36}, @loopback]}, @timestamp_prespec={0x44, 0x24, 0x25, 0x3, 0x2, [{@multicast1, 0xa0e}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x1}, {@loopback, 0x7f}, {@multicast1}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0xc5, 0x0, 0x3, [0x7, 0x88, 0x6]}]}}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x18) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x111, 0x9}}, 0x20) close(r7) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4, 0x3fc, @empty, 0x1}, 0x1c) 162.615567ms ago: executing program 0 (id=4212): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffa}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) write$P9_RMKNOD(r2, &(0x7f0000000280)={0x14, 0x13, 0x2, {0x4, 0x2}}, 0xfffffe5c) shutdown(r2, 0x1) sendmsg$inet6(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)="a036f1778b236c098e00c2cd1db7607d3f1f26d36f8fc010d526f804d8b20e7cc6639e488c62d4fabb570d146cde9069ebbf75a69acb98b979d21399ad7dc7c6e5efd7fa0bd8244bab0f2749d3920805933a9c29d8c5b4991ecb40087ce09c8d13347356b9b937be6e49b4cbe9c14d4ac49bdc230c924f39ee94a9df9a88a427a9bf2d4ad8f922c9d12e4a9aab392b54d1d38899d8c4dcbc2947c4c5802f7747f7670c50f93031", 0xa7}, {&(0x7f0000000640)="260dcb034a66e13660b3eb9ff23d9fb1c76898729680d7bcf96ae0be8f01f6fa6057c8fa19111efde1e44267670f40e80df59d8608b0b31bf507ac67a5f9cd1441200b7e0ae293d9e9323fc5803f9ef8dfb36b402a81d969912fc8035db456b31dfd200181a98af51aa7cc9200200b45a3798376fe07f9ab4561d8883289639ce7cc28c36cff9442aefc2d14f570b7d62048386a74f0124aa1996376495db6d1d83c534c53a2bfc744ba0e9ca4cdc47f10dffdcae8c43fb17f5be5bf87ff20da2dab2dff1e6863128303184a987d50039d5d0b180e136e5f43ab1e1ab8532a7d379de211d365b6e4aa448c50c99cf7", 0xef}], 0x2, &(0x7f0000000cc0)=[@hopopts={{0xa0, 0x29, 0x36, {0x87, 0x10, '\x00', [@hao={0xc9, 0x10, @mcast2}, @calipso={0x7, 0x38, {0x0, 0xc, 0x4, 0x5, [0x800, 0x0, 0x401, 0x200, 0x0, 0x7]}}, @calipso={0x7, 0x38, {0x0, 0xc, 0x6, 0x6b7a, [0x6, 0x35c, 0x9, 0x2, 0x0, 0xfffffffffffffc00]}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x5cf}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}, @hopopts={{0x28, 0x29, 0x36, {0x2, 0x1, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x3ff}]}}}, @hoplimit_2292={{0x14}}, @rthdr={{0x68, 0x29, 0x39, {0x2, 0xa, 0x1, 0x5, 0x0, [@mcast2, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @rand_addr=' \x01\x00']}}}, @rthdr={{0x48, 0x29, 0x39, {0x2e, 0x6, 0x1, 0x8, 0x0, [@local, @private1, @dev={0xfe, 0x80, '\x00', 0x3a}]}}}], 0x1c0}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) 162.198107ms ago: executing program 3 (id=4213): syz_read_part_table(0x5c2, &(0x7f0000000000)="$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") socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x0, 0x0, 0x1}}, 0x2e) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x100, 0x1e020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xb, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9901) mount_setattr(r1, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000000080)={0xb, 0x0, 0x40000}, 0x20) 160.291957ms ago: executing program 9 (id=4214): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000001ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x58}, 0x2160) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x18, 0x7, 0x7f}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 84.364649ms ago: executing program 3 (id=4215): bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000011643eca6b1ac8a6780cb92a0276b04ef040f086c30745dee7b0eb6b04908ee9273ad6ca485ac3f89439a27204a677711341e773460dc9a5afcb3e79df176af71aa3c010a6ebfc44ebc299d59d8ea15cdddfa024e372e68d56e6071246b93ca71a990097f70d6fb0a628203faaf1a6"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x200, 0x70bd2d, 0x25dfdbfb, {0x60, 0x0, 0x0, 0x0, {0x0, 0x1}, {0x3, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x44080) 84.177698ms ago: executing program 9 (id=4216): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @private=0xa010100}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000100)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000400)="31db0b9b", 0x4}], 0x1, 0x0, 0x0, 0x804c080}, 0x4000891) 83.879819ms ago: executing program 0 (id=4217): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x3200890, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10, 0x80000000}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000800) 75.512879ms ago: executing program 7 (id=4218): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019200)={0x18, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r0, 0x0, 0x1000000000000}, 0x18) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000005304"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) r3 = syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x0, 0x10100, 0x200}, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 0s ago: executing program 0 (id=4219): bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a320000000014000480080001400000000008000240000000002c000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xb4}, 0x1, 0x0, 0x0, 0x400c0d1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) r2 = syz_open_procfs$pagemap(0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r4}, 0x10) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB="c4000000190001050000000000000000fc000000000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000066cb9e4596b72f849484857f63096f81124f4f53dc359ef222094c74aac5eab5fae20010313a362b524b05ced65b9e67c1b6b5e5ecbadf9c5481a711aa6b014304bc882e007fa5512bb57134c95743c056ccaaa3397cdc9f19584575f70893853289ccac5979b64a6"], 0xc4}}, 0x200048c4) mkdir(&(0x7f0000000040)='./bus\x00', 0x40) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000140)='./file0\x00', r5, &(0x7f0000000200)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000300)=[{&(0x7f00000002c0)="3900000013000318680907070000001f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) newfstatat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0/file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) keyctl$chown(0x4, 0x0, 0x0, r7) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000"], 0x58}, 0x1, 0x7}, 0x0) lsm_get_self_attr(0x69, &(0x7f0000000400)={0x0, 0x0, 0x56, 0x36, ""/54}, &(0x7f0000000480)=0x56, 0x0) dup(r2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0xc854) kernel console output (not intermixed with test programs): 0 [ 212.500846][T13377] ? __rcu_read_unlock+0x4f/0x70 [ 212.500876][T13377] ? __fget_files+0x184/0x1c0 [ 212.501040][T13377] ? fput+0x8f/0xc0 [ 212.501070][T13377] __x64_sys_io_uring_enter+0x78/0x90 [ 212.501096][T13377] x64_sys_call+0x2df0/0x3000 [ 212.501124][T13377] do_syscall_64+0xd2/0x200 [ 212.501230][T13377] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 212.501336][T13377] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 212.501381][T13377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.501411][T13377] RIP: 0033:0x7f96ebbfeec9 [ 212.501432][T13377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.501457][T13377] RSP: 002b:00007f96ea667038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 212.501483][T13377] RAX: ffffffffffffffda RBX: 00007f96ebe55fa0 RCX: 00007f96ebbfeec9 [ 212.501497][T13377] RDX: 0000000000000000 RSI: 0000000000002d3e RDI: 0000000000000008 [ 212.501510][T13377] RBP: 00007f96ea667090 R08: 0000000000000000 R09: 0000000000000000 [ 212.501556][T13377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.501573][T13377] R13: 00007f96ebe56038 R14: 00007f96ebe55fa0 R15: 00007ffebc352058 [ 212.501668][T13377] [ 212.818388][T13364] netlink: 19 bytes leftover after parsing attributes in process `syz.3.3272'. [ 212.922992][T13389] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3282'. [ 212.933926][T13389] netlink: 5 bytes leftover after parsing attributes in process `syz.7.3282'. [ 212.943021][T13389] 0猉功D: renamed from 31猉功D (while UP) [ 212.952143][T13389] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 212.984926][T13401] bridge2: entered promiscuous mode [ 212.990379][T13389] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3282'. [ 213.057241][T13409] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.064593][T13409] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.075691][T13409] bridge0: entered allmulticast mode [ 213.122281][T13414] program syz.7.3292 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.559610][T13427] lo speed is unknown, defaulting to 1000 [ 213.566417][T13427] lo speed is unknown, defaulting to 1000 [ 214.026716][T13440] FAULT_INJECTION: forcing a failure. [ 214.026716][T13440] name failslab, interval 1, probability 0, space 0, times 0 [ 214.039545][T13440] CPU: 1 UID: 0 PID: 13440 Comm: syz.3.3302 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 214.039636][T13440] Tainted: [W]=WARN [ 214.039642][T13440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 214.039653][T13440] Call Trace: [ 214.039658][T13440] [ 214.039664][T13440] __dump_stack+0x1d/0x30 [ 214.039684][T13440] dump_stack_lvl+0xe8/0x140 [ 214.039701][T13440] dump_stack+0x15/0x1b [ 214.039774][T13440] should_fail_ex+0x265/0x280 [ 214.039795][T13440] should_failslab+0x8c/0xb0 [ 214.039813][T13440] kmem_cache_alloc_node_noprof+0x57/0x320 [ 214.039835][T13440] ? __alloc_skb+0x101/0x320 [ 214.039855][T13440] __alloc_skb+0x101/0x320 [ 214.039927][T13440] ? audit_log_start+0x342/0x720 [ 214.039959][T13440] audit_log_start+0x3a0/0x720 [ 214.040043][T13440] ? kstrtouint+0x76/0xc0 [ 214.040130][T13440] audit_seccomp+0x48/0x100 [ 214.040156][T13440] ? __seccomp_filter+0x82d/0x1250 [ 214.040179][T13440] __seccomp_filter+0x83e/0x1250 [ 214.040269][T13440] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 214.040339][T13440] ? vfs_write+0x7e8/0x960 [ 214.040375][T13440] __secure_computing+0x82/0x150 [ 214.040398][T13440] syscall_trace_enter+0xcf/0x1e0 [ 214.040423][T13440] do_syscall_64+0xac/0x200 [ 214.040515][T13440] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 214.040538][T13440] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 214.040668][T13440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.040688][T13440] RIP: 0033:0x7f92838feec9 [ 214.040702][T13440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.040718][T13440] RSP: 002b:00007f9282366f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 214.040735][T13440] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f92838feec9 [ 214.040746][T13440] RDX: 00007f9282366f20 RSI: 0000000000000058 RDI: 00007f9282366f20 [ 214.040830][T13440] RBP: 00007f9282367090 R08: 0000000000000000 R09: 0000000000000058 [ 214.040840][T13440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.040851][T13440] R13: 00007f9283b56038 R14: 00007f9283b55fa0 R15: 00007ffca6d1e7a8 [ 214.040869][T13440] [ 214.277437][T13442] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3301'. [ 214.368681][T13446] FAULT_INJECTION: forcing a failure. [ 214.368681][T13446] name failslab, interval 1, probability 0, space 0, times 0 [ 214.381435][T13446] CPU: 1 UID: 0 PID: 13446 Comm: syz.1.3305 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 214.381522][T13446] Tainted: [W]=WARN [ 214.381531][T13446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 214.381547][T13446] Call Trace: [ 214.381555][T13446] [ 214.381565][T13446] __dump_stack+0x1d/0x30 [ 214.381591][T13446] dump_stack_lvl+0xe8/0x140 [ 214.381610][T13446] dump_stack+0x15/0x1b [ 214.381666][T13446] should_fail_ex+0x265/0x280 [ 214.381695][T13446] should_failslab+0x8c/0xb0 [ 214.381720][T13446] __kmalloc_noprof+0xa5/0x3e0 [ 214.381749][T13446] ? alloc_pipe_info+0x1c9/0x350 [ 214.381856][T13446] alloc_pipe_info+0x1c9/0x350 [ 214.381891][T13446] fifo_open+0xa1/0x5d0 [ 214.381912][T13446] do_dentry_open+0x649/0xa20 [ 214.381988][T13446] ? __pfx_fifo_open+0x10/0x10 [ 214.382016][T13446] vfs_open+0x37/0x1e0 [ 214.382048][T13446] path_openat+0x1c5e/0x2170 [ 214.382142][T13446] ? path_openat+0x1bf8/0x2170 [ 214.382194][T13446] ? _parse_integer_limit+0x170/0x190 [ 214.382232][T13446] do_filp_open+0x109/0x230 [ 214.382280][T13446] file_open_name+0xfa/0x120 [ 214.382347][T13446] __se_sys_acct+0xf0/0x490 [ 214.382390][T13446] __x64_sys_acct+0x1f/0x30 [ 214.382495][T13446] x64_sys_call+0x2f3a/0x3000 [ 214.382520][T13446] do_syscall_64+0xd2/0x200 [ 214.382556][T13446] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 214.382624][T13446] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 214.382663][T13446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.382685][T13446] RIP: 0033:0x7fcbe1b5eec9 [ 214.382708][T13446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.382728][T13446] RSP: 002b:00007fcbe05bf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 214.382752][T13446] RAX: ffffffffffffffda RBX: 00007fcbe1db5fa0 RCX: 00007fcbe1b5eec9 [ 214.382768][T13446] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 214.382783][T13446] RBP: 00007fcbe05bf090 R08: 0000000000000000 R09: 0000000000000000 [ 214.382859][T13446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.382871][T13446] R13: 00007fcbe1db6038 R14: 00007fcbe1db5fa0 R15: 00007ffe886b9288 [ 214.382893][T13446] [ 214.487624][T13448] netlink: 'syz.0.3304': attribute type 21 has an invalid length. [ 214.681881][T13452] can0: slcan on ttyS3. [ 214.905761][T13452] can0 (unregistered): slcan off ttyS3. [ 214.915875][T13465] bridge0: port 3(31猉功D) entered blocking state [ 214.922472][T13465] bridge0: port 3(31猉功D) entered disabled state [ 214.937196][T13465] 1猉功D: entered promiscuous mode [ 214.946470][T13465] 1猉功D: left promiscuous mode [ 214.951556][T13465] bridge0: port 3(31猉功D) entered disabled state [ 214.974291][T13465] lo speed is unknown, defaulting to 1000 [ 214.980527][T13465] lo speed is unknown, defaulting to 1000 [ 215.134572][T13473] 1猉功D: renamed from 30猉功D (while UP) [ 215.144072][T13473] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 215.342177][T13493] lo speed is unknown, defaulting to 1000 [ 215.348417][T13493] lo speed is unknown, defaulting to 1000 [ 215.449277][T13496] lo speed is unknown, defaulting to 1000 [ 215.455762][T13496] lo speed is unknown, defaulting to 1000 [ 215.584722][T13499] FAULT_INJECTION: forcing a failure. [ 215.584722][T13499] name failslab, interval 1, probability 0, space 0, times 0 [ 215.597546][T13499] CPU: 1 UID: 0 PID: 13499 Comm: syz.1.3323 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 215.597583][T13499] Tainted: [W]=WARN [ 215.597591][T13499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 215.597607][T13499] Call Trace: [ 215.597615][T13499] [ 215.597662][T13499] __dump_stack+0x1d/0x30 [ 215.597689][T13499] dump_stack_lvl+0xe8/0x140 [ 215.597766][T13499] dump_stack+0x15/0x1b [ 215.597782][T13499] should_fail_ex+0x265/0x280 [ 215.597809][T13499] should_failslab+0x8c/0xb0 [ 215.597834][T13499] __kmalloc_noprof+0xa5/0x3e0 [ 215.597856][T13499] ? security_sk_alloc+0x52/0x120 [ 215.597906][T13499] ? should_failslab+0x8c/0xb0 [ 215.597933][T13499] security_sk_alloc+0x52/0x120 [ 215.597962][T13499] sk_prot_alloc+0xc2/0x190 [ 215.598071][T13499] sk_alloc+0x34/0x360 [ 215.598100][T13499] packet_create+0xbd/0x4a0 [ 215.598139][T13499] __sock_create+0x2ec/0x5b0 [ 215.598173][T13499] __sys_socketpair+0x1bc/0x430 [ 215.598231][T13499] __x64_sys_socketpair+0x52/0x60 [ 215.598252][T13499] x64_sys_call+0x2bf6/0x3000 [ 215.598273][T13499] do_syscall_64+0xd2/0x200 [ 215.598327][T13499] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 215.598362][T13499] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 215.598458][T13499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.598479][T13499] RIP: 0033:0x7fcbe1b5eec9 [ 215.598535][T13499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.598553][T13499] RSP: 002b:00007fcbe05bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 215.598576][T13499] RAX: ffffffffffffffda RBX: 00007fcbe1db5fa0 RCX: 00007fcbe1b5eec9 [ 215.598614][T13499] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000011 [ 215.598631][T13499] RBP: 00007fcbe05bf090 R08: 0000000000000000 R09: 0000000000000000 [ 215.598647][T13499] R10: 0000200000001080 R11: 0000000000000246 R12: 0000000000000001 [ 215.598683][T13499] R13: 00007fcbe1db6038 R14: 00007fcbe1db5fa0 R15: 00007ffe886b9288 [ 215.598703][T13499] [ 215.855186][T13504] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 216.553354][T13537] __nla_validate_parse: 8 callbacks suppressed [ 216.553371][T13537] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3337'. [ 216.938172][T13552] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3344'. [ 216.962705][ T29] kauditd_printk_skb: 478 callbacks suppressed [ 216.962725][ T29] audit: type=1326 audit(1759401993.526:20522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13551 comm="syz.9.3344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997bc7eec9 code=0x7ffc0000 [ 217.109763][ T29] audit: type=1326 audit(1759401993.526:20523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13551 comm="syz.9.3344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997bc7eec9 code=0x7ffc0000 [ 217.133834][ T29] audit: type=1326 audit(1759401993.526:20524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13551 comm="syz.9.3344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f997bc7eec9 code=0x7ffc0000 [ 217.157786][ T29] audit: type=1326 audit(1759401993.526:20525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13551 comm="syz.9.3344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997bc7eec9 code=0x7ffc0000 [ 217.181741][ T29] audit: type=1326 audit(1759401993.526:20526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13551 comm="syz.9.3344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997bc7eec9 code=0x7ffc0000 [ 217.205883][ T29] audit: type=1326 audit(1759401993.526:20527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13551 comm="syz.9.3344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f997bc7eec9 code=0x7ffc0000 [ 217.229716][ T29] audit: type=1326 audit(1759401993.526:20528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13551 comm="syz.9.3344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997bc7eec9 code=0x7ffc0000 [ 217.253761][ T29] audit: type=1326 audit(1759401993.526:20529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13551 comm="syz.9.3344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997bc7eec9 code=0x7ffc0000 [ 217.277709][ T29] audit: type=1326 audit(1759401993.526:20530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13551 comm="syz.9.3344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f997bc7eec9 code=0x7ffc0000 [ 217.301467][ T29] audit: type=1326 audit(1759401993.526:20531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13551 comm="syz.9.3344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997bc7eec9 code=0x7ffc0000 [ 217.406561][T13569] lo speed is unknown, defaulting to 1000 [ 217.413087][T13569] lo speed is unknown, defaulting to 1000 [ 217.520092][T13562] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3348'. [ 217.850288][T13574] netlink: 'syz.7.3353': attribute type 21 has an invalid length. [ 217.858345][T13574] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3353'. [ 218.185045][T13580] netlink: 19 bytes leftover after parsing attributes in process `syz.1.3356'. [ 218.314258][T13593] IPv6: Can't replace route, no match found [ 218.375071][T13597] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3362'. [ 218.385481][T13601] netlink: 'syz.3.3364': attribute type 21 has an invalid length. [ 218.393505][T13601] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3364'. [ 218.459081][T13603] bridge0: port 3(31猉功D) entered blocking state [ 218.465903][T13603] bridge0: port 3(31猉功D) entered disabled state [ 218.482006][T13603] 1猉功D: entered promiscuous mode [ 218.495889][T13603] bridge0: port 3(31猉功D) entered blocking state [ 218.502558][T13603] bridge0: port 3(31猉功D) entered forwarding state [ 218.543669][T13604] 1猉功D: left promiscuous mode [ 218.548984][T13604] bridge0: port 3(31猉功D) entered disabled state [ 218.674402][T13603] lo speed is unknown, defaulting to 1000 [ 218.680937][T13603] lo speed is unknown, defaulting to 1000 [ 218.857771][T13619] netlink: 'syz.1.3366': attribute type 4 has an invalid length. [ 218.866215][T13619] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3366'. [ 218.884418][T13619] .`: renamed from bond0 (while UP) [ 218.968904][T13623] netlink: 'syz.1.3373': attribute type 21 has an invalid length. [ 218.977256][T13623] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3373'. [ 219.134589][T13629] tipc: Enabled bearer , priority 0 [ 219.143218][T13629] syzkaller0: entered promiscuous mode [ 219.148830][T13629] syzkaller0: entered allmulticast mode [ 219.161847][T13629] tipc: Resetting bearer [ 219.215434][T13621] netlink: 19 bytes leftover after parsing attributes in process `syz.0.3372'. [ 219.301046][T13628] tipc: Resetting bearer [ 219.309303][T13628] tipc: Disabling bearer [ 219.740441][T13663] lo speed is unknown, defaulting to 1000 [ 219.747050][T13663] lo speed is unknown, defaulting to 1000 [ 220.015883][T13670] netlink: 'syz.9.3391': attribute type 21 has an invalid length. [ 220.157891][T13674] 0猉功D: renamed from 31猉功D (while UP) [ 220.169300][T13674] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 220.844724][T13728] lo speed is unknown, defaulting to 1000 [ 220.851358][T13728] lo speed is unknown, defaulting to 1000 [ 221.111471][T13733] FAULT_INJECTION: forcing a failure. [ 221.111471][T13733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.124814][T13733] CPU: 1 UID: 0 PID: 13733 Comm: syz.7.3417 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 221.124851][T13733] Tainted: [W]=WARN [ 221.124866][T13733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 221.124879][T13733] Call Trace: [ 221.124886][T13733] [ 221.124949][T13733] __dump_stack+0x1d/0x30 [ 221.124977][T13733] dump_stack_lvl+0xe8/0x140 [ 221.125003][T13733] dump_stack+0x15/0x1b [ 221.125025][T13733] should_fail_ex+0x265/0x280 [ 221.125124][T13733] should_fail+0xb/0x20 [ 221.125150][T13733] should_fail_usercopy+0x1a/0x20 [ 221.125198][T13733] _copy_from_iter+0xd2/0xe80 [ 221.125273][T13733] ? __build_skb_around+0x1a0/0x200 [ 221.125374][T13733] ? __alloc_skb+0x223/0x320 [ 221.125397][T13733] netlink_sendmsg+0x471/0x6b0 [ 221.125427][T13733] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.125459][T13733] __sock_sendmsg+0x145/0x180 [ 221.125502][T13733] ____sys_sendmsg+0x31e/0x4e0 [ 221.125540][T13733] ___sys_sendmsg+0x17b/0x1d0 [ 221.125611][T13733] __x64_sys_sendmsg+0xd4/0x160 [ 221.125657][T13733] x64_sys_call+0x191e/0x3000 [ 221.125686][T13733] do_syscall_64+0xd2/0x200 [ 221.125728][T13733] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 221.125797][T13733] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 221.125932][T13733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.125988][T13733] RIP: 0033:0x7fb373b4eec9 [ 221.126003][T13733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.126024][T13733] RSP: 002b:00007fb3725af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.126122][T13733] RAX: ffffffffffffffda RBX: 00007fb373da5fa0 RCX: 00007fb373b4eec9 [ 221.126195][T13733] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 221.126212][T13733] RBP: 00007fb3725af090 R08: 0000000000000000 R09: 0000000000000000 [ 221.126227][T13733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.126239][T13733] R13: 00007fb373da6038 R14: 00007fb373da5fa0 R15: 00007ffef87d3208 [ 221.126259][T13733] [ 221.487807][T13742] FAULT_INJECTION: forcing a failure. [ 221.487807][T13742] name failslab, interval 1, probability 0, space 0, times 0 [ 221.501237][T13742] CPU: 0 UID: 0 PID: 13742 Comm: syz.7.3421 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 221.501272][T13742] Tainted: [W]=WARN [ 221.501349][T13742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 221.501365][T13742] Call Trace: [ 221.501374][T13742] [ 221.501385][T13742] __dump_stack+0x1d/0x30 [ 221.501409][T13742] dump_stack_lvl+0xe8/0x140 [ 221.501461][T13742] dump_stack+0x15/0x1b [ 221.501482][T13742] should_fail_ex+0x265/0x280 [ 221.501512][T13742] should_failslab+0x8c/0xb0 [ 221.501550][T13742] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 221.501581][T13742] ? security_context_to_sid_core+0xbf/0x3b0 [ 221.501677][T13742] kstrdup+0x3e/0xd0 [ 221.501697][T13742] security_context_to_sid_core+0xbf/0x3b0 [ 221.501752][T13742] security_context_to_sid_force+0x30/0x40 [ 221.501786][T13742] selinux_inode_setxattr+0x4e8/0x6e0 [ 221.501827][T13742] security_inode_setxattr+0x13a/0x1b0 [ 221.501879][T13742] __vfs_setxattr_locked+0x83/0x1d0 [ 221.501924][T13742] vfs_setxattr+0x132/0x270 [ 221.502039][T13742] filename_setxattr+0x1ad/0x400 [ 221.502113][T13742] path_setxattrat+0x2c9/0x310 [ 221.502161][T13742] __x64_sys_lsetxattr+0x71/0x90 [ 221.502236][T13742] x64_sys_call+0x287b/0x3000 [ 221.502259][T13742] do_syscall_64+0xd2/0x200 [ 221.502345][T13742] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 221.502380][T13742] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 221.502429][T13742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.502458][T13742] RIP: 0033:0x7fb373b4eec9 [ 221.502479][T13742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.502563][T13742] RSP: 002b:00007fb3725af038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 221.502587][T13742] RAX: ffffffffffffffda RBX: 00007fb373da5fa0 RCX: 00007fb373b4eec9 [ 221.502668][T13742] RDX: 0000200000000280 RSI: 0000200000000000 RDI: 0000200000000400 [ 221.502682][T13742] RBP: 00007fb3725af090 R08: 0000000000000000 R09: 0000000000000000 [ 221.502699][T13742] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000001 [ 221.502716][T13742] R13: 00007fb373da6038 R14: 00007fb373da5fa0 R15: 00007ffef87d3208 [ 221.502739][T13742] [ 221.731195][ T29] kauditd_printk_skb: 220 callbacks suppressed [ 221.731213][ T29] audit: type=1400 audit(1759401998.565:20752): avc: denied { read } for pid=13741 comm="syz.7.3421" name="event3" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 221.760792][ T29] audit: type=1400 audit(1759401998.565:20753): avc: denied { open } for pid=13741 comm="syz.7.3421" path="/dev/input/event3" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 221.881033][T13749] __nla_validate_parse: 4 callbacks suppressed [ 221.881051][T13749] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3424'. [ 221.915230][ T29] audit: type=1326 audit(1759401998.745:20754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13748 comm="syz.3.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92838feec9 code=0x7ffc0000 [ 221.939253][ T29] audit: type=1326 audit(1759401998.745:20755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13748 comm="syz.3.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92838feec9 code=0x7ffc0000 [ 221.963238][ T29] audit: type=1326 audit(1759401998.745:20756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13748 comm="syz.3.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f92838feec9 code=0x7ffc0000 [ 221.986864][ T29] audit: type=1326 audit(1759401998.745:20757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13748 comm="syz.3.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92838feec9 code=0x7ffc0000 [ 222.010972][ T29] audit: type=1326 audit(1759401998.745:20758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13748 comm="syz.3.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92838feec9 code=0x7ffc0000 [ 222.034634][ T29] audit: type=1326 audit(1759401998.745:20759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13748 comm="syz.3.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f92838feec9 code=0x7ffc0000 [ 222.058239][ T29] audit: type=1326 audit(1759401998.745:20760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13748 comm="syz.3.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92838feec9 code=0x7ffc0000 [ 222.081850][ T29] audit: type=1326 audit(1759401998.745:20761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13748 comm="syz.3.