last executing test programs: 2m28.764534174s ago: executing program 4 (id=2035): unshare(0x6a040000) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48004}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x18) setitimer(0x2, 0x0, 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271c, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r3) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x194, r4, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x138, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "2c3b3c0771883b5289350e799eb534c0884aae630dc26b8e218f"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "5c1e295caff0f7112399f4af684d5c23d896b4e5131e7f736873ec614b789549a73b00e2"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x94, 0x3, "a5c1a93255aa742519c832d7c121f9ec8574807f96f4eb60ec1f299a2968e321c8145c27e8d5a7626071bef3a450fbbaab0a25a443bcf9d53da378e1ad132fe43c32ab278a221f2a3c002cd771cef30b6d3682b255e06250ca5a969411f652a2693474c7cde95f2a36ac76a129948a841a7a2250fa7d2ba79e9b03ce0145735d0e7fcc328806f573efdabf3104da4e9c"}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa5d7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9e7}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x4000044}, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x70bd29}, 0x10}}, 0x0) 2m27.274811561s ago: executing program 4 (id=2050): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) preadv(r1, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000140)=""/44, 0x2c}], 0x2, 0x300, 0x8000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) 2m26.499621582s ago: executing program 4 (id=2055): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24000850}, 0x4000040) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x0) 2m26.476997084s ago: executing program 4 (id=2057): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@abort}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000000)='./file0/file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0x800, 0x14) renameat2(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000200)='./bus\x00', 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3, 0x8, 0x4, 0x40, 0x0, 0x6, 0x60400, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xa47, 0x2, @perf_config_ext={0x5, 0x2}, 0x100000, 0xd, 0x673a99d0, 0x2, 0x1, 0x5, 0x3, 0x0, 0x5, 0x0, 0x8}, r1, 0x1, r0, 0x1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, r0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000f0000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400004005000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=r5], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) syz_clone(0x623f, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x80000001, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x5452, &(0x7f00000004c0)='\x02;\xe5\b\x00\x00\x9c\x00\x00\x00\x00\x00\x00') r8 = socket(0x1e, 0x4, 0x0) connect$tipc(r8, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r8, &(0x7f0000004400), 0x400000000000203, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 2m25.757589971s ago: executing program 4 (id=2059): unshare(0x6a040000) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48004}, 0x0) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x18) setitimer(0x2, 0x0, 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271c, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r3) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x198, r4, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x138, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "2c3b3c0771883b5289350e799eb534c0884aae630dc26b8e218f"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "5c1e295caff0f7112399f4af684d5c23d896b4e5131e7f736873ec614b789549a73b00e2"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x94, 0x3, "a5c1a93255aa742519c832d7c121f9ec8574807f96f4eb60ec1f299a2968e321c8145c27e8d5a7626071bef3a450fbbaab0a25a443bcf9d53da378e1ad132fe43c32ab278a221f2a3c002cd771cef30b6d3682b255e06250ca5a969411f652a2693474c7cde95f2a36ac76a129948a841a7a2250fa7d2ba79e9b03ce0145735d0e7fcc328806f573efdabf3104da4e9c"}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa5d7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9e7}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4000044}, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x70bd29}, 0x10}}, 0x0) 2m25.372367621s ago: executing program 4 (id=2064): unshare(0x6a040000) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48004}, 0x0) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x18) setitimer(0x2, 0x0, 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271c, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r3) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x198, r4, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x138, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "2c3b3c0771883b5289350e799eb534c0884aae630dc26b8e218f"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "5c1e295caff0f7112399f4af684d5c23d896b4e5131e7f736873ec614b789549a73b00e2"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x94, 0x3, "a5c1a93255aa742519c832d7c121f9ec8574807f96f4eb60ec1f299a2968e321c8145c27e8d5a7626071bef3a450fbbaab0a25a443bcf9d53da378e1ad132fe43c32ab278a221f2a3c002cd771cef30b6d3682b255e06250ca5a969411f652a2693474c7cde95f2a36ac76a129948a841a7a2250fa7d2ba79e9b03ce0145735d0e7fcc328806f573efdabf3104da4e9c"}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9e7}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4000044}, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x70bd29}, 0x10}}, 0x0) 2m25.332820294s ago: executing program 32 (id=2064): unshare(0x6a040000) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48004}, 0x0) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x18) setitimer(0x2, 0x0, 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271c, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r3) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x198, r4, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x138, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "2c3b3c0771883b5289350e799eb534c0884aae630dc26b8e218f"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "5c1e295caff0f7112399f4af684d5c23d896b4e5131e7f736873ec614b789549a73b00e2"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x94, 0x3, "a5c1a93255aa742519c832d7c121f9ec8574807f96f4eb60ec1f299a2968e321c8145c27e8d5a7626071bef3a450fbbaab0a25a443bcf9d53da378e1ad132fe43c32ab278a221f2a3c002cd771cef30b6d3682b255e06250ca5a969411f652a2693474c7cde95f2a36ac76a129948a841a7a2250fa7d2ba79e9b03ce0145735d0e7fcc328806f573efdabf3104da4e9c"}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9e7}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4000044}, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x70bd29}, 0x10}}, 0x0) 1m39.93126728s ago: executing program 2 (id=2618): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="24000000390007010000000000000000027c0000040000000c0001800600060088"], 0x24}}, 0x0) (async, rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = semget(0x0, 0x3, 0x30c) semctl$GETNCNT(r6, 0x1, 0xe, 0x0) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x6}, 0x18) (async, rerun: 32) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) fstat(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x28007c2, &(0x7f0000000680)={[{@delalloc}, {@resuid={'resuid', 0x3d, r9}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid={'resgid', 0x3d, r10}}, {@acl}, {@dax_always}]}, 0x0, 0x483, &(0x7f0000001040)="$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") (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r8, {r9}}, './file0\x00'}) (async, rerun: 32) r11 = getegid() (rerun: 32) fsetxattr$system_posix_acl(r5, &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="02000000010006000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000500", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=r9, @ANYBLOB="0d000301010000d300000000", @ANYRES32=r11, @ANYBLOB="08000500", @ANYRES32=0xee01, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0xee00, @ANYBLOB="10000200000000002000060000000000"], 0x5c, 0x1) r12 = syz_open_dev$sg(0x0, 0x0, 0x8002) (async) socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r13) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r13, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14080000", @ANYRES16=r14, @ANYBLOB="0100000000000000000001000000"], 0x14}}, 0x0) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b80)={'syztnl1\x00', 0x0}) (async) readv(r12, 0x0, 0x0) fcntl$dupfd(r12, 0x406, r12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a01040000000000000000010000000900030073797a31000000000900010073797a310000000028000480080002401886c3010800014000000005140003006d61637674617030000000000000000028000000000a05000000000000000000010000080900010073797a310000000008000240000000011400000011000100000000000000"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1m39.875467974s ago: executing program 2 (id=2619): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) fgetxattr(r0, &(0x7f0000000040)=@random={'btrfs.', '}'}, &(0x7f0000000380)=""/120, 0x78) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) semget$private(0x0, 0x6c86b40eae3c8c32, 0x100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) socket$key(0xf, 0x3, 0x2) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x850, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x820, 0x2, [@TCA_FLOW_POLICE={0x814, 0xa, 0x0, 0x1, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x45ef}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x7fffffff, 0x8, 0x7ff, 0x3, 0x2, 0x1, 0x401, 0xb9, 0xace, 0x0, 0x1, 0x9, 0x43, 0x7, 0x2, 0x0, 0x1ce00000, 0x7, 0x6, 0xff, 0x3, 0x1c000, 0x1ff, 0x2, 0x6, 0x9b16, 0x6, 0x100, 0x15a, 0xe, 0xfffffffb, 0x5, 0x4, 0x80000001, 0x4a, 0x1, 0x8, 0x99a9, 0x340d, 0x0, 0x2, 0x9, 0xd, 0x400, 0xfffffffa, 0x6, 0x100, 0x2, 0x5, 0x5, 0xe, 0xffff0001, 0x2, 0xdd1, 0x9, 0xfb, 0x6, 0xf, 0x324, 0x6, 0x3, 0x6, 0x8c, 0x8, 0x401, 0x7fffffff, 0x4, 0x5, 0x800, 0x8261, 0x3, 0x6, 0x8, 0x2, 0x9, 0x4, 0x4, 0x6, 0x5, 0xf, 0x9, 0x38c8, 0x80000001, 0x4, 0xa11, 0x6, 0x3, 0x604, 0xfff, 0xab, 0x7, 0x5, 0x8, 0x9, 0x9, 0x401, 0xb, 0x4, 0x1ff, 0x4, 0x17, 0xffffff7f, 0x78, 0x4, 0x4, 0xa42, 0xfffffff7, 0x4, 0x5b564ea6, 0x2, 0xfffffffe, 0x2, 0x80000001, 0x1ff, 0x5, 0x3, 0x7, 0x6, 0xfffff000, 0x12aeb60c, 0x4, 0x0, 0x1, 0x3, 0x5, 0x7, 0x3, 0x85, 0x10, 0x1, 0x5, 0x1, 0x4, 0x6, 0xf65, 0x1d7, 0x9, 0x100, 0x0, 0x0, 0xc2, 0x1, 0x3, 0xffffffff, 0x1ff, 0x1, 0x30bb, 0x7, 0x40, 0xfffffff8, 0x5, 0x6, 0x1, 0x8, 0x8000, 0x5, 0x4, 0x31e, 0xffff8001, 0x6, 0xff, 0x9, 0x1ff, 0x9, 0x7, 0x7, 0x2, 0x8001, 0x6, 0xf441, 0x6, 0x1, 0x7, 0x89, 0x3, 0x5, 0x0, 0x9, 0x7, 0x1, 0x4, 0x0, 0x4, 0x4, 0x10, 0x1, 0x720a, 0xffff, 0xfff, 0x9, 0x7fff, 0x8, 0x1ac8efcb, 0x8, 0xf2c, 0x7, 0x80000000, 0x12, 0xfffff801, 0x2e4, 0x7, 0xfffffff9, 0x400, 0x4, 0x30, 0x10000, 0xfd, 0x4, 0x1, 0x5, 0x7, 0xc, 0x7, 0x47, 0x0, 0x0, 0x1, 0x7, 0x0, 0x8, 0x6, 0x6, 0x0, 0x10001, 0x0, 0xe9, 0x5, 0x1, 0x8d, 0xaacc, 0x6f, 0x7fffffff, 0x5, 0x6, 0x2, 0x10001, 0x4, 0x10000, 0x9, 0xe, 0x45e8, 0x9, 0xfffffff8, 0x6, 0x100, 0x5, 0xe, 0x73d, 0x31, 0x3, 0x0, 0x2, 0x3, 0xb70, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff7, 0x5, 0x7, 0x4, 0x2, 0x6, 0x1, 0xfb0, 0x8, 0x3, 0x5, 0x3, 0x0, 0x4, 0x9a, 0x9, 0x7, 0xfff, 0x7, 0x40, 0x5, 0x7fff, 0x9, 0x3, 0x1, 0x7ff, 0x4, 0x2, 0x7, 0x2, 0x83b, 0x2, 0x3b, 0x4, 0x0, 0x4, 0x9, 0xc, 0x1cabbb02, 0x4, 0x4, 0x2, 0x8001, 0x7fff, 0x80000000, 0x10000, 0xffff8906, 0x7fffffff, 0x0, 0x0, 0x9, 0xc0000000, 0x2, 0x6, 0x7f, 0x3, 0x10000, 0x3, 0x1, 0x6, 0x0, 0x1, 0x81, 0xcc2, 0x3800, 0x6, 0x18, 0x0, 0xfffffe00, 0x3, 0x6, 0x4, 0x3, 0x7, 0x1, 0xfffffffc, 0x8e4, 0xf5c1, 0x1, 0x5077, 0x3, 0x5, 0x7fff, 0x2, 0x4, 0x2, 0x3, 0x401, 0x6, 0x40, 0x7, 0x95, 0x5, 0x200, 0x1, 0x2, 0x7ff, 0x4, 0x8, 0xb, 0x0, 0x2, 0x0, 0xd266, 0x4, 0x0, 0x10001, 0x2, 0x101, 0x401, 0x200, 0x6, 0x1, 0x46, 0x8, 0x2, 0xfffffffe, 0x14e, 0x4, 0x3, 0x1, 0x5, 0x94e6, 0xfffffbff, 0xfffffffc, 0x2, 0xfffd, 0xc, 0x4, 0x2, 0x40800000, 0x1f, 0x4, 0xffffffff, 0x800, 0x7, 0x3ff, 0x7ff, 0x101, 0x10, 0x5, 0x374, 0xc2f, 0x3, 0xffffff81, 0xfffffff7, 0x6, 0x8000, 0x8, 0x1, 0x1, 0x200, 0xcae, 0x200, 0xffff, 0x7fff, 0x5, 0x8, 0x3c0, 0x9, 0x8, 0x6d5, 0x27, 0x9, 0x476b3752, 0xff, 0x0, 0x9, 0x7ff, 0x4, 0x3, 0x4, 0x7, 0x7249, 0x7, 0xffff8001, 0x95f, 0x8, 0x7, 0x1000, 0x800, 0x0, 0x2, 0xf2, 0x0, 0x3, 0xffff, 0x3, 0x0, 0x8000, 0x9, 0x4, 0xcc6, 0xffe00000, 0x22, 0xd56, 0xfffffff0, 0x3bb8, 0x10, 0x140, 0x8, 0x9, 0x9, 0x2, 0x2, 0x4, 0x3, 0x0, 0x3, 0xf, 0x0, 0xc527, 0x9, 0x8, 0x1, 0xffff86fd, 0x7, 0x2, 0x8, 0x3, 0x9, 0x5, 0x0, 0x4, 0xc12, 0x7f, 0x0, 0x0, 0x80000000, 0x3, 0x7, 0x9, 0x7, 0x9, 0xf6, 0x8, 0xc9, 0xaf8, 0x3, 0x80000000, 0xad8c, 0x4, 0x2, 0xe89, 0x9, 0x5, 0x1, 0x7, 0x8, 0x5, 0x10000, 0x3, 0x7fb, 0xdbbb, 0x4, 0x2]}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x850}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) setresgid(0x0, 0xee01, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002b2000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) pivot_root(&(0x7f0000000000)='.\x00', &(0x7f00000004c0)='./file1\x00') set_mempolicy(0x3, &(0x7f0000000040)=0x10000000001, 0x7) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@errors_remount}, {@oldalloc}, {@usrquota}, {@barrier}, {@auto_da_alloc}, {@grpquota}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x8a) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x7}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x5}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 1m38.887605582s ago: executing program 2 (id=2633): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x18, r3, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000850}, 0x0) 1m38.838433286s ago: executing program 2 (id=2634): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000046, &(0x7f00000134c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@sysvgroups}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x7f}}, {@data_err_ignore}, {@grpquota}, {@dioread_nolock}, {@nobarrier}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305828, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x100, 0x100000002, 0xfffffffffffffffe}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183042, 0x8) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff00000000000000", @ANYRES32, @ANYBLOB="00000000000600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb76cfa2b44fcbe13eb04000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r7}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="bbd64291a7f85be9781f8130eea74f388075d8eb326ccf5c71456b28034f6b28ea8160e55c19bc626ef9752b967ee7292bdc574fb5760c9d46765cba9c2d9d314100989edbfa37084cc44a0527b08dcd118e2ba2aa749871079cb35864a29a6840b2d95b24cdaaa6a8d631b25626bb05e3ba5f4d43af68d83d8bb03c6d4b80eb", @ANYRESHEX=r3, @ANYRESHEX, @ANYRES8=r5, @ANYRESHEX=r4, @ANYBLOB="8f7c03684e0792de24bfbe1ceb46ad0e42d00014407fa505c1049acf8872e322bf4f1a78d664e3ad8f8c528d1b3d7381ec6447777aa4f1c91ae21a150862492ddb3f19e7b237cfe9b0fa73288d0d2af79adb1734c3a735aed92201c00f2179ce4737b30d42ec74f853fe0827a97b7b99233b8c19048f1a80c41d89c118e84e2487da6b96a4a4e43e097d4eb63736865aa9fb6fb4003d03f1ae83054d1b7988a0232afe664bf47e2baf8514c92d25e36e6d3b403a8b2de05d6c03558adc257d4e89fc0cb60900d0dbdfe768d6ee639722e0a1017790be5c3acad39f35b98a3ea68dd9afee01758437cede2abaa72db92c", @ANYRESDEC=r6, @ANYRESDEC=0x0], 0x48) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000180)={@private2={0xfc, 0x2, '\x00', 0x1}}, 0x14) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002dbd7000fcdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x7b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r9, 0x0, 0x2}, 0x18) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000680)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000980)={@loopback}, &(0x7f0000000a00)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='xprtrdma_reply\x00', r11}, 0x18) iopl(0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x18) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000740)={0x3, &(0x7f00000005c0)=[{0x3, 0x5, 0x7, 0x3}, {0x8, 0xd, 0x5, 0x401}, {0x0, 0x0, 0x81, 0x6}]}) unshare(0x1a040e80) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) 1m38.506838332s ago: executing program 2 (id=2635): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) fgetxattr(r0, &(0x7f0000000040)=@random={'btrfs.', '}'}, &(0x7f0000000380)=""/120, 0x78) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) semget$private(0x0, 0x6c86b40eae3c8c32, 0x100) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x850, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x820, 0x2, [@TCA_FLOW_POLICE={0x814, 0xa, 0x0, 0x1, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x45ef}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x7fffffff, 0x8, 0x7ff, 0x3, 0x2, 0x1, 0x401, 0xb9, 0xace, 0x0, 0x1, 0x9, 0x43, 0x7, 0x2, 0x0, 0x1ce00000, 0x7, 0x6, 0xff, 0x3, 0x1c000, 0x1ff, 0x2, 0x6, 0x9b16, 0x6, 0x100, 0x15a, 0xe, 0xfffffffb, 0x5, 0x4, 0x80000001, 0x4a, 0x1, 0x8, 0x99a9, 0x340d, 0x0, 0x2, 0x9, 0xd, 0x400, 0xfffffffa, 0x6, 0x100, 0x2, 0x5, 0x5, 0xe, 0xffff0001, 0x2, 0xdd1, 0x9, 0xfb, 0x6, 0xf, 0x324, 0x6, 0x3, 0x6, 0x8c, 0x8, 0x401, 0x7fffffff, 0x4, 0x5, 0x800, 0x8261, 0x3, 0x6, 0x8, 0x2, 0x9, 0x4, 0x4, 0x6, 0x5, 0xf, 0x9, 0x38c8, 0x80000001, 0x4, 0xa11, 0x6, 0x3, 0x604, 0xfff, 0xab, 0x7, 0x5, 0x8, 0x9, 0x9, 0x401, 0xb, 0x4, 0x1ff, 0x4, 0x17, 0xffffff7f, 0x78, 0x4, 0x4, 0xa42, 0xfffffff7, 0x4, 0x5b564ea6, 0x2, 0xfffffffe, 0x2, 0x80000001, 0x1ff, 0x5, 0x3, 0x7, 0x6, 0xfffff000, 0x12aeb60c, 0x4, 0x0, 0x1, 0x3, 0x5, 0x7, 0x3, 0x85, 0x10, 0x1, 0x5, 0x1, 0x4, 0x6, 0xf65, 0x1d7, 0x9, 0x100, 0x0, 0x0, 0xc2, 0x1, 0x3, 0xffffffff, 0x1ff, 0x1, 0x30bb, 0x7, 0x40, 0xfffffff8, 0x5, 0x6, 0x1, 0x8, 0x8000, 0x5, 0x4, 0x31e, 0xffff8001, 0x6, 0xff, 0x9, 0x1ff, 0x9, 0x7, 0x7, 0x2, 0x8001, 0x6, 0xf441, 0x6, 0x1, 0x7, 0x89, 0x3, 0x5, 0x0, 0x9, 0x7, 0x1, 0x4, 0x0, 0x4, 0x4, 0x10, 0x1, 0x720a, 0xffff, 0xfff, 0x9, 0x7fff, 0x8, 0x1ac8efcb, 0x8, 0xf2c, 0x7, 0x80000000, 0x12, 0xfffff801, 0x2e4, 0x7, 0xfffffff9, 0x400, 0x4, 0x30, 0x10000, 0xfd, 0x4, 0x1, 0x5, 0x7, 0xc, 0x7, 0x47, 0x0, 0x0, 0x1, 0x7, 0x0, 0x8, 0x6, 0x6, 0x0, 0x10001, 0x0, 0xe9, 0x5, 0x1, 0x8d, 0xaacc, 0x6f, 0x7fffffff, 0x5, 0x6, 0x2, 0x10001, 0x4, 0x10000, 0x9, 0xe, 0x45e8, 0x9, 0xfffffff8, 0x6, 0x100, 0x5, 0xe, 0x73d, 0x31, 0x3, 0x0, 0x2, 0x3, 0xb70, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff7, 0x5, 0x7, 0x4, 0x2, 0x6, 0x1, 0xfb0, 0x8, 0x3, 0x5, 0x3, 0x0, 0x4, 0x9a, 0x9, 0x7, 0xfff, 0x7, 0x40, 0x5, 0x7fff, 0x9, 0x3, 0x1, 0x7ff, 0x4, 0x2, 0x7, 0x2, 0x83b, 0x2, 0x3b, 0x4, 0x0, 0x4, 0x9, 0xc, 0x1cabbb02, 0x4, 0x4, 0x2, 0x8001, 0x7fff, 0x80000000, 0x10000, 0xffff8906, 0x7fffffff, 0x0, 0x0, 0x9, 0xc0000000, 0x2, 0x6, 0x7f, 0x3, 0x10000, 0x3, 0x1, 0x6, 0x0, 0x1, 0x81, 0xcc2, 0x3800, 0x6, 0x18, 0x0, 0xfffffe00, 0x3, 0x6, 0x4, 0x3, 0x7, 0x1, 0xfffffffc, 0x8e4, 0xf5c1, 0x1, 0x5077, 0x3, 0x5, 0x7fff, 0x2, 0x4, 0x2, 0x3, 0x401, 0x6, 0x40, 0x7, 0x95, 0x5, 0x200, 0x1, 0x2, 0x7ff, 0x4, 0x8, 0xb, 0x0, 0x2, 0x0, 0xd266, 0x4, 0x0, 0x10001, 0x2, 0x101, 0x401, 0x200, 0x6, 0x1, 0x46, 0x8, 0x2, 0xfffffffe, 0x14e, 0x4, 0x3, 0x1, 0x5, 0x94e6, 0xfffffbff, 0xfffffffc, 0x2, 0xfffd, 0xc, 0x4, 0x2, 0x40800000, 0x1f, 0x4, 0xffffffff, 0x800, 0x7, 0x3ff, 0x7ff, 0x101, 0x10, 0x5, 0x374, 0xc2f, 0x3, 0xffffff81, 0xfffffff7, 0x6, 0x8000, 0x8, 0x1, 0x1, 0x200, 0xcae, 0x200, 0xffff, 0x7fff, 0x5, 0x8, 0x3c0, 0x9, 0x8, 0x6d5, 0x27, 0x9, 0x476b3752, 0xff, 0x0, 0x9, 0x7ff, 0x4, 0x3, 0x4, 0x7, 0x7249, 0x7, 0xffff8001, 0x95f, 0x8, 0x7, 0x1000, 0x800, 0x0, 0x2, 0xf2, 0x0, 0x3, 0xffff, 0x3, 0x0, 0x8000, 0x9, 0x4, 0xcc6, 0xffe00000, 0x22, 0xd56, 0xfffffff0, 0x3bb8, 0x10, 0x140, 0x8, 0x9, 0x9, 0x2, 0x2, 0x4, 0x3, 0x0, 0x3, 0xf, 0x0, 0xc527, 0x9, 0x8, 0x1, 0xffff86fd, 0x7, 0x2, 0x8, 0x3, 0x9, 0x5, 0x0, 0x4, 0xc12, 0x7f, 0x0, 0x0, 0x80000000, 0x3, 0x7, 0x9, 0x7, 0x9, 0xf6, 0x8, 0xc9, 0xaf8, 0x3, 0x80000000, 0xad8c, 0x4, 0x2, 0xe89, 0x9, 0x5, 0x1, 0x7, 0x8, 0x5, 0x10000, 0x3, 0x7fb, 0xdbbb, 0x4, 0x2]}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x850}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 1m38.394507831s ago: executing program 2 (id=2636): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sendmsg$sock(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001240)="ca164a528e96b6d4933723724fce16fa92ccf4c69e226976fa442c7fb8b8c3665914929c17d5910c935c7964eb2dfb9f652811b331f4b1b0f2ecb37526df9c82ef025d44676c28a281f6558e12220aa15a55f3f0f2f100ffade630ad8c886896e6d6ed083c1cbda31ee53e480f102cca206b4e9a667ae5d706de0d464500bb61444b47616280e306ec46f9849ed7b242b4cfa6be104bae27a04ed74a405b9591cce216821ea0672eb6d35f120397b3484c0b22b2176d845069a03aa67e2cf1e427689dea2b7bbfc57a718b2b2a857e1942ad264a46c41627800fdca3c078901567b2d25ebbc2a19120ed8e5cec0ffb93824657d1e610a0d8167ca0193fe5911c6f6062872a5e050ef9f39425510badd7946cfcc559243e60fad712abf52c033920c506cb0485b46d97258a5eeda35796faadddd3a3a89e9a85b99bd68b412d947f1a6da65757b8ef0123e11dd44909df457f205f0b78ba4df030bc5e1de5f9d5d91b0d79c6e31b7b84e9ea10b0776545ad2d7dc8c4f7b4af144c844798993d229d50c868c149f82d57e869ecc8e0833c4da53ff6494a4dcc3aec4d1b6a3ceb52acc2049ba0c4576e196c6ffaf1f65ac33251291d0fc55767b147ee49e835d6f1177aa4cdb366c20c408ffc6fd20e23bf3d3965ca93387377b954f37f7a558dff2ae976dac76dade827b314718834da7ff3bcd333e7703a105a55fe329b302d2f8e5b181f044592a0e8edeb37aee1a06961f2496e621f47149b5595ae7493cd505c3efdfca349905aa214efe97a8dcb542667ef74cce7403145b3dd3148c29c3cc9f03c04b7af59fd1b238fb75c9a5aff98a74b96e16135fadf3b8a1b45f9c6d4f68fd2aef5c24d4e8514a20b2d33df8ca1cee1ac9c305915bfb069a2c973ddbe5940ca959d5604470c8db06f749338a34bae04f95c73faea1a0a5d8fcb6463733faaeaa76272edcec28f7a5f3e74de45a8a0b2f78ca0c404544919fb82598d409a205a653acd68754cf090fe591500f75c65140a48993ec8eb4ed642708d70680a859ac84b763f5fbdb2d992562d9741ced1a7872576944d36fffd54cd1ec5a762093ef1d34f9ff1e4b96702c94f79793bb00e2f8d8995fb4023946964a0c6c8d1ffdd75e922e5c1862681bf33f2ad0ffd838844c1b97110697fb7af610aa23307f9c5ab366e78611fd40fca4044551e8321c2231457877079bb3dce9cedb6c960fb2e75f5e76f2fed7361dc27f3d05a41f3552cd23422472698c09738316c0051a89ae631509ef03b490e56462009d86c36146d3e3cf18901a8633cb1a228b8bdb8555b501562fc0efb2832d8d544a8f35f0af5201dc0defe7fee97453749b861b61979daa81b48ee3e59ca73e79f3b6e17e91f5dee7c7cc1d138289797389d4725ced65440c696b0543a9e23f4cabe0e4a7be4139843794c0acd43cf41804404d26c474b7de4adb9a5f9ef4b27e2f8f98c274db62ab75138d2025037a04090f3df7ec1964f95d68b3d926678875f030237c970ad5d999e1679a5fc15c1f1d7f8745d50b16ea199c47df040e33c8a95efda2cad1c707fd3b61d06abfb6d74e47a9b40c768a7f8705e65f2ecaf3d5618bca96991953dfc0a858221d570f4442d983feff875638ec55c15813a2404869368411c67cd7281e4a3197a5718e25dd3c9a83bcb1c97390cad905fc0d70ba1c05f094f37bc860f423899176d2c9eaa3a37c60e00b76d6c45f2a18a1ccb24c4eb864362b5aa34bedaf957e1223e51a6f87c38ad87756236880a7241adbcd03a834b4c1e2a494f2be1a10ee3060286680969f8f2de5600660609c76a0cb8ad8728e4b7caf9e80f8239f6d2a17c49d8687c1953f1621b1fa00341c9d05c6537989df508eac75ad4188124618003f4e9f06a889cff15e7ecbc5651f00cfc29ac02bfa8a0fb83c646bbd899c2d1bd5ea8e3ed9e2dcb00fdbb61638d1e20d0fa74e7af9588cbce50fea33993f2ce568d76052817991e52b37aff8231064255c71d0342b02183b0b2e774f84414c4e245c7378d8c2dec53d546d4a0b8b3e4bb9c6e01e0f58bcb5023a407b3c7eb5efbae8dd501bb8e7e451e2bb6fdb699753e61fdf9eb2d8df2e134dab592ddb239c34d37251593212994064925f92308ae2843482a122e90a6ebc466eb37306eaff24fe489f83ba1a76f40ac4b39dcc941bcdc472e5b6973ee12fb16df6585f85faf440166e8defe31a5a203587078509c1563e814d69402734f50979c62d47af268f39dd5e0c2c3de3e07216ac8d65fffa3f7bea7feb4038112ad2a6609611f33db3da9f1079215e84600abf4747e93b11ce540a1dd79c67b822bb40c9a35906e58713a05db8e1349611ee6d42f77265946deed79075fe109ccb04c1915fcd6035716b9f5fcb60e71351e548138763554a81fd05c2667b9db08c3541a8abebe5ee02910527b7c365234f81c146518bad80e3905a591ab241f13821a363b80d86fe533a62b922a1d856844c39f11a75eed5ec8d3cb8d56b088f706882dc9139e60c70ba01bf3bb6a5cc282fd7399c8902e86fef1a5e8018bd863f650ee84d2f4376d5a868166227773a680685cd20610142ad408edec2b41b4dbd960de52c85973da670ae0900e418ae8b18720a6d51627af392d20202ce1ee288e33020cd7b96602295fc810f6a6e1d813133170d0cc2beb89c5d2d6be5c0fd05682e5eb47200ffbf54dbdba316b2896a1ccb74e6406ecd49009d8fbe479dba4353667f890f7294d2fce5702a45ff6f1b96da36a0508d32c0419799e9db191387cda2c1afb48f3b35102befb5433bad8c325b8a7a9df8f585410c0e7034704a3329b55a758e61165843f2dbd2aca77d28e819d6742c32d370336e8dbb3aecd3750b8bce4256c413325006058bb42035d3dda29e57cf759fc360c80107e87ba7f678ab13a85278bdc13d3f360777fd0f78fac4ea41d4833996a5472aff31458a88035fa3a853fd46161fa1d800e54d5ba25ff59025a7782b622911c0f20b42c4e4f9dbf511484087794c2265cc2d3502fd4da6cdfd51875424958bb3183e5b9ddeff379b6682f7b6fedefadb1d4ef02b1d4aff35d3ce43573e30a2351bca4ba792e3d2e8cc8566fe07165e99abfc3b8e3c5a0fe3e57909a210cd7cd0c052671a31b1f76058a39e411d6f6200bb485f892e4704fabadac65d8f4f2df37c1d0b6e68cd0c0ee38173700935aec4ffb4da8228907caccceb12def53fd478c9e3497271fa8979a3e451b44f0f8339eea25e3ec8bd1f1321a7a1460038126c811964bc7b25865e7a4dad7820d8887fd46d1bcb29b7bf0c9f55d35c5e1b9659e8596935211c6e8ce7c8c2d663f95e69dcc797d9c6c2047a299739d9c352d887330964bdc4252c86da1bb3f8d563e84d87a7d77af4cc23687e1430a076839ab27e89b37467fc35e3ed40d85d0c9cbbedda8f78b39454cc57fc77c595077dadcd9f288cbdb11b301bcb7afbf9d7dc49b3292468c6c004fe403a2f005a80e9286167badeb4616c8acd5f7bd93c481d4e7c4b3e7ff85b74d9047d1b5256dd6a8ccdf68c3564f15c95b96cbbca85b26b1ac10a3ea6658b2431e24f425ebc70a6c55d0c8d6f2de58f1ff5bc4f7ff5dbeaa00eceb95255094c2129ca21272205e6997d1507c5e5fc6b8ebec7a0d2d6563c17d7bfccc6e0fed6aff0ec633332c93cd708b454b74ee4ef12349b006c3ba040f769069fc6821d4af2e2a92aac3319d27719a4b9ab1cd5528056d0fdaa6c39c968543b634f389b76b374464fab7759ad74f035f34fcdf3afdfdbcaf6d1f1edb5b9a22a7b992c7f3cd677b8607a6f0243b7ab2f200a00c6f40864bbf9bdebb4a945bea2ec843f0da6bb65c333966e22e9ad4bce7bf95dc09c0a1f988ab679a6a34ef48e9ccddc02082a882ed6d00dd1c3d056ba96dc5ee793003f8764d24125c8459a1ce6b742bfe0926987b01308b65490269b45e639595e0d0e67b63055d2cf406149380b9b87e572f57ec5e190b348bb705125d3841700bc89dd6862349167f754b56480e42d015639999e0e6215743f93f4bb2b2fbdfad593826fe34c6867f1c6cd9ed6efef619bef1fadef616b84b9b15c4002488c96b496d70adefb42ad1c65bc02f873d9f465b1fe7233ba944c35e97da02fba6e11d53dc1f3c7dc4fe22d596d41be7985b2bc7f219e43201d840fa1fb83a0ca38ddb9ce308b46de5860bd9472b709d0c2cb6e31fbe5d3713e9d2088c8079a48542a3d8571772c7bd20b2724e395f6fe19e4047833c92b2cfd3155cd8e321135c837ec17c8f733ec9a8db1bae6234a60a3b3fb0ca75d09d9ced395d4c2a9a4786dfffc5de473a9ead4f007c95b041ca64e57ae472d7810c14f0b20a82c27fc6cf802b2d271580239adf1c4f6bed11e3f08e00529952fbf4faf1e35ede0fad97240b2cac2f56413b0cd204549c29b20a653efed24d5d12c53f32dc50e443ccccc7f0f57582e9fa3bb4c1b83787aaea51b84bdc08ec7fe2cd4d1ec1a216d81e8f4df58a32d62c15899e6ac23f5b634911e811e12b1a10526910926fae1ae1490a358a7e7477f8dd9f37114ed0641c215be053bc052e8ecce50b0cf8a525e1dc3df3353124f2fa6420d4a96e15bec074035cf17ae73d52cee8619470b6d283363ea9de9bfcf7f05cb18e2b6e37039175e9062aeafa478336646305238d0daf0240164bc18a7066548ce73049238b146d8a21f1955bf917ad1dcc4723bc6454451dd42486736c1e3e1b7648e0fbf44f9f3fe65229ae1b95155d3fd8e587f9d8b2005c2092f8c8e7770e517e4b852d4984d9952d32c4283086cca056d56d09fb8d48a0450fe54db16370f23339f0e464fd844b1e1f4d61e10205704079be4ae5e32cc1c31379de72a22be4cc930cf95fe76060635924cbb61237e1e264018b0e1644f1966a1a52184519f090aedb87085048004f48706f56eff35783ac64956440a9254b9c2975db7d8010dcd35466556819dc3991500c15360d65980805f0c1bc1ae5794557067acf93e6836a068aed6ace99d4a58d16dc235e89ce258df03d9d1976e1c6ce02fcf11bea6edf6ab97d4c0f6dcd2ee148ce9d6775b939d5a405b9f3cdc5caec726cdf6b3e7fba72f5c4c326bc146c09b0ffd10eef8ca4b9df1662fcc26513a53e8ed3df061af393ea2d7fbd3c9cd15d6e998413fb8adb98afc7900ab895f3100c62ce331ca1d26a1e4ac5f12d1b2a82bccfbe7760a43ebcb2642bcd05774b4762e2049de58c90e4ab5cc8d3bac115adccd9679c1dc82b721ca6f60b6c8c10887a0cf11e0ae536002b3d187b83ef68b87764de844ccde1921f53d41738f6c4ca596992a4b50fba340e7fb6f8f5015388a858a9ca9ed17ee92c84e5b60f676c677d219fd47828d7646939d2a42cc7a55f6759e4df25553184e8d4f8a05918491d86f37b5b6fd89f89a912997d6c33e7f45ccfe2fc28e214044c95bb40459ef120dcadef7211e3cff896180915e548ac073e415441ffae358cf52b026d05571163fa0cb15f3a5dc4a84a55ff6926ad5f5b2874f337e52aa80142ed6e9508fd2641c3c2256b4444ae67ad1d52b2fc4df0ec28ba809a7b405d37bf63689a16b48e97a0fbeb34bf41a0320c52a3121f2e2567dc773f4475cb1489bd5e5d25f44dbade9444e7b81b694d59bca0808c399f5138b801d99274df533ffbb886b9c192d5b66adad4d0b885bdc5f71cd82035574326ac5c6f02e42ecd051af1ab77bc087b31fb4b848e9732de774813e5451a698c371e905880b6dc296272807dc43a96e1f778ac72d470d431b98d", 0x1000}, {&(0x7f0000000180)="efa188b87375e7d2de1c3c34eee9bcbec8085c5dd0da50f2d8fb367a5ab5af9879d6effd3612bb540a1ae9bfb95333ee8f2a9fb3820ed53ac46ab5c0795ffa9c41aae5273f1e6a3a2d5febb4e5e86e764aec7b62571a90dda6c495617f8ffcdb6237df6f0f612a9b257e1a526c66111f78c63a63580825be1a35b253fb838a24ae82bd3e96710adac164fa7f486e4e667733d364f6b057465f695ffeb63c1b99c1c5aa28781857e342f602fd204daa38222daf5d9b8635f533474a7189c1aab3d4ec14918528523575f642702923eadd97819fa608b0fa558f75127961e2c56639d2b5480b62e8a256c3a5fa1d3f1f52d22af1064410af6366", 0xf9}, {&(0x7f0000000280)="a08bfb00b4a34f585c5631bea15167510d624f54efb46ce22205199de298504bb4a4e2b1c01c9105b67aa5efc456e563ff3f6bbf00e53e6d1ed6e7337ce27f53f88cf760b53489060c66eefb90f6ef9e95720053", 0x54}], 0x3, &(0x7f0000000640)=[@timestamping={{0x14, 0x1, 0x25, 0xf835}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0xb}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x7fffffff}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @mark={{0x14, 0x1, 0x24, 0xa45}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0xd8}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x4, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) 1m38.394214391s ago: executing program 33 (id=2636): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sendmsg$sock(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001240)="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", 0x1000}, {&(0x7f0000000180)="efa188b87375e7d2de1c3c34eee9bcbec8085c5dd0da50f2d8fb367a5ab5af9879d6effd3612bb540a1ae9bfb95333ee8f2a9fb3820ed53ac46ab5c0795ffa9c41aae5273f1e6a3a2d5febb4e5e86e764aec7b62571a90dda6c495617f8ffcdb6237df6f0f612a9b257e1a526c66111f78c63a63580825be1a35b253fb838a24ae82bd3e96710adac164fa7f486e4e667733d364f6b057465f695ffeb63c1b99c1c5aa28781857e342f602fd204daa38222daf5d9b8635f533474a7189c1aab3d4ec14918528523575f642702923eadd97819fa608b0fa558f75127961e2c56639d2b5480b62e8a256c3a5fa1d3f1f52d22af1064410af6366", 0xf9}, {&(0x7f0000000280)="a08bfb00b4a34f585c5631bea15167510d624f54efb46ce22205199de298504bb4a4e2b1c01c9105b67aa5efc456e563ff3f6bbf00e53e6d1ed6e7337ce27f53f88cf760b53489060c66eefb90f6ef9e95720053", 0x54}], 0x3, &(0x7f0000000640)=[@timestamping={{0x14, 0x1, 0x25, 0xf835}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0xb}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x7fffffff}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @mark={{0x14, 0x1, 0x24, 0xa45}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0xd8}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x4, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) 1.435131877s ago: executing program 0 (id=4801): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x80}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x100042, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x2}, 0x18) connect$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r5, {0xfff1, 0x10}, {0xfff1, 0x9}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) 1.394169061s ago: executing program 0 (id=4803): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000000)="bf", 0x1}], 0x1, &(0x7f0000000680)=ANY=[], 0xc}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000280)='R', 0x1}], 0x1, &(0x7f00000006c0)=ANY=[], 0x10}}], 0x2, 0x4044044) 1.367892082s ago: executing program 3 (id=4806): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r2, 0x11, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x1c}}, 0x4000) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000500)='./file0\x00', &(0x7f0000000580)='gfs2\x00', 0x1042000, &(0x7f00000005c0)='\x00') sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r4, 0x0, 0x4}, 0x18) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x1, 0x1b, 0x400100, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db6713d1fff7ce9c555f189afae3530db6dd493f28fd988721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef495689092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003a3db08e500c2fb07e11aa4035a61c51caf7a65a2b613bda33f3eaeae630100000000000000a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1f7a1e850ecb3421143c5c4ded0f083a0c524dcf320827266819b6a952db5bc96141b26c54db857edbcbbc81c7af7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa02863be90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695ef060000001bbe1b649f42f310859122c0d2c1e558dc6586958a28374f386ecf369274e43003a09b5159ea515eb44521901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc509254a12cece59181fcb5bad8c24bd9f8f78d17ab01831325501e80d899e9252f99d3a2666343392fda115048e4f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f15e94d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd3330000000000000009a3237aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b5b66ab89d2d6333f699b16db68986ab3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9b647ba812f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d14df8aa9df6f40a80ace2bb8a2aad3b0c66915927db4173181943d88c0c76d5969e2043db5bd77fd60ba0f012139929ccfec965c1f769785a4d23332d71f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fdc1bc31152538db50f47dc38ba908a0d808687e478a609fe0daa0000000000000000e7f2e98597e27f3e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d4794ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e8fd4e71929f918b98c4cbfcb11a90139264a9ee807c973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d174d2465380b1a00ddc42915e4f3a5db640600000095a3d63904c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e04c93a5470774975b42091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00000000ddffffff00"}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='illinois', 0xed5baa385a4620ba) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000d80)='\x00', 0x89901) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8004}]}) close_range(r8, 0xffffffffffffffff, 0x0) move_mount(r7, 0x0, 0xffffffffffffff9c, 0x0, 0x276) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffe0}, {0xf}, {0xe, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x4, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4040c00) sendmmsg$inet6(r0, &(0x7f0000003d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="ce31", 0x2}], 0x1}}], 0x1, 0x20040001) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000010c0)=0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) r11 = fsopen(&(0x7f00000001c0)='bfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) r12 = fsmount(r11, 0x0, 0x8) fchdir(r12) 1.358427843s ago: executing program 1 (id=4807): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000004d632000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000090000000000000001000000ffffffff0200000000000000030000000000000043050000000000000400004000000000ffffffffffffff7f0000000000000000010000000000", @ANYRES32=r3], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 1.357639113s ago: executing program 0 (id=4808): getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), 0x0}, 0x20) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) (async) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360, 0x300}, 0x8, 0x6, 0x7d, 0x0, 0x3, 0x101, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) timer_delete(0x0) r4 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000380)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl0\x00', 0x0}) connect$packet(r4, &(0x7f0000000580)={0x11, 0x1a, 0x0, 0x1, 0xf9, 0x6, @random="ce4a5f564cff"}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) socket$netlink(0x10, 0x3, 0x10) (async) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x200000, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40840d4}, 0x0) socket$kcm(0x1e, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nouid32}]}, 0x1, 0x441, &(0x7f00000011c0)="$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") (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nouid32}]}, 0x1, 0x441, &(0x7f00000011c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), 0x0, 0xfe37, 0x0) (async) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), 0x0, 0xfe37, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') (async) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) unshare(0x2c020400) (async) unshare(0x2c020400) msgget$private(0x0, 0x0) (async) msgget$private(0x0, 0x0) 1.338560574s ago: executing program 1 (id=4809): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x13, 0x0, &(0x7f0000000440)="b9ff033168440372b89e14f00800a25e4113c1", 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) fcntl$notify(r0, 0x402, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x80, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32, @ANYBLOB="870000000000e1ffffffffffffff000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r2, 0x0, &(0x7f0000001780)=""/4096}, 0x20) (fail_nth: 3) 1.283689429s ago: executing program 1 (id=4810): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)}, {&(0x7f0000001600)="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"/1458, 0x5b2}], 0x2, 0x0, 0x0, 0x2c}, 0x40440c4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv(r7, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) ioctl$RTC_WIE_ON(r7, 0x700f) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=@newtfilter={0x94, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r10, {0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x68, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x5}, {0x2c, 0x5, [{0xfffd, 0xa, 0x4, 0x2}, {0x101, 0x2, 0x3, 0x5}, {0x9, 0x4, 0x52, 0x8}, {0x8, 0x1, 0x14, 0x8}, {0x3aff, 0xff, 0x3f, 0x1}]}}, @TCA_BPF_FD={0x8}, @TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x14, 0x5, [{0xff, 0x3, 0x0, 0x2}, {0xffff, 0x3, 0x10, 0x6}]}}]}}]}, 0x94}}, 0x24040084) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 1.27724299s ago: executing program 3 (id=4811): sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x4c, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_TX_POWER={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x59b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x24005000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.214717044s ago: executing program 1 (id=4813): r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r1 = dup(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000280), 0xfd, r2}, 0x38) write$binfmt_elf64(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4606ff78a3050000000000000002003e00cd000000c9030000000000004000000000000000ea02000000000000020001000500380001000600b1060004030000000b000d00ff0000000000000009000000000000000700000000000000"], 0x178) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1.213210144s ago: executing program 6 (id=4814): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x80}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x100042, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x2}, 0x18) connect$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r5, {0xfff1, 0x10}, {0xfff1, 0x9}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) 1.184380857s ago: executing program 3 (id=4816): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000001080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1.154367729s ago: executing program 1 (id=4817): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0x6}, 0x9092, 0x13acaf0e, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) lseek(r2, 0xdfffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), r3) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x8b, 0x0, 0x8, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x5}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0x6, 0xffffffffffffffff, 0x2) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r6, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) read(r9, &(0x7f0000000200)=""/209, 0xd1) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x200, 0x21db}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000d40)={0x0, 0x300, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843e40108804400208024000100000000000100000000000000fdffff01000000000000000000000000000000001400040003000000ac1414bb00000000000000000600050000000000000100802400020073e591ec06154031d3954ac0e16752e72640f08b5281a8461d17d26d12f2bbb6060005000021000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39228c00098028000080060001000a0000001400020020010000000000000000000002000001050003000000000088000080060001000a000000140002002001000000f800000000000000000002050003000000001003800080060001008c0e000008000200ac1414aa05000300000000001c000080060001000200000008000200ac1414bb0500030000000000200004000e00000000000000fe800000000000000000000000000000000000009c0000802400020073961633df6dc9cb418b15afd0bae7b90f1e6cfed8bb423cf9285c474163154908000a00010000002400010000000000000000000000000000000000000000000000000000000000000000004800098028000080060001000a00000014000200fe8000000000000000000000000000bb05000300000000001c000080060001000200000008000200000000000500030000000000080005000100000008000100", @ANYRES32=r10], 0x22c}}, 0x0) 1.14370445s ago: executing program 6 (id=4818): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r1 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x0, 0xffffffff}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x133d, 0x0, 0x8, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) 1.130061131s ago: executing program 3 (id=4819): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) fallocate(r0, 0x0, 0xbf5, 0x2000402) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffe000001}) (fail_nth: 7) 1.064578916s ago: executing program 6 (id=4820): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000004d632000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000090000000000000001000000ffffffff0200000000000000030000000000000043050000000000000400004000000000ffffffffffffff7f0000000000000000010000000000", @ANYRES32=r3], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 1.046901378s ago: executing program 6 (id=4821): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_read_part_table(0x1058, &(0x7f0000001080)="$eJzsz7GpAkEUBdA7O58vG9mCTViIghVYhKkGNmMXJlZgNyIrs+JiBWpwTvDgvnlcmPBVf8n5P8mqtlTu47KMs2bRvcVLTdeW5Rmzb2MY+sPUVafjsrv2x1abPrPX83Cr7WabZN7yetltTh/6JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8tEcAAAD//6rFDAs=") r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) inotify_init() connect$pppoe(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="090000000000000700000000000000080000000000000100007f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="09000000040000000800000010"], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000030000000000000000181200", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000a2e700f73b1a1ec854c3"], 0x0, 0x7}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000140016"], 0x4c}}, 0x48000) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) capset(&(0x7f00000001c0)={0x19980330}, &(0x7f0000000200)={0x1, 0x7, 0x4, 0x1, 0xce5, 0xbc7}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) prlimit64(0x0, 0x8, &(0x7f00000001c0), 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) connect$pppoe(r2, &(0x7f0000000340)={0x18, 0x0, {0x88, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, 'bond0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x0, @empty, 'netpci0\x00'}}, 0x1e) 922.308587ms ago: executing program 3 (id=4823): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0x6}, 0x9092, 0x13acaf0e, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) lseek(r1, 0xdfffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), r2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x8b, 0x0, 0x8, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x5}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0x6, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) read(0xffffffffffffffff, &(0x7f0000000200)=""/209, 0xd1) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x200, 0x21db}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d40)={0x0, 0x300, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r5], 0x22c}}, 0x0) 698.512985ms ago: executing program 0 (id=4824): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)}, {&(0x7f0000001600)="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"/1458, 0x5b2}], 0x2, 0x0, 0x0, 0x2c}, 0x40440c4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv(r7, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) ioctl$RTC_WIE_ON(r7, 0x700f) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=@newtfilter={0x94, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r10, {0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x68, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x5}, {0x2c, 0x5, [{0xfffd, 0xa, 0x4, 0x2}, {0x101, 0x2, 0x3, 0x5}, {0x9, 0x4, 0x52, 0x8}, {0x8, 0x1, 0x14, 0x8}, {0x3aff, 0xff, 0x3f, 0x1}]}}, @TCA_BPF_FD={0x8}, @TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x14, 0x5, [{0xff, 0x3, 0x0, 0x2}, {0xffff, 0x3, 0x10, 0x6}]}}]}}]}, 0x94}}, 0x24040084) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 604.511742ms ago: executing program 3 (id=4825): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r1 = syz_io_uring_setup(0x497, &(0x7f0000000300)={0x0, 0x77bc, 0x80, 0x3, 0x285}, &(0x7f00000001c0)=0x0, &(0x7f00000003c0)=0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xbee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000600000000000000000000008500000041000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r10, 0x0, 0xe, 0x0, &(0x7f00000008c0)="fae56ac553d73f32b2064169e850", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r7, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) r11 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x0, 0xffffffff}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r11, 0x133d, 0x0, 0x8, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}) io_uring_enter(r1, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) 551.215017ms ago: executing program 0 (id=4827): sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x4c, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_TX_POWER={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x59b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x24005000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 484.239272ms ago: executing program 5 (id=4828): r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r1 = dup(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000280), 0xfd, r2}, 0x38) write$binfmt_elf64(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4606ff78a3050000000000000002003e00cd000000c9030000000000004000000000000000ea02000000000000020001000500380001000600b1060004030000000b000d00ff000000000000000900000000000000070000000000000009"], 0x178) execveat(r1, 0x0, 0x0, 0x0, 0x1000) 483.355902ms ago: executing program 6 (id=4829): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x80}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x100042, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x2}, 0x18) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, 0x0, {0xfff1, 0x10}, {0xfff1, 0x9}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) 482.305782ms ago: executing program 0 (id=4830): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES32=0x0, @ANYRES16=r0, @ANYRES16=r0, @ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000400)='kvm_halt_poll_ns\x00', r1, 0x0, 0xd20}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000200)=0x1000000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000000c0)=0x10089, 0x4) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x81) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x3, &(0x7f0000006680)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) 420.129997ms ago: executing program 5 (id=4831): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000000)="bf", 0x1}], 0x1, &(0x7f0000000680)=ANY=[], 0xc}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000280)='R', 0x1}], 0x1, &(0x7f00000006c0)=ANY=[], 0x10}}], 0x2, 0x4044044) 396.977989ms ago: executing program 6 (id=4832): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES32=0x0, @ANYRES16=r0, @ANYRES16=r0, @ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000400)='kvm_halt_poll_ns\x00', r1, 0x0, 0xd20}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000200)=0x1000000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000000c0)=0x10089, 0x4) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x81) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x3, &(0x7f0000006680)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) 293.768267ms ago: executing program 5 (id=4833): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r1, 0x0, 0xffff}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0xfffff9, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000d00000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) 207.805553ms ago: executing program 5 (id=4834): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0x6}, 0x9092, 0x13acaf0e, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) lseek(r1, 0xdfffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), r2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x8b, 0x0, 0x8, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x5}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0x6, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) read(0xffffffffffffffff, &(0x7f0000000200)=""/209, 0xd1) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x200, 0x21db}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d40)={0x0, 0x300, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r5], 0x22c}}, 0x0) 182.645306ms ago: executing program 1 (id=4835): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x3a, 0xd4, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, r5, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x800000000006}, 0x18) socket$netlink(0x10, 0x3, 0x10) 70.037544ms ago: executing program 5 (id=4836): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="6800a1ff10000104fafffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r3, @ANYBLOB='\t\x00\n\x00', @ANYRES32=r3], 0x68}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) 0s ago: executing program 5 (id=4837): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000240)="b9ff033168440372b89e14f00800a25e4113fdbea725e905d6b73f9b14a90b3b32f7", 0x0, 0x5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket(0x40000000015, 0x5, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80000000007, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x77359400}}, 0x0) kernel console output (not intermixed with test programs): hich could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.564527][T17641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.577743][T17641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.584726][T17641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.610657][T17641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.709389][ T5548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.717580][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.726587][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.921648][T13062] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 285.947944][T17641] hsr_slave_0: entered promiscuous mode [ 285.982949][T17641] hsr_slave_1: entered promiscuous mode [ 286.015532][T17815] tmpfs: Unsupported parameter 'huge' [ 286.148305][T17834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.159353][T17834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.167208][ T29] audit: type=1400 audit(287.141:13780): avc: denied { bind } for pid=17831 comm="syz.0.3126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 286.186241][ T29] audit: type=1400 audit(287.141:13781): avc: denied { node_bind } for pid=17831 comm="syz.0.3126" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 286.358730][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.390981][T17641] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 286.412344][T17641] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 286.437916][T17641] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 286.470431][T17641] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 286.590257][T17641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.653627][T17641] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.690349][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.697422][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.797349][T17900] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3134'. [ 286.849293][T17901] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3134'. [ 287.186703][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.193858][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.294463][ T29] audit: type=1400 audit(288.281:13782): avc: denied { getopt } for pid=17915 comm="syz.0.3138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 287.513694][T17641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.709270][T17641] veth0_vlan: entered promiscuous mode [ 287.726334][T17641] veth1_vlan: entered promiscuous mode [ 287.745874][T17641] veth0_macvtap: entered promiscuous mode [ 287.753529][T17641] veth1_macvtap: entered promiscuous mode [ 287.765197][T17641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.774086][T17641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.793755][T17962] loop5: detected capacity change from 0 to 1024 [ 287.822215][ T7752] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.842156][ T7752] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.873772][ T7752] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.882913][ T7752] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.893306][T17962] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.957640][T17962] EXT4-fs warning (device loop5): ext4_rmdir:3185: inode #11: comm syz.5.3149: empty directory 'file1' has too many links (111) [ 288.055372][T13062] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.106158][T17987] loop6: detected capacity change from 0 to 512 [ 288.416349][T18003] syzkaller0: entered promiscuous mode [ 288.421878][T18003] syzkaller0: entered allmulticast mode [ 288.638603][ T29] audit: type=1400 audit(289.501:13783): avc: denied { shutdown } for pid=18000 comm="syz.0.3163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 288.806732][ T29] audit: type=1400 audit(289.781:13784): avc: denied { create } for pid=18005 comm="syz.1.3164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 288.907333][T18013] loop5: detected capacity change from 0 to 4096 [ 288.920975][T18013] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.934759][ T29] audit: type=1400 audit(289.921:13785): avc: denied { append } for pid=18012 comm="syz.5.3168" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 288.963561][T13062] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.016505][T18024] syzkaller0: entered promiscuous mode [ 289.022029][T18024] syzkaller0: entered allmulticast mode [ 289.068516][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.076998][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.281355][T18055] syzkaller0: entered promiscuous mode [ 289.286881][T18055] syzkaller0: entered allmulticast mode [ 290.200324][T18116] netlink: 'syz.6.3211': attribute type 1 has an invalid length. [ 290.208103][T18116] netlink: 'syz.6.3211': attribute type 2 has an invalid length. [ 290.246259][T18120] loop6: detected capacity change from 0 to 1764 [ 290.278241][T18123] loop6: detected capacity change from 0 to 1024 [ 290.312161][T18123] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 290.337074][T15991] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 290.408252][T18129] 9pnet: p9_errstr2errno: server reported unknown error ÿÿ [ 290.439093][T18144] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3223'. [ 290.582565][ T29] audit: type=1400 audit(291.571:13786): avc: denied { read } for pid=18158 comm="syz.1.3229" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 290.615146][T18161] geneve3: entered promiscuous mode [ 290.759277][T18173] loop6: detected capacity change from 0 to 1764 [ 290.770621][ T52] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.821687][ T52] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.879854][ T52] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.999729][ T52] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.022162][T18210] tipc: Started in network mode [ 291.026649][T18214] loop3: detected capacity change from 0 to 128 [ 291.027094][T18210] tipc: Node identity 84e, cluster identity 4711 [ 291.039804][T18210] tipc: Node number set to 2126 [ 291.053558][T18214] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 291.077434][T18170] chnl_net:caif_netlink_parms(): no params data found [ 291.113689][ T29] audit: type=1400 audit(292.101:13787): avc: denied { read } for pid=18213 comm="syz.3.3250" path="/11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 291.114063][T18222] loop6: detected capacity change from 0 to 512 [ 291.169396][ T29] audit: type=1400 audit(292.151:13788): avc: denied { setattr } for pid=18213 comm="syz.3.3250" path="/11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 291.178018][T18222] EXT4-fs: Ignoring removed mblk_io_submit option [ 291.213893][ T29] audit: type=1400 audit(292.201:13789): avc: denied { ioctl } for pid=18213 comm="syz.3.3250" path="/11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop3" ino=12 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 291.219725][T18222] EXT4-fs: inline encryption not supported [ 291.282255][T17641] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 291.285916][T18222] EXT4-fs: test_dummy_encryption option not supported [ 291.346898][T18170] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.354198][T18170] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.380160][ T29] audit: type=1400 audit(292.371:13790): avc: denied { bind } for pid=18240 comm="syz.6.3259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 291.388006][T18170] bridge_slave_0: entered allmulticast mode [ 291.406880][T18170] bridge_slave_0: entered promiscuous mode [ 291.419608][T18170] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.426661][T18170] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.434027][T18170] bridge_slave_1: entered allmulticast mode [ 291.444382][T18170] bridge_slave_1: entered promiscuous mode [ 291.471030][ T29] audit: type=1400 audit(292.391:13791): avc: denied { setopt } for pid=18240 comm="syz.6.3259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 291.501987][T18170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.515445][ T52] bridge_slave_1: left allmulticast mode [ 291.521199][ T52] bridge_slave_1: left promiscuous mode [ 291.526960][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.537701][ T52] bridge_slave_0: left allmulticast mode [ 291.543371][ T52] bridge_slave_0: left promiscuous mode [ 291.549165][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.592071][T18259] loop5: detected capacity change from 0 to 2048 [ 291.641867][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.651364][T12527] Alternate GPT is invalid, using primary GPT. [ 291.657718][T12527] loop5: p1 p2 p3 [ 291.661483][T12527] loop5: partition table partially beyond EOD, truncated [ 291.669582][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.680685][ T52] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 291.680883][T18259] Alternate GPT is invalid, using primary GPT. [ 291.694987][T18259] loop5: p1 p2 p3 [ 291.698719][T18259] loop5: partition table partially beyond EOD, truncated [ 291.707493][ T52] bond0 (unregistering): Released all slaves [ 291.723133][ T52] bond1 (unregistering): Released all slaves [ 291.746539][ T52] bond2 (unregistering): Released all slaves [ 291.752673][T18272] loop5: detected capacity change from 0 to 256 [ 291.757648][ T52] bond3 (unregistering): Released all slaves [ 291.770191][ T52] bond4 (unregistering): Released all slaves [ 291.773567][T18272] FAT-fs (loop5): IO charset euc-jp not found [ 291.779081][ T52] bond5 (unregistering): Released all slaves [ 291.788854][ T4476] udevd[4476]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 291.799901][T12231] udevd[12231]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 291.811228][T12527] udevd[12527]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 291.826025][T18170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.829665][T12527] udevd[12527]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 291.836825][ T4476] udevd[4476]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 291.855967][T12231] udevd[12231]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 291.885027][ T52] tipc: Disabling bearer [ 291.890111][ T52] tipc: Left network mode [ 291.896142][T12231] udevd[12231]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 291.906801][ T4240] udevd[4240]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 291.907404][T12527] udevd[12527]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 292.003196][ T52] veth1_vlan: left promiscuous mode [ 292.013312][ T52] veth0_vlan: left promiscuous mode [ 292.089962][ T52] team0 (unregistering): Port device team_slave_1 removed [ 292.099359][ T52] team0 (unregistering): Port device team_slave_0 removed [ 292.126064][T18285] syzkaller0: entered promiscuous mode [ 292.131650][T18285] syzkaller0: entered allmulticast mode [ 292.139364][T18170] team0: Port device team_slave_0 added [ 292.154792][T18170] team0: Port device team_slave_1 added [ 292.179746][T18310] syzkaller0: entered promiscuous mode [ 292.185205][T18310] syzkaller0: entered allmulticast mode [ 292.198902][T18170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.205834][T18170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.231792][T18170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.243828][T18170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.250823][T18170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.276733][T18170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.356801][T18170] hsr_slave_0: entered promiscuous mode [ 292.375516][T18170] hsr_slave_1: entered promiscuous mode [ 292.388791][T18170] debugfs: 'hsr0' already exists in 'hsr' [ 292.394537][T18170] Cannot create hsr debugfs directory [ 292.404793][T18337] syzkaller0: entered promiscuous mode [ 292.410438][T18337] syzkaller0: entered allmulticast mode [ 292.474959][ T52] IPVS: stop unused estimator thread 0... [ 292.503953][T18353] syzkaller0: entered promiscuous mode [ 292.509530][T18353] syzkaller0: entered allmulticast mode [ 292.755575][ T29] audit: type=1400 audit(293.741:13792): avc: denied { mount } for pid=18383 comm="syz.5.3301" name="/" dev="ramfs" ino=45898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 292.799432][ T29] audit: type=1400 audit(293.771:13793): avc: denied { execute } for pid=18383 comm="syz.5.3301" path="/file1" dev="ramfs" ino=45899 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 292.911259][T18387] loop6: detected capacity change from 0 to 512 [ 293.171035][T18397] loop6: detected capacity change from 0 to 256 [ 293.245136][T18397] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 293.257532][T18395] syzkaller0: entered promiscuous mode [ 293.263119][T18395] syzkaller0: entered allmulticast mode [ 293.302378][T18170] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 293.310316][T18397] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 293.323075][T18170] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 293.332177][T18170] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 293.342909][T18170] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 293.391600][T18170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.404156][T18170] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.413896][ T9744] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.420972][ T9744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.473109][T18170] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 293.483475][T18170] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 293.540193][ T9744] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.547827][ T9744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.005870][T18464] syzkaller0: entered promiscuous mode [ 294.011492][T18464] syzkaller0: entered allmulticast mode [ 294.118704][T18170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.170103][T18475] loop6: detected capacity change from 0 to 256 [ 294.200604][T18170] veth0_vlan: entered promiscuous mode [ 294.220650][T18170] veth1_vlan: entered promiscuous mode [ 294.230131][T18475] FAT-fs (loop6): codepage cp850 not found [ 294.253359][T18170] veth0_macvtap: entered promiscuous mode [ 294.301794][T18493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.318910][T18493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.332831][T18170] veth1_macvtap: entered promiscuous mode [ 294.343236][T18170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.352457][T18170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.371612][ T331] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.386193][ T331] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.396505][ T331] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.405713][ T331] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.522066][T18502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3320'. [ 294.530969][T18502] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3320'. [ 294.805793][T18516] syzkaller0: entered promiscuous mode [ 294.811356][T18516] syzkaller0: entered allmulticast mode [ 294.856193][T18519] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 294.864190][T18519] System zones: 1-12 [ 294.868743][T18519] EXT4-fs error (device loop6): dx_probe:791: inode #2: comm syz.6.3326: Directory hole found for htree index block 0 [ 294.881397][T18519] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -117 [ 294.889728][T18519] EXT4-fs error (device loop6): dx_probe:791: inode #2: comm syz.6.3326: Directory hole found for htree index block 0 [ 294.902333][T18519] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 294.914589][T18519] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.931880][T18519] EXT4-fs (loop6): shut down requested (1) [ 294.998990][T15991] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.303324][T18534] set_capacity_and_notify: 2 callbacks suppressed [ 295.303339][T18534] loop6: detected capacity change from 0 to 1024 [ 295.320836][T18534] EXT4-fs: Ignoring removed orlov option [ 295.326564][T18534] EXT4-fs: Ignoring removed nomblk_io_submit option [ 295.333319][T18534] EXT4-fs: Ignoring removed nomblk_io_submit option [ 295.356431][T18534] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.372514][T18542] 9p: Bad value for 'rfdno' [ 295.406815][T18546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.420784][T18546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.461015][T18552] syzkaller1: entered promiscuous mode [ 295.466535][T18552] syzkaller1: entered allmulticast mode [ 295.516583][T15991] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.643299][T18571] 9p: Bad value for 'rfdno' [ 295.667231][T18573] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18573 comm=syz.5.3348 [ 295.773744][ T29] audit: type=1400 audit(296.761:13794): avc: denied { getopt } for pid=18593 comm="syz.1.3356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 295.814965][ T29] audit: type=1400 audit(296.761:13795): avc: denied { append } for pid=18596 comm="syz.5.3358" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 295.861288][T18605] 9p: Bad value for 'rfdno' [ 295.923857][T18617] loop5: detected capacity change from 0 to 256 [ 295.939880][T18617] FAT-fs (loop5): codepage cp874 not found [ 295.988076][T18617] loop5: detected capacity change from 0 to 512 [ 296.006290][T18631] loop3: detected capacity change from 0 to 512 [ 296.020024][T18617] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.052831][T18617] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 296.097705][T18643] syzkaller0: entered promiscuous mode [ 296.103340][T18643] syzkaller0: entered allmulticast mode [ 296.133385][T13062] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.295068][T18664] loop6: detected capacity change from 0 to 512 [ 296.309350][T18658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.380225][T18658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.542248][T18675] loop6: detected capacity change from 0 to 512 [ 296.586430][T18679] loop5: detected capacity change from 0 to 128 [ 296.601922][T18675] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 296.618940][T18675] EXT4-fs (loop6): 1 truncate cleaned up [ 296.630954][T18675] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.644679][T18679] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 296.661378][ T29] audit: type=1400 audit(297.651:13796): avc: denied { append } for pid=18674 comm="syz.6.3389" path="/157/file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 296.726885][T13062] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 296.739851][T15991] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.760958][T18690] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3395'. [ 296.769914][T18690] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3395'. [ 296.781856][T18690] geneve2: entered promiscuous mode [ 296.787082][T18690] geneve2: entered allmulticast mode [ 296.814047][T18696] 9p: Bad value for 'wfdno' [ 296.840256][T18700] syzkaller0: entered promiscuous mode [ 296.845752][T18700] syzkaller0: entered allmulticast mode [ 296.880093][T18706] loop6: detected capacity change from 0 to 1024 [ 296.906894][T18706] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 296.924203][T18706] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: comm syz.6.3402: lblock 0 mapped to illegal pblock 0 (length 1) [ 296.937839][T18706] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 296.950138][T18706] EXT4-fs (loop6): This should not happen!! Data will be lost [ 296.950138][T18706] [ 296.969903][T15991] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 296.997180][T18717] loop6: detected capacity change from 0 to 128 [ 297.006208][ T29] audit: type=1400 audit(297.991:13797): avc: denied { ioctl } for pid=18718 comm="syz.1.3407" path="socket:[47370]" dev="sockfs" ino=47370 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 297.053086][T18725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3410'. [ 297.062005][T18725] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3410'. [ 297.104971][T18731] loop6: detected capacity change from 0 to 128 [ 297.175786][T18742] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3418'. [ 297.185197][T18744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.195836][T18744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.196772][T18746] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3420'. [ 297.213322][T18746] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3420'. [ 297.241843][T18750] EXT4-fs: Ignoring removed mblk_io_submit option [ 297.248515][T18750] EXT4-fs: Ignoring removed oldalloc option [ 297.254745][T18750] EXT4-fs: Ignoring removed nomblk_io_submit option [ 297.269943][T18750] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.306193][T17641] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.321042][ T29] audit: type=1400 audit(298.311:13798): avc: denied { execute } for pid=18759 comm="syz.6.3427" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=48487 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 297.409858][T18766] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 297.423915][T18766] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: comm syz.3.3429: lblock 0 mapped to illegal pblock 0 (length 1) [ 297.437596][T18766] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 297.449905][T18766] EXT4-fs (loop3): This should not happen!! Data will be lost [ 297.449905][T18766] [ 297.470059][T17641] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 297.670895][T18780] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3433'. [ 298.329999][T18805] syzkaller1: entered promiscuous mode [ 298.335505][T18805] syzkaller1: entered allmulticast mode [ 298.376692][T18809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.387697][T18809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.427516][T18815] tipc: Started in network mode [ 298.432429][T18815] tipc: Node identity 84e, cluster identity 4711 [ 298.438798][T18815] tipc: Node number set to 2126 [ 298.494539][T18826] syzkaller0: entered promiscuous mode [ 298.500066][T18826] syzkaller0: entered allmulticast mode [ 298.600724][T18839] tipc: Started in network mode [ 298.605714][T18839] tipc: Node identity 84e, cluster identity 4711 [ 298.612133][T18839] tipc: Node number set to 2126 [ 298.717947][T18864] netlink: 'syz.3.3473': attribute type 1 has an invalid length. [ 298.810279][T18878] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3480'. [ 298.825329][T18878] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 298.993227][T18895] syzkaller1: entered promiscuous mode [ 298.998799][T18895] syzkaller1: entered allmulticast mode [ 299.871126][ T29] audit: type=1400 audit(300.831:13799): avc: denied { write } for pid=18924 comm="syz.3.3500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 300.553986][T18983] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18983 comm=syz.5.3516 [ 300.757961][T19004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3521'. [ 301.054687][T19013] bridge1: entered promiscuous mode [ 301.059980][T19013] bridge1: entered allmulticast mode [ 301.106457][T19015] set_capacity_and_notify: 5 callbacks suppressed [ 301.106485][T19015] loop3: detected capacity change from 0 to 1024 [ 301.119945][T19013] team0: Port device bridge1 added [ 301.140225][T19016] bridge0: port 3(team0) entered blocking state [ 301.146497][T19016] bridge0: port 3(team0) entered disabled state [ 301.178862][T19015] EXT4-fs: Ignoring removed mblk_io_submit option [ 301.185326][T19015] EXT4-fs: Ignoring removed oldalloc option [ 301.191420][T19016] team0: entered allmulticast mode [ 301.196534][T19016] team_slave_0: entered allmulticast mode [ 301.202298][T19016] team_slave_1: entered allmulticast mode [ 301.209226][T19016] team0: entered promiscuous mode [ 301.214249][T19016] team_slave_0: entered promiscuous mode [ 301.220027][T19016] team_slave_1: entered promiscuous mode [ 301.226065][T19015] EXT4-fs: Ignoring removed nomblk_io_submit option [ 301.233008][T19016] bridge0: port 3(team0) entered blocking state [ 301.239334][T19016] bridge0: port 3(team0) entered forwarding state [ 301.251120][T19015] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.278803][T17641] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.289267][ T29] audit: type=1400 audit(302.281:13800): avc: denied { bind } for pid=19020 comm="syz.1.3527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 301.326766][ T29] audit: type=1400 audit(302.301:13801): avc: denied { read } for pid=19020 comm="syz.1.3527" path="socket:[47748]" dev="sockfs" ino=47748 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 301.990335][T19044] syzkaller0: entered promiscuous mode [ 301.995840][T19044] syzkaller0: entered allmulticast mode [ 302.305368][T19057] loop5: detected capacity change from 0 to 128 [ 302.334700][T19057] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 302.399953][T13062] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 302.416771][T19062] syzkaller0: entered promiscuous mode [ 302.422345][T19062] syzkaller0: entered allmulticast mode [ 302.534514][T19072] loop5: detected capacity change from 0 to 128 [ 302.549639][T19074] __nla_validate_parse: 1 callbacks suppressed [ 302.549653][T19074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3548'. [ 302.564766][T19074] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3548'. [ 302.590959][T19076] netlink: 324 bytes leftover after parsing attributes in process `syz.0.3549'. [ 302.858559][ T29] audit: type=1400 audit(303.731:13802): avc: denied { read write } for pid=19092 comm="syz.0.3557" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 302.881683][ T29] audit: type=1400 audit(303.731:13803): avc: denied { open } for pid=19092 comm="syz.0.3557" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 302.956543][T19107] loop3: detected capacity change from 0 to 128 [ 303.048178][T19112] syzkaller0: entered promiscuous mode [ 303.053774][T19112] syzkaller0: entered allmulticast mode [ 303.164178][T19131] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19131 comm=syz.1.3574 [ 303.218942][T19136] loop5: detected capacity change from 0 to 512 [ 303.247976][T19139] netlink: 4148 bytes leftover after parsing attributes in process `syz.5.3577'. [ 303.557620][T19150] syzkaller0: entered promiscuous mode [ 303.563216][T19150] syzkaller0: entered allmulticast mode [ 303.693089][T19158] loop6: detected capacity change from 0 to 2048 [ 303.728870][T19158] loop6: p1 p3 p4 [ 303.736418][T19164] loop5: detected capacity change from 0 to 512 [ 303.743832][T19164] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 303.754036][T19158] loop6: p4 size 589824 extends beyond EOD, truncated [ 303.767322][T19164] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3588: bg 0: block 384: padding at end of block bitmap is not set [ 303.782700][T19164] EXT4-fs (loop5): Remounting filesystem read-only [ 303.789419][T19164] EXT4-fs (loop5): 1 truncate cleaned up [ 303.795616][T19164] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.809969][ T4476] udevd[4476]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 303.820422][T12527] udevd[12527]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 303.820638][T12231] udevd[12231]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 303.849235][T13062] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.975031][ T29] audit: type=1400 audit(304.961:13804): avc: denied { create } for pid=19190 comm="syz.0.3599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 304.034540][ T29] audit: type=1400 audit(304.961:13805): avc: denied { write } for pid=19190 comm="syz.0.3599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 304.092173][T19191] infiniband syz1: set active [ 304.096887][T19191] infiniband syz1: added syz_tun [ 304.130999][T19191] RDS/IB: syz1: added [ 304.138732][T19191] smc: adding ib device syz1 with port count 1 [ 304.171102][T19191] smc: ib device syz1 port 1 has no pnetid [ 304.366345][T19218] IPVS: set_ctl: invalid protocol: 28535 100.105.114.0:0 [ 304.468914][T19230] syzkaller1: entered promiscuous mode [ 304.474415][T19230] syzkaller1: entered allmulticast mode [ 304.872998][T19248] syzkaller0: entered promiscuous mode [ 304.878562][T19248] syzkaller0: entered allmulticast mode [ 305.034019][T19260] syzkaller1: entered promiscuous mode [ 305.039641][T19260] syzkaller1: entered allmulticast mode [ 305.102186][T19270] loop5: detected capacity change from 0 to 128 [ 305.177870][T19279] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 305.234927][ T29] audit: type=1400 audit(306.221:13806): avc: denied { bind } for pid=19284 comm="syz.3.3642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 305.353503][T19290] syzkaller0: entered promiscuous mode [ 305.359090][T19290] syzkaller0: entered allmulticast mode [ 305.390091][ T29] audit: type=1400 audit(306.381:13807): avc: denied { map } for pid=19300 comm="syz.1.3649" path="socket:[49574]" dev="sockfs" ino=49574 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 305.419938][T19297] syzkaller0: entered promiscuous mode [ 305.425479][T19297] syzkaller0: entered allmulticast mode [ 305.432398][T19299] syzkaller1: entered promiscuous mode [ 305.437911][T19299] syzkaller1: entered allmulticast mode [ 305.481790][ T29] audit: type=1400 audit(306.471:13808): avc: denied { lock } for pid=19303 comm="syz.3.3650" path="socket:[49578]" dev="sockfs" ino=49578 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 305.633572][T19321] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19321 comm=syz.0.3658 [ 305.709147][T19332] syzkaller0: entered promiscuous mode [ 305.714650][T19332] syzkaller0: entered allmulticast mode [ 305.833923][T19350] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19350 comm=syz.1.3672 [ 305.978975][T19379] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19379 comm=syz.5.3686 [ 306.025390][ T29] audit: type=1400 audit(307.011:13809): avc: denied { listen } for pid=19388 comm="syz.1.3691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 306.071395][T19396] loop3: detected capacity change from 0 to 128 [ 306.168167][T19414] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19414 comm=syz.6.3703 [ 306.353541][T19440] syzkaller1: entered promiscuous mode [ 306.359204][T19440] syzkaller1: entered allmulticast mode [ 306.394616][ T29] audit: type=1400 audit(307.381:13810): avc: denied { write } for pid=19450 comm="syz.0.3721" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 306.469846][T19460] syzkaller0: entered promiscuous mode [ 306.475333][T19460] syzkaller0: entered allmulticast mode [ 306.557272][ T29] audit: type=1400 audit(307.541:13811): avc: denied { mounton } for pid=19479 comm="syz.5.3731" path="/proc/833" dev="proc" ino=49890 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 306.755762][T19524] loop5: detected capacity change from 0 to 1024 [ 306.780383][T19524] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 306.790171][T19524] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 306.811718][T19524] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 306.822042][T19524] EXT4-fs error (device loop5): ext4_get_journal_inode:5849: inode #32: comm syz.5.3751: iget: special inode unallocated [ 306.835909][T19524] EXT4-fs (loop5): no journal found [ 306.841147][T19524] EXT4-fs (loop5): can't get journal size [ 306.847674][T19524] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 306.898801][T13062] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.908943][ T29] audit: type=1400 audit(307.901:13812): avc: denied { bind } for pid=19551 comm="syz.6.3764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 307.030790][ T29] audit: type=1400 audit(308.021:13813): avc: denied { mounton } for pid=19577 comm="syz.0.3773" path="/82/file0" dev="tmpfs" ino=447 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 307.082231][ T29] audit: type=1326 audit(308.071:13814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19585 comm="syz.6.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50704af749 code=0x7ffc0000 [ 307.131671][ T29] audit: type=1326 audit(308.071:13815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19585 comm="syz.6.