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92838feec9 code=0x7ffc0000 [ 222.336077][T13768] netlink: 'syz.7.3432': attribute type 4 has an invalid length. [ 222.343876][T13768] netlink: 152 bytes leftover after parsing attributes in process `syz.7.3432'. [ 222.405310][T13776] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3435'. [ 222.422867][T13777] tipc: Enabling of bearer rejected, already enabled [ 222.550794][T13786] netlink: 'syz.3.3439': attribute type 1 has an invalid length. [ 222.567291][T13786] bond0: entered promiscuous mode [ 222.572642][T13786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.667914][T13806] netlink: 5 bytes leftover after parsing attributes in process `syz.7.3446'. [ 222.678708][T13806] 1猉功D: renamed from 30猉功D (while UP) [ 222.686934][T13806] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 222.705202][T13809] bridge0: port 1(31猉功D) entered blocking state [ 222.711876][T13809] bridge0: port 1(31猉功D) entered disabled state [ 222.712446][T13808] FAULT_INJECTION: forcing a failure. [ 222.712446][T13808] name failslab, interval 1, probability 0, space 0, times 0 [ 222.721495][T13809] 1猉功D: entered promiscuous mode [ 222.731464][T13808] CPU: 0 UID: 0 PID: 13808 Comm: syz.1.3447 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 222.731511][T13808] Tainted: [W]=WARN [ 222.731523][T13808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 222.731542][T13808] Call Trace: [ 222.731551][T13808] [ 222.731563][T13808] __dump_stack+0x1d/0x30 [ 222.731593][T13808] dump_stack_lvl+0xe8/0x140 [ 222.731620][T13808] dump_stack+0x15/0x1b [ 222.731645][T13808] should_fail_ex+0x265/0x280 [ 222.731677][T13808] ? resv_map_alloc+0x32/0x190 [ 222.731704][T13808] should_failslab+0x8c/0xb0 [ 222.731723][T13808] __kmalloc_cache_noprof+0x4c/0x320 [ 222.731765][T13808] resv_map_alloc+0x32/0x190 [ 222.731797][T13808] hugetlb_reserve_pages+0x1ab/0xc00 [ 222.731936][T13808] hugetlbfs_file_mmap+0x27e/0x340 [ 222.731976][T13808] mmap_region+0xfad/0x1630 [ 222.732039][T13808] do_mmap+0x9b3/0xbe0 [ 222.732085][T13808] vm_mmap_pgoff+0x17a/0x2e0 [ 222.732126][T13808] ksys_mmap_pgoff+0x2d0/0x310 [ 222.732168][T13808] x64_sys_call+0x14a3/0x3000 [ 222.732199][T13808] do_syscall_64+0xd2/0x200 [ 222.732245][T13808] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 222.732283][T13808] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 222.732324][T13808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.732356][T13808] RIP: 0033:0x7fcbe1b5eec9 [ 222.732379][T13808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.732406][T13808] RSP: 002b:00007fcbe05bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 222.732433][T13808] RAX: ffffffffffffffda RBX: 00007fcbe1db5fa0 RCX: 00007fcbe1b5eec9 [ 222.732453][T13808] RDX: 0000000000000000 RSI: 0000000001400000 RDI: 0000200000000000 [ 222.732470][T13808] RBP: 00007fcbe05bf090 R08: ffffffffffffffff R09: 0000000000000000 [ 222.732489][T13808] R10: 00000000000c3072 R11: 0000000000000246 R12: 0000000000000002 [ 222.732507][T13808] R13: 00007fcbe1db6038 R14: 00007fcbe1db5fa0 R15: 00007ffe886b9288 [ 222.732534][T13808] [ 222.766145][T13806] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3446'. [ 222.775155][T13809] bridge0: port 1(31猉功D) entered blocking state [ 222.953712][T13809] bridge0: port 1(31猉功D) entered forwarding state [ 222.997671][T13799] lo speed is unknown, defaulting to 1000 [ 223.003896][T13799] lo speed is unknown, defaulting to 1000 [ 223.295655][T13845] tipc: Enabling of bearer rejected, failed to enable media [ 223.335678][T13852] FAULT_INJECTION: forcing a failure. [ 223.335678][T13852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.348964][T13852] CPU: 1 UID: 0 PID: 13852 Comm: syz.7.3463 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 223.349004][T13852] Tainted: [W]=WARN [ 223.349014][T13852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 223.349029][T13852] Call Trace: [ 223.349037][T13852] [ 223.349078][T13852] __dump_stack+0x1d/0x30 [ 223.349106][T13852] dump_stack_lvl+0xe8/0x140 [ 223.349132][T13852] dump_stack+0x15/0x1b [ 223.349153][T13852] should_fail_ex+0x265/0x280 [ 223.349184][T13852] should_fail+0xb/0x20 [ 223.349209][T13852] should_fail_usercopy+0x1a/0x20 [ 223.349272][T13852] _copy_from_user+0x1c/0xb0 [ 223.349311][T13852] __sys_bpf+0x183/0x7c0 [ 223.349364][T13852] __x64_sys_bpf+0x41/0x50 [ 223.349468][T13852] x64_sys_call+0x2aee/0x3000 [ 223.349538][T13852] do_syscall_64+0xd2/0x200 [ 223.349635][T13852] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 223.349672][T13852] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 223.349724][T13852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.349808][T13852] RIP: 0033:0x7fb373b4eec9 [ 223.349829][T13852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.349854][T13852] RSP: 002b:00007fb3725af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 223.349916][T13852] RAX: ffffffffffffffda RBX: 00007fb373da5fa0 RCX: 00007fb373b4eec9 [ 223.349933][T13852] RDX: 0000000000000020 RSI: 00002000000003c0 RDI: 0000000000000002 [ 223.349949][T13852] RBP: 00007fb3725af090 R08: 0000000000000000 R09: 0000000000000000 [ 223.349969][T13852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.350001][T13852] R13: 00007fb373da6038 R14: 00007fb373da5fa0 R15: 00007ffef87d3208 [ 223.350022][T13852] [ 223.586511][T13863] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3466'. [ 223.598377][T13863] 0猉功D: renamed from 31猉功D (while UP) [ 223.609375][T13863] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 223.625499][T13866] bridge0: port 1(31猉功D) entered blocking state [ 223.629044][T13863] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3466'. [ 223.632277][T13866] bridge0: port 1(31猉功D) entered disabled state [ 223.723152][T13866] 1猉功D: entered promiscuous mode [ 223.744856][T13869] 1猉功D: left promiscuous mode [ 223.750012][T13869] bridge0: port 1(31猉功D) entered disabled state [ 223.793626][T13858] lo speed is unknown, defaulting to 1000 [ 223.800951][T13858] lo speed is unknown, defaulting to 1000 [ 223.989002][T13883] FAULT_INJECTION: forcing a failure. [ 223.989002][T13883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.002257][T13883] CPU: 0 UID: 0 PID: 13883 Comm: syz.9.3474 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 224.002294][T13883] Tainted: [W]=WARN [ 224.002302][T13883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 224.002319][T13883] Call Trace: [ 224.002327][T13883] [ 224.002342][T13883] __dump_stack+0x1d/0x30 [ 224.002454][T13883] dump_stack_lvl+0xe8/0x140 [ 224.002478][T13883] dump_stack+0x15/0x1b [ 224.002500][T13883] should_fail_ex+0x265/0x280 [ 224.002564][T13883] should_fail+0xb/0x20 [ 224.002591][T13883] should_fail_usercopy+0x1a/0x20 [ 224.002623][T13883] _copy_from_user+0x1c/0xb0 [ 224.002671][T13883] ___sys_recvmsg+0xaa/0x370 [ 224.002703][T13883] ? 0xffffffff81000000 [ 224.002733][T13883] ? __rcu_read_unlock+0x4f/0x70 [ 224.002776][T13883] __x64_sys_recvmsg+0xd1/0x160 [ 224.002817][T13883] x64_sys_call+0x2b46/0x3000 [ 224.002898][T13883] do_syscall_64+0xd2/0x200 [ 224.002980][T13883] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 224.003017][T13883] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 224.003058][T13883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.003086][T13883] RIP: 0033:0x7f997bc7eec9 [ 224.003159][T13883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.003183][T13883] RSP: 002b:00007f997a6df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 224.003209][T13883] RAX: ffffffffffffffda RBX: 00007f997bed5fa0 RCX: 00007f997bc7eec9 [ 224.003223][T13883] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 224.003272][T13883] RBP: 00007f997a6df090 R08: 0000000000000000 R09: 0000000000000000 [ 224.003359][T13883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.003372][T13883] R13: 00007f997bed6038 R14: 00007f997bed5fa0 R15: 00007ffff468f818 [ 224.003393][T13883] [ 224.336180][T13896] netlink: 5 bytes leftover after parsing attributes in process `syz.9.3479'. [ 224.366367][T13896] 0猉功D: renamed from 31猉功D (while UP) [ 224.450847][T13896] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 224.480795][T13901] lo speed is unknown, defaulting to 1000 [ 224.487769][T13901] lo speed is unknown, defaulting to 1000 [ 224.605389][T13889] lo speed is unknown, defaulting to 1000 [ 224.620916][T13889] lo speed is unknown, defaulting to 1000 [ 224.760322][T13896] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3479'. [ 225.214241][T13923] bridge0: port 3(30猉功D) entered blocking state [ 225.221071][T13923] bridge0: port 3(30猉功D) entered disabled state [ 225.228444][T13923] 0猉功D: entered promiscuous mode [ 225.233821][T13923] bridge0: port 3(30猉功D) entered blocking state [ 225.240406][T13923] bridge0: port 3(30猉功D) entered forwarding state [ 225.294206][T13930] FAULT_INJECTION: forcing a failure. [ 225.294206][T13930] name failslab, interval 1, probability 0, space 0, times 0 [ 225.306956][T13930] CPU: 0 UID: 0 PID: 13930 Comm: syz.3.3489 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 225.306990][T13930] Tainted: [W]=WARN [ 225.306997][T13930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 225.307032][T13930] Call Trace: [ 225.307039][T13930] [ 225.307047][T13930] __dump_stack+0x1d/0x30 [ 225.307116][T13930] dump_stack_lvl+0xe8/0x140 [ 225.307141][T13930] dump_stack+0x15/0x1b [ 225.307159][T13930] should_fail_ex+0x265/0x280 [ 225.307182][T13930] ? rtnl_newlink+0x5c/0x12d0 [ 225.307248][T13930] should_failslab+0x8c/0xb0 [ 225.307273][T13930] __kmalloc_cache_noprof+0x4c/0x320 [ 225.307315][T13930] rtnl_newlink+0x5c/0x12d0 [ 225.307375][T13930] ? __memcg_slab_free_hook+0x135/0x230 [ 225.307408][T13930] ? xas_load+0x413/0x430 [ 225.307507][T13930] ? xas_load+0x413/0x430 [ 225.307548][T13930] ? __memcg_slab_free_hook+0x135/0x230 [ 225.307582][T13930] ? __rcu_read_unlock+0x4f/0x70 [ 225.307606][T13930] ? avc_has_perm_noaudit+0x1b1/0x200 [ 225.307688][T13930] ? cred_has_capability+0x210/0x280 [ 225.307734][T13930] ? selinux_capable+0x31/0x40 [ 225.307766][T13930] ? security_capable+0x83/0x90 [ 225.307835][T13930] ? ns_capable+0x7d/0xb0 [ 225.307856][T13930] ? __pfx_rtnl_newlink+0x10/0x10 [ 225.307893][T13930] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 225.307935][T13930] netlink_rcv_skb+0x120/0x220 [ 225.308106][T13930] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 225.308154][T13930] rtnetlink_rcv+0x1c/0x30 [ 225.308187][T13930] netlink_unicast+0x5c0/0x690 [ 225.308210][T13930] netlink_sendmsg+0x58b/0x6b0 [ 225.308243][T13930] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.308296][T13930] __sock_sendmsg+0x145/0x180 [ 225.308339][T13930] ____sys_sendmsg+0x31e/0x4e0 [ 225.308376][T13930] ___sys_sendmsg+0x17b/0x1d0 [ 225.308473][T13930] __x64_sys_sendmsg+0xd4/0x160 [ 225.308507][T13930] x64_sys_call+0x191e/0x3000 [ 225.308536][T13930] do_syscall_64+0xd2/0x200 [ 225.308577][T13930] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 225.308676][T13930] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 225.308849][T13930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.308878][T13930] RIP: 0033:0x7f92838feec9 [ 225.308897][T13930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.308918][T13930] RSP: 002b:00007f9282367038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.308937][T13930] RAX: ffffffffffffffda RBX: 00007f9283b55fa0 RCX: 00007f92838feec9 [ 225.309006][T13930] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000004 [ 225.309022][T13930] RBP: 00007f9282367090 R08: 0000000000000000 R09: 0000000000000000 [ 225.309038][T13930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.309096][T13930] R13: 00007f9283b56038 R14: 00007f9283b55fa0 R15: 00007ffca6d1e7a8 [ 225.309116][T13930] [ 225.342944][T13933] netlink: 'syz.3.3489': attribute type 10 has an invalid length. [ 225.544746][T13939] netlink: 'syz.9.3492': attribute type 4 has an invalid length. [ 225.609936][T13939] netlink: 152 bytes leftover after parsing attributes in process `syz.9.3492'. [ 225.634483][T13923] 0猉功D: left promiscuous mode [ 225.639651][T13923] bridge0: port 3(30猉功D) entered disabled state [ 225.684590][T13919] lo speed is unknown, defaulting to 1000 [ 225.692309][T13919] lo speed is unknown, defaulting to 1000 [ 225.939437][T13955] geneve3: entered promiscuous mode [ 225.945212][T13955] geneve3: entered allmulticast mode [ 226.278480][T13968] lo speed is unknown, defaulting to 1000 [ 226.284963][T13968] lo speed is unknown, defaulting to 1000 [ 226.559864][ T29] kauditd_printk_skb: 544 callbacks suppressed [ 226.559886][ T29] audit: type=1326 audit(1759402003.612:21306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13965 comm="syz.7.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb373b4eec9 code=0x7ffc0000 [ 226.590501][ T29] audit: type=1326 audit(1759402003.612:21307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13965 comm="syz.7.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb373b4eec9 code=0x7ffc0000 [ 226.614368][ T29] audit: type=1326 audit(1759402003.612:21308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13965 comm="syz.7.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7fb373b4eec9 code=0x7ffc0000 [ 226.638365][ T29] audit: type=1326 audit(1759402003.612:21309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13965 comm="syz.7.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb373b4eec9 code=0x7ffc0000 [ 226.662421][ T29] audit: type=1326 audit(1759402003.612:21310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13965 comm="syz.7.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb373b4eec9 code=0x7ffc0000 [ 226.686092][ T29] audit: type=1326 audit(1759402003.612:21311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13965 comm="syz.7.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fb373b4eec9 code=0x7ffc0000 [ 226.710196][ T29] audit: type=1326 audit(1759402003.612:21312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13965 comm="syz.7.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb373b4eec9 code=0x7ffc0000 [ 226.734310][ T29] audit: type=1326 audit(1759402003.612:21313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13965 comm="syz.7.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb373b4eec9 code=0x7ffc0000 [ 226.758156][ T29] audit: type=1326 audit(1759402003.612:21314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13965 comm="syz.7.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fb373b4eec9 code=0x7ffc0000 [ 226.782007][ T29] audit: type=1326 audit(1759402003.612:21315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13965 comm="syz.7.