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50704af749 code=0x7ffc0000 [ 307.154758][ T29] audit: type=1326 audit(308.071:13816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19585 comm="syz.6.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f50704af749 code=0x7ffc0000 [ 307.177933][ T29] audit: type=1326 audit(308.071:13817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19585 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50704af749 code=0x7ffc0000 [ 307.200432][ T29] audit: type=1326 audit(308.071:13818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19585 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50704af749 code=0x7ffc0000 [ 307.222925][ T29] audit: type=1326 audit(308.071:13819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19585 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f50704af749 code=0x7ffc0000 [ 307.533215][T19605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.549019][T19605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.771096][T19625] macvtap0: refused to change device tx_queue_len [ 307.979725][T19632] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3793'. [ 308.053727][T19654] syzkaller1: entered promiscuous mode [ 308.059269][T19654] syzkaller1: entered allmulticast mode [ 308.382882][T19682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3812'. [ 309.162843][T19712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3825'. [ 309.171808][T19712] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3825'. [ 309.279465][T19725] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.301917][T19726] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 309.314491][T19726] syzkaller0: entered promiscuous mode [ 309.319977][T19726] syzkaller0: entered allmulticast mode [ 309.331452][T19731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.340000][T19731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.359704][T19725] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.397365][T19737] netlink: 'syz.0.3836': attribute type 1 has an invalid length. [ 309.413316][T19737] bond1: entered promiscuous mode [ 309.418370][T19737] bond1: entered allmulticast mode [ 309.423923][T19737] 8021q: adding VLAN 0 to HW filter on device bond1 [ 309.436185][T19737] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3836'. [ 309.446976][T19725] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.520613][T19725] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.536781][T19753] loop6: detected capacity change from 0 to 1024 [ 309.545827][T19753] EXT4-fs: Ignoring removed bh option [ 309.560451][T19753] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.608587][ T52] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.637262][ T52] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.646448][T15991] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.656158][ T52] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.664764][ T9744] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.699493][T19763] syzkaller0: entered promiscuous mode [ 309.705036][T19763] syzkaller0: entered allmulticast mode [ 310.197226][T19781] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 310.586995][T19806] netlink: 'syz.5.3852': attribute type 12 has an invalid length. [ 310.594902][T19806] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3852'. [ 311.242577][T19823] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3860'. [ 311.251553][T19823] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3860'. [ 311.624033][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 311.624049][ T29] audit: type=1326 audit(312.611:13998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19858 comm="syz.6.3871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50704af749 code=0x7ffc0000 [ 311.667069][ T29] audit: type=1326 audit(312.641:13999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19858 comm="syz.6.3871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50704af749 code=0x7ffc0000 [ 311.690122][ T29] audit: type=1326 audit(312.641:14000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19858 comm="syz.6.3871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50704af749 code=0x7ffc0000 [ 311.713106][ T29] audit: type=1326 audit(312.641:14001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19858 comm="syz.6.3871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50704af749 code=0x7ffc0000 [ 311.736069][ T29] audit: type=1326 audit(312.651:14002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19858 comm="syz.6.3871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50704af749 code=0x7ffc0000 [ 311.759083][ T29] audit: type=1326 audit(312.651:14003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19858 comm="syz.6.3871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50704af749 code=0x7ffc0000 [ 311.782123][ T29] audit: type=1326 audit(312.651:14004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19858 comm="syz.6.3871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50704af749 code=0x7ffc0000 [ 311.805047][ T29] audit: type=1326 audit(312.651:14005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19858 comm="syz.6.3871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50704af749 code=0x7ffc0000 [ 311.827976][ T29] audit: type=1326 audit(312.651:14006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19858 comm="syz.6.3871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50704af749 code=0x7ffc0000 [ 311.850952][ T29] audit: type=1326 audit(312.651:14007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19858 comm="syz.6.3871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50704af749 code=0x7ffc0000 [ 311.914192][T19877] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.960434][T19877] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.048674][T19877] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.081412][T19877] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.123318][T19907] loop5: detected capacity change from 0 to 1024 [ 312.145548][ T9090] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.155274][T19907] EXT4-fs (loop5): bad geometry: block count 33554432 exceeds size of device (512 blocks) [ 312.165970][ T9090] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.180776][ T9090] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.207759][ T9090] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.241625][T19885] tmpfs: Bad value for 'mpol' [ 312.301545][T19928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3874'. [ 312.310582][T19928] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3874'. [ 312.332189][T19928] geneve2: entered promiscuous mode [ 312.337432][T19928] geneve2: entered allmulticast mode [ 312.388619][T19940] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.418160][T19952] netlink: 'syz.0.3880': attribute type 1 has an invalid length. [ 312.467195][T19952] bond2: entered promiscuous mode [ 312.472402][T19952] bond2: entered allmulticast mode [ 312.477839][T19952] 8021q: adding VLAN 0 to HW filter on device bond2 [ 312.487899][T19940] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.545576][T19940] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.564002][T19983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.572709][T19983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.590574][T19940] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.665742][ T9744] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.678249][ T9465] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.692004][ T9465] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.702917][ T9465] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.874899][T20018] loop5: detected capacity change from 0 to 128 [ 312.882769][T20018] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 312.930953][T20027] loop5: detected capacity change from 0 to 128 [ 313.015926][T20035] syzkaller0: entered promiscuous mode [ 313.021572][T20035] syzkaller0: entered allmulticast mode [ 313.034317][T20041] __nla_validate_parse: 4 callbacks suppressed [ 313.034332][T20041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3903'. [ 313.049401][T20041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3903'. [ 313.086841][T20045] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.112957][T20047] loop6: detected capacity change from 0 to 1024 [ 313.119933][T20047] EXT4-fs: Ignoring removed bh option [ 313.130593][T20045] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.143386][T20047] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.166122][T15991] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.187553][T20057] syzkaller0: entered promiscuous mode [ 313.193095][T20057] syzkaller0: entered allmulticast mode [ 313.201732][T20045] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.270506][T20045] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.424469][T20073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3915'. [ 313.433425][T20073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3915'. [ 313.484220][T20077] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20077 comm=syz.0.3917 [ 313.597855][T20088] syzkaller0: entered promiscuous mode [ 313.603413][T20088] syzkaller0: entered allmulticast mode [ 313.815881][T20096] loop3: detected capacity change from 0 to 128 [ 313.838901][T20098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3927'. [ 313.847797][T20098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3927'. [ 313.887856][T20102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3929'. [ 314.194213][T20138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3943'. [ 314.229869][T20144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.239185][T20144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.270281][T20150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3949'. [ 314.279203][T20150] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3949'. [ 314.299412][T20152] macvtap0: refused to change device tx_queue_len [ 314.985292][T20194] loop3: detected capacity change from 0 to 128 [ 315.046100][T20196] syzkaller0: entered promiscuous mode [ 315.051624][T20196] syzkaller0: entered allmulticast mode [ 315.058922][T20198] macvtap0: refused to change device tx_queue_len [ 315.243581][T20222] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20222 comm=syz.5.3982 [ 316.061768][T20317] syzkaller0: entered promiscuous mode [ 316.067271][T20317] syzkaller0: entered allmulticast mode [ 316.163246][T20320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.171936][T20320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.587121][T20405] syzkaller0: entered promiscuous mode [ 316.592763][T20405] syzkaller0: entered allmulticast mode [ 316.697376][T20431] macvtap0: refused to change device tx_queue_len [ 316.760652][T20444] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20444 comm=syz.3.4034 [ 316.889916][T20466] loop3: detected capacity change from 0 to 128 [ 316.933841][T20471] loop6: detected capacity change from 0 to 1024 [ 316.957432][T20471] EXT4-fs: Ignoring removed bh option [ 316.982429][T20471] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.018901][T20488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.029117][T20488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.097453][T15991] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.344567][ T9647] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.362282][ T9647] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.378815][ T5551] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.391473][ T5551] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.465614][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 317.465626][ T29] audit: type=1326 audit(318.451:14145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20532 comm="syz.1.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267120f749 code=0x7ffc0000 [ 317.495754][ T29] audit: type=1326 audit(318.461:14146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20532 comm="syz.1.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f267120f749 code=0x7ffc0000 [ 317.518865][ T29] audit: type=1326 audit(318.461:14147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20532 comm="syz.1.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267120f749 code=0x7ffc0000 [ 317.791843][ T29] audit: type=1326 audit(318.781:14148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20565 comm="syz.1.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267120f749 code=0x7ffc0000 [ 317.828494][ T29] audit: type=1326 audit(318.781:14149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20565 comm="syz.1.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f267120f749 code=0x7ffc0000 [ 317.851638][ T29] audit: type=1326 audit(318.781:14150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20565 comm="syz.1.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267120f749 code=0x7ffc0000 [ 317.882273][T20564] loop3: detected capacity change from 0 to 128 [ 317.890876][T20564] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 317.931996][T20568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.940796][T20568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.035616][T20580] syzkaller0: entered promiscuous mode [ 318.041191][T20580] syzkaller0: entered allmulticast mode [ 318.074999][T20585] macvtap0: refused to change device tx_queue_len [ 318.172191][T20593] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 318.657516][ T29] audit: type=1326 audit(319.641:14151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20602 comm="syz.0.4088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758a14f749 code=0x7ffc0000 [ 318.698463][T20611] netlink: 'syz.1.4091': attribute type 1 has an invalid length. [ 318.729964][ T29] audit: type=1326 audit(319.681:14152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20602 comm="syz.0.4088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f758a14f749 code=0x7ffc0000 [ 318.741049][T20617] syzkaller0: entered promiscuous mode [ 318.752971][ T29] audit: type=1326 audit(319.681:14153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20602 comm="syz.0.4088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758a14f749 code=0x7ffc0000 [ 318.758430][T20617] syzkaller0: entered allmulticast mode [ 318.786977][ T29] audit: type=1326 audit(319.681:14154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20602 comm="syz.0.4088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f758a14f749 code=0x7ffc0000 [ 318.804251][T20611] bond1: entered promiscuous mode [ 318.815063][T20611] bond1: entered allmulticast mode [ 318.815445][T20611] 8021q: adding VLAN 0 to HW filter on device bond1 [ 318.861021][T20611] __nla_validate_parse: 10 callbacks suppressed [ 318.861036][T20611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4091'. [ 319.061895][T20640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.080540][T20640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.138849][T20654] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 319.178560][T20662] macvtap0: refused to change device tx_queue_len [ 319.322841][T20690] loop6: detected capacity change from 0 to 128 [ 319.373105][T20702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4128'. [ 319.382176][T20702] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4128'. [ 319.431689][T20710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.443101][T20710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.514487][T20723] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 319.554081][T20727] netlink: 'syz.0.4139': attribute type 1 has an invalid length. [ 319.568375][T20727] bond3: entered promiscuous mode [ 319.573572][T20727] bond3: entered allmulticast mode [ 319.579354][T20727] 8021q: adding VLAN 0 to HW filter on device bond3 [ 319.590671][T20727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4139'. [ 319.636099][T20737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4143'. [ 319.645568][T20737] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4143'. [ 319.797670][T20748] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20748 comm=syz.0.4147 [ 319.839527][T20750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4148'. [ 319.898046][T20758] syzkaller0: entered promiscuous mode [ 319.903616][T20758] syzkaller0: entered allmulticast mode [ 319.972044][T20760] netlink: 'syz.1.4152': attribute type 1 has an invalid length. [ 319.984220][T20760] bond2: entered promiscuous mode [ 319.989303][T20760] bond2: entered allmulticast mode [ 319.994542][T20760] 8021q: adding VLAN 0 to HW filter on device bond2 [ 320.192264][T20786] netlink: 'syz.0.4163': attribute type 1 has an invalid length. [ 320.211937][T20786] bond4: entered promiscuous mode [ 320.217009][T20786] bond4: entered allmulticast mode [ 320.227615][T20786] 8021q: adding VLAN 0 to HW filter on device bond4 [ 320.276633][T20792] syzkaller0: entered promiscuous mode [ 320.282159][T20792] syzkaller0: entered allmulticast mode [ 320.454642][T20806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4171'. [ 320.583732][T20824] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 320.743636][T20843] syzkaller0: entered promiscuous mode [ 320.749208][T20843] syzkaller0: entered allmulticast mode [ 321.685059][T21014] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4201'. [ 321.764478][T21020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4203'. [ 321.802617][T21024] loop6: detected capacity change from 0 to 1024 [ 321.809395][T21024] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 322.824824][T21033] syzkaller0: entered promiscuous mode [ 322.830639][T21033] syzkaller0: entered allmulticast mode [ 322.938346][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 322.938360][ T29] audit: type=1326 audit(323.921:14185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21037 comm="syz.6.4208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50704af749 code=0x7ffc0000 [ 322.972092][ T29] audit: type=1326 audit(323.931:14186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21037 comm="syz.6.4208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50704af749 code=0x7ffc0000 [ 322.995103][ T29] audit: type=1326 audit(323.941:14187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21037 comm="syz.6.4208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50704af749 code=0x7ffc0000 [ 323.018135][ T29] audit: type=1326 audit(323.941:14188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21037 comm="syz.6.4208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50704af749 code=0x7ffc0000 [ 323.041138][ T29] audit: type=1326 audit(323.941:14189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21037 comm="syz.6.4208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50704af749 code=0x7ffc0000 [ 323.064129][ T29] audit: type=1326 audit(323.951:14190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21037 comm="syz.6.4208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50704af749 code=0x7ffc0000 [ 323.087197][ T29] audit: type=1326 audit(323.961:14191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21037 comm="syz.6.4208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50704af749 code=0x7ffc0000 [ 323.116268][T21049] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 323.125105][ T29] audit: type=1326 audit(323.961:14192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21037 comm="syz.6.4208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50704af749 code=0x7ffc0000 [ 323.148162][ T29] audit: type=1326 audit(323.961:14193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21037 comm="syz.6.4208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50704af749 code=0x7ffc0000 [ 323.171148][ T29] audit: type=1326 audit(323.961:14194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21037 comm="syz.6.4208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50704af749 code=0x7ffc0000 [ 323.343488][T21073] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21073 comm=syz.6.4222 [ 323.547283][T21085] syzkaller0: entered promiscuous mode [ 323.552799][T21085] syzkaller0: entered allmulticast mode [ 323.674763][T21101] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21101 comm=syz.5.4236 [ 323.762124][T21112] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.790293][T21112] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.851560][T21112] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.889921][T21112] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.905385][T21130] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21130 comm=syz.6.4247 [ 323.947689][T21136] __nla_validate_parse: 6 callbacks suppressed [ 323.947716][T21136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4250'. [ 323.956800][ T9142] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.981626][ T9142] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.990262][ T9142] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.998557][ T9142] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.116162][T21156] netlink: 324 bytes leftover after parsing attributes in process `syz.6.4256'. [ 324.762934][T21194] netlink: 324 bytes leftover after parsing attributes in process `syz.1.4273'. [ 324.852217][T21167] syz.6.4259 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 324.866418][T21167] CPU: 0 UID: 0 PID: 21167 Comm: syz.6.4259 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 324.866468][T21167] Tainted: [W]=WARN [ 324.866475][T21167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 324.866489][T21167] Call Trace: [ 324.866497][T21167] [ 324.866506][T21167] __dump_stack+0x1d/0x30 [ 324.866565][T21167] dump_stack_lvl+0xe8/0x140 [ 324.866585][T21167] dump_stack+0x15/0x1b [ 324.866605][T21167] dump_header+0x81/0x240 [ 324.866628][T21167] oom_kill_process+0x295/0x350 [ 324.866654][T21167] out_of_memory+0x97b/0xb80 [ 324.866711][T21167] try_charge_memcg+0x610/0xa10 [ 324.866793][T21167] obj_cgroup_charge_pages+0xa6/0x150 [ 324.866819][T21167] __memcg_kmem_charge_page+0x9f/0x170 [ 324.866866][T21167] __alloc_frozen_pages_noprof+0x18f/0x360 [ 324.866899][T21167] alloc_pages_mpol+0xb3/0x260 [ 324.866926][T21167] alloc_pages_noprof+0x90/0x130 [ 324.867013][T21167] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 324.867127][T21167] __kvmalloc_node_noprof+0x492/0x6b0 [ 324.867154][T21167] ? ip_set_alloc+0x24/0x30 [ 324.867187][T21167] ? ip_set_alloc+0x24/0x30 [ 324.867274][T21167] ? __slab_alloc+0x25/0x50 [ 324.867300][T21167] ip_set_alloc+0x24/0x30 [ 324.867391][T21167] hash_netiface_create+0x282/0x740 [ 324.867420][T21167] ? __pfx_hash_netiface_create+0x10/0x10 [ 324.867485][T21167] ip_set_create+0x3cc/0x970 [ 324.867586][T21167] ? __nla_parse+0x40/0x60 [ 324.867614][T21167] nfnetlink_rcv_msg+0x4c6/0x590 [ 324.867735][T21167] netlink_rcv_skb+0x123/0x220 [ 324.867767][T21167] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 324.867801][T21167] nfnetlink_rcv+0x167/0x16c0 [ 324.867885][T21167] ? kmem_cache_free+0xe3/0x3a0 [ 324.867935][T21167] ? __kfree_skb+0x109/0x150 [ 324.867967][T21167] ? nlmon_xmit+0x4f/0x60 [ 324.867983][T21167] ? consume_skb+0x49/0x150 [ 324.868079][T21167] ? nlmon_xmit+0x4f/0x60 [ 324.868099][T21167] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 324.868128][T21167] ? __dev_queue_xmit+0x138d/0x1ec0 [ 324.868152][T21167] ? __dev_queue_xmit+0x148/0x1ec0 [ 324.868250][T21167] ? ref_tracker_free+0x37d/0x3e0 [ 324.868277][T21167] ? __netlink_deliver_tap+0x4dc/0x500 [ 324.868362][T21167] netlink_unicast+0x5c0/0x690 [ 324.868392][T21167] netlink_sendmsg+0x58b/0x6b0 [ 324.868421][T21167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 324.868453][T21167] __sock_sendmsg+0x145/0x180 [ 324.868523][T21167] ____sys_sendmsg+0x31e/0x4a0 [ 324.868555][T21167] ___sys_sendmsg+0x17b/0x1d0 [ 324.868595][T21167] __x64_sys_sendmsg+0xd4/0x160 [ 324.868659][T21167] x64_sys_call+0x17ba/0x3000 [ 324.868685][T21167] do_syscall_64+0xd8/0x2c0 [ 324.868798][T21167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.868820][T21167] RIP: 0033:0x7f50704af749 [ 324.868836][T21167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.868940][T21167] RSP: 002b:00007f506eef6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 324.868967][T21167] RAX: ffffffffffffffda RBX: 00007f5070706090 RCX: 00007f50704af749 [ 324.868982][T21167] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 324.868995][T21167] RBP: 00007f5070533f91 R08: 0000000000000000 R09: 0000000000000000 [ 324.869009][T21167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.869022][T21167] R13: 00007f5070706128 R14: 00007f5070706090 R15: 00007ffc2d12a308 [ 324.869097][T21167] [ 325.198940][T21167] memory: usage 307200kB, limit 307200kB, failcnt 144 [ 325.205752][T21167] memory+swap: usage 307336kB, limit 9007199254740988kB, failcnt 0 [ 325.213654][T21167] kmem: usage 307132kB, limit 9007199254740988kB, failcnt 0 [ 325.220941][T21167] Memory cgroup stats for /syz6: [ 325.222412][T21199] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 325.289654][T21209] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21209 comm=syz.3.4280 [ 325.305528][T21199] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 325.325305][T21167] cache 0 [ 325.328247][T21167] rss 4096 [ 325.331368][T21167] shmem 0 [ 325.334327][T21167] mapped_file 0 [ 325.337788][T21167] dirty 0 [ 325.340754][T21167] writeback 16384 [ 325.344375][T21167] workingset_refault_anon 5 [ 325.348882][T21167] workingset_refault_file 0 [ 325.353374][T21167] swap 167936 [ 325.356663][T21167] swapcached 36864 [ 325.360408][T21167] pgpgin 58364 [ 325.363832][T21167] pgpgout 58354 [ 325.367282][T21167] pgfault 80578 [ 325.370745][T21167] pgmajfault 2 [ 325.374096][T21167] inactive_anon 32768 [ 325.378063][T21167] active_anon 4096 [ 325.381788][T21167] inactive_file 4096 [ 325.385758][T21167] active_file 0 [ 325.389915][T21167] unevictable 0 [ 325.393358][T21167] hierarchical_memory_limit 314572800 [ 325.398971][T21167] hierarchical_memsw_limit 9223372036854771712 [ 325.405114][T21167] total_cache 0 [ 325.408594][T21167] total_rss 4096 [ 325.412131][T21167] total_shmem 0 [ 325.415652][T21167] total_mapped_file 0 [ 325.419661][T21167] total_dirty 0 [ 325.423172][T21167] total_writeback 16384 [ 325.427319][T21167] total_workingset_refault_anon 5 [ 325.432343][T21167] total_workingset_refault_file 0 [ 325.437350][T21167] total_swap 167936 [ 325.441156][T21167] total_swapcached 36864 [ 325.445460][T21167] total_pgpgin 58364 [ 325.449356][T21167] total_pgpgout 58354 [ 325.453320][T21167] total_pgfault 80578 [ 325.457302][T21167] total_pgmajfault 2 [ 325.461202][T21167] total_inactive_anon 32768 [ 325.465742][T21167] total_active_anon 4096 [ 325.470007][T21167] total_inactive_file 4096 [ 325.474408][T21167] total_active_file 0 [ 325.478374][T21167] total_unevictable 0 [ 325.482389][T21167] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.4259,pid=21161,uid=0 [ 325.497153][T21167] Memory cgroup out of memory: Killed process 21161 (syz.6.4259) total-vm:96016kB, anon-rss:1264kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 325.631596][T21231] netlink: 324 bytes leftover after parsing attributes in process `syz.0.4285'. [ 326.444746][T21302] loop6: detected capacity change from 0 to 1764 [ 326.637037][T21329] loop5: detected capacity change from 0 to 1024 [ 326.669314][T21329] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 326.698970][T21329] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: comm syz.5.4303: lblock 0 mapped to illegal pblock 0 (length 1) [ 326.713528][T21329] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 326.725855][T21329] EXT4-fs (loop5): This should not happen!! Data will be lost [ 326.725855][T21329] [ 326.882314][T13062] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 326.962372][T21356] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21356 comm=syz.3.4305 [ 327.204776][T21384] syzkaller1: entered promiscuous mode [ 327.210335][T21384] syzkaller1: entered allmulticast mode [ 327.281812][T21401] netlink: 'syz.3.4311': attribute type 1 has an invalid length. [ 327.295592][T21401] bond1: entered promiscuous mode [ 327.300664][T21401] bond1: entered allmulticast mode [ 327.306092][T21401] 8021q: adding VLAN 0 to HW filter on device bond1 [ 327.317355][T21401] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4311'. [ 327.558244][T21447] syzkaller0: entered promiscuous mode [ 327.563837][T21447] syzkaller0: entered allmulticast mode [ 327.643159][T21467] netlink: 'syz.5.4322': attribute type 1 has an invalid length. [ 327.656893][T21467] bond4: entered promiscuous mode [ 327.662018][T21467] bond4: entered allmulticast mode [ 327.667334][T21467] 8021q: adding VLAN 0 to HW filter on device bond4 [ 327.678680][T21467] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4322'. [ 327.744971][T21476] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 328.355726][T21497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.367794][T21497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.396787][T21495] syzkaller0: entered promiscuous mode [ 328.402313][T21495] syzkaller0: entered allmulticast mode [ 328.503503][T21509] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21509 comm=syz.1.4340 [ 328.641314][T21521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4347'. [ 328.676938][T21532] netlink: 'syz.3.4351': attribute type 1 has an invalid length. [ 328.680441][T21530] syzkaller0: entered promiscuous mode [ 328.690193][T21530] syzkaller0: entered allmulticast mode [ 328.707235][T21532] bond2: entered promiscuous mode [ 328.712312][T21532] bond2: entered allmulticast mode [ 328.717715][T21532] 8021q: adding VLAN 0 to HW filter on device bond2 [ 328.742131][T21536] syzkaller0: entered promiscuous mode [ 328.747622][T21536] syzkaller0: entered allmulticast mode [ 328.787811][T21542] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21542 comm=syz.3.4354 [ 328.837997][T21550] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4358'. [ 328.912752][T21558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.927961][T21558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.234301][T21583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.242799][T21583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.557445][T21602] loop3: detected capacity change from 0 to 1024 [ 329.566452][T21602] EXT4-fs: Ignoring removed bh option [ 329.583187][T21602] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.605171][T21608] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4385'. [ 329.621127][T17641] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.464641][T21655] netlink: 324 bytes leftover after parsing attributes in process `syz.1.4400'. [ 330.575114][T21657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4401'. [ 330.581686][T21664] syzkaller0: entered promiscuous mode [ 330.589509][T21664] syzkaller0: entered allmulticast mode [ 330.758086][T21676] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4410'. [ 330.758104][T21678] syzkaller0: entered promiscuous mode [ 330.772607][T21678] syzkaller0: entered allmulticast mode [ 330.874151][T21694] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4417'. [ 330.900015][T21700] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4418'. [ 330.949364][T21704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.958160][T21706] loop6: detected capacity change from 0 to 1024 [ 330.959480][T21704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.965664][T21706] EXT4-fs: Ignoring removed bh option [ 330.989484][T21706] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.014548][T15991] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.050717][T21712] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21712 comm=syz.6.4423 [ 331.310740][T21727] syzkaller0: entered promiscuous mode [ 331.316250][T21727] syzkaller0: entered allmulticast mode [ 331.419063][T21729] syzkaller0: entered promiscuous mode [ 331.424573][T21729] syzkaller0: entered allmulticast mode [ 331.570135][T21736] syzkaller0: entered promiscuous mode [ 331.575642][T21736] syzkaller0: entered allmulticast mode [ 331.592698][T21740] netlink: 324 bytes leftover after parsing attributes in process `syz.6.4436'. [ 331.597779][T21731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4432'. [ 331.710817][T21753] loop3: detected capacity change from 0 to 1024 [ 331.729470][T21753] EXT4-fs: Ignoring removed bh option [ 331.761066][T21753] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.779765][T21756] syzkaller0: entered promiscuous mode [ 331.785265][T21756] syzkaller0: entered allmulticast mode [ 331.794827][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 331.794840][ T29] audit: type=1326 audit(332.781:14246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21764 comm="syz.5.4447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86d15f749 code=0x7ffc0000 [ 331.823998][ T29] audit: type=1326 audit(332.781:14247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21764 comm="syz.5.4447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86d15f749 code=0x7ffc0000 [ 331.867221][ T29] audit: type=1326 audit(332.841:14248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21764 comm="syz.5.4447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc86d15f749 code=0x7ffc0000 [ 331.890125][ T29] audit: type=1326 audit(332.841:14249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21764 comm="syz.5.4447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86d15f749 code=0x7ffc0000 [ 331.913108][ T29] audit: type=1326 audit(332.841:14250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21764 comm="syz.5.4447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86d15f749 code=0x7ffc0000 [ 331.936090][ T29] audit: type=1326 audit(332.841:14251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21764 comm="syz.5.4447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc86d15f749 code=0x7ffc0000 [ 331.959048][ T29] audit: type=1326 audit(332.841:14252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21764 comm="syz.5.4447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86d15f749 code=0x7ffc0000 [ 331.982042][ T29] audit: type=1326 audit(332.841:14253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21764 comm="syz.5.4447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86d15f749 code=0x7ffc0000 [ 332.004961][ T29] audit: type=1326 audit(332.841:14254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21764 comm="syz.5.4447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc86d15f749 code=0x7ffc0000 [ 332.027953][ T29] audit: type=1326 audit(332.841:14255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21764 comm="syz.5.4447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86d15f749 code=0x7ffc0000 [ 332.080217][T21762] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.090700][T17641] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.128620][T21773] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4449'. [ 332.145870][T21762] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.224791][T21775] netlink: 'syz.5.4447': attribute type 12 has an invalid length. [ 332.232650][T21775] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4447'. [ 332.317087][T21762] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.442631][T21762] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.856108][ T41] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.891343][ T41] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.929363][ T41] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.952010][ T41] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.246953][T21812] syzkaller0: entered promiscuous mode [ 333.252543][T21812] syzkaller0: entered allmulticast mode [ 333.587075][T21826] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.639000][T21827] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 333.659930][T21826] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.722774][T21826] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.792027][T21826] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.827862][T21857] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 333.840093][T21857] syzkaller0: entered promiscuous mode [ 333.845676][T21857] syzkaller0: entered allmulticast mode [ 333.874493][ T9744] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.891036][ T9744] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.902650][ T9744] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.913210][T21863] syzkaller0: entered promiscuous mode [ 333.918695][T21863] syzkaller0: entered allmulticast mode [ 333.928095][ T5550] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.042283][T21891] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21891 comm=syz.5.4476 [ 334.279697][T21937] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 334.291064][T21937] syzkaller0: entered promiscuous mode [ 334.296553][T21937] syzkaller0: entered allmulticast mode [ 334.691973][T22004] syzkaller0: entered promiscuous mode [ 334.697491][T22004] syzkaller0: entered allmulticast mode [ 334.996574][T22010] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4488'. [ 335.649020][T22022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4493'. [ 335.723337][T22024] syzkaller0: entered promiscuous mode [ 335.728877][T22024] syzkaller0: entered allmulticast mode [ 335.832493][T22033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4497'. [ 336.118741][T22042] syzkaller0: entered promiscuous mode [ 336.124318][T22042] syzkaller0: entered allmulticast mode [ 337.313186][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 337.313203][ T29] audit: type=1326 audit(338.301:14284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22226 comm="syz.3.4522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a371f749 code=0x7ffc0000 [ 337.342854][ T29] audit: type=1326 audit(338.301:14285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22226 comm="syz.3.4522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49a371f749 code=0x7ffc0000 [ 337.365925][ T29] audit: type=1326 audit(338.301:14286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22226 comm="syz.3.4522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a371f749 code=0x7ffc0000 [ 337.389092][ T29] audit: type=1326 audit(338.301:14287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22226 comm="syz.3.4522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f49a371f749 code=0x7ffc0000 [ 337.412253][ T29] audit: type=1326 audit(338.311:14288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22226 comm="syz.3.4522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a371f749 code=0x7ffc0000 [ 337.435324][ T29] audit: type=1326 audit(338.311:14289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22226 comm="syz.3.4522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49a371f749 code=0x7ffc0000 [ 337.458486][ T29] audit: type=1326 audit(338.311:14290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22226 comm="syz.3.4522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a371f749 code=0x7ffc0000 [ 337.481500][ T29] audit: type=1326 audit(338.311:14291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22226 comm="syz.3.4522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f49a371f749 code=0x7ffc0000 [ 337.980120][ T29] audit: type=1326 audit(338.971:14292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22242 comm="syz.0.4529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758a14f749 code=0x7ffc0000 [ 338.005460][ T29] audit: type=1326 audit(338.971:14293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22242 comm="syz.0.4529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758a14f749 code=0x7ffc0000 [ 338.050894][T22245] syzkaller0: entered promiscuous mode [ 338.056382][T22245] syzkaller0: entered allmulticast mode [ 338.232734][T22254] netlink: 'syz.0.4529': attribute type 12 has an invalid length. [ 338.240604][T22254] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4529'. [ 338.653095][T22275] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4540'. [ 339.116454][T22291] syzkaller0: entered promiscuous mode [ 339.122055][T22291] syzkaller0: entered allmulticast mode [ 339.590241][T22309] loop6: detected capacity change from 0 to 1024 [ 339.612133][T22309] EXT4-fs: Ignoring removed bh option [ 339.718817][T22309] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.791289][T15991] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.885891][T22335] netlink: 'syz.0.4559': attribute type 12 has an invalid length. [ 339.893773][T22335] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4559'. [ 340.756565][T22361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.811605][T22361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.131092][T22381] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4588'. [ 341.140089][T22381] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4588'. [ 341.191230][T22381] geneve3: entered promiscuous mode [ 341.196515][T22381] geneve3: entered allmulticast mode [ 341.895179][T22425] loop5: detected capacity change from 0 to 1024 [ 341.911220][T22425] EXT4-fs: Ignoring removed bh option [ 341.958471][T22425] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.425859][T22500] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 342.451556][T22506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.460259][T22506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.021059][T13062] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.093310][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 