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb373b4eec9 code=0x7ffc0000 [ 227.019336][T13986] bridge0: port 3(30猉功D) entered blocking state [ 227.026098][T13986] bridge0: port 3(30猉功D) entered disabled state [ 227.039346][T13986] 0猉功D: entered promiscuous mode [ 227.045704][T13986] bridge0: port 3(30猉功D) entered blocking state [ 227.052355][T13986] bridge0: port 3(30猉功D) entered forwarding state [ 227.064720][T13986] 0猉功D: left promiscuous mode [ 227.069829][T13986] bridge0: port 3(30猉功D) entered disabled state [ 227.141199][T13986] lo speed is unknown, defaulting to 1000 [ 227.148349][T13986] lo speed is unknown, defaulting to 1000 [ 227.149581][T13995] __nla_validate_parse: 3 callbacks suppressed [ 227.149600][T13995] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3513'. [ 227.198811][T14001] FAULT_INJECTION: forcing a failure. [ 227.198811][T14001] name failslab, interval 1, probability 0, space 0, times 0 [ 227.211715][T14001] CPU: 1 UID: 0 PID: 14001 Comm: syz.7.3514 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 227.211756][T14001] Tainted: [W]=WARN [ 227.211764][T14001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 227.211779][T14001] Call Trace: [ 227.211789][T14001] [ 227.211800][T14001] __dump_stack+0x1d/0x30 [ 227.211894][T14001] dump_stack_lvl+0xe8/0x140 [ 227.211918][T14001] dump_stack+0x15/0x1b [ 227.211939][T14001] should_fail_ex+0x265/0x280 [ 227.211967][T14001] ? nft_trans_table_add+0x36/0x190 [ 227.212011][T14001] should_failslab+0x8c/0xb0 [ 227.212083][T14001] __kmalloc_cache_noprof+0x4c/0x320 [ 227.212117][T14001] nft_trans_table_add+0x36/0x190 [ 227.212152][T14001] nf_tables_newtable+0x955/0xea0 [ 227.212247][T14001] nfnetlink_rcv+0xb99/0x1690 [ 227.212330][T14001] netlink_unicast+0x5c0/0x690 [ 227.212387][T14001] netlink_sendmsg+0x58b/0x6b0 [ 227.212439][T14001] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.212599][T14001] __sock_sendmsg+0x145/0x180 [ 227.212692][T14001] ____sys_sendmsg+0x31e/0x4e0 [ 227.212783][T14001] ___sys_sendmsg+0x17b/0x1d0 [ 227.212887][T14001] __x64_sys_sendmsg+0xd4/0x160 [ 227.212937][T14001] x64_sys_call+0x191e/0x3000 [ 227.212967][T14001] do_syscall_64+0xd2/0x200 [ 227.213064][T14001] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 227.213098][T14001] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 227.213203][T14001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.213230][T14001] RIP: 0033:0x7fb373b4eec9 [ 227.213382][T14001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.213415][T14001] RSP: 002b:00007fb3725af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.213438][T14001] RAX: ffffffffffffffda RBX: 00007fb373da5fa0 RCX: 00007fb373b4eec9 [ 227.213464][T14001] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 227.213480][T14001] RBP: 00007fb3725af090 R08: 0000000000000000 R09: 0000000000000000 [ 227.213496][T14001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 227.213565][T14001] R13: 00007fb373da6038 R14: 00007fb373da5fa0 R15: 00007ffef87d3208 [ 227.213651][T14001] [ 227.651433][T14022] netlink: 'syz.0.3523': attribute type 4 has an invalid length. [ 227.659423][T14022] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3523'. [ 228.024560][T14053] netlink: 'syz.0.3536': attribute type 4 has an invalid length. [ 228.032474][T14053] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3536'. [ 228.201300][T14064] netlink: 'syz.0.3541': attribute type 3 has an invalid length. [ 228.273019][T14066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3542'. [ 228.300748][T14066] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3542'. [ 228.320547][T14066] 1猉功D: renamed from 30猉功D (while UP) [ 228.334523][T14066] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 228.371928][T14068] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3542'. [ 228.506778][T14071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3543'. [ 228.772129][T14075] tipc: Enabling of bearer rejected, already enabled [ 228.815578][T14083] bridge0: port 3(30猉功D) entered blocking state [ 228.822149][T14083] bridge0: port 3(30猉功D) entered disabled state [ 228.869215][T14083] 0猉功D: entered promiscuous mode [ 228.875011][T14083] bridge0: port 3(30猉功D) entered blocking state [ 228.881638][T14083] bridge0: port 3(30猉功D) entered forwarding state [ 228.889974][T14084] 0猉功D: left promiscuous mode [ 228.895066][T14084] bridge0: port 3(30猉功D) entered disabled state [ 228.929182][T14083] lo speed is unknown, defaulting to 1000 [ 228.935720][T14083] lo speed is unknown, defaulting to 1000 [ 228.944378][T14086] netlink: 'syz.0.3547': attribute type 4 has an invalid length. [ 228.952418][T14086] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3547'. [ 229.156874][T14105] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3555'. [ 229.343987][T14118] bridge0: port 3(31猉功D) entered blocking state [ 229.350924][T14118] bridge0: port 3(31猉功D) entered disabled state [ 229.361374][T14118] 1猉功D: entered promiscuous mode [ 229.385272][T14118] bridge0: port 3(31猉功D) entered blocking state [ 229.391884][T14118] bridge0: port 3(31猉功D) entered forwarding state [ 229.404661][T14119] 1猉功D: left promiscuous mode [ 229.409805][T14119] bridge0: port 3(31猉功D) entered disabled state [ 229.417641][T14117] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 229.449641][T14118] lo speed is unknown, defaulting to 1000 [ 229.456187][T14118] lo speed is unknown, defaulting to 1000 [ 229.566126][T14134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3567'. [ 229.621796][T14134] lo speed is unknown, defaulting to 1000 [ 229.641521][T14134] lo speed is unknown, defaulting to 1000 [ 229.749765][T14142] tipc: Enabling of bearer rejected, already enabled [ 229.845943][T14158] netlink: 'syz.1.3574': attribute type 10 has an invalid length. [ 229.860830][T14158] team0: Device hsr_slave_0 failed to register rx_handler [ 229.917643][T14143] lo speed is unknown, defaulting to 1000 [ 229.935114][T14143] lo speed is unknown, defaulting to 1000 [ 230.040614][T14171] FAULT_INJECTION: forcing a failure. [ 230.040614][T14171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.053992][T14171] CPU: 0 UID: 0 PID: 14171 Comm: syz.0.3578 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 230.054030][T14171] Tainted: [W]=WARN [ 230.054037][T14171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 230.054050][T14171] Call Trace: [ 230.054056][T14171] [ 230.054063][T14171] __dump_stack+0x1d/0x30 [ 230.054126][T14171] dump_stack_lvl+0xe8/0x140 [ 230.054154][T14171] dump_stack+0x15/0x1b [ 230.054176][T14171] should_fail_ex+0x265/0x280 [ 230.054209][T14171] should_fail+0xb/0x20 [ 230.054236][T14171] should_fail_usercopy+0x1a/0x20 [ 230.054276][T14171] _copy_from_user+0x1c/0xb0 [ 230.054313][T14171] __sys_bpf+0x183/0x7c0 [ 230.054353][T14171] __x64_sys_bpf+0x41/0x50 [ 230.054505][T14171] x64_sys_call+0x2aee/0x3000 [ 230.054533][T14171] do_syscall_64+0xd2/0x200 [ 230.054568][T14171] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 230.054605][T14171] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 230.054674][T14171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.054705][T14171] RIP: 0033:0x7f96ebbfeec9 [ 230.054726][T14171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.054752][T14171] RSP: 002b:00007f96ea667038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 230.054779][T14171] RAX: ffffffffffffffda RBX: 00007f96ebe55fa0 RCX: 00007f96ebbfeec9 [ 230.054845][T14171] RDX: 0000000000000020 RSI: 0000200000000740 RDI: 0000000000000003 [ 230.054863][T14171] RBP: 00007f96ea667090 R08: 0000000000000000 R09: 0000000000000000 [ 230.054880][T14171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.054897][T14171] R13: 00007f96ebe56038 R14: 00007f96ebe55fa0 R15: 00007ffebc352058 [ 230.054933][T14171] [ 230.235335][T14143] chnl_net:caif_netlink_parms(): no params data found [ 230.299993][T14143] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.307341][T14143] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.335043][T14143] bridge_slave_0: entered allmulticast mode [ 230.343946][T14143] bridge_slave_0: entered promiscuous mode [ 230.352104][T14143] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.359278][T14143] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.367815][T14143] bridge_slave_1: entered allmulticast mode [ 230.376620][T14143] bridge_slave_1: entered promiscuous mode [ 230.399765][T14143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.412393][T14143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.454908][T14143] team0: Port device team_slave_0 added [ 230.462791][T14143] team0: Port device team_slave_1 added [ 230.488071][T14143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.495381][T14143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.521753][T14143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.533726][T14143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.540741][T14143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.566934][T14143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.594428][T14143] hsr_slave_0: entered promiscuous mode [ 230.600667][T14143] hsr_slave_1: entered promiscuous mode [ 230.606588][T14143] debugfs: 'hsr0' already exists in 'hsr' [ 230.612354][T14143] Cannot create hsr debugfs directory [ 230.713554][T14192] lo speed is unknown, defaulting to 1000 [ 230.719879][T14192] lo speed is unknown, defaulting to 1000 [ 231.014313][T14143] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.065509][T14197] FAULT_INJECTION: forcing a failure. [ 231.065509][T14197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.078919][T14197] CPU: 0 UID: 0 PID: 14197 Comm: syz.7.3586 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 231.078965][T14197] Tainted: [W]=WARN [ 231.078972][T14197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 231.078985][T14197] Call Trace: [ 231.078992][T14197] [ 231.078999][T14197] __dump_stack+0x1d/0x30 [ 231.079021][T14197] dump_stack_lvl+0xe8/0x140 [ 231.079110][T14197] dump_stack+0x15/0x1b [ 231.079126][T14197] should_fail_ex+0x265/0x280 [ 231.079167][T14197] should_fail+0xb/0x20 [ 231.079190][T14197] should_fail_usercopy+0x1a/0x20 [ 231.079221][T14197] strncpy_from_user+0x25/0x230 [ 231.079341][T14197] ? __seccomp_filter+0x83e/0x1250 [ 231.079418][T14197] __x64_sys_getxattr+0xa5/0x140 [ 231.079518][T14197] x64_sys_call+0x2f50/0x3000 [ 231.079585][T14197] do_syscall_64+0xd2/0x200 [ 231.079628][T14197] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 231.079663][T14197] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 231.079738][T14197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.079788][T14197] RIP: 0033:0x7fb373b4eec9 [ 231.079808][T14197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.079839][T14197] RSP: 002b:00007fb3725af038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bf [ 231.079864][T14197] RAX: ffffffffffffffda RBX: 00007fb373da5fa0 RCX: 00007fb373b4eec9 [ 231.079880][T14197] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 231.079894][T14197] RBP: 00007fb3725af090 R08: 0000000000000000 R09: 0000000000000000 [ 231.079946][T14197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.079961][T14197] R13: 00007fb373da6038 R14: 00007fb373da5fa0 R15: 00007ffef87d3208 [ 231.079988][T14197] [ 231.290206][T14203] netlink: 'syz.7.3589': attribute type 10 has an invalid length. [ 231.300699][T14143] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.312795][T14203] team0: Device hsr_slave_0 failed to register rx_handler [ 231.389310][T14143] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.422816][T14212] bridge1: entered promiscuous mode [ 231.477505][ T29] kauditd_printk_skb: 878 callbacks suppressed [ 231.477524][ T29] audit: type=1326 audit(1759402008.847:22194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14214 comm="syz.7.3595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb373b4eec9 code=0x7ffc0000 [ 231.477878][T14218] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=14218 comm=syz.7.3595 [ 231.483930][ T29] audit: type=1326 audit(1759402008.847:22195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14214 comm="syz.7.3595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb373b4eec9 code=0x7ffc0000 [ 231.543948][ T29] audit: type=1326 audit(1759402008.847:22196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14214 comm="syz.7.3595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb373b4eec9 code=0x7ffc0000 [ 231.567700][ T29] audit: type=1326 audit(1759402008.847:22197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14214 comm="syz.7.3595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb373b4eec9 code=0x7ffc0000 [ 231.591780][ T29] audit: type=1326 audit(1759402008.847:22198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14214 comm="syz.7.3595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb373b4eec9 code=0x7ffc0000 [ 231.615583][ T29] audit: type=1326 audit(1759402008.847:22199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14214 comm="syz.7.3595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb373b4eec9 code=0x7ffc0000 [ 231.639736][ T29] audit: type=1326 audit(1759402008.847:22200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14214 comm="syz.7.3595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb373b4eec9 code=0x7ffc0000 [ 231.663308][ T29] audit: type=1326 audit(1759402008.847:22201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14214 comm="syz.7.3595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb373b4eec9 code=0x7ffc0000 [ 231.687306][ T29] audit: type=1326 audit(1759402008.847:22202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14214 comm="syz.7.3595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb373b4eec9 code=0x7ffc0000 [ 231.711010][ T29] audit: type=1326 audit(1759402008.847:22203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14214 comm="syz.7.3595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb373b4eec9 code=0x7ffc0000 [ 231.737294][T14143] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.752291][T14220] tipc: Enabling of bearer rejected, already enabled [ 231.811115][T14143] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 231.821327][T14143] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 231.831139][T14143] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 231.841702][T14143] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 231.888119][T14143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.908425][T14143] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.921975][T11903] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.929245][T11903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.942821][T11903] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.950014][T11903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.970649][T14143] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 231.981692][T14143] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 232.053670][T14143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.196826][T14143] veth0_vlan: entered promiscuous mode [ 232.206400][T14143] veth1_vlan: entered promiscuous mode [ 232.232374][T14143] veth0_macvtap: entered promiscuous mode [ 232.242278][T14143] veth1_macvtap: entered promiscuous mode [ 232.266094][T14143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.276360][T14143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.292860][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.314163][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.333085][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.354665][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.370285][T14249] __nla_validate_parse: 2 callbacks suppressed [ 232.370322][T14249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3598'. [ 232.388831][T14249] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3598'. [ 232.398136][T14249] 0猉功D: renamed from 31猉功D (while UP) [ 232.412133][T14249] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 232.438669][T14249] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3598'. [ 232.508457][T14260] netlink: 'syz.0.3601': attribute type 10 has an invalid length. [ 232.520612][T14260] team0: Device hsr_slave_0 failed to register rx_handler [ 232.684929][T14278] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3608'. [ 233.510096][T14320] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3626'. [ 233.854127][T14327] netlink: 'syz.7.3627': attribute type 10 has an invalid length. [ 233.909742][T14327] team0: Device hsr_slave_0 failed to register rx_handler [ 234.023405][T14311] lo speed is unknown, defaulting to 1000 [ 234.029913][T14311] lo speed is unknown, defaulting to 1000 [ 234.140105][T14311] chnl_net:caif_netlink_parms(): no params data found [ 234.197395][T14351] bridge0: port 1(31猉功D) entered blocking state [ 234.204049][T14351] bridge0: port 1(31猉功D) entered disabled state [ 234.215356][T14351] 1猉功D: entered promiscuous mode [ 234.254696][T14351] 1猉功D: left promiscuous mode [ 234.259813][T14351] bridge0: port 1(31猉功D) entered disabled state [ 234.272288][T14311] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.279568][T14311] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.295758][T14311] bridge_slave_0: entered allmulticast mode [ 234.304552][T14311] bridge_slave_0: entered promiscuous mode [ 234.311629][T14311] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.319384][T14311] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.327312][T14311] bridge_slave_1: entered allmulticast mode [ 234.334104][T14311] bridge_slave_1: entered promiscuous mode [ 234.340642][T14358] tipc: Started in network mode [ 234.345558][T14358] tipc: Node identity ac14140f, cluster identity 4711 [ 234.352872][T14358] tipc: New replicast peer: 255.255.255.255 [ 234.358956][T14358] tipc: Enabled bearer , priority 10 [ 234.398309][T14311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.409998][T14351] lo speed is unknown, defaulting to 1000 [ 234.416712][T14366] netlink: 'syz.0.3639': attribute type 10 has an invalid length. [ 234.422336][T14351] lo speed is unknown, defaulting to 1000 [ 234.427402][T14311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.440036][T14366] team0: Device hsr_slave_0 failed to register rx_handler [ 234.451508][T14366] netlink: 'syz.0.3639': attribute type 10 has an invalid length. [ 234.474411][T14366] ipvlan0: entered allmulticast mode [ 234.479776][T14366] veth0_vlan: entered allmulticast mode [ 234.486944][T14366] team0: Device ipvlan0 failed to register rx_handler [ 234.500019][T14311] team0: Port device team_slave_0 added [ 234.518451][T14311] team0: Port device team_slave_1 added [ 234.604244][T14311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.611379][T14311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.637445][T14311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.656458][T14311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.663942][T14311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.689925][T14311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.740939][T14311] hsr_slave_0: entered promiscuous mode [ 234.751432][T14311] hsr_slave_1: entered promiscuous mode [ 234.763030][T14311] debugfs: 'hsr0' already exists in 'hsr' [ 234.768847][T14311] Cannot create hsr debugfs directory [ 234.802996][T14375] lo speed is unknown, defaulting to 1000 [ 234.819012][T14375] lo speed is unknown, defaulting to 1000 [ 234.976265][T14311] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.009784][T14383] netlink: 19 bytes leftover after parsing attributes in process `syz.0.3647'. [ 235.033887][T14387] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3645'. [ 235.050308][T14311] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.082047][T14393] bridge0: port 1(31猉功D) entered blocking state [ 235.088614][T14393] bridge0: port 1(31猉功D) entered disabled state [ 235.115694][T14393] 1猉功D: entered promiscuous mode [ 235.125223][T14393] 1猉功D: left promiscuous mode [ 235.130278][T14393] bridge0: port 1(31猉功D) entered disabled state [ 235.172875][T14311] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.226472][T14311] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.287791][T14393] lo speed is unknown, defaulting to 1000 [ 235.294079][T14393] lo speed is unknown, defaulting to 1000 [ 235.311635][T14415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3656'. [ 235.331217][ T7204] tipc: Node number set to 2886997007 [ 235.559044][T14420] tipc: Enabling of bearer rejected, already enabled [ 235.587189][T14311] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 235.597888][T14311] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 235.608052][T14311] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 235.625161][T14311] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 235.679719][T14311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.695080][T14311] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.717611][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.724826][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.734361][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.741461][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.771688][T14311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 235.782899][T14311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 235.841110][T14433] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3665'. [ 235.863166][T14433] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3665'. [ 235.879276][T14311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.888187][T14433] 1猉功D: renamed from 30猉功D (while UP) [ 235.896287][T14433] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 235.925004][T14446] FAULT_INJECTION: forcing a failure. [ 235.925004][T14446] name failslab, interval 1, probability 0, space 0, times 0 [ 235.938039][T14446] CPU: 0 UID: 0 PID: 14446 Comm: syz.9.3667 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 235.938083][T14446] Tainted: [W]=WARN [ 235.938092][T14446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 235.938109][T14446] Call Trace: [ 235.938117][T14446] [ 235.938127][T14446] __dump_stack+0x1d/0x30 [ 235.938156][T14446] dump_stack_lvl+0xe8/0x140 [ 235.938181][T14446] dump_stack+0x15/0x1b [ 235.938204][T14446] should_fail_ex+0x265/0x280 [ 235.938234][T14446] should_failslab+0x8c/0xb0 [ 235.938261][T14446] kmem_cache_alloc_noprof+0x50/0x310 [ 235.938290][T14446] ? vm_area_alloc+0x2c/0xb0 [ 235.938325][T14446] vm_area_alloc+0x2c/0xb0 [ 235.938358][T14446] mmap_region+0xaa2/0x1630 [ 235.938425][T14446] do_mmap+0x9b3/0xbe0 [ 235.938467][T14446] vm_mmap_pgoff+0x17a/0x2e0 [ 235.938506][T14446] ksys_mmap_pgoff+0xc2/0x310 [ 235.938541][T14446] ? __x64_sys_mmap+0x49/0x70 [ 235.938566][T14446] x64_sys_call+0x14a3/0x3000 [ 235.938588][T14446] do_syscall_64+0xd2/0x200 [ 235.938623][T14446] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 235.938658][T14446] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 235.938697][T14446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.938727][T14446] RIP: 0033:0x7f33e35aef03 [ 235.938747][T14446] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 235.938772][T14446] RSP: 002b:00007f33e200ed68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 235.938793][T14446] RAX: ffffffffffffffda RBX: 000000000000104e RCX: 00007f33e35aef03 [ 235.938806][T14446] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 235.938819][T14446] RBP: 0000200000000002 R08: 00000000ffffffff R09: 0000000000000000 [ 235.938835][T14446] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000007 [ 235.938851][T14446] R13: 00007f33e200edec R14: 00007f33e200edf0 R15: 00007fff7dacb498 [ 235.938877][T14446] [ 236.230968][T14462] netlink: 'syz.0.3670': attribute type 3 has an invalid length. [ 236.262002][T14462] bond0: entered promiscuous mode [ 236.267222][T14462] bond0: entered allmulticast mode [ 236.273381][T14462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.283172][ T29] kauditd_printk_skb: 1516 callbacks suppressed [ 236.283190][ T29] audit: type=1400 audit(1759402013.922:23720): avc: denied { execute } for pid=14468 comm="syz.9.3673" dev="tmpfs" ino=416 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 236.313201][T14462] bond0 (unregistering): Released all slaves [ 236.313364][ T29] audit: type=1400 audit(1759402013.932:23721): avc: denied { execute_no_trans } for pid=14468 comm="syz.9.3673" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=416 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 236.391740][ T29] audit: type=1400 audit(1759402014.038:23722): avc: denied { create } for pid=14466 comm="syz.1.3672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 236.402595][T14311] veth0_vlan: entered promiscuous mode [ 236.428266][T14311] veth1_vlan: entered promiscuous mode [ 236.520573][ T29] audit: type=1326 audit(1759402014.070:23723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14466 comm="syz.1.3672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe1b5eec9 code=0x7ffc0000 [ 236.545900][ T29] audit: type=1326 audit(1759402014.070:23724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14466 comm="syz.1.3672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe1b5eec9 code=0x7ffc0000 [ 236.569913][ T29] audit: type=1326 audit(1759402014.070:23725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14466 comm="syz.1.3672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbe1b5eec9 code=0x7ffc0000 [ 236.571588][T14311] veth0_macvtap: entered promiscuous mode [ 236.595518][ T29] audit: type=1326 audit(1759402014.070:23726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14466 comm="syz.1.3672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe1b5eec9 code=0x7ffc0000 [ 236.605186][T14311] veth1_macvtap: entered promiscuous mode [ 236.625469][ T29] audit: type=1326 audit(1759402014.070:23727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14466 comm="syz.1.3672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbe1b5eec9 code=0x7ffc0000 [ 236.649438][T14311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.655445][ T29] audit: type=1326 audit(1759402014.070:23728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14466 comm="syz.1.3672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe1b5eec9 code=0x7ffc0000 [ 236.688356][ T29] audit: type=1326 audit(1759402014.070:23729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14466 comm="syz.1.3672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbe1b5eec9 code=0x7ffc0000 [ 236.707101][T14311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.741395][T14476] lo speed is unknown, defaulting to 1000 [ 236.747498][T14476] lo speed is unknown, defaulting to 1000 [ 237.121604][T14479] __nla_validate_parse: 2 callbacks suppressed [ 237.121621][T14479] netlink: 19 bytes leftover after parsing attributes in process `syz.9.3678'. [ 237.145572][T11903] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.166879][T11903] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.269572][T11903] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.278673][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.305210][T14491] netlink: 'syz.0.3680': attribute type 10 has an invalid length. [ 237.424553][T14499] tipc: Started in network mode [ 237.429554][T14499] tipc: Node identity ac14140f, cluster identity 4711 [ 237.439173][T14499] tipc: New replicast peer: 255.255.255.255 [ 237.445269][T14499] tipc: Enabled bearer , priority 10 [ 237.617875][T14516] lo speed is unknown, defaulting to 1000 [ 237.624424][T14516] lo speed is unknown, defaulting to 1000 [ 238.028546][T14522] netlink: 'syz.0.3691': attribute type 10 has an invalid length. [ 238.037875][T14522] team0: Device hsr_slave_0 failed to register rx_handler [ 238.048912][T14522] netlink: 'syz.0.3691': attribute type 10 has an invalid length. [ 238.058450][T14522] team0: Device ipvlan0 failed to register rx_handler [ 238.336032][T14526] netlink: 19 bytes leftover after parsing attributes in process `syz.7.3693'. [ 238.417844][T14546] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3702'. [ 238.423814][T14550] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3704'. [ 238.441897][T14546] netlink: 5 bytes leftover after parsing attributes in process `syz.9.3702'. [ 238.451749][T14546] 0猉功D: renamed from gretap0 (while UP) [ 238.465934][T14550] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3704'. [ 238.466080][T14558] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=14558 comm=syz.1.3708 [ 238.491056][T14560] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3702'. [ 238.491074][T14546] 0猉功D: entered allmulticast mode [ 238.506144][ T3379] tipc: Node number set to 2886997007 [ 238.506740][T14546] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 238.527536][T14550] 0猉功D: renamed from gretap0 (while UP) [ 238.539924][T14561] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3704'. [ 238.550300][T14550] 0猉功D: entered allmulticast mode [ 238.556179][T14550] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 238.579582][T14559] tipc: Enabling of bearer rejected, already enabled [ 238.857018][T14606] netlink: 'syz.1.3724': attribute type 4 has an invalid length. [ 238.864916][T14606] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3724'. [ 238.938927][T14602] netlink: 19 bytes leftover after parsing attributes in process `syz.9.3723'. [ 239.127536][T14625] netlink: 'syz.1.3731': attribute type 10 has an invalid length. [ 239.135983][T14625] team0: Device hsr_slave_0 failed to register rx_handler [ 239.146879][T14625] netlink: 'syz.1.3731': attribute type 10 has an invalid length. [ 239.155603][T14625] ipvlan0: entered allmulticast mode [ 239.161027][T14625] veth0_vlan: entered allmulticast mode [ 239.169766][T14625] team0: Device ipvlan0 failed to register rx_handler [ 239.235518][T14635] netlink: 'syz.9.3735': attribute type 4 has an invalid length. [ 239.253781][T14635] .`: renamed from bond0 (while UP) [ 239.487382][T14655] netlink: 'syz.0.3744': attribute type 10 has an invalid length. [ 239.500720][T14655] team0: Device hsr_slave_0 failed to register rx_handler [ 239.522268][T14650] geneve2: entered promiscuous mode [ 239.528379][T14655] netlink: 'syz.0.3744': attribute type 10 has an invalid length. [ 239.541056][T14655] team0: Device ipvlan0 failed to register rx_handler [ 239.617762][T14668] bridge3: entered promiscuous mode [ 239.648817][T14673] tipc: Enabling of bearer rejected, already enabled [ 239.877641][T14692] .