343.093325][ T29] audit: type=1326 audit(344.081:14393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22558 comm="syz.5.4607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86d15f749 code=0x7ffc0000 [ 343.122459][ T29] audit: type=1326 audit(344.081:14394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22558 comm="syz.5.4607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fc86d15f749 code=0x7ffc0000 [ 343.145520][ T29] audit: type=1326 audit(344.081:14395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22558 comm="syz.5.4607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86d15f749 code=0x7ffc0000 [ 344.095143][T22582] syzkaller0: entered promiscuous mode [ 344.100668][T22582] syzkaller0: entered allmulticast mode [ 344.110938][T22587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4618'. [ 344.205398][T22595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22595 comm=syz.0.4622 [ 344.285859][T22605] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 344.319789][T22606] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4627'. [ 344.445301][T22624] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.460171][T22629] netlink: 'syz.6.4633': attribute type 1 has an invalid length. [ 344.497027][T22629] bond1: entered promiscuous mode [ 344.502202][T22629] bond1: entered allmulticast mode [ 344.507700][T22629] 8021q: adding VLAN 0 to HW filter on device bond1 [ 344.556576][T22624] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.604111][T22656] loop3: detected capacity change from 0 to 1024 [ 344.614274][T22624] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.617660][T22656] EXT4-fs: Ignoring removed bh option [ 344.647620][T22656] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.709171][ T29] audit: type=1400 audit(345.701:14396): avc: denied { create } for pid=22675 comm="syz.5.4638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 344.738921][T22624] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.764641][ T29] audit: type=1400 audit(345.751:14397): avc: denied { ioctl } for pid=22675 comm="syz.5.4638" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=59072 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 344.829269][T22694] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4642'. [ 344.847713][ T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.861748][ T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.881420][ T1653] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.900741][ T1653] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.339967][T22725] netlink: 'syz.5.4646': attribute type 1 has an invalid length. [ 345.418940][T22725] bond5: entered promiscuous mode [ 345.424011][T22725] bond5: entered allmulticast mode [ 345.438577][T22725] 8021q: adding VLAN 0 to HW filter on device bond5 [ 345.506361][T22739] syzkaller0: entered promiscuous mode [ 345.512018][T22739] syzkaller0: entered allmulticast mode [ 345.525281][T22735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4648'. [ 345.612175][T22759] xt_hashlimit: max too large, truncated to 1048576 [ 345.706230][T22777] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 345.717749][T22777] syzkaller0: entered promiscuous mode [ 345.723389][T22777] syzkaller0: entered allmulticast mode [ 345.874369][T22806] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 345.887833][T22806] syzkaller0: entered promiscuous mode [ 345.893462][T22806] syzkaller0: entered allmulticast mode [ 345.968810][T17641] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.010219][T22828] netlink: 'syz.0.4659': attribute type 1 has an invalid length. [ 346.045128][T22828] bond5: entered promiscuous mode [ 346.045244][T22837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4663'. [ 346.050279][T22828] bond5: entered allmulticast mode [ 346.050480][T22828] 8021q: adding VLAN 0 to HW filter on device bond5 [ 346.075991][T22832] syzkaller0: entered promiscuous mode [ 346.081537][T22832] syzkaller0: entered allmulticast mode [ 346.123549][T22835] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 346.142610][T22835] syzkaller0: entered promiscuous mode [ 346.148162][T22835] syzkaller0: entered allmulticast mode [ 346.263923][T22844] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4666'. [ 346.566199][ T29] audit: type=1326 audit(347.551:14398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22854 comm="syz.3.4669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a371f749 code=0x7ffc0000 [ 346.589282][ T29] audit: type=1326 audit(347.551:14399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22854 comm="syz.3.4669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a371f749 code=0x7ffc0000 [ 346.664508][ T29] audit: type=1326 audit(347.621:14400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22854 comm="syz.3.4669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49a371f749 code=0x7ffc0000 [ 346.687553][ T29] audit: type=1326 audit(347.621:14401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22854 comm="syz.3.4669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a371f749 code=0x7ffc0000 [ 346.710504][ T29] audit: type=1326 audit(347.621:14402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22854 comm="syz.3.4669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a371f749 code=0x7ffc0000 [ 346.749716][T22856] loop5: detected capacity change from 0 to 512 [ 346.792178][T22867] netlink: 'syz.3.4675': attribute type 1 has an invalid length. [ 346.824383][T22871] syzkaller0: entered promiscuous mode [ 346.829898][T22871] syzkaller0: entered allmulticast mode [ 346.847773][T22867] bond3: entered promiscuous mode [ 346.852840][T22867] bond3: entered allmulticast mode [ 346.867605][T22856] FAT-fs (loop5): Directory bread(block 199916) failed [ 346.894922][T22867] 8021q: adding VLAN 0 to HW filter on device bond3 [ 346.989619][T22856] FAT-fs (loop5): Directory bread(block 199917) failed [ 346.996641][T22856] FAT-fs (loop5): Directory bread(block 199918) failed [ 347.013677][T22881] netlink: 'syz.1.4680': attribute type 21 has an invalid length. [ 347.047128][T22881] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4680'. [ 347.056303][T22881] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4680'. [ 347.075616][T22856] FAT-fs (loop5): Directory bread(block 199919) failed [ 347.100997][T22889] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4684'. [ 347.112721][T22856] FAT-fs (loop5): Directory bread(block 199920) failed [ 347.157416][T22856] FAT-fs (loop5): Directory bread(block 199921) failed [ 347.188487][T22856] FAT-fs (loop5): Directory bread(block 199922) failed [ 347.228433][T22856] FAT-fs (loop5): Directory bread(block 199923) failed [ 347.255289][T22901] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.284359][T22879] FAULT_INJECTION: forcing a failure. [ 347.284359][T22879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 347.297603][T22879] CPU: 1 UID: 0 PID: 22879 Comm: syz.3.4679 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 347.297634][T22879] Tainted: [W]=WARN [ 347.297640][T22879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 347.297652][T22879] Call Trace: [ 347.297657][T22879] [ 347.297665][T22879] __dump_stack+0x1d/0x30 [ 347.297734][T22879] dump_stack_lvl+0xe8/0x140 [ 347.297770][T22879] dump_stack+0x15/0x1b [ 347.297789][T22879] should_fail_ex+0x265/0x280 [ 347.297810][T22879] should_fail+0xb/0x20 [ 347.297827][T22879] should_fail_usercopy+0x1a/0x20 [ 347.297848][T22879] _copy_to_user+0x20/0xa0 [ 347.297919][T22879] simple_read_from_buffer+0xb5/0x130 [ 347.297940][T22879] proc_fail_nth_read+0x10e/0x150 [ 347.297965][T22879] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 347.298003][T22879] vfs_read+0x1a8/0x770 [ 347.298021][T22879] ? __rcu_read_unlock+0x4f/0x70 [ 347.298041][T22879] ? __fget_files+0x184/0x1c0 [ 347.298095][T22879] ? mutex_lock+0x58/0x90 [ 347.298118][T22879] ksys_read+0xda/0x1a0 [ 347.298138][T22879] __x64_sys_read+0x40/0x50 [ 347.298158][T22879] x64_sys_call+0x2889/0x3000 [ 347.298214][T22879] do_syscall_64+0xd8/0x2c0 [ 347.298242][T22879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.298261][T22879] RIP: 0033:0x7f49a371e15c [ 347.298274][T22879] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 347.298293][T22879] RSP: 002b:00007f49a2187030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 347.298467][T22879] RAX: ffffffffffffffda RBX: 00007f49a3975fa0 RCX: 00007f49a371e15c [ 347.298480][T22879] RDX: 000000000000000f RSI: 00007f49a21870a0 RDI: 0000000000000006 [ 347.298491][T22879] RBP: 00007f49a2187090 R08: 0000000000000000 R09: 0000000000000000 [ 347.298504][T22879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.298515][T22879] R13: 00007f49a3976038 R14: 00007f49a3975fa0 R15: 00007ffc54808758 [ 347.298531][T22879] [ 347.340593][T22906] netlink: 'syz.0.4689': attribute type 1 has an invalid length. [ 347.509871][T22906] bond6: entered promiscuous mode [ 347.514935][T22906] bond6: entered allmulticast mode [ 347.520304][T22906] 8021q: adding VLAN 0 to HW filter on device bond6 [ 347.549380][T22901] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.570055][T22913] syzkaller0: entered promiscuous mode [ 347.575556][T22913] syzkaller0: entered allmulticast mode [ 347.602297][T22901] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.622120][T22923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.630708][T22923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.742040][T22931] loop5: detected capacity change from 0 to 1764 [ 347.750328][T22901] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.823620][T22942] FAULT_INJECTION: forcing a failure. [ 347.823620][T22942] name failslab, interval 1, probability 0, space 0, times 0 [ 347.824545][ T52] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.836286][T22942] CPU: 1 UID: 0 PID: 22942 Comm: syz.5.4697 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 347.836367][T22942] Tainted: [W]=WARN [ 347.836380][T22942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 347.836393][T22942] Call Trace: [ 347.836399][T22942] [ 347.836407][T22942] __dump_stack+0x1d/0x30 [ 347.836431][T22942] dump_stack_lvl+0xe8/0x140 [ 347.836453][T22942] dump_stack+0x15/0x1b [ 347.836553][T22942] should_fail_ex+0x265/0x280 [ 347.836591][T22942] should_failslab+0x8c/0xb0 [ 347.836613][T22942] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 347.836636][T22942] ? __alloc_skb+0x324/0x4d0 [ 347.836673][T22942] __alloc_skb+0x324/0x4d0 [ 347.836695][T22942] ? __alloc_skb+0x24d/0x4d0 [ 347.836718][T22942] netlink_alloc_large_skb+0xbf/0xf0 [ 347.836804][T22942] netlink_sendmsg+0x3cf/0x6b0 [ 347.836836][T22942] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.836914][T22942] __sock_sendmsg+0x145/0x180 [ 347.836934][T22942] ____sys_sendmsg+0x31e/0x4a0 [ 347.836964][T22942] ___sys_sendmsg+0x17b/0x1d0 [ 347.837040][T22942] __x64_sys_sendmsg+0xd4/0x160 [ 347.837071][T22942] x64_sys_call+0x17ba/0x3000 [ 347.837094][T22942] do_syscall_64+0xd8/0x2c0 [ 347.837177][T22942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.837200][T22942] RIP: 0033:0x7fc86d15f749 [ 347.837214][T22942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.837232][T22942] RSP: 002b:00007fc86bbc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.837251][T22942] RAX: ffffffffffffffda RBX: 00007fc86d3b5fa0 RCX: 00007fc86d15f749 [ 347.837328][T22942] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000006 [ 347.837341][T22942] RBP: 00007fc86bbc7090 R08: 0000000000000000 R09: 0000000000000000 [ 347.837353][T22942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.837365][T22942] R13: 00007fc86d3b6038 R14: 00007fc86d3b5fa0 R15: 00007ffd43a15538 [ 347.837392][T22942] [ 348.362768][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 348.362780][ T29] audit: type=1326 audit(349.351:14421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22949 comm="syz.0.4699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758a14f749 code=0x7ffc0000 [ 348.404232][ T52] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.412501][ T52] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.420913][ T52] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.440808][ T29] audit: type=1326 audit(349.421:14422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22949 comm="syz.0.4699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f758a14f749 code=0x7ffc0000 [ 348.463800][ T29] audit: type=1326 audit(349.421:14423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22949 comm="syz.0.4699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758a14f749 code=0x7ffc0000 [ 348.655533][T22963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4705'. [ 348.718798][T22965] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 348.751301][T22965] syzkaller0: entered promiscuous mode [ 348.756869][T22965] syzkaller0: entered allmulticast mode [ 349.013699][T22984] loop3: detected capacity change from 0 to 8192 [ 349.113707][T23003] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 349.141221][T23001] loop5: detected capacity change from 0 to 256 [ 349.209523][ T29] audit: type=1400 audit(350.191:14424): avc: denied { module_load } for pid=23000 comm="syz.5.4708" path="/524/bus/bus" dev="loop5" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=system permissive=1 [ 349.431557][T23001] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 349.442216][T23001] FAT-fs (loop5): Filesystem has been set read-only [ 349.541415][T23001] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4708'. [ 349.742196][ T29] audit: type=1326 audit(350.731:14425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23077 comm="syz.3.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a371f749 code=0x7ffc0000 [ 349.831387][ T29] audit: type=1326 audit(350.751:14426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23077 comm="syz.3.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a371f749 code=0x7ffc0000 [ 349.854384][ T29] audit: type=1326 audit(350.751:14427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23077 comm="syz.3.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49a371f749 code=0x7ffc0000 [ 349.877401][ T29] audit: type=1326 audit(350.761:14428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23077 comm="syz.3.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a371f749 code=0x7ffc0000 [ 349.900482][ T29] audit: type=1326 audit(350.761:14429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23077 comm="syz.3.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f49a371f749 code=0x7ffc0000 [ 349.923486][ T29] audit: type=1326 audit(350.761:14430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23077 comm="syz.3.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a371f749 code=0x7ffc0000 [ 349.939939][T23084] loop5: detected capacity change from 0 to 1024 [ 349.962828][T23090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4712'. [ 349.971745][T23090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4712'. [ 349.981436][T23084] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 349.997727][T23090] geneve2: entered promiscuous mode [ 350.003038][T23090] geneve2: entered allmulticast mode [ 350.185032][T23114] syzkaller0: entered promiscuous mode [ 350.190613][T23114] syzkaller0: entered allmulticast mode [ 350.607682][T23111] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 351.031763][T23125] syz.3.4718 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 351.046004][T23125] CPU: 1 UID: 0 PID: 23125 Comm: syz.3.4718 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 351.046040][T23125] Tainted: [W]=WARN [ 351.046046][T23125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 351.046058][T23125] Call Trace: [ 351.046063][T23125] [ 351.046071][T23125] __dump_stack+0x1d/0x30 [ 351.046149][T23125] dump_stack_lvl+0xe8/0x140 [ 351.046172][T23125] dump_stack+0x15/0x1b [ 351.046190][T23125] dump_header+0x81/0x240 [ 351.046268][T23125] oom_kill_process+0x295/0x350 [ 351.046293][T23125] out_of_memory+0x97b/0xb80 [ 351.046318][T23125] try_charge_memcg+0x610/0xa10 [ 351.046389][T23125] obj_cgroup_charge_pages+0xa6/0x150 [ 351.046421][T23125] __memcg_kmem_charge_page+0x9f/0x170 [ 351.046455][T23125] __alloc_frozen_pages_noprof+0x18f/0x360 [ 351.046558][T23125] alloc_pages_mpol+0xb3/0x260 [ 351.046593][T23125] alloc_pages_noprof+0x90/0x130 [ 351.046650][T23125] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 351.046682][T23125] __kvmalloc_node_noprof+0x492/0x6b0 [ 351.046773][T23125] ? ip_set_alloc+0x24/0x30 [ 351.046801][T23125] ? ip_set_alloc+0x24/0x30 [ 351.046829][T23125] ip_set_alloc+0x24/0x30 [ 351.046854][T23125] hash_netiface_create+0x282/0x740 [ 351.046955][T23125] ? __pfx_hash_netiface_create+0x10/0x10 [ 351.047046][T23125] ip_set_create+0x3cc/0x970 [ 351.047155][T23125] ? __nla_parse+0x40/0x60 [ 351.047262][T23125] nfnetlink_rcv_msg+0x4c6/0x590 [ 351.047307][T23125] netlink_rcv_skb+0x123/0x220 [ 351.047338][T23125] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 351.047392][T23125] nfnetlink_rcv+0x167/0x16c0 [ 351.047494][T23125] ? kmem_cache_free+0xe3/0x3a0 [ 351.047556][T23125] ? __kfree_skb+0x109/0x150 [ 351.047580][T23125] ? nlmon_xmit+0x4f/0x60 [ 351.047636][T23125] ? consume_skb+0x49/0x150 [ 351.047662][T23125] ? nlmon_xmit+0x4f/0x60 [ 351.047682][T23125] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 351.047734][T23125] ? __dev_queue_xmit+0x138d/0x1ec0 [ 351.047765][T23125] ? __dev_queue_xmit+0x148/0x1ec0 [ 351.047860][T23125] ? ref_tracker_free+0x37d/0x3e0 [ 351.047890][T23125] ? __netlink_deliver_tap+0x4dc/0x500 [ 351.047920][T23125] netlink_unicast+0x5c0/0x690 [ 351.048020][T23125] netlink_sendmsg+0x58b/0x6b0 [ 351.048101][T23125] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.048134][T23125] __sock_sendmsg+0x145/0x180 [ 351.048173][T23125] ____sys_sendmsg+0x31e/0x4a0 [ 351.048204][T23125] ___sys_sendmsg+0x17b/0x1d0 [ 351.048244][T23125] __x64_sys_sendmsg+0xd4/0x160 [ 351.048333][T23125] x64_sys_call+0x17ba/0x3000 [ 351.048355][T23125] do_syscall_64+0xd8/0x2c0 [ 351.048389][T23125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.048408][T23125] RIP: 0033:0x7f49a371f749 [ 351.048423][T23125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.048441][T23125] RSP: 002b:00007f49a2187038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.048464][T23125] RAX: ffffffffffffffda RBX: 00007f49a3975fa0 RCX: 00007f49a371f749 [ 351.048518][T23125] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 351.048532][T23125] RBP: 00007f49a37a3f91 R08: 0000000000000000 R09: 0000000000000000 [ 351.048547][T23125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.048561][T23125] R13: 00007f49a3976038 R14: 00007f49a3975fa0 R15: 00007ffc54808758 [ 351.048582][T23125] [ 351.374005][T23125] memory: usage 307200kB, limit 307200kB, failcnt 2355 [ 351.380910][T23125] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 351.388883][T23125] kmem: usage 307160kB, limit 9007199254740988kB, failcnt 0 [ 351.396158][T23125] Memory cgroup stats for /syz3: [ 351.396787][T23125] cache 0 [ 351.404709][T23125] rss 0 [ 351.407475][T23125] shmem 0 [ 351.410457][T23125] mapped_file 0 [ 351.413896][T23125] dirty 0 [ 351.416823][T23125] writeback 0 [ 351.420116][T23125] workingset_refault_anon 382 [ 351.424778][T23125] workingset_refault_file 3297 [ 351.429656][T23125] swap 188416 [ 351.432924][T23125] swapcached 24576 [ 351.436646][T23125] pgpgin 331201 [ 351.440179][T23125] pgpgout 331191 [ 351.443714][T23125] pgfault 399607 [ 351.447246][T23125] pgmajfault 310 [ 351.450866][T23125] inactive_anon 8192 [ 351.454845][T23125] active_anon 16384 [ 351.458721][T23125] inactive_file 0 [ 351.462346][T23125] active_file 16384 [ 351.466140][T23125] unevictable 0 [ 351.469646][T23125] hierarchical_memory_limit 314572800 [ 351.475005][T23125] hierarchical_memsw_limit 9223372036854771712 [ 351.481214][T23125] total_cache 0 [ 351.484665][T23125] total_rss 0 [ 351.487994][T23125] total_shmem 0 [ 351.491478][T23125] total_mapped_file 0 [ 351.495450][T23125] total_dirty 0 [ 351.498925][T23125] total_writeback 0 [ 351.502718][T23125] total_workingset_refault_anon 382 [ 351.508069][T23125] total_workingset_refault_file 3297 [ 351.513392][T23125] total_swap 188416 [ 351.517446][T23125] total_swapcached 24576 [ 351.521756][T23125] total_pgpgin 331201 [ 351.525725][T23125] total_pgpgout 331191 [ 351.529815][T23125] total_pgfault 399607 [ 351.533874][T23125] total_pgmajfault 310 [ 351.538017][T23125] total_inactive_anon 8192 [ 351.542453][T23125] total_active_anon 16384 [ 351.546793][T23125] total_inactive_file 0 [ 351.551068][T23125] total_active_file 16384 [ 351.555382][T23125] total_unevictable 0 [ 351.559386][T23125] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.4718,pid=23124,uid=0 [ 351.574050][T23125] Memory cgroup out of