`: renamed from bond0 (while UP) [ 239.924960][T14693] FAULT_INJECTION: forcing a failure. [ 239.924960][T14693] name failslab, interval 1, probability 0, space 0, times 0 [ 239.937819][T14693] CPU: 1 UID: 0 PID: 14693 Comm: syz.9.3760 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 239.937862][T14693] Tainted: [W]=WARN [ 239.937947][T14693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 239.937964][T14693] Call Trace: [ 239.937971][T14693] [ 239.937981][T14693] __dump_stack+0x1d/0x30 [ 239.938009][T14693] dump_stack_lvl+0xe8/0x140 [ 239.938029][T14693] dump_stack+0x15/0x1b [ 239.938064][T14693] should_fail_ex+0x265/0x280 [ 239.938138][T14693] should_failslab+0x8c/0xb0 [ 239.938160][T14693] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 239.938184][T14693] ? __d_alloc+0x3d/0x340 [ 239.938213][T14693] __d_alloc+0x3d/0x340 [ 239.938241][T14693] ? selinux_socket_post_create+0x214/0x2a0 [ 239.938299][T14693] d_alloc_pseudo+0x1e/0x80 [ 239.938385][T14693] alloc_file_pseudo+0x71/0x160 [ 239.938415][T14693] ? alloc_fd+0x38a/0x3c0 [ 239.938474][T14693] sock_alloc_file+0x9c/0x1e0 [ 239.938582][T14693] __sys_socket+0x116/0x180 [ 239.938615][T14693] __x64_sys_socket+0x3f/0x50 [ 239.938739][T14693] x64_sys_call+0x1147/0x3000 [ 239.938779][T14693] do_syscall_64+0xd2/0x200 [ 239.938816][T14693] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 239.938861][T14693] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 239.938899][T14693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.938973][T14693] RIP: 0033:0x7f33e35aeec9 [ 239.938994][T14693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.939050][T14693] RSP: 002b:00007f33e1fee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 239.939077][T14693] RAX: ffffffffffffffda RBX: 00007f33e3806090 RCX: 00007f33e35aeec9 [ 239.939094][T14693] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000002c [ 239.939153][T14693] RBP: 00007f33e1fee090 R08: 0000000000000000 R09: 0000000000000000 [ 239.939169][T14693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.939185][T14693] R13: 00007f33e3806128 R14: 00007f33e3806090 R15: 00007fff7dacb498 [ 239.939212][T14693] [ 240.207184][T14711] bridge0: port 3(30猉功D) entered blocking state [ 240.213887][T14711] bridge0: port 3(30猉功D) entered disabled state [ 240.223858][T14711] 0猉功D: entered promiscuous mode [ 240.229750][T14711] bridge0: port 3(30猉功D) entered blocking state [ 240.236328][T14711] bridge0: port 3(30猉功D) entered forwarding state [ 240.248878][T14711] 0猉功D: left promiscuous mode [ 240.254049][T14711] bridge0: port 3(30猉功D) entered disabled state [ 240.279203][T14711] lo speed is unknown, defaulting to 1000 [ 240.287314][T14711] lo speed is unknown, defaulting to 1000 [ 240.383914][T14717] 1猉功D: renamed from 30猉功D (while UP) [ 240.391789][T14717] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 240.953678][T14761] lo speed is unknown, defaulting to 1000 [ 240.960686][T14761] lo speed is unknown, defaulting to 1000 [ 241.264766][T14767] validate_nla: 2 callbacks suppressed [ 241.264783][T14767] netlink: 'syz.7.3791': attribute type 10 has an invalid length. [ 241.283362][T14767] team0: Device hsr_slave_0 failed to register rx_handler [ 241.297348][T14767] netlink: 'syz.7.3791': attribute type 10 has an invalid length. [ 241.306709][T14767] ipvlan0: entered allmulticast mode [ 241.312110][T14767] veth0_vlan: entered allmulticast mode [ 241.326408][T14767] team0: Device ipvlan0 failed to register rx_handler [ 241.361585][T14769] lo speed is unknown, defaulting to 1000 [ 241.370339][T14769] lo speed is unknown, defaulting to 1000 [ 241.733784][ T29] kauditd_printk_skb: 1402 callbacks suppressed [ 241.733804][ T29] audit: type=1326 audit(1759402019.669:25132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14781 comm="syz.7.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb373b4eec9 code=0x7ffc0000 [ 241.801966][ T29] audit: type=1326 audit(1759402019.712:25133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14781 comm="syz.7.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb373b4eec9 code=0x7ffc0000 [ 241.830447][ T29] audit: type=1326 audit(1759402019.712:25134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14781 comm="syz.7.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb373b4eec9 code=0x7ffc0000 [ 241.858618][ T29] audit: type=1326 audit(1759402019.712:25135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14781 comm="syz.7.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb373b4eec9 code=0x7ffc0000 [ 241.885241][ T29] audit: type=1326 audit(1759402019.712:25136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14781 comm="syz.7.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb373b4eec9 code=0x7ffc0000 [ 241.909466][ T29] audit: type=1326 audit(1759402019.712:25137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14781 comm="syz.7.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb373b4eec9 code=0x7ffc0000 [ 241.935371][ T29] audit: type=1326 audit(1759402019.712:25138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14781 comm="syz.7.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb373b4eec9 code=0x7ffc0000 [ 241.960184][ T29] audit: type=1326 audit(1759402019.712:25139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14781 comm="syz.7.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb373b4eec9 code=0x7ffc0000 [ 241.985200][ T29] audit: type=1326 audit(1759402019.712:25140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14781 comm="syz.7.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb373b4eec9 code=0x7ffc0000 [ 242.009564][ T29] audit: type=1326 audit(1759402019.712:25141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14781 comm="syz.7.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb373b4eec9 code=0x7ffc0000 [ 242.048279][T14792] __nla_validate_parse: 7 callbacks suppressed [ 242.048296][T14792] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3799'. [ 242.068777][T14792] netlink: 5 bytes leftover after parsing attributes in process `syz.7.3799'. [ 242.078145][T14792] 0猉功D: renamed from 31猉功D (while UP) [ 242.085719][T14792] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 242.102743][T14792] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3799'. [ 242.415083][T14810] netlink: 19 bytes leftover after parsing attributes in process `syz.7.3807'. [ 242.496171][T14818] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3811'. [ 242.507039][T14818] netlink: 5 bytes leftover after parsing attributes in process `syz.7.3811'. [ 242.516664][T14818] 1猉功D: renamed from 30猉功D (while UP) [ 242.524871][T14818] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 242.552595][T14818] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3811'. [ 242.564926][T14819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3809'. [ 242.685786][T14827] lo speed is unknown, defaulting to 1000 [ 242.692002][T14827] lo speed is unknown, defaulting to 1000 [ 242.955383][T14846] netlink: 19 bytes leftover after parsing attributes in process `syz.7.3820'. [ 243.028232][T14852] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3823'. [ 243.038967][T14852] 0猉功D: renamed from 31猉功D (while UP) [ 243.047311][T14852] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 243.334165][T14872] netlink: 'syz.3.3831': attribute type 10 has an invalid length. [ 243.375872][T14872] team0: Device hsr_slave_0 failed to register rx_handler [ 243.402256][T14872] netlink: 'syz.3.3831': attribute type 10 has an invalid length. [ 243.410889][T14872] ipvlan0: entered allmulticast mode [ 243.416314][T14872] veth0_vlan: entered allmulticast mode [ 243.428264][T14872] team0: Device ipvlan0 failed to register rx_handler [ 243.653215][T14887] lo speed is unknown, defaulting to 1000 [ 243.710502][T14887] lo speed is unknown, defaulting to 1000 [ 243.842649][T14887] chnl_net:caif_netlink_parms(): no params data found [ 243.950984][T14922] netlink: 'syz.3.3846': attribute type 10 has an invalid length. [ 243.963256][T14922] team0: Device hsr_slave_0 failed to register rx_handler [ 243.976389][T14922] netlink: 'syz.3.3846': attribute type 10 has an invalid length. [ 243.986190][T14922] team0: Device ipvlan0 failed to register rx_handler [ 243.997674][T14887] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.004917][T14887] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.016442][T14887] bridge_slave_0: entered allmulticast mode [ 244.023414][T14887] bridge_slave_0: entered promiscuous mode [ 244.030762][T14887] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.037848][T14887] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.046082][T14887] bridge_slave_1: entered allmulticast mode [ 244.052956][T14887] bridge_slave_1: entered promiscuous mode [ 244.088746][T14887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.118146][T14887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.156266][T14887] team0: Port device team_slave_0 added [ 244.163259][T14887] team0: Port device team_slave_1 added [ 244.194185][T14887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.201252][T14887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.227674][T14887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.265662][T14887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.272695][T14887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.298697][T14887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.377660][T14887] hsr_slave_0: entered promiscuous mode [ 244.386100][T14887] hsr_slave_1: entered promiscuous mode [ 244.393245][T14887] debugfs: 'hsr0' already exists in 'hsr' [ 244.399039][T14887] Cannot create hsr debugfs directory [ 244.509298][T14887] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.564846][T14887] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.631516][T14887] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.660382][T14947] FAULT_INJECTION: forcing a failure. [ 244.660382][T14947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.673745][T14947] CPU: 0 UID: 0 PID: 14947 Comm: syz.9.3853 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 244.673788][T14947] Tainted: [W]=WARN [ 244.673798][T14947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 244.673843][T14947] Call Trace: [ 244.673851][T14947] [ 244.673859][T14947] __dump_stack+0x1d/0x30 [ 244.673886][T14947] dump_stack_lvl+0xe8/0x140 [ 244.673936][T14947] dump_stack+0x15/0x1b [ 244.673959][T14947] should_fail_ex+0x265/0x280 [ 244.673990][T14947] should_fail+0xb/0x20 [ 244.674017][T14947] should_fail_usercopy+0x1a/0x20 [ 244.674052][T14947] _copy_from_user+0x1c/0xb0 [ 244.674091][T14947] ___sys_sendmsg+0xc1/0x1d0 [ 244.674146][T14947] __x64_sys_sendmsg+0xd4/0x160 [ 244.674213][T14947] x64_sys_call+0x191e/0x3000 [ 244.674238][T14947] do_syscall_64+0xd2/0x200 [ 244.674271][T14947] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 244.674305][T14947] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 244.674347][T14947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.674445][T14947] RIP: 0033:0x7f33e35aeec9 [ 244.674461][T14947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.674479][T14947] RSP: 002b:00007f33e200f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.674516][T14947] RAX: ffffffffffffffda RBX: 00007f33e3805fa0 RCX: 00007f33e35aeec9 [ 244.674535][T14947] RDX: 0000000000000000 RSI: 0000200000005840 RDI: 0000000000000003 [ 244.674552][T14947] RBP: 00007f33e200f090 R08: 0000000000000000 R09: 0000000000000000 [ 244.674570][T14947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.674586][T14947] R13: 00007f33e3806038 R14: 00007f33e3805fa0 R15: 00007fff7dacb498 [ 244.674613][T14947] [ 244.857735][T14887] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.901444][T14951] lo speed is unknown, defaulting to 1000 [ 244.910656][T14951] lo speed is unknown, defaulting to 1000 [ 244.942926][T14954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.959821][T14954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.971029][T14887] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 244.973730][T14956] block device autoloading is deprecated and will be removed. [ 244.991048][T14887] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 245.016288][T14887] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 245.036144][T14887] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 245.134260][T14887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.158562][T14887] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.170238][T11903] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.177478][T11903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.218374][T11903] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.225767][T11903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.312069][T14887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.487445][T14887] veth0_vlan: entered promiscuous mode [ 245.495414][T14990] 1猉功D: renamed from 30猉功D (while UP) [ 245.503189][T14990] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 245.521721][T14887] veth1_vlan: entered promiscuous mode [ 245.557433][T14887] veth0_macvtap: entered promiscuous mode [ 245.569157][T14887] veth1_macvtap: entered promiscuous mode [ 245.591338][T14887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.617069][T14887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.632335][T11903] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.709497][T11903] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.872067][T11877] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.891641][T11877] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.300055][T15025] loop7: detected capacity change from 0 to 2048 [ 246.348355][T15025] loop7: p2 p3 p7 [ 246.715083][T15020] wireguard0: entered promiscuous mode [ 246.720808][T15020] wireguard0: entered allmulticast mode [ 246.761344][T15045] bridge1: entered promiscuous mode [ 246.803006][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 246.803023][ T29] audit: type=1400 audit(1759402025.025:25357): avc: denied { write } for pid=15044 comm="syz.0.3881" path="socket:[50721]" dev="sockfs" ino=50721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 247.098580][ T29] audit: type=1400 audit(1759402025.330:25358): avc: denied { remount } for pid=15054 comm="syz.1.3884" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 247.268335][T15062] lo speed is unknown, defaulting to 1000 [ 247.283282][T15062] lo speed is unknown, defaulting to 1000 [ 247.328222][T15063] loop7: detected capacity change from 0 to 2048 [ 247.395776][T15063] loop7: p2 p3 p7 [ 247.449188][ T29] audit: type=1400 audit(1759402025.699:25359): avc: denied { create } for pid=15077 comm="syz.9.3893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 247.491397][ T29] audit: type=1400 audit(1759402025.720:25360): avc: denied { write } for pid=15077 comm="syz.9.3893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 247.526284][T15082] netlink: 'syz.1.3894': attribute type 10 has an invalid length. [ 247.538828][T15082] team0: Device hsr_slave_0 failed to register rx_handler [ 247.539548][T15085] __nla_validate_parse: 12 callbacks suppressed [ 247.539568][T15085] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3895'. [ 247.578393][T15085] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3895'. [ 247.598862][T15082] netlink: 'syz.1.3894': attribute type 10 has an invalid length. [ 247.617339][T15082] team0: Device ipvlan0 failed to register rx_handler [ 247.633839][ T29] audit: type=1400 audit(1759402025.889:25361): avc: denied { create } for pid=15086 comm="syz.0.3896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 247.675519][T15090] netlink: 'syz.7.3897': attribute type 10 has an invalid length. [ 247.709013][ T29] audit: type=1400 audit(1759402025.973:25362): avc: denied { connect } for pid=15091 comm="syz.1.3898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 247.729032][T15090] team0: Device hsr_slave_0 failed to register rx_handler [ 247.743323][T15094] netlink: 'syz.7.3897': attribute type 10 has an invalid length. [ 247.773044][T15094] ipvlan0: entered allmulticast mode [ 247.778897][T15094] veth0_vlan: entered allmulticast mode [ 247.790653][T15094] team0: Device ipvlan0 failed to register rx_handler [ 247.808256][T15104] netlink: 'syz.9.3902': attribute type 4 has an invalid length. [ 247.816344][T15104] netlink: 152 bytes leftover after parsing attributes in process `syz.9.3902'. [ 247.919940][T15111] loop7: detected capacity change from 0 to 2048 [ 247.974820][ T29] audit: type=1400 audit(1759402026.247:25363): avc: denied { shutdown } for pid=15112 comm="syz.0.3908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 247.995527][ T29] audit: type=1400 audit(1759402026.247:25364): avc: denied { getopt } for pid=15112 comm="syz.0.3908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 248.015643][ T29] audit: type=1400 audit(1759402026.247:25365): avc: denied { write } for pid=15112 comm="syz.0.3908" lport=35901 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 248.040510][ T29] audit: type=1326 audit(1759402026.247:25366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15112 comm="syz.0.3908" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f96ebbfeec9 code=0x0 [ 248.069675][T15126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3911'. [ 248.103897][T15126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3911'. [ 248.119517][T15126] netlink: 'syz.1.3911': attribute type 4 has an invalid length. [ 248.143153][T15122] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3910'. [ 248.176368][T15122] netlink: 5 bytes leftover after parsing attributes in process `syz.9.3910'. [ 248.209213][T15122] 1猉功D: renamed from 30猉功D (while UP) [ 248.230521][T15136] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3910'. [ 248.243087][T15122] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 248.282799][T15137] tipc: Enabling of bearer rejected, already enabled [ 248.649770][T15148] bridge3: entered promiscuous mode [ 248.708951][T15149] lo speed is unknown, defaulting to 1000 [ 248.715569][T15149] lo speed is unknown, defaulting to 1000 [ 249.244525][T15159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3922'. [ 249.539893][T15164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3923'. [ 249.916754][T15174] lo speed is unknown, defaulting to 1000 [ 249.924046][T15174] lo speed is unknown, defaulting to 1000 [ 250.621887][T15189] 0猉功D: renamed from 31猉功D (while UP) [ 250.631065][T15189] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 250.651553][T15191] SELinux: policydb version 40 does not match my version range 15-35 [ 250.662060][T15191] SELinux: failed to load policy [ 251.233350][T15200] program syz.1.3936 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.241623][T15210] lo speed is unknown, defaulting to 1000 [ 251.265242][T15210] lo speed is unknown, defaulting to 1000 [ 251.490105][T15228] netlink: 'syz.1.3946': attribute type 10 has an invalid length. [ 251.509461][T15228] team0: Device hsr_slave_0 failed to register rx_handler [ 251.528334][T15228] netlink: 'syz.1.3946': attribute type 10 has an invalid length. [ 251.542341][T15228] team0: Device ipvlan0 failed to register rx_handler [ 252.224189][T15246] netlink: 'syz.0.3953': attribute type 10 has an invalid length. [ 252.245302][T15246] team0: Device hsr_slave_0 failed to register rx_handler [ 252.256112][ T29] kauditd_printk_skb: 294 callbacks suppressed [ 252.256126][ T29] audit: type=1326 audit(1759402030.768:25661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15247 comm="syz.9.3954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33e35aeec9 code=0x7ffc0000 [ 252.256314][T15246] netlink: 'syz.0.3953': attribute type 10 has an invalid length. [ 252.265448][ T29] audit: type=1326 audit(1759402030.778:25662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15247 comm="syz.9.3954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f33e35aeec9 code=0x7ffc0000 [ 252.325937][T15246] team0: Device ipvlan0 failed to register rx_handler [ 252.339900][ T29] audit: type=1326 audit(1759402030.831:25663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15247 comm="syz.9.3954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33e35aeec9 code=0x7ffc0000 [ 252.363914][ T29] audit: type=1326 audit(1759402030.831:25664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15247 comm="syz.9.3954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33e35aeec9 code=0x7ffc0000 [ 252.523039][T15261] __nla_validate_parse: 9 callbacks suppressed [ 252.523059][T15261] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3960'. [ 252.583098][ T29] audit: type=1400 audit(1759402031.094:25665): avc: denied { bind } for pid=15263 comm="syz.1.3961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 252.590893][T15266] netlink: 19 bytes leftover after parsing attributes in process `syz.1.3962'. [ 252.602908][ T29] audit: type=1400 audit(1759402031.094:25666): avc: denied { ioctl } for pid=15263 comm="syz.1.3961" path="socket:[52125]" dev="sockfs" ino=52125 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 252.636960][ T29] audit: type=1400 audit(1759402031.094:25667): avc: denied { write } for pid=15263 comm="syz.1.3961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 252.652078][T15261] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3960'. [ 252.726243][T15267] lo speed is unknown, defaulting to 1000 [ 252.732905][T15267] lo speed is unknown, defaulting to 1000 [ 253.381035][T15287] lo speed is unknown, defaulting to 1000 [ 253.391911][T15287] lo speed is unknown, defaulting to 1000 [ 253.398625][T15289] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3971'. [ 253.420642][T15291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.429555][T15291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.476024][T15295] netlink: 'syz.7.3973': attribute type 10 has an invalid length. [ 253.493952][T15295] team0: Device hsr_slave_0 failed to register rx_handler [ 253.507082][T15295] netlink: 'syz.7.3973': attribute type 10 has an invalid length. [ 253.517555][T15295] team0: Device ipvlan0 failed to register rx_handler [ 253.750014][ T29] audit: type=1400 audit(1759402032.338:25668): avc: denied { read } for pid=15309 comm="syz.1.3980" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 253.773873][ T29] audit: type=1400 audit(1759402032.338:25669): avc: denied { open } for pid=15309 comm="syz.1.3980" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 253.827637][ T29] audit: type=1400 audit(1759402032.422:25670): avc: denied { write } for pid=15309 comm="syz.1.3980" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 253.835431][T15316] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3981'. [ 253.889456][T15316] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3981'. [ 253.900503][T15318] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3982'. [ 253.977393][T15325] FAULT_INJECTION: forcing a failure. [ 253.977393][T15325] name failslab, interval 1, probability 0, space 0, times 0 [ 253.990531][T15325] CPU: 0 UID: 0 PID: 15325 Comm: syz.9.3985 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 253.990640][T15325] Tainted: [W]=WARN [ 253.990646][T15325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 253.990658][T15325] Call Trace: [ 253.990663][T15325] [ 253.990670][T15325] __dump_stack+0x1d/0x30 [ 253.990695][T15325] dump_stack_lvl+0xe8/0x140 [ 253.990713][T15325] dump_stack+0x15/0x1b [ 253.990787][T15325] should_fail_ex+0x265/0x280 [ 253.990808][T15325] should_failslab+0x8c/0xb0 [ 253.990825][T15325] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 253.990885][T15325] ? sidtab_sid2str_get+0xa0/0x130 [ 253.990928][T15325] kmemdup_noprof+0x2b/0x70 [ 253.990947][T15325] sidtab_sid2str_get+0xa0/0x130 [ 253.990977][T15325] security_sid_to_context_core+0x1eb/0x2e0 [ 253.991053][T15325] security_sid_to_context+0x27/0x40 [ 253.991100][T15325] avc_audit_post_callback+0x9d/0x520 [ 253.991121][T15325] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 253.991149][T15325] common_lsm_audit+0x1bb/0x230 [ 253.991222][T15325] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 253.991348][T15325] ? avc_denied+0xe4/0x100 [ 253.991378][T15325] slow_avc_audit+0x104/0x140 [ 253.991406][T15325] avc_has_perm+0x13a/0x180 [ 253.991427][T15325] file_has_perm+0x35c/0x3a0 [ 253.991522][T15325] selinux_file_permission+0x2f0/0x320 [ 253.991624][T15325] security_file_permission+0x3e/0x80 [ 253.991678][T15325] rw_verify_area+0x8d/0x160 [ 253.991774][T15325] do_sendfile+0x34b/0x650 [ 253.991799][T15325] __x64_sys_sendfile64+0x105/0x150 [ 253.991821][T15325] x64_sys_call+0x2bb4/0x3000 [ 253.991849][T15325] do_syscall_64+0xd2/0x200 [ 253.991886][T15325] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 253.991911][T15325] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 253.991938][T15325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.991988][T15325] RIP: 0033:0x7f33e35aeec9 [ 253.992002][T15325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.992019][T15325] RSP: 002b:00007f33e200f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 253.992036][T15325] RAX: ffffffffffffffda RBX: 00007f33e3805fa0 RCX: 00007f33e35aeec9 [ 253.992048][T15325] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 253.992059][T15325] RBP: 00007f33e200f090 R08: 0000000000000000 R09: 0000000000000000 [ 253.992123][T15325] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000001 [ 253.992134][T15325] R13: 00007f33e3806038 R14: 00007f33e3805fa0 R15: 00007fff7dacb498 [ 253.992193][T15325] [ 254.353685][T15326] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3986'. [ 254.374492][T15326] netlink: 5 bytes leftover after parsing attributes in process `syz.7.3986'. [ 254.383898][T15326] 0猉功D: renamed from gretap0 (while UP) [ 254.393690][T15326] 0猉功D: entered allmulticast mode [ 254.399960][T15326] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 254.439139][T15336] IPVS: stopping master sync thread 15338 ... [ 254.439212][T15338] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 254.457471][T15326] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3986'. [ 254.608947][T15350] netlink: 'syz.0.3997': attribute type 1 has an invalid length. [ 254.616784][T15350] netlink: 'syz.0.3997': attribute type 2 has an invalid length. [ 254.674104][T15354] bridge1: entered promiscuous mode [ 254.683956][T15350] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.786515][T15350] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.863329][T15360] netlink: 'syz.3.4000': attribute type 10 has an invalid length. [ 254.879182][T15360] team0: Device ipvlan0 failed to register rx_handler [ 254.914165][T15350] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.976505][T15350] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.005440][T15363] IPv6: Can't replace route, no match found [ 255.218219][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.269772][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.339892][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.369175][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.471127][T15386] bridge3: entered promiscuous mode [ 255.782218][T15413] 0猉功D: renamed from 31猉功D (while UP) [ 255.792621][T15413] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 255.920184][T15420] 0猉功D: renamed from 31猉功D (while UP) [ 255.938303][T15420] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 256.009527][T15429] bridge2: entered promiscuous mode [ 256.455465][T15442] netlink: 'syz.1.4036': attribute type 10 has an invalid length. [ 256.474288][T15442] team0: Device hsr_slave_0 failed to register rx_handler [ 256.495108][T15442] netlink: 'syz.1.4036': attribute type 10 has an invalid length. [ 256.519709][T15442] team0: Device ipvlan0 failed to register rx_handler [ 256.726210][T15456] 1猉功D: renamed from 30猉功D (while UP) [ 256.751364][T15456] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 257.004127][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 257.004147][ T29] audit: type=1400 audit(1759402035.772:25837): avc: denied { sys_module } for pid=15464 comm="syz.1.4046" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 257.145278][ T29] audit: type=1400 audit(1759402035.856:25838): avc: denied { read } for pid=15466 comm="syz.7.4047" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 257.170323][ T29] audit: type=1400 audit(1759402035.856:25839): avc: denied { open } for pid=15466 comm="syz.7.4047" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 257.194692][ T29] audit: type=1400 audit(1759402035.856:25840): avc: denied { ioctl } for pid=15466 comm="syz.7.4047" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 257.220271][ T29] audit: type=1326 audit(1759402035.898:25841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15469 comm="syz.0.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ebbfeec9 code=0x7ffc0000 [ 257.245227][ T29] audit: type=1326 audit(1759402035.898:25842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15469 comm="syz.0.