memory: Killed process 23124 (syz.3.4718) total-vm:93968kB, anon-rss:1268kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 351.605528][T23171] can: request_module (can-proto-0) failed. [ 351.655797][T23171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4721'. [ 351.852100][T23215] tipc: Enabling of bearer rejected, failed to enable media [ 351.946346][T23236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.958353][T23236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.223864][T23288] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4732'. [ 352.540620][T23351] tipc: Enabled bearer , priority 0 [ 352.547834][T23351] syzkaller0: entered promiscuous mode [ 352.553348][T23351] syzkaller0: entered allmulticast mode [ 352.620388][T23370] tipc: Resetting bearer [ 352.701089][T23385] loop6: detected capacity change from 0 to 1024 [ 352.709131][T23385] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 352.726475][T23349] tipc: Resetting bearer [ 352.736109][T23349] tipc: Disabling bearer [ 352.821936][T23403] loop6: detected capacity change from 0 to 512 [ 352.854694][T23411] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4741'. [ 352.863861][T23403] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 352.888790][T23403] EXT4-fs (loop6): mount failed [ 352.939440][T23429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.949183][T23429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.983800][T23438] loop6: detected capacity change from 0 to 256 [ 353.042745][T23450] dummy0: entered promiscuous mode [ 353.047932][T23450] macsec1: entered allmulticast mode [ 353.053622][T23450] dummy0: entered allmulticast mode [ 353.076434][T23450] loop6: detected capacity change from 0 to 512 [ 353.087429][T23450] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 353.097108][T23450] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 not in group (block 1)! [ 353.107207][T23450] EXT4-fs (loop6): group descriptors corrupted! [ 353.161407][T23460] loop5: detected capacity change from 0 to 1024 [ 353.168231][T23460] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 353.323746][T23488] loop5: detected capacity change from 0 to 512 [ 353.332153][T23488] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 353.341519][T23488] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 353.371778][ T29] kauditd_printk_skb: 227 callbacks suppressed [ 353.371792][ T29] audit: type=1400 audit(354.361:14658): avc: denied { connect } for pid=23494 comm="syz.6.4762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 353.380378][T23488] FAT-fs (loop5): FAT read failed (blocknr 128) [ 353.405915][ T29] audit: type=1400 audit(354.391:14659): avc: denied { map } for pid=23494 comm="syz.6.4762" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=60903 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 353.429739][ T29] audit: type=1400 audit(354.391:14660): avc: denied { read write } for pid=23494 comm="syz.6.4762" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=60903 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 353.470407][T23488] netlink: 'syz.5.4760': attribute type 7 has an invalid length. [ 353.478358][ T29] audit: type=1400 audit(354.461:14661): avc: denied { write } for pid=23494 comm="syz.6.4762" path="socket:[60902]" dev="sockfs" ino=60902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 353.543588][ T29] audit: type=1400 audit(354.531:14662): avc: denied { read } for pid=23499 comm="syz.0.4764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 353.573876][T23502] FAULT_INJECTION: forcing a failure. [ 353.573876][T23502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.587007][T23502] CPU: 1 UID: 0 PID: 23502 Comm: syz.0.4765 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 353.587027][T23502] Tainted: [W]=WARN [ 353.587031][T23502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 353.587038][T23502] Call Trace: [ 353.587042][T23502] [ 353.587064][T23502] __dump_stack+0x1d/0x30 [ 353.587079][T23502] dump_stack_lvl+0xe8/0x140 [ 353.587091][T23502] dump_stack+0x15/0x1b [ 353.587103][T23502] should_fail_ex+0x265/0x280 [ 353.587116][T23502] should_fail+0xb/0x20 [ 353.587143][T23502] should_fail_usercopy+0x1a/0x20 [ 353.587157][T23502] _copy_from_user+0x1c/0xb0 [ 353.587219][T23502] ___sys_recvmsg+0xaa/0x370 [ 353.587234][T23502] ? _parse_integer+0x27/0x40 [ 353.587249][T23502] do_recvmmsg+0x1ef/0x540 [ 353.587290][T23502] ? fput+0x8f/0xc0 [ 353.587305][T23502] __x64_sys_recvmmsg+0xe5/0x170 [ 353.587323][T23502] x64_sys_call+0x2b75/0x3000 [ 353.587409][T23502] do_syscall_64+0xd8/0x2c0 [ 353.587433][T23502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.587516][T23502] RIP: 0033:0x7f758a14f749 [ 353.587525][T23502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.587630][T23502] RSP: 002b:00007f7588bb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 353.587641][T23502] RAX: ffffffffffffffda RBX: 00007f758a3a5fa0 RCX: 00007f758a14f749 [ 353.587649][T23502] RDX: 0000000000000001 RSI: 00002000000031c0 RDI: 0000000000000003 [ 353.587656][T23502] RBP: 00007f7588bb7090 R08: 0000000000000000 R09: 0000000000000000 [ 353.587663][T23502] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 353.587747][T23502] R13: 00007f758a3a6038 R14: 00007f758a3a5fa0 R15: 00007ffe4e770d98 [ 353.587759][T23502] [ 353.818321][T23510] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4769'. [ 353.827458][T23510] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4769'. [ 353.883018][ T29] audit: type=1400 audit(354.871:14663): avc: denied { connect } for pid=23515 comm="syz.0.4772" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 353.903459][ T29] audit: type=1400 audit(354.871:14664): avc: denied { write } for pid=23515 comm="syz.0.4772" laddr=fe80::13 lport=60 faddr=fe80::d fport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 353.942294][ T29] audit: type=1326 audit(354.931:14665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23515 comm="syz.0.4772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758a14f749 code=0x7ffc0000 [ 353.970233][ T29] audit: type=1326 audit(354.931:14666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23515 comm="syz.0.4772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758a14f749 code=0x7ffc0000 [ 353.993240][ T29] audit: type=1326 audit(354.931:14667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23515 comm="syz.0.4772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f758a14f749 code=0x7ffc0000 [ 354.046611][T23522] loop3: detected capacity change from 0 to 512 [ 354.054416][T23522] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 354.064372][T23522] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 354.075186][T23522] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.088938][T23522] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #2: block 3: comm syz.3.4775: lblock 0 mapped to illegal pblock 3 (length 1) [ 354.103526][T23522] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.4775: error -117 reading directory block [ 354.105638][T23525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4774'. [ 354.129373][T23525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4774'. [ 354.139577][T17641] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.295472][T23553] netlink: 108 bytes leftover after parsing attributes in process `syz.5.4783'. [ 354.856395][T23576] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4792'. [ 354.865362][T23576] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 354.873549][T23576] 0ªî{X¹¦: entered allmulticast mode [ 354.879560][T23576] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 354.896435][T23576] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 354.964670][T23587] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4796'. [ 355.218861][T23618] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.262104][T23618] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.330900][T23618] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.344854][T23637] netlink: 'syz.5.4815': attribute type 10 has an invalid length. [ 355.368941][T23637] macvlan1: entered promiscuous mode [ 355.374297][T23637] macvlan1: entered allmulticast mode [ 355.405082][T23646] loop3: detected capacity change from 0 to 512 [ 355.412071][T23646] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 355.424478][T23637] veth1_vlan: entered allmulticast mode [ 355.439663][T23637] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 355.450176][T23618] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.464739][T23646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.509349][T23646] FAULT_INJECTION: forcing a failure. [ 355.509349][T23646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.522583][T23646] CPU: 1 UID: 0 PID: 23646 Comm: syz.3.4819 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 355.522614][T23646] Tainted: [W]=WARN [ 355.522622][T23646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 355.522642][T23646] Call Trace: [ 355.522648][T23646] [ 355.522655][T23646] __dump_stack+0x1d/0x30 [ 355.522692][T23646] dump_stack_lvl+0xe8/0x140 [ 355.522697][T23656] loop6: detected capacity change from 0 to 8192 [ 355.522717][T23646] dump_stack+0x15/0x1b [ 355.522784][T23646] should_fail_ex+0x265/0x280 [ 355.522820][T23646] should_fail+0xb/0x20 [ 355.522839][T23646] should_fail_usercopy+0x1a/0x20 [ 355.522889][T23646] _copy_from_user+0x1c/0xb0 [ 355.522917][T23646] ext4_ioctl+0x4e1/0x2d20 [ 355.522946][T23646] ? file_ioctl+0x146/0x530 [ 355.523122][T23646] ? do_vfs_ioctl+0x7ca/0xe10 [ 355.523190][T23646] ? selinux_file_ioctl+0x308/0x3a0 [ 355.523219][T23646] ? __fget_files+0x184/0x1c0 [ 355.523244][T23646] ? __pfx_ext4_ioctl+0x10/0x10 [ 355.523334][T23646] __se_sys_ioctl+0xce/0x140 [ 355.523365][T23646] __x64_sys_ioctl+0x43/0x50 [ 355.523394][T23646] x64_sys_call+0x14b0/0x3000 [ 355.523451][T23646] do_syscall_64+0xd8/0x2c0 [ 355.523546][T23646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.523612][T23646] RIP: 0033:0x7f49a371f749 [ 355.523627][T23646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.523652][T23646] RSP: 002b:00007f49a2187038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 355.523671][T23646] RAX: ffffffffffffffda RBX: 00007f49a3975fa0 RCX: 00007f49a371f749 [ 355.523684][T23646] RDX: 0000200000000040 RSI: 00000000c028660f RDI: 0000000000000005 [ 355.523697][T23646] RBP: 00007f49a2187090 R08: 0000000000000000 R09: 0000000000000000 [ 355.523735][T23646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.523748][T23646] R13: 00007f49a3976038 R14: 00007f49a3975fa0 R15: 00007ffc54808758 [ 355.523767][T23646] [ 355.600964][T23660] loop5: detected capacity change from 0 to 512 [ 355.611458][T23660] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 355.738763][T17641] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.739366][T23660] EXT4-fs (loop5): 1 truncate cleaned up [ 355.753912][T23660] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.755807][ T7752] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.774934][ T4476] loop6: p1 p2 p3 p4 [ 355.779341][ T4476] loop6: p1 size 196608 extends beyond EOD, truncated [ 355.787182][ T4476] loop6: p2 start 164919041 is beyond EOD, truncated [ 355.794055][ T4476] loop6: p3 size 66846464 extends beyond EOD, truncated [ 355.801743][ T52] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.828661][T23660] bridge1: entered promiscuous mode [ 355.833889][T23660] bridge1: entered allmulticast mode [ 355.839388][ T52] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.858057][ T4476] loop6: p4 size 37048832 extends beyond EOD, truncated [ 355.865806][ T52] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.881984][T23656] loop6: p1 p2 p3 p4 [ 355.888452][T23656] loop6: p1 size 196608 extends beyond EOD, truncated [ 355.918130][T23656] loop6: p2 start 164919041 is beyond EOD, truncated [ 355.925022][T23656] loop6: p3 size 66846464 extends beyond EOD, truncated [ 355.932883][T23656] loop6: p4 size 37048832 extends beyond EOD, truncated [ 355.957903][T13062] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.082783][T12527] udevd[12527]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 356.094353][ T4476] udevd[4476]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 356.106002][T12231] udevd[12231]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 356.568464][T18170] ================================================================== [ 356.576577][T18170] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 356.586392][T18170] [ 356.588707][T18170] read-write to 0xffffffff86809a00 of 8 bytes by interrupt on cpu 0: [ 356.596757][T18170] tick_do_update_jiffies64+0x113/0x1c0 [ 356.602303][T18170] tick_nohz_handler+0x8d/0x3d0 [ 356.607157][T18170] __hrtimer_run_queues+0x20f/0x5a0 [ 356.612346][T18170] hrtimer_interrupt+0x21a/0x460 [ 356.617272][T18170] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 356.623160][T18170] sysvec_apic_timer_interrupt+0x6f/0x80 [ 356.628792][T18170] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 356.634772][T18170] kcsan_setup_watchpoint+0x415/0x430 [ 356.640143][T18170] __unix_dgram_recvmsg+0x545/0x810 [ 356.645340][T18170] unix_dgram_recvmsg+0x81/0x90 [ 356.650194][T18170] sock_recvmsg_nosec+0x107/0x130 [ 356.655210][T18170] ____sys_recvmsg+0x26f/0x280 [ 356.659963][T18170] ___sys_recvmsg+0x11f/0x370 [ 356.664632][T18170] do_recvmmsg+0x1ef/0x540 [ 356.669043][T18170] __x64_sys_recvmmsg+0xe5/0x170 [ 356.673983][T18170] x64_sys_call+0x2b75/0x3000 [ 356.678654][T18170] do_syscall_64+0xd8/0x2c0 [ 356.683155][T18170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.689035][T18170] [ 356.691345][T18170] read to 0xffffffff86809a00 of 8 bytes by task 18170 on cpu 1: [ 356.698954][T18170] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 356.705193][T18170] count_shadow_nodes+0x6a/0x230 [ 356.710123][T18170] do_shrink_slab+0x63/0x680 [ 356.714706][T18170] shrink_slab+0x4f5/0x840 [ 356.719105][T18170] shrink_node+0x6a9/0x2010 [ 356.723596][T18170] do_try_to_free_pages+0x3f6/0xcd0 [ 356.728795][T18170] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 356.734690][T18170] try_charge_memcg+0x383/0xa10 [ 356.739526][T18170] charge_memcg+0x51/0xc0 [ 356.743860][T18170] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 356.749841][T18170] __read_swap_cache_async+0x17b/0x2d0 [ 356.755298][T18170] swap_cluster_readahead+0x262/0x3c0 [ 356.760664][T18170] swapin_readahead+0xde/0x820 [ 356.765420][T18170] do_swap_page+0x2b4/0x21e0 [ 356.770004][T18170] handle_mm_fault+0x9d8/0x2c60 [ 356.774852][T18170] do_user_addr_fault+0x630/0x1080 [ 356.779966][T18170] exc_page_fault+0x62/0xa0 [ 356.784469][T18170] asm_exc_page_fault+0x26/0x30 [ 356.789309][T18170] [ 356.791620][T18170] value changed: 0x00000001000015ed -> 0x00000001000015ee [ 356.798707][T18170] [ 356.801010][T18170] Reported by Kernel Concurrency Sanitizer on: [ 356.807148][T18170] CPU: 1 UID: 0 PID: 18170 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 356.818691][T18170] Tainted: [W]=WARN [ 356.822480][T18170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 356.832528][T18170] ================================================================== [ 357.090980][T23686] syz.6.4832 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 357.105161][T23686] CPU: 0 UID: 0 PID: 23686 Comm: syz.6.4832 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 357.105194][T23686] Tainted: [W]=WARN [ 357.105200][T23686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 357.105283][T23686] Call Trace: [ 357.105291][T23686] [ 357.105300][T23686] __dump_stack+0x1d/0x30 [ 357.105389][T23686] dump_stack_lvl+0xe8/0x140 [ 357.105414][T23686] dump_stack+0x15/0x1b [ 357.105437][T23686] dump_header+0x81/0x240 [ 357.105488][T23686] oom_kill_process+0x295/0x350 [ 357.105509][T23686] out_of_memory+0x97b/0xb80 [ 357.105534][T23686] try_charge_memcg+0x610/0xa10 [ 357.105562][T23686] obj_cgroup_charge_pages+0xa6/0x150 [ 357.105640][T23686] __memcg_kmem_charge_page+0x9f/0x170 [ 357.105666][T23686] __alloc_frozen_pages_noprof+0x18f/0x360 [ 357.105707][T23686] alloc_pages_mpol+0xb3/0x260 [ 357.105740][T23686] alloc_pages_noprof+0x90/0x130 [ 357.105845][T23686] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 357.105878][T23686] __kvmalloc_node_noprof+0x492/0x6b0 [ 357.105975][T23686] ? ip_set_alloc+0x24/0x30 [ 357.106056][T23686] ? ip_set_alloc+0x24/0x30 [ 357.106084][T23686] ip_set_alloc+0x24/0x30 [ 357.106109][T23686] hash_netiface_create+0x282/0x740 [ 357.106139][T23686] ? __pfx_hash_netiface_create+0x10/0x10 [ 357.106225][T23686] ip_set_create+0x3cc/0x970 [ 357.106263][T23686] ? __mutex_lock_slowpath+0xa/0x10 [ 357.106294][T23686] nfnetlink_rcv_msg+0x4c6/0x590 [ 357.106336][T23686] netlink_rcv_skb+0x123/0x220 [ 357.106448][T23686] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 357.106476][T23686] nfnetlink_rcv+0x167/0x16c0 [ 357.106500][T23686] ? kmem_cache_free+0xe3/0x3a0 [ 357.106572][T23686] ? __kfree_skb+0x109/0x150 [ 357.106593][T23686] ? nlmon_xmit+0x4f/0x60 [ 357.106610][T23686] ? consume_skb+0x49/0x150 [ 357.106637][T23686] ? nlmon_xmit+0x4f/0x60 [ 357.106729][T23686] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 357.106760][T23686] ? __dev_queue_xmit+0x138d/0x1ec0 [ 357.106797][T23686] ? __dev_queue_xmit+0x148/0x1ec0 [ 357.106826][T23686] ? ref_tracker_free+0x37d/0x3e0 [ 357.106965][T23686] ? __netlink_deliver_tap+0x4dc/0x500 [ 357.106996][T23686] netlink_unicast+0x5c0/0x690 [ 357.107024][T23686] netlink_sendmsg+0x58b/0x6b0 [ 357.107125][T23686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 357.107153][T23686] __sock_sendmsg+0x145/0x180 [ 357.107171][T23686] ____sys_sendmsg+0x31e/0x4a0 [ 357.107284][T23686] ___sys_sendmsg+0x17b/0x1d0 [ 357.107325][T23686] __x64_sys_sendmsg+0xd4/0x160 [ 357.107359][T23686] x64_sys_call+0x17ba/0x3000 [ 357.107386][T23686] do_syscall_64+0xd8/0x2c0 [ 357.107448][T23686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.107468][T23686] RIP: 0033:0x7f50704af749 [ 357.107486][T23686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.107506][T23686] RSP: 002b:00007f506ef17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 357.107535][T23686] RAX: ffffffffffffffda RBX: 00007f5070705fa0 RCX: 00007f50704af749 [ 357.107546][T23686] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 357.107557][T23686] RBP: 00007f5070533f91 R08: 0000000000000000 R09: 0000000000000000 [ 357.107568][T23686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 357.107580][T23686] R13: 00007f5070706038 R14: 00007f5070705fa0 R15: 00007ffc2d12a308 [ 357.107642][T23686] [ 357.107648][T23686] memory: usage 307200kB, limit 307200kB, failcnt 250 [ 357.441448][T23686] memory+swap: usage 2292kB, limit 9007199254740988kB, failcnt 0 [ 357.449159][T23686] kmem: usage 1936kB, limit 9007199254740988kB, failcnt 0 [ 357.456280][T23686] Memory cgroup stats for /syz6: [ 357.456493][T23686] cache 0 [ 357.464388][T23686] rss 28672 [ 357.467494][T23686] shmem 0 [ 357.470481][T23686] mapped_file 0 [ 357.473925][T23686] dirty 0 [ 357.476888][T23686] writeback 0 [ 357.480223][T23686] workingset_refault_anon 43 [ 357.484794][T23686] workingset_refault_file 0 [ 357.489307][T23686] swap 77824 [ 357.492513][T23686] swapcached 126976 [ 357.496390][T23686] pgpgin 91479 [ 357.499839][T23686] pgpgout 91447 [ 357.503276][T23686] pgfault 125420 [ 357.506825][T23686] pgmajfault 25 [ 357.510344][T23686] inactive_anon 73728 [ 357.514309][T23686] active_anon 53248 [ 357.518095][T23686] inactive_file 4096 [ 357.522081][T23686] active_file 0 [ 357.525528][T23686] unevictable 0 [ 357.528985][T23686] hierarchical_memory_limit 314572800 [ 357.534412][T23686] hierarchical_memsw_limit 9223372036854771712 [ 357.540575][T23686] total_cache 0 [ 357.544018][T23686] total_rss 28672 [ 357.547645][T23686] total_shmem 0 [ 357.551097][T23686] total_mapped_file 0 [ 357.555059][T23686] total_dirty 0 [ 357.558512][T23686] total_writeback 0 [ 357.562369][T23686] total_workingset_refault_anon 43 [ 357.567466][T23686] total_workingset_refault_file 0 [ 357.572477][T23686] total_swap 77824 [ 357.576184][T23686] total_swapcached 126976 [ 357.580533][T23686] total_pgpgin 91479 [ 357.584409][T23686] total_pgpgout 91447 [ 357.588446][T23686] total_pgfault 125420 [ 357.592562][T23686] total_pgmajfault 25 [ 357.596516][T23686] total_inactive_anon 73728 [ 357.601038][T23686] total_active_anon 53248 [ 357.605347][T23686] total_inactive_file 4096 [ 357.609773][T23686] total_active_file 0 [ 357.613775][T23686] total_unevictable 0 [ 357.617727][T23686] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.4832,pid=23685,uid=0 [ 357.632409][T23686] Memory cgroup out of memory: Killed process 23686 (syz.6.4832) total-vm:96016kB, anon-rss:1136kB, file-rss:22444kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000