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ebbfeec9 code=0x7ffc0000 [ 257.269668][ T29] audit: type=1400 audit(1759402036.004:25843): avc: denied { read append } for pid=15476 comm="syz.3.4049" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 257.294115][ T29] audit: type=1400 audit(1759402036.004:25844): avc: denied { open } for pid=15476 comm="syz.3.4049" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 257.396560][T15482] __nla_validate_parse: 28 callbacks suppressed [ 257.396577][T15482] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4052'. [ 257.421663][ T29] audit: type=1400 audit(1759402036.119:25845): avc: denied { recv } for pid=11930 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.154 dest=42958 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 257.447814][ T29] audit: type=1400 audit(1759402036.130:25846): avc: denied { map_create } for pid=15476 comm="syz.3.4049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 257.546269][T15487] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4055'. [ 257.557604][T15487] netlink: 5 bytes leftover after parsing attributes in process `syz.9.4055'. [ 257.574291][T15489] netlink: 19 bytes leftover after parsing attributes in process `syz.0.4051'. [ 257.577205][T15487] 1猉功D: renamed from 30猉功D (while UP) [ 257.607285][T15492] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4055'. [ 257.619192][T15487] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 257.742395][T15501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4058'. [ 257.853607][T15498] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4059'. [ 257.873640][T15498] netlink: 5 bytes leftover after parsing attributes in process `syz.9.4059'. [ 257.960309][T15506] FAULT_INJECTION: forcing a failure. [ 257.960309][T15506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.973601][T15506] CPU: 1 UID: 0 PID: 15506 Comm: syz.7.4060 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 257.973633][T15506] Tainted: [W]=WARN [ 257.973641][T15506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 257.973656][T15506] Call Trace: [ 257.973663][T15506] [ 257.973674][T15506] __dump_stack+0x1d/0x30 [ 257.973758][T15506] dump_stack_lvl+0xe8/0x140 [ 257.973785][T15506] dump_stack+0x15/0x1b [ 257.973808][T15506] should_fail_ex+0x265/0x280 [ 257.973842][T15506] should_fail+0xb/0x20 [ 257.973861][T15506] should_fail_usercopy+0x1a/0x20 [ 257.973904][T15506] strncpy_from_user+0x25/0x230 [ 257.973998][T15506] ? __fget_files+0x184/0x1c0 [ 257.974026][T15506] __se_sys_add_key+0x86/0x350 [ 257.974073][T15506] __x64_sys_add_key+0x67/0x80 [ 257.974213][T15506] x64_sys_call+0x28c8/0x3000 [ 257.974315][T15506] do_syscall_64+0xd2/0x200 [ 257.974349][T15506] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 257.974376][T15506] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 257.974494][T15506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.974590][T15506] RIP: 0033:0x7f07d88aeec9 [ 257.974608][T15506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.974627][T15506] RSP: 002b:00007f07d72d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 257.974645][T15506] RAX: ffffffffffffffda RBX: 00007f07d8b06180 RCX: 00007f07d88aeec9 [ 257.974660][T15506] RDX: 00002000000000c0 RSI: 0000000000000000 RDI: 0000200000000040 [ 257.974677][T15506] RBP: 00007f07d72d5090 R08: ffffffffffffffff R09: 0000000000000000 [ 257.974738][T15506] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000001 [ 257.974755][T15506] R13: 00007f07d8b06218 R14: 00007f07d8b06180 R15: 00007ffc5c0e87e8 [ 257.974781][T15506] [ 258.208728][T15510] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4059'. [ 258.225353][T15508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4062'. [ 258.567876][T15498] 0猉功D: renamed from 31猉功D (while UP) [ 258.576358][T15498] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 258.941197][T15547] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 259.143214][T15549] 0猉功D: renamed from 31猉功D (while UP) [ 259.163396][T15549] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 259.296663][T15561] 1猉功D: renamed from 30猉功D (while UP) [ 259.304648][T15561] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 259.334041][T15563] netlink: 'syz.1.4078': attribute type 3 has an invalid length. [ 259.742569][T15580] bridge2: entered promiscuous mode [ 259.878024][T15588] 0猉功D: renamed from 31猉功D (while UP) [ 259.886482][T15588] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 259.966133][T15594] netlink: 'syz.1.4093': attribute type 4 has an invalid length. [ 260.112018][T15609] tipc: Enabling of bearer rejected, already enabled [ 260.506728][T15617] 1猉功D: renamed from 30猉功D (while UP) [ 260.514705][T15617] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 260.620133][T15623] 0猉功D: renamed from 31猉功D (while UP) [ 260.628314][T15623] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 260.746657][T15630] netlink: 'syz.3.4108': attribute type 4 has an invalid length. [ 260.977874][T15642] 1猉功D: renamed from 30猉功D (while UP) [ 260.986350][T15642] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 261.012879][T15645] bridge4: entered promiscuous mode [ 261.024376][T15644] bridge4: entered promiscuous mode [ 261.191840][T15654] netlink: 'syz.9.4116': attribute type 10 has an invalid length. [ 261.208276][T15656] bridge3: entered promiscuous mode [ 261.216668][T15659] netlink: 'syz.0.4119': attribute type 4 has an invalid length. [ 261.242919][T15654] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 261.285261][T15654] team0: Failed to send options change via netlink (err -105) [ 261.292911][T15654] team0: Port device dummy0 added [ 261.878555][T15681] 1猉功D: renamed from 30猉功D (while UP) [ 261.886821][T15681] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 261.971385][T15685] netlink: 'syz.7.4128': attribute type 10 has an invalid length. [ 261.990983][T15685] team0: Device hsr_slave_0 failed to register rx_handler [ 262.000387][ T29] kauditd_printk_skb: 685 callbacks suppressed [ 262.000404][ T29] audit: type=1400 audit(1759402041.027:26532): avc: denied { name_bind } for pid=15686 comm="syz.3.4129" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 262.005082][T15689] netlink: 'syz.1.4130': attribute type 4 has an invalid length. [ 262.006927][ T29] audit: type=1400 audit(1759402041.027:26533): avc: denied { node_bind } for pid=15686 comm="syz.3.4129" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 262.031539][T15685] netlink: 'syz.7.4128': attribute type 10 has an invalid length. [ 262.112316][T15685] team0: Device ipvlan0 failed to register rx_handler [ 262.119183][ T29] audit: type=1400 audit(1759402041.133:26534): avc: denied { create } for pid=15686 comm="syz.3.4129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 262.139251][ T29] audit: type=1400 audit(1759402041.143:26535): avc: denied { connect } for pid=15686 comm="syz.3.4129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 262.159375][ T29] audit: type=1400 audit(1759402041.143:26536): avc: denied { getopt } for pid=15686 comm="syz.3.4129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 262.179673][ T29] audit: type=1400 audit(1759402041.143:26537): avc: denied { create } for pid=15686 comm="syz.3.4129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 262.199582][ T29] audit: type=1400 audit(1759402041.143:26538): avc: denied { connect } for pid=15686 comm="syz.3.4129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 262.231059][T15692] bridge5: entered promiscuous mode [ 262.255099][T15698] netlink: 'syz.7.4133': attribute type 10 has an invalid length. [ 262.264637][T15698] team0: Device ipvlan0 failed to register rx_handler [ 262.294476][T15700] netlink: 'syz.1.4134': attribute type 10 has an invalid length. [ 262.327148][T15700] team0: Device hsr_slave_0 failed to register rx_handler [ 262.369600][T15706] __nla_validate_parse: 43 callbacks suppressed [ 262.369617][T15706] netlink: 19 bytes leftover after parsing attributes in process `syz.7.4136'. [ 262.370573][T15700] team0: Device ipvlan0 failed to register rx_handler [ 262.462576][T15708] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4137'. [ 262.476928][T15708] netlink: 5 bytes leftover after parsing attributes in process `syz.7.4137'. [ 262.486367][T15708] 1猉功D: renamed from 30猉功D (while UP) [ 262.497625][T15708] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 262.500217][T15710] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4138'. [ 262.521332][T15708] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4137'. [ 262.558115][T15710] netlink: 5 bytes leftover after parsing attributes in process `syz.9.4138'. [ 262.565320][T15716] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4141'. [ 262.570345][T15710] 0猉功D: renamed from 31猉功D (while UP) [ 262.584404][T15710] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 262.620866][T15710] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4138'. [ 262.645068][T15723] bridge5: entered promiscuous mode [ 262.660610][ T29] audit: type=1400 audit(1759402041.701:26539): avc: denied { audit_write } for pid=15719 comm="syz.7.4143" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 262.682243][ T29] audit: type=1107 audit(1759402041.701:26540): pid=15719 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 262.698729][ T29] audit: type=1400 audit(1759402041.722:26541): avc: denied { read } for pid=15721 comm="syz.1.4145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 262.701554][T15726] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4146'. [ 262.738578][T15726] netlink: 5 bytes leftover after parsing attributes in process `syz.9.4146'. [ 262.747990][T15726] 1猉功D: renamed from 30猉功D (while UP) [ 262.755573][T15726] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 262.874155][T15741] FAULT_INJECTION: forcing a failure. [ 262.874155][T15741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.887646][T15741] CPU: 1 UID: 0 PID: 15741 Comm: syz.9.4152 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 262.887753][T15741] Tainted: [W]=WARN [ 262.887760][T15741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 262.887775][T15741] Call Trace: [ 262.887783][T15741] [ 262.887793][T15741] __dump_stack+0x1d/0x30 [ 262.887821][T15741] dump_stack_lvl+0xe8/0x140 [ 262.887846][T15741] dump_stack+0x15/0x1b [ 262.887938][T15741] should_fail_ex+0x265/0x280 [ 262.887989][T15741] should_fail+0xb/0x20 [ 262.888015][T15741] should_fail_usercopy+0x1a/0x20 [ 262.888047][T15741] _copy_from_iter+0x254/0xe80 [ 262.888117][T15741] ? selinux_socket_sendmsg+0x175/0x1b0 [ 262.888154][T15741] bcm_sendmsg+0xc7/0x480 [ 262.888213][T15741] ? __pfx_bcm_sendmsg+0x10/0x10 [ 262.888240][T15741] __sock_sendmsg+0x145/0x180 [ 262.888276][T15741] ____sys_sendmsg+0x345/0x4e0 [ 262.888392][T15741] ___sys_sendmsg+0x17b/0x1d0 [ 262.888452][T15741] __sys_sendmmsg+0x178/0x300 [ 262.888523][T15741] __x64_sys_sendmmsg+0x57/0x70 [ 262.888556][T15741] x64_sys_call+0x1c4a/0x3000 [ 262.888584][T15741] do_syscall_64+0xd2/0x200 [ 262.888617][T15741] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 262.888670][T15741] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 262.888707][T15741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.888734][T15741] RIP: 0033:0x7f33e35aeec9 [ 262.888753][T15741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.888784][T15741] RSP: 002b:00007f33e200f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 262.888863][T15741] RAX: ffffffffffffffda RBX: 00007f33e3805fa0 RCX: 00007f33e35aeec9 [ 262.888879][T15741] RDX: 040000000000003a RSI: 0000200000001b00 RDI: 0000000000000005 [ 262.888894][T15741] RBP: 00007f33e200f090 R08: 0000000000000000 R09: 0000000000000000 [ 262.888975][T15741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.888989][T15741] R13: 00007f33e3806038 R14: 00007f33e3805fa0 R15: 00007fff7dacb498 [ 262.889011][T15741] [ 263.242561][T15743] 0猉功D: renamed from 31猉功D (while UP) [ 263.623426][T15775] bridge7: entered promiscuous mode [ 263.914751][T15786] lo speed is unknown, defaulting to 1000 [ 263.921554][T15786] lo speed is unknown, defaulting to 1000 [ 264.578589][T15793] bridge5: entered promiscuous mode [ 264.742326][T15805] 0猉功D: renamed from 31猉功D (while UP) [ 264.764288][T15805] net_ratelimit: 1 callbacks suppressed [ 264.764303][T15805] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 264.979612][T15818] lo speed is unknown, defaulting to 1000 [ 264.986672][T15818] lo speed is unknown, defaulting to 1000 [ 265.091405][T15820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.109918][T15820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.299343][T15831] bridge0: port 3(30猉功D) entered blocking state [ 265.305978][T15831] bridge0: port 3(30猉功D) entered disabled state [ 265.353518][T15831] 0猉功D: entered promiscuous mode [ 265.380073][T15831] bridge0: port 3(30猉功D) entered blocking state [ 265.386682][T15831] bridge0: port 3(30猉功D) entered forwarding state [ 265.468956][T15833] lo speed is unknown, defaulting to 1000 [ 265.475530][T15833] lo speed is unknown, defaulting to 1000 [ 265.590039][T15843] 0猉功D: renamed from 31猉功D (while UP) [ 265.608534][T15843] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 265.804644][T15871] 1猉功D: renamed from 30猉功D (while UP) [ 265.823022][T15871] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 266.018735][T15882] 0猉功D: renamed from 31猉功D (while UP) [ 266.037997][T15882] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 266.224350][T11930] ================================================================== [ 266.232594][T11930] BUG: KCSAN: data-race in audit_log_start / audit_receive [ 266.239841][T11930] [ 266.242186][T11930] write to 0xffffffff88e6a480 of 8 bytes by task 15913 on cpu 1: [ 266.249917][T11930] audit_receive+0x78/0x2180 [ 266.254526][T11930] netlink_unicast+0x5c0/0x690 [ 266.259316][T11930] netlink_sendmsg+0x58b/0x6b0 [ 266.264109][T11930] __sock_sendmsg+0x145/0x180 [ 266.268827][T11930] ____sys_sendmsg+0x31e/0x4e0 [ 266.273609][T11930] ___sys_sendmsg+0x17b/0x1d0 [ 266.278316][T11930] __x64_sys_sendmsg+0xd4/0x160 [ 266.283189][T11930] x64_sys_call+0x191e/0x3000 [ 266.287902][T11930] do_syscall_64+0xd2/0x200 [ 266.292447][T11930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.298372][T11930] [ 266.300699][T11930] read to 0xffffffff88e6a480 of 8 bytes by task 11930 on cpu 0: [ 266.308346][T11930] audit_log_start+0x106/0x720 [ 266.313159][T11930] common_lsm_audit+0x66/0x230 [ 266.318060][T11930] slow_avc_audit+0x104/0x140 [ 266.322757][T11930] avc_has_perm+0x13a/0x180 [ 266.327276][T11930] selinux_umount+0xb9/0xd0 [ 266.331794][T11930] security_sb_umount+0x3e/0x80 [ 266.336659][T11930] path_umount+0x221/0x7e0 [ 266.341102][T11930] __x64_sys_umount+0xb6/0xe0 [ 266.345818][T11930] x64_sys_call+0xdd2/0x3000 [ 266.350434][T11930] do_syscall_64+0xd2/0x200 [ 266.354981][T11930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.360894][T11930] [ 266.363229][T11930] value changed: 0x0000000000000000 -> 0xffff8881099ec200 [ 266.370341][T11930] [ 266.372685][T11930] Reported by Kernel Concurrency Sanitizer on: [ 266.378844][T11930] CPU: 0 UID: 0 PID: 11930 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 266.390416][T11930] Tainted: [W]=WARN [ 266.394307][T11930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 266.404366][T11930] ================================================================== [ 266.455465][T15918] 1猉功D: renamed from 30猉功D (while UP) [ 266.462949][